Privacy Policy

1. Information we handle

Personal records you keep without an account (item names, notes, photos, history and reminder settings) stay on your device only. The operator does not collect them.

If you choose a backup in Settings, one backup file with your personal records and photos is saved to a hidden app-only folder in your own Google Drive, or to your iCloud (iPhone and iPad). The file goes straight from your device to your cloud, never through the operator's servers, and the operator cannot open or keep it. A new backup replaces the old one, and you can remove it at any time with “Delete backup”. Google Drive backup asks only for access to files this app created (drive.appdata) and does not see or change your other Drive files.

If you use shared records (groups), we handle: the unique identifier from Apple or Google sign-in, your app account number, sign-in session data, group names, members, roles and invitations, the nickname you set for each group, titles and notes of shared items, records of who did what and when, poke records (who poked whom, for which shared item, and when), and the notification address (push token) of devices you are signed in on, so that you can receive pokes. If Apple or Google gives us your email address at sign-in, we store that address, whether it is verified, whether it is an Apple “Hide My Email” relay address, and its forwarding setting. If no email address is given, none is stored. We do not store your real name. We also handle photos you share in groups (item photos, record photos and group profile photos); location and other camera data are removed before the photo is stored. To keep groups safe, we also handle the list of members you have blocked, reports you send (the reported member, item or record, the reason and the time) and the time you agreed to the group rules.

When you connect to the service, network information such as your IP address may be processed by the server infrastructure. We do not use analytics tools or cookies.

Ads: one Google AdMob ad, marked “Ad”, is shown at the top of the My records list and one at the top of a group’s shared list (none on settings, group management or account screens). To show it, Google collects and processes the device's advertising identifier (the Android advertising ID; on iPhone, the advertising identifier only if you allow tracking), IP address, device and app information, and records of ads shown and tapped. In Europe, the UK, Switzerland and some US states, the app asks for ad consent when first opened, and you can change it at any time under Settings > Ad privacy settings. On iPhone the app asks whether to allow tracking; if you do not, only non-personalised ads are shown. Your records, photos and group information are never used for ads or sent to ad companies.

Error reports: if the app stops unexpectedly, the error, the app version and the device type, operating system and language are sent to Sentry. Names, email addresses, account numbers, IP addresses and record contents are not sent, and email addresses, web address search terms and long tokens are removed from error messages before sending. You can turn this off under Settings > Send error reports.

2. Why we use it

Only to sign you in and confirm it is you, to run group invitations and shared records, to deliver pokes, to recover from sending errors, to prevent abuse and to answer your questions. Your email address is shown on your own account screen so you can recognise your account, and is used to answer you and to send important notices about the service. Other members cannot see it, and it is never used for advertising. The block list is used only to hide a blocked member's notes, photos and pokes on your screen and device; reports are used only so the operator can review the content and remove it or restrict use; the rules agreement time is used only to confirm that you agreed to the group rules. The other person is not told that you blocked or reported them. Ads are used only to keep the app free, and error reports only to find and fix errors in the app.

3. How long we keep it

Until you delete your account. Your email address is updated to the value your sign-in provider gives each time you sign in, and kept as it was if none is given. Sign-in sessions expire after 30 days without use, and after 90 days at most. A device's notification address (push token) is deleted when you sign out on that device or when the token stops being valid. When you delete your account, we delete the sign-in provider link, sessions, all notification addresses of the account and your email address, revoke the sign-in permission, and anonymise all other user data. Reports are deleted without delay once the operator has handled them. Error reports are kept for at most 90 days and then deleted.

Signing in again with the same account creates a new account. Copies kept for recovering from server failures disappear automatically after at most 30 days. Photos shared in a group stop being shown and their files are deleted when the item or record is deleted, when the person who shared it leaves the group or deletes their account (profile photos). Copies that group members saved separately on their own devices cannot be recalled.

4. How we delete it

When the retention period ends or an account deletion is processed, the data is deleted electronically without delay so that it cannot be restored. Recovery copies expire automatically on a 30-day cycle.

5. Sharing with others

We do not give personal information to third parties. Members of the same group see the items and records you share there and the nickname you use in that group. People in other groups do not see them. Notification delivery in section 6 is processing on our behalf, not sharing with a third party. When showing ads, Google collects and processes the ad information in section 1 directly, under Google's privacy policy (https://policies.google.com/privacy).

6. Processors and transfers abroad

Servers, the database and shared photo storage (Cloudflare R2) are run by Cloudflare, Inc. (United States) on our behalf. The shared-record information in section 1, email addresses and network information are sent over encrypted connections and stored in Cloudflare's data centres in Korea and abroad each time you use shared records, and are kept for the periods in section 3. If you do not use shared records, nothing is transferred, and personal records still work.

Pokes are delivered by Google LLC (United States, Firebase Cloud Messaging, Android devices) and Apple Inc. (United States, Apple Push Notification service, iPhone and iPad) on our behalf. What is sent is the receiving device's notification address (push token) and the notification content (item title, the sender's nickname in that group and the group name), over an encrypted connection each time a poke is sent. The operator does not keep the notification content after delivery; the notification address is kept until you sign out, delete your account or the token becomes invalid.

Sign-in is handled by Apple Inc. (United States) or Google LLC (United States), whichever you choose.

Backups to Google Drive (Google LLC, United States) or iCloud (Apple Inc., United States) that you choose in Settings are saved directly to your own account. They are not processing by the operator or a transfer by the operator, and those companies' terms and privacy policies apply.

Ads are served by Google LLC (United States, Google AdMob). What is sent is the ad information in section 1 (advertising identifier, IP address, device and app information, records of ads shown and tapped), over an encrypted connection each time an ad is shown. If you refuse ad consent, it is not used for personalised ads.

Error reports are stored by Functional Software, Inc. (United States, Sentry) on our behalf. What is sent is the error report information in section 1, over an encrypted connection each time an error occurs, and it is kept for at most 90 days. If you turn error reports off, nothing is sent.

7. Your rights

You can ask at any time to see, correct or delete your personal information, or to stop its processing. Use “Delete account” in the app, or write to contact@nlap.app; we handle the request and tell you the result within 10 days. Ad consent can be changed under Settings > Ad privacy settings (where required), tracking on iPhone under the device's Settings > Privacy & Security > Tracking, and error reports under Settings > Send error reports. How to delete your account is also explained on the help page under “Delete account”: https://welldone.nlap.app/support#delete-account

8. Children

The service is for people aged 14 and over. If we learn that we hold personal information of a child under that age, we delete it without delay; a parent or guardian can ask for deletion at contact@nlap.app.

9. Security

Every connection is encrypted (HTTPS), sign-in data is kept in the device's secure storage, and access to the servers is kept to the minimum.

10. Privacy officer

Jinho Park (representative). Contact: contact@nlap.app. Please send any privacy question, complaint or request for remedy to this address.

11. Changes to this policy

If we change this policy, we announce it on this page and in the app 7 days before it takes effect.

Operator

nlap (엔랩), Republic of Korea. Representative: Jinho Park. Business registration number: 445-13-02685. Mail-order business report: 2026-인천남동구-0896. Address: 44 Manwol-ro, Namdong-gu, Incheon, Republic of Korea. Contact: contact@nlap.app.