Ongil ("we", the "Company") operates RUTELI (the "Service"), a daily-goal achievement app. This policy explains what information we receive, why, how long we keep it, and what you can ask of us. The Korean version is the original; this English version is a translation.
1. You can use it without logging in
RUTELI's personal challenges (picking or creating missions, daily check-ins, streaks, XP, levels, badges) work without an account. All of these records and your proof photos stay on your device only and are never sent to our servers. Deleting the app removes them.
Login is needed only for the optional "Pacts with friends" feature. If you do not log in, we store no information about you on our servers.
2. Information we collect
2-1. Stored on your device only (never sent to our servers)
| Item | Purpose |
|---|---|
| Nickname, challenges you create, daily check-in records, XP, level, badges | App features |
| Proof photos (taken with the camera or chosen from your library) | Photo proof. Never uploaded |
| Settings such as reminder time | Daily reminder |
Camera and photo access are used only when you verify with a photo. If you decline, you can still verify with other methods (check or timer).
2-2. Stored on our servers if you use pacts
| Item | Source | Purpose |
|---|---|---|
| Social account identifier | Google, Apple, Kakao | Identify you |
| Nickname | Your input or your social account | Shown to friends and pact members |
| Email (if provided) | Social account | Account verification, support |
| Push token (FCM) | Your device | Sending push notifications |
| Friend relations, invite code | Your use | Connecting friends |
| Pacts (title, mission, period) and daily results (success/fail) | Your use | Sharing progress among members |
| Cheer messages, notification inbox | Your use | Delivering cheers and notifications |
- We do not store passwords. Login is handled by the social login provider. If you choose "Hide My Email" with Apple, we receive only Apple's relay address.
- Photos are never shared or sent to pact members. Only the result (success/fail) goes to the server.
- Friends in the same pact can see each other's nickname, daily progress, and streak. Friends connect only when you share your invite code; you cannot be found by nickname search.
2-3. Processed automatically
- Ads: The app shows a bottom banner ad (Google AdMob). To serve ads, Google may process the advertising identifier (IDFA / Advertising ID), device and app information, and approximate location (from IP). See Section 4.
- Local notifications: The daily reminder is scheduled on your device only and does not go through a server. You can turn notifications off in device settings at any time.
3. Purposes
We use information only for the purposes listed above: providing the Service (pacts, friends, notifications), account verification and support, serving ads, and error analysis and abuse prevention. If a purpose changes, we will notify you in advance and obtain consent where required.
4. Ads and consent
- RUTELI shows banner ads only. We do not give points or cash-like rewards for viewing ads.
- In the European Economic Area and other regions requiring consent, we first collect ad consent via Google's UMP (User Messaging Platform) form and request ads only if consent is obtained.
- iOS: Before using the advertising identifier, we ask for App Tracking Transparency permission. Ads still appear if you decline; only personalization is limited. You can change this in Settings.
- Android: You can reset your advertising ID or turn off ad personalization in Settings → Google → Ads.
For Google's data processing, see Google's advertising policies.
5. Third parties and processors
We do not sell your personal information. We use the following providers as needed to run the Service.
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services | Servers and database (pact data) | South Korea (Seoul region) |
| Google (Firebase Cloud Messaging) | Sending push notifications | United States and others |
| Google (AdMob) | Serving ads, ad consent (UMP) | United States and others |
| Google / Apple / Kakao | Social login authentication | Per each provider's policy |
6. Retention
- Data stored on your device: until you delete it in the app or uninstall the app (we cannot access it)
- Account, friends, pacts, check-in results, notification inbox: until you delete your account
- Push token: until you log out, the token expires, or you delete your account
- After account deletion: your account is hidden from other users immediately and you can no longer log in. Remaining server data is kept without being used or shown, and is permanently deleted 30 days after deletion. If you sign up again with the same social account within 30 days, the old account is permanently deleted at once and you start fresh (old records are not restored).
Where the law sets a different retention period, that period applies.
7. Your rights
You can at any time:
- Reset records in the app to delete challenges, check-ins, and photos stored on your device
- Revoke notification, camera, and photo permissions in device settings
- Change ad consent and tracking permission (Section 4)
- Delete your account in the app. It is hidden immediately and permanently deleted after 30 days. If you uninstalled the app or cannot install it, follow the account deletion guide.
- Request access, correction, deletion, or suspension of processing of your personal information
Send requests to the contact below and we will handle them without delay.
8. Rewards and shop
The reward shop and reward points are coming soon and cannot currently be earned or redeemed. XP is only an in-app progress measure with no monetary value. Before launching points, we will update this policy and notify you.
9. Children
The Service is not directed at children under 14, and we do not knowingly collect their personal information. If you learn that a child's information has been collected, tell us at the contact below and we will delete it promptly.
10. Security
- Encrypted transport (HTTPS)
- Auth tokens kept in the device's secure storage
- Least-privilege server access
11. Changes
We will announce changes in the app or on this page. For material changes, we notify you 7 days before they take effect.
12. Contact
- Service: RUTELI
- Operator: Ongil
- Email: support@ongil.me
For complaints about personal data handling, you may also contact: the Personal Information Infringement Report Center (privacy.kisa.or.kr / 118), the Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972), the Supreme Prosecutors' Office Cybercrime Division (spo.go.kr / 1301), or the National Police Agency Cyber Bureau (ecrm.police.go.kr / 182).