Privacy Policy

Effective: 16 September 2026

Holgabun handles health information, so this policy is written to be read, not filed away. It explains exactly what leaves your device and what does not.

In short: there is no account and no server of ours. Your injections, weight, side effects and photos stay on your device, and we cannot collect or read them. Only the minimum needed for subscriptions and Apple Ads measurement is handled by Apple and RevenueCat.

Who handles your data

Business	Sticky Rice (스티키라이스)
Representative	Wonmin Kim
Privacy contact	Wonmin Kim · holgabun.help@gmail.com

We reply in English or Korean. For a postal address, write to the contact above and we will provide it.

1. What we collect

The App has no sign-up or login. We do not collect your name, email address, phone number, or any other identifying information.

What you enter is stored only on your device and is not transmitted:

Injection records (medicine, dose, date and time, injection site)
Weight entries and goal weight
Side-effect records (symptom, severity, notes)
Progress photos (taken with the camera or chosen from your library)
App settings such as notifications and theme

These are health records. Because they never leave your device, we do not process them in any sense — we do not collect, use, or disclose them.

When you open the App or use a subscription, the following may be processed automatically:

A RevenueCat anonymous user identifier, the subscription product, purchase receipt, and subscription status
An Apple AdServices attribution token and the campaign, ad group, keyword and conversion-type information Apple provides with it

None of this includes your name, email, phone number, or any health record you entered in the App.

2. Third-party services

Two services are involved in subscriptions and advertising measurement. No health record is passed to either.

Service	Apple In-App Purchase — Apple processes the payment. We never see your payment method. (Apple Privacy Policy)
	RevenueCat — verifies and manages subscription status and measures install/subscription performance per Apple Ads campaign, using an anonymous identifier, purchase receipt information, and the Apple AdServices attribution token. (RevenueCat Privacy Policy)

The App shows no advertising inside it and does not collect the IDFA. We use only Apple's privacy-preserving standard AdServices attribution, and we do not track you across other companies' apps or websites.

3. Why we are allowed to process it

Where a legal basis is required (for example under the UK/EU GDPR): subscription verification and management is necessary to perform our contract with you; advertising attribution rests on our legitimate interest in understanding which campaigns bring in users, balanced against the fact that the data is anonymous and contains no health information.

4. International transfers

Subscription management and attribution involve a transfer outside your country.

Recipient	RevenueCat, Inc. (compliance@revenuecat.com)
Destination	United States (AWS data centres)
Data	Anonymous user identifier, subscription and purchase information, Apple AdServices attribution token and campaign information
Purpose	Subscription verification and status management, fraud prevention, per-campaign install and subscription analysis
When and how	Sent over encrypted network connections when the App runs and when a subscription transaction occurs
Retention	Kept under RevenueCat's policy for as long as needed to provide the service and meet legal obligations, or until a deletion request is processed
Safeguards	Contractual data protection terms with RevenueCat, Inc.

5. Device permissions

Camera and photo library: used only when you take or choose a progress photo. Photos are saved on your device.
Notifications: all reminders are local notifications generated on your device. They do not pass through any server.

6. Retention and deletion

Records live in a database on your device. Deleting a record, or deleting the App, deletes them.
Your device's iCloud or computer backup may include App data, under Apple's backup policy.
You can export your records as CSV from the History screen. Once exported, keeping and sharing that file is up to you.

7. Your rights

Because every health record is on your device, you can view, correct and delete it yourself, immediately, inside the App. We hold no copy of it.

For the subscription and attribution information handled by RevenueCat, you can ask us to give you a copy, correct it, delete it, restrict or object to its processing, or provide it in a portable form. Write to the contact address below. If you are in the UK or the EU you may also complain to your data protection supervisory authority.

8. Region-specific notices

Japan: the transfer described in section 4 is to a business operator in the United States. Information about the personal data protection regime in that country, and requests for disclosure, correction or suspension of use, are available through the contact address below.
Taiwan: this notice is given under Article 8 of the Personal Data Protection Act. Providing data is voluntary; the App works without any of the automatic processing above except what a subscription requires.
Hong Kong: data access and correction requests under the Personal Data (Privacy) Ordinance may be sent to the contact address below.
United States: we do not sell or share personal information, and we do not use it for targeted advertising beyond Apple's own campaign attribution. Your consumer health data — injections, weight, side effects, photos — is never collected by us, because it does not leave your device.

9. Children

The App is not directed at children under 18 and we do not knowingly collect information from them.

10. Changes to this policy

Changes are posted on this page, and significant changes are also noted in the App's release notes.

11. Contact

For anything about privacy, including the requests in section 7: holgabun.help@gmail.com (we reply in English or Korean).