Privacy Policy

Cheddr (the "Service") protects users' personal information and handles related complaints promptly in accordance with applicable laws, including the Personal Information Protection Act of the Republic of Korea. This Privacy Policy explains what we collect, why, and your choices. If this English version differs from the Korean version, the Korean version prevails.

Article 1 (Purposes of processing)

1. Account sign-up and management: identifying and authenticating users, maintaining accounts, preventing abuse, processing account deletion.
2. Providing the household-ledger service: storing and showing the records you enter, syncing between mobile and PC, sharing a ledger with others.
3. Paid features (Premium): checking subscription status and providing Premium features.
4. Advertising: showing ads to free users in the mobile app (Premium users see no ads).
5. Support and complaints: reading your inquiry and replying.
6. Personalization (optional): if you agree during the first-run guide, recommending screens and features that fit your age group, occupation and purpose.
7. Statistics to improve the Service (optional): only for users who agree as above, we analyze which widgets, layouts and designs are popular by age group, in a form that does not identify anyone. No user identifier is kept in the statistics, and groups of fewer than 5 people are never shown.

Article 2 (Personal information we process)

1. When you sign up, we process the following depending on the sign-up method.

2. Ledger records you enter yourself: transaction date, amount, category and memo; asset (account/card) names, balances, card payment dates and spending goals; budgets, recurring transactions, templates, schedules and the daily checklist. The Service does not ask for or collect account numbers, card numbers, passwords or other financial credentials, and we recommend that you do not type them into memos.

2-2. When you use Sign in with Apple: the refresh token issued by Apple, used only to disconnect your Apple account when you delete your account (kept on our server only; not provided to the app or to other users).

2-1. Receipt photos (only if a Premium user turns on receipt storage and uploads them): the photo files attached to transactions. They may show store names, items and amounts. Photos are resized on your device before upload; photos of free users are not sent to the server and stay on the device.

2-3. Photos on the home-screen photo widget: photos you pick are resized and kept only in the app's storage on your device and are not sent to the server. They are removed when you remove the widget or delete the app. Text you write in the memo and to-do widgets is saved to the server as part of the ledger's home layout and may be visible to people who share that ledger.

3. When you use paid features: subscriptions and one-time purchases (ad removal, designs), subscription status and expiry date, the list of purchased items, and the app-store transaction identifier. Payment-method details such as card numbers are handled by the App Store or Google Play; the Service does not receive them.

4. When you share a ledger: the display name shown to the other people using the ledger (if none, the first two letters of your email followed by masking characters), who entered each record, the ledger type (basic, couple, travel, business), and the start and end dates of a travel ledger.

5. When you contact us: your reply-to email, the inquiry type and content. If sent from the app, we also receive the app version, operating system and version, device model, display settings (design, text size, language) and your user identifier so we can look into the problem.

6. First-run guide (optional): only if you choose and agree to save them, your age group (teens to 50s and over), occupation (student, employee, etc.) and purpose (living-expense management, saving, etc.). The Service works the same if you do not agree, and nothing is saved. If you agree, this information and the widgets, layouts and designs you pick on the home screen are used for personalization and for the non-identifying statistics above; the results are visible only to the Service operator.

7. Information generated automatically while you use the Service: usage logs (server access logs: user identifier, request time), device information (operating system type and version), and in the mobile app the advertising identifier (Android advertising ID; on iOS the IDFA only if you allow tracking). If the mobile app crashes or an unhandled error occurs, an error-collection tool receives the error type and location, app version, device model and OS version. We do not send user identifiers, emails, ledger records (amounts, memos, merchants) or screen contents.

Article 3 (Retention and use period)

1. Account information and ledger records are kept until you delete your account and are destroyed without delay afterwards. Using the in-app account deletion removes your account and all ledger records immediately.
2. If you shared a ledger you created, deleting your account also deletes that ledger and its records. If a person who joined your ledger deletes their account, they are removed from the ledger and the records they entered stay in it.
3. If you signed up with Apple, we keep the refresh token Apple issued at sign-in so we can disconnect from Apple when you leave; we revoke the connection and delete the token immediately on account deletion.
4. Receipt photos uploaded to the server are kept until you delete your account or delete them yourself. When a Premium subscription ends you can no longer upload new photos (you can only view, download or delete), and the photos are deleted automatically 90 days after the subscription ends. Deleting a ledger also deletes its photos. People sharing a ledger can see each other's receipt photos.
5. Server access logs are kept for up to 30 days for incident response and abuse prevention and then deleted automatically. App error information is kept at Sentry for up to 90 days and then deleted.
6. Inquiries are kept for one year after they are resolved, to confirm replies and handling history, and then deleted.
7. Subscription payment records are kept by the App Store and Google Play under their own policies and applicable law (for example, five years for records on contracts, withdrawal and payment under Korean e-commerce law).

Article 4 (Provision to third parties)

The Service processes your personal information only within the purposes in Article 1 and does not provide it to third parties except with your consent or where the law requires. If you invite someone to share a ledger, the person who joins can see that ledger's records and the members' display names. This is your choice, and you can remove members or delete the ledger at any time.

Article 5 (Outsourcing and transfer abroad)

To provide the Service smoothly, we outsource processing of personal information as follows, and some of it is processed outside Korea. Ledger records are stored on servers in the Republic of Korea (Seoul).

Depending on the sign-in method you choose, Kakao Corp. (Republic of Korea), Google LLC (United States) or Apple Inc. (United States) process your sign-in under their own privacy policies. Subscription payments are processed by Apple Inc. (App Store) and Google LLC (Google Play).

You may refuse the transfer of your personal information abroad. However, because the transfer is essential for authentication and providing the Service, you cannot use the Service if you refuse. For advertising-related transfers, you can refuse use of the advertising identifier by the methods in Article 8, and Premium users see no ads.

Article 6 (Your rights and how to exercise them)

1. You may at any time ask to access, correct, delete or restrict the processing of your personal information.
2. You can view, edit and delete your ledger records and profile in the app, and delete your account and all records with Delete account in Settings.
3. For any other request, email the Privacy Officer in Article 10; we will act without delay.
4. Children under 14 cannot sign up.
5. Users outside the Republic of Korea may make the same requests (access, correction, deletion, restriction) by email to the address in Article 10. The Service does not sell your personal information, and advertising identifiers and similar data are passed on for ad display only within the scope described in Articles 5 and 8.

Article 7 (Destruction procedure and method)

1. Personal information that is no longer needed is destroyed without delay. Account deletion is processed immediately on the server.
2. Information in electronic files is deleted in a way that cannot be recovered.

Article 8 (Automatic collection devices and how to refuse them)

1. The Service uses storage on your device to keep you signed in and to save display settings. They are removed when you sign out or delete the app.
2. The mobile app uses the advertising identifier to show ads. On iOS the app asks whether to allow tracking when first launched; if you do not allow it, only non-personalized ads are shown. You can change this any time in Settings > Privacy & Security > Tracking. On Android you can reset or delete the advertising ID in Settings > Privacy (or Google) > Ads.

Article 9 (Security measures)

1. Encryption in transit: all communication is encrypted with HTTPS (TLS).
2. Encryption at rest: data stored on the server is encrypted at rest on Google Cloud. Passwords are stored in a form that cannot be reversed.
3. Access control: ledger records can be accessed only by you and the members you invite, enforced by server security rules. Administrator access is kept to a minimum.
4. Logging: server logs do not contain sensitive information such as sign-in tokens or email addresses.
5. Administrative measures: we establish and follow an internal management plan.

Article 10 (Privacy Officer)

The Service has designated a Privacy Officer to oversee the handling of personal information and to handle complaints and remedies.

Article 11 (Remedies for infringement)

You may apply for dispute resolution or consultation to the following Korean agencies. You may also contact the data protection authority of the country where you live.

• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
• Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
• Korean National Police Agency: 182 (ecrm.police.go.kr)

Article 12 (Changes to this policy)

If this policy changes, we will announce it in the app or on the web page from 7 days before it takes effect, and 30 days before for changes that materially affect your rights.

This Privacy Policy applies from November 17, 2026.