Mickle Privacy Policy

Effective date: May 28, 2026

Mickle establishes and publishes this Privacy Policy to protect personal information and handle related complaints promptly and smoothly, in accordance with Article 30 of the Korean Personal Information Protection Act.

1. Personal Information We Collect and How We Collect It

Mickle collects or processes the following information to provide time tracking, account login, cross-device sync, Together features, and advertising.

Account and Login Information

• Firebase Authentication UID: for user account identification, sync data separation, and login state management
• Email address and profile information: handled by Google or Apple during sign-in; Mickle uses Firebase Authentication to verify sign-in status
• Nickname: for in-app display, member identification in Together, and nickname uniqueness checks
• Account creation and update timestamps: for account creation, nickname changes, and service operation management

Time Record and Tag Information

• Session start and end timestamps: for daily, weekly, monthly, and yearly statistics
• Tag name, color, creation and update timestamps: for categorizing tracked time and syncing across devices
• Sync state information: for stable cross-device sync, including the last sync timestamp

Together Feature Information

• Group name, group owner identifier, and owner nickname: for creating and managing Together groups
• Member identifier, nickname, role, display color, and join timestamp: for showing group members, managing permissions, and rendering Together screens
• Invite code and creation timestamp: for creating invite links, handling joins, and deactivating invite codes
• Time records after the shared start date: so group members can view each other's progress in Together screens

Advertising and Service Usage Information

• Advertising identifier, device information, and ad impression / interaction information: for Google AdMob ad delivery, frequency management, performance measurement, and fraud prevention
• App link handling information: for routing invite links or app links to the appropriate screen

Time records and tag information used without login are stored locally on the user's device by default. When the user syncs after logging in or uses Together features, the data required for those features may be stored in Firebase Firestore.

2. Purposes of Processing Personal Information

Mickle processes personal information for the following purposes:

• User identification, sign-in state maintenance, and account management
• Providing core app features such as time tracking, statistics, and tag management
• Syncing data across multiple devices
• Creating Together groups, sending invitations, joining groups, showing members, and viewing shared records
• Improving service quality, handling errors, and preventing abuse
• Providing ads and measuring ad performance through Google AdMob
• Responding to privacy inquiries, complaints, and disputes

3. Retention and Use Period

Mickle processes and retains personal information within the retention period required by law or within the period consented to when collecting the information.

• Account information: retained until account deletion or a request to delete personal information
• Synced time records and tags: retained until the user deletes them or requests account deletion
• Together groups and member information: retained until the group is deleted, the user leaves the group, the invite code is deactivated, or deletion is requested
• Local on-device data: may remain on the device until the user deletes it in the app or removes the app
• Information required to be retained by law: retained for the period specified by the applicable law

4. Third-Party Disclosure and Outsourcing

Mickle discloses personal information to third parties only when permitted under applicable law. As a rule, we do not provide personal information to third parties unless required by law or separately consented to.

We may use the following external services to provide the app:

• Google Firebase: authentication, Firestore storage, and sync
• Google Sign-In: sign-in with a Google account
• Sign in with Apple: sign-in with an Apple account
• Google AdMob: ad delivery, advertising identifier processing, and ad performance measurement

5. Destruction Procedures and Methods

Mickle destroys personal information without delay when the retention period expires or the processing purpose has been achieved. Electronic files are deleted so that they cannot be restored. Data stored on the device can be removed by the user through in-app deletion features or by uninstalling the app.

Signed-in users can request account deletion from Account Management > Delete Account in the app. When an account is deleted, the Firebase Authentication account, nickname, synced time records and tags, and Together membership are deleted. If the user is the owner of a Together group, the group and invite data are deleted as well.

6. Rights of the Data Subject and Legal Representative

Data subjects may exercise their rights to request access, correction, deletion, or suspension of processing of personal information at any time. Requests may be sent by email to the privacy officer, and Mickle will take action without delay in accordance with applicable law.

7. Measures to Ensure Security

Mickle takes the following measures to protect personal information:

• Authentication-based access control through Firebase Authentication
• Separate storage by user and access only within the necessary scope
• Minimal collection of local and synced data
• Access control for systems that process personal information

8. Privacy Officer

Mickle designates the following privacy officer to oversee personal information processing and to handle complaints and damage relief related to personal information.

You may contact the privacy officer with any questions, complaints, or requests for remedy related to privacy issues that arise while using the Mickle service.

9. Remedies for Infringement of Rights

If you need help resolving a personal information dispute, you may contact the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency, or other related organizations.

1. Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
4. Korean National Police Agency: 182 (ecrm.police.go.kr)

If your rights or interests are infringed by a disposition or omission of a public institution concerning requests under Articles 35, 36, or 37 of the Personal Information Protection Act, you may file an administrative appeal under the Administrative Appeals Act.

For more information about administrative appeals, please refer to the website of the Central Administrative Appeals Commission at www.simpan.go.kr.

10. Changes to This Privacy Policy

This Privacy Policy applies from May 28, 2026.