Social Timer Privacy Policy
This policy applies to Social Timer version 1.0.36 and later. The Korean version prevails in case of conflict.
1. Information we process
- Device credential: a random secret created on your device. It stays in the device's secure storage (Android Keystore, iOS Keychain); the server stores only an irreversible hash.
- Crew usage data: nickname, room name and code, timer settings and state, participation and presence, pending approvals and bans.
- Advertising data: Google Mobile Ads (AdMob) processes advertising identifiers to fund the free service. You can choose in the app's ad privacy settings.
We do not collect email, phone number, real name, location, contacts or payment details. Solo timers and their history stay on your device and are never sent to the server.
2. Purposes
Real-time timer sharing within a crew, room access control, abuse prevention (excessive sign-ups or requests), and ads that keep the service free.
3. Retention
- Rooms and their timer and participation data: deleted automatically 90 days after the last activity.
- Device credential and nickname: delete anytime with "Crew profile and data deletion" in the app.
- Deletion record: only a hash and deletion time are kept, to stop a deleted credential from being reused.
- Backups: encrypted and deleted automatically after at most 14 days.
4. Processors and international transfer
| Processor | Service | Location | Data |
|---|---|---|---|
| Cloudflare, Inc. | Secure connection (HTTPS) relay | United States and other Cloudflare data centers | Crew usage data (in transit) |
| Google LLC | Advertising (AdMob) | United States | Advertising identifiers |
The server runs on operator equipment in the Republic of Korea.
5. Your rights
Delete your server account and crew data anytime from "Crew profile and data deletion" on the app home screen. Change ad choices in the app's ad privacy settings. Send other access, correction or deletion requests to the contact email above.
6. Security
TLS 1.3 in transit, no plaintext secrets on the server (hash only), AES-256 encrypted backups, request rate limits.
7. Children
We do not knowingly process personal information of children under 14. If we learn that such information was processed, we delete it immediately.
8. Changes
We announce changes in the app and on this page at least 7 days before they take effect.