Privacy Policy / 개인정보처리방침

TextShare Privacy Policy v1.0
Effective date: To be set on the date of first public Google Play release
Operator: Jonghyeon Kim (김종현), Republic of Korea
Contact: hello@gurum.app
Service infrastructure: Supabase-hosted service infrastructure; current server region Germany

This Privacy Policy explains how TextShare handles information when you use the
Android app or a shared TextShare web link. TextShare is operated by Jonghyeon
Kim (김종현) in the Republic of Korea.

1. What TextShare does

TextShare lets an Android owner create a private, unlisted link to a plain-text
shared note. People receiving the link can open it in a browser without creating
an account or installing the app. TextShare links are not publicly listed or
searchable by TextShare. Anyone who receives a link may forward it, so do not
place information in a link that you would not share with the people who may
receive it.

2. Information processed

We process the following information only to operate the service:

- Shared text, link title, selected access mode, expiry setting and password
  verification data. Link passwords are stored as one-way security hashes, not
  readable password text.
- Random service identifiers needed to recognize an owner installation, a browser
  participant session, a link, an edit lease and an authenticated access session.
- Operational records such as request outcome, app/web version, time, error code,
  subscription/reward verification status and security-abuse signals.
- Google Play purchase information needed to verify a subscription entitlement.
- AdMob rewarded-ad verification records needed to award one create or settings-
  save action to a free owner.
- If you voluntarily contact us, your email address and the content of the
  support message.

We do not intentionally collect shared text, passwords, full link URLs, purchase
tokens, clipboard contents, advertising ID, IP address, or email address in our
product analytics events. We do not use shared text to train advertising systems
or to target advertisements.

3. Why we process information

We use information to create and display links, enable permitted editing, keep
one active editor at a time, enforce expiry/deletion, prevent abuse, provide
support, verify rewarded-ad actions, and verify/manage Google Play subscriptions.
We process payment through Google Play and rewarded advertising through Google
AdMob. Their processing is also governed by their respective privacy notices.

4. Sharing and service providers

We share information only as needed to operate TextShare:

- Supabase and its infrastructure providers process service data for database,
  authentication, realtime and server functions. Current service infrastructure
  is located in Germany.
- Google Play processes subscription purchases and purchase lifecycle signals.
- Google AdMob processes rewarded advertising and related consent/verification.
- We may disclose information when required by law, to protect rights/safety, or
  to investigate fraud or security incidents.

We do not sell shared text or personal information. We do not make shared links
publicly searchable.

5. Retention and deletion

An active link remains available until its selected expiry time. At expiry, the
link becomes unavailable immediately. Seven days later, TextShare permanently
deletes the shared text, password verification data, participant profiles,
editing leases and link record. Expired links cannot be restored or extended.

Operational analytics events are retained for up to 90 days; longer-lived
aggregate metrics contain no raw actor identifier. We retain billing, advertising
verification, security or support records only as long as reasonably necessary
for operations, legal obligations, dispute handling and fraud prevention.

6. Security

We use reasonable technical and organizational measures intended to protect
information, including encrypted transport, server-side access controls,
password hashing and restricted administrator credentials. No internet service
can guarantee absolute security. You are responsible for sharing links only with
people you trust and for choosing a strong password when password protection is
available.

7. Your choices and requests

You can delete an active link from the owner app. You can also allow it to expire.
For privacy, deletion, access or correction requests, contact hello@gurum.app.
We may need enough information to verify that you control the relevant owner
installation or link before taking action. Legal rights vary by your location.

8. Children

TextShare is not directed to children. Do not use TextShare to provide personal
information about a child without appropriate authority. If you believe a child
provided personal information unlawfully, contact us at hello@gurum.app.

9. International processing

TextShare is operated from the Republic of Korea and currently uses service
infrastructure in Germany. Your information may be processed in these locations
and other locations where our service providers lawfully operate.

10. Changes

We may update this policy when TextShare changes or legal requirements change.
We will publish the updated version and effective date in the app or on the
service website. Material changes will be communicated where legally required.

11. Contact

Jonghyeon Kim (김종현)
Republic of Korea
hello@gurum.app

Korean summary (informational)

TextShare는 김종현(Jonghyeon Kim)이 대한민국에서 운영하는 공유 텍스트 서비스입니다.
링크의 텍스트·제목·접근 방식·만료 설정 및 서비스 운영에 필요한 식별정보를 처리합니다.
링크는 공개 검색되지 않지만, 받은 사람이 다시 전달할 수 있으므로 신뢰할 수 있는 사람에게만
공유해야 합니다. 만료 즉시 접근이 차단되고, 7일 뒤 텍스트와 비밀번호 검증정보를 포함한
링크 데이터가 영구 삭제됩니다. 문의는 hello@gurum.app으로 보내주세요.