Privacy Policy (Draft)

1. Operator

ShiftEnter is operated by NLAP. Privacy inquiries: [email protected]

2. Information we collect

When you use the app without signing in: random connection information that distinguishes this device, and records of the reports and hides you've made.

When you sign in: a random account number, the email address provided by the Google or Apple account you signed in with and whether it has been verified, and whether it's an Apple relay address (Hide My Email).

While you use the app: the posts and comments you write, Cheers, reports and hides, and appeals and the records of how they were handled.

Ads (between stories in the list and below posts): to show and measure ads, Google AdMob processes device identifiers such as the advertising ID, approximate location (based on IP), and ad interactions. In Europe, the UK, Switzerland and some US states, we ask for your consent first, and you can change it in “Ad privacy settings” on the app's “Using the app and your privacy” screen. The app does not ask for permission to track on iPhone.

Error reports: if the app closes unexpectedly, only the error details and the device type, OS and app version are sent to Sentry. Posts, account, email and location are not sent, and you can turn this off in “Send error reports” on the app's “Using the app and your privacy” screen.

Phone notifications (if you turn them on): to let you know when someone comments on your post or replies to your comment, we store this device's notification token, device type (Android or iPhone), notification language, and your notification on/off settings. Notifications are sent through Google Firebase Cloud Messaging (on iPhone, via the Apple Push Notification service), and they do not include the content of comments.

We do not collect your name, phone number, precise location, or contact list.

3. Why we use it

To provide the community (showing posts, comments and Cheers), handle reports, hiding and appeals, show your own account screen, answer inquiries and send important notices, and prevent misuse.

4. First check by AI

When you post a post or a comment, AI checks it once for personal information, abusive language and ads. The content is sent to Cloudflare's AI service for this check, and the result of the check is not stored. A post that couldn't be published stays in the app as it is, and if you think the decision was wrong, you can contact [email protected].

5. Retention and deletion

When you delete your account, we erase your account information and email, and your comments, Cheers and report records. Posts you wrote remain but are changed to “This post was deleted” to protect other people's comments, and their link to you is removed.

The exact retention periods for server logs and backups will be set before launch and added to this policy.

Tips about help information are stored without being linked to the sender, and are deleted as soon as the operator finishes reviewing them.

Phone notification tokens are deleted for that device when you sign out, and all of them are deleted when you delete your account. Tokens that are no longer in use are also deleted as soon as the notification service tells us.

6. Information we entrust to or share with others

We do not sell or provide personal information to third parties.

Processing is entrusted to: Cloudflare (servers, storage, AI check), Google and Apple (sign-in), Google Firebase Cloud Messaging and Apple Push Notification service (delivering phone notifications), and Sentry (error reports). Ads are handled by Google (AdMob) under its own privacy policy. These companies use facilities in many countries, so your information may be processed outside South Korea.

7. What is stored only on this device

Saved drafts, sign-in connection information and your list of report records are kept in the device's encrypted storage.

8. Your rights

You can ask to see, correct or delete your information. You can erase it right away with Delete account in the app; for any other request, please email [email protected].

9. Age

You must be 16 or older to sign up as a member. If we learn that someone under 16 has signed up, we will delete that member's information.

10. Changes

If this policy changes, we'll let you know in the app and on this page. This is currently a draft, and the effective date will be added once it's finalized.

11. Users in Europe, the UK and Switzerland

Legal basis: we provide the community and manage accounts on the basis of performance of a contract, prevent misuse and send error reports on the basis of legitimate interests, and show personalized ads on the basis of consent. You can change or withdraw your ad consent at any time in “Ad privacy settings” on the app's “Using the app and your privacy” screen.

Where data is stored and processing outside your country: our servers and storage use Cloudflare's facilities around the world (the operational database is in the Asia-Pacific region), and the operator is based in South Korea. South Korea is recognized by the EU and the UK as providing an adequate level of personal data protection. Other processors (Google, Apple, Sentry) follow each company's safeguards for international transfers.

Your rights: you can request access to your information, rectification, erasure, restriction of processing, objection to processing, and receipt of your information (data portability). Email [email protected] and we will handle your request within 45 days and let you know the outcome. You also have the right to lodge a complaint with the data protection supervisory authority in the country where you live.

Retention: account information is kept until you delete your account and is erased immediately when you do (see section 5). The exact retention periods for server logs and backups will be set before launch and added to this policy.