隱私
LifeDue 隱私權政策
說明 LifeDue 如何蒐集、使用、分享及保護您的個人資料，以及您擁有的選擇與權利。
本隱私權政策以英文提供。如譯文與英文版本有所出入，以英文版本為準。如有疑問，請透過支援信箱與我們聯絡。
- 文件版本
- privacy-policy-v2026-11-01
- 生效日期
1. Who we are
LifeDue is operated by Zorleno ("we", "us", or "our"). Zorleno is the controller responsible for the personal information processed through the LifeDue mobile apps for iOS and Android and the LifeDue website (together, the "Service").
You can contact us about this Privacy Policy or your personal information at zorleno.co@gmail.com. This email address also serves as the contact point of our privacy officer.
This Privacy Policy explains what we collect, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. The separate Consent to Collection and Use of Personal Information that you accept when you sign up summarizes the required items in table form; if the two documents differ, this Privacy Policy provides the more detailed description.
2. Information we collect
We collect only what we need to run LifeDue as a free, ad-supported expiry date manager.
| Category | Information | Source |
|---|---|---|
| Account | If you start without signing in (guest mode): a randomly generated guest account identifier with no email address. If you create or link an account: email address; password (stored only as a secure hash by our authentication provider, never in plain text); if you use Google or Apple sign-in, the account identifier and the email address and name the provider shares with us (Apple may give us a private relay email); nickname, preferred language, time zone, and default currency; records of your consent to the Terms, the privacy consent, and optional marketing (status, document version, channel, and time). | You and, if you choose, Google or Apple |
| Items you add | Category, title, description, amount, currency, payment method, payment account name you type in, start date, due date, repeat rule, memo, completion status, and reminder settings (days before, time, time zone, on or off); your custom categories and templates. | You |
| Attached image | One optional image per item that you choose (for example a receipt, warranty card, or contract) and its file details (file name, type, storage path, and upload time). We only receive the image you select; we do not access the rest of your photo library. | You |
| Support inquiries | The reply email address you enter, your message, and the status of the inquiry. | You |
| Usage and analytics | A daily app-open record (date, platform such as iOS or Android, and app version), the time you were last active, and records of completed rewarded ads (time, reward type, and platform). | Collected automatically by the app |
| Advertising data | Google Mobile Ads (AdMob) and UMP may process IP address and approximate location derived from it; device, operating system and app information; app- or vendor-scoped identifiers; ad requests, impressions, clicks and video interactions; crash and performance diagnostics; and consent choices. LifeDue requests only non-personalized ads, removes Android advertising ID permissions, does not request Apple's ATT authorization, and disables Google's publisher first-party ID. These settings do not eliminate all SDK data collection. | Collected automatically by Google's SDKs in the app |
| Technical data | IP address, request and access logs, device model and operating system type, app version, and error information created when the app or website communicates with our servers. | Collected automatically |
We do not collect push notification tokens, precise location, contacts, or payment card numbers, and we do not ask for national ID or passport numbers. Please do not enter such information in item titles, memos, or images.
Guest mode: you can start using LifeDue without an account. We then create an anonymous guest account that has no email address, and your items, settings, consent records, and other information described above are stored on our servers in the same way as for a regular account. You can later link Google, Apple, or an email address to the guest account to keep your data. Because a guest account has no sign-in method, if you delete the app, clear its data, or sign out before linking an account, you can no longer access the guest account and we cannot restore it for you.
3. Notifications and data stored on your device
LifeDue reminders are local notifications scheduled on your device. We do not send server push notifications and do not collect push tokens. Your reminder settings are saved to your account so they can be restored when you sign in on another device.
Some information is stored only on your device and is not sent to our servers: the scheduled notifications themselves, the end time of a 30-minute pass earned by watching a rewarded ad, and the ad consent choices saved by Google's consent tool. This information is removed when you delete the app or clear its data.
4. How we use your information and our legal bases
If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, we rely on the legal bases below. In the Republic of Korea, we process information on the basis of your consent, the performance of our contract with you, and the other grounds permitted by the Personal Information Protection Act.
| Purpose | Information used | Legal basis |
|---|---|---|
| Creating and securing your account, signing you in (including with Google or Apple), and keeping your items available across devices | Account, items, attached image | Performance of a contract (GDPR Art. 6(1)(b)) |
| Providing the core features: lists, calendar, spending summaries, recurring cycles, reminders, custom categories and templates | Items, reminder settings, account preferences | Performance of a contract |
| Answering your support inquiries | Support inquiries, account email | Performance of a contract; our legitimate interest in helping users |
| Understanding how the Service is used so we can improve it and plan capacity | Usage and analytics data | Our legitimate interest in maintaining and improving a free service, using minimal data |
| Showing banner ads and the rewarded ads used when saving new or edited items to keep LifeDue free, measuring ads, and preventing ad fraud | Advertising data | Your consent where required by law (requested through Google's consent message in the EEA, the UK, and Switzerland); otherwise our legitimate interest in funding the free Service |
| Granting the 30-minute pass after you watch a rewarded ad to completion | Rewarded-ad completion records, data on your device | Performance of a contract |
| Keeping the Service secure, preventing abuse, and fixing errors | Technical data | Our legitimate interest in a secure and reliable Service |
| Keeping consent records, complying with legal obligations, and handling disputes | Consent records and other relevant records | Compliance with legal obligations (GDPR Art. 6(1)(c)); our legitimate interests |
| Sending product news, only if you opted in to marketing | Email, language, marketing consent | Your consent, which you can withdraw at any time |
We do not use your information for automated decision-making that produces legal or similarly significant effects on you.
5. Who we share information with
We do not sell your personal information for money. We share information only with the service providers and partners below, and when the law requires it.
| Recipient | Purpose | Information |
|---|---|---|
| Supabase, Inc. (cloud infrastructure hosted on Amazon Web Services) | Authentication, database, image storage, and server functions such as account deletion (processor acting on our instructions) | Account, items, attached images, support inquiries, usage data, technical data |
| Google LLC and its affiliates (AdMob and User Messaging Platform) | Delivering and measuring ads, preventing ad fraud, and collecting and storing ad consent. Google may also use this data for its own purposes as an independent controller, as explained in its policies. | Advertising data |
| Google LLC (Sign in with Google), only if you use it | Signing you in | Google account identifier, email address, name |
| Apple Inc. (Sign in with Apple), only if you use it | Signing you in | Apple account identifier, email address or private relay address, name if you share it |
| Apple App Store and Google Play | Distributing and updating the app; they process your download data under their own policies and give us only aggregated statistics | Information you provide to the store |
| Vercel Inc. (website hosting) | Delivering the LifeDue website securely | IP address, browser information, request logs for the website |
We may also disclose information when required by law, a court order, or a valid request from public authorities, to protect the rights, safety, or property of users or others, or as part of a merger, acquisition, or transfer of the Service, in which case we will notify you in advance where required.
6. International transfers
Our service providers operate servers in several countries, so your information may be stored and processed outside your country, including in the United States, in the data center region where our Supabase project is hosted, and in other countries where Google, Apple, and Vercel operate. Information is transferred over encrypted connections whenever you use the Service.
When we transfer personal information from the EEA, the UK, or Switzerland, we rely on adequacy decisions (such as the EU-U.S. Data Privacy Framework for certified recipients) or on the Standard Contractual Clauses and equivalent safeguards included in our providers' data processing terms.
If you do not want your information transferred abroad, you may stop using the Service and delete your account; because the Service runs on these providers, it cannot be used without the transfer. Where required, you can change your ad consent choices without affecting item viewing or saving.
7. How long we keep information
| Information | Retention | Notes |
|---|---|---|
| Account, items, attached images, custom categories and templates, usage and rewarded-ad records, support inquiries | Until you delete them or delete your account | Deleting your account removes them immediately. Residual copies in our provider's backups, if any, are overwritten in the normal backup cycle. |
| Consent records | Until you delete your account | Kept longer only where needed to comply with law or to resolve a dispute. |
| Technical logs | For the short period set by our hosting providers | Where Korean law applies, access records may be kept for up to 3 months. |
| Advertising data | According to Google's retention policies | Ad consent choices on your device remain until you change them or delete the app. |
| Information we must keep by law | For the period required by the applicable law | Then deleted without delay. |
8. Deleting your account
In the app, go to Settings > Delete Account. Your account is deleted immediately, together with your profile, items, payment account names, custom categories and templates, reminder settings, support inquiries, usage and rewarded-ad records, and the images stored for your items.
If you can no longer open the app, email zorleno.co@gmail.com from the email address of your account. After confirming that the request comes from the account owner, we will delete the account without undue delay and within 30 days at the latest, and let you know when it is done.
Deleting the app from your phone does not delete your account. Local notifications and other data on the device are removed when you delete the app.
Guest accounts are deleted the same way, in Settings > Delete Account. Because a guest account has no email address, we may not be able to identify it from an email request. If you use LifeDue as a guest and no longer need it, please delete the account in the app before deleting the app. If you contact us with information that identifies your guest account, we will delete it.
9. Advertising and your choices
- LifeDue shows Google AdMob banner ads in the app at all times.
- When you save a new item or save edits to an existing item and have no active pass, you watch a rewarded video ad to the end. Your changes are then saved, and you get a 30-minute pass to add and edit items on that device without watching ads. If no ad can be loaded (for example, no ad inventory or a network error), your changes are saved without an ad and no pass is granted.
- Viewing items, reminders, widgets, deleting items, and marking items as done never require watching an ad. The pass has no cash value, cannot be transferred to another device, and its duration or conditions may change or the program may end.
- LifeDue always requests non-personalized ads, including in regions where UMP does not require a consent form. In the EEA, the UK, Switzerland and other regions where required, Google UMP collects consent before the ads SDK is initialized. Settings > Ad Privacy Options appears when UMP requires it.
- Non-personalized ads may use context such as app content and approximate location, and may still require consent for device storage or access. If UMP does not permit ad requests, or its status cannot be verified, LifeDue skips ads and allows item saving without granting a registration pass.
- On Android, LifeDue removes the advertising ID and AdServices advertising ID, attribution and topics permissions from the app manifest. Google's publisher first-party ID is disabled on both platforms.
- On iOS, LifeDue does not request tracking authorization and does not intentionally use the IDFA. Removing the ATT description is not a revocation of an authorization previously granted to an older build. SDK identifiers and any prior authorization must be verified for the release configuration; non-personalized ads alone do not establish an absence of tracking. SKAdNetwork supports install attribution without the IDFA.
10. Your rights
Depending on where you live, you have the right to access your information, receive a copy in a portable format, correct it, delete it, restrict or object to its processing, and withdraw consent at any time (withdrawal does not affect processing that already took place).
You can view, edit, and delete your items and account directly in the app. For any other request, email us from your account email address. We may ask for information to confirm your identity, and we will respond within the time required by law (for example, within one month under the GDPR and within 45 days under California law). You may use an authorized agent where the law allows.
EEA, UK, and Swiss residents may also lodge a complaint with their local data protection authority. Where we rely on legitimate interests, you may object to that processing.
11. Additional information for US residents (including California)
In the past 12 months we collected the following categories of personal information: identifiers (such as email address, account ID, app- or vendor-scoped identifiers, and IP address); customer records (account details); internet or other electronic network activity (app usage and ad interactions); approximate geolocation derived from IP address (by Google for ads); and user content (items and images). We collect them for the purposes described in section 4 and disclose them to the service providers listed in section 5.
We do not sell personal information for money and LifeDue does not request personalized ads. Google's processing of SDK data remains subject to its policies and applicable law; the non-personalized setting alone does not resolve every legal definition of sale or sharing.
Do Not Sell or Share My Personal Information: where provided, use Settings > Ad Privacy Options to manage consent, or email us. LifeDue requests only non-personalized ads regardless of that choice.
You also have the right to know, delete, and correct your personal information, and the right not to be discriminated against for exercising your rights. We do not collect sensitive personal information to infer characteristics about you, and we do not knowingly sell or share the personal information of consumers under 16.
12. Additional information for users in the Republic of Korea
Under the Personal Information Protection Act, you may request access to, correction or deletion of, or suspension of processing of your personal information, and you may withdraw your consent. A legal representative or authorized person may also make requests on your behalf. We will act on access requests within 10 days.
Advertising information: Google Mobile Ads may process ad interactions, app- or vendor-scoped identifiers, IP address, approximate location and diagnostics to deliver and measure ads and prevent fraud. LifeDue requests only non-personalized ads. Manage consent through Settings > Ad Privacy Options where provided, or contact us.
For help with a privacy infringement, you can contact the Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr), the Personal Information Infringement Report Center (118, privacy.kisa.or.kr), the Supreme Prosecutors' Office (1301, www.spo.go.kr), or the Korean National Police Agency (182, ecrm.police.go.kr).
13. Children
LifeDue is not directed to children. You must be at least 13 years old to use it. Where the law of your country sets a higher age for consenting to the processing of personal data (for example, 14 in the Republic of Korea or up to 16 in EEA countries), you must meet that age or have the consent of a parent or legal guardian.
We do not knowingly collect personal information from children below these ages. If you believe a child has given us personal information, please contact us at zorleno.co@gmail.com and we will delete it.
14. Security
- Data is encrypted in transit (HTTPS/TLS) between the app, the website, and our servers.
- Database access rules (row-level security) limit each account to its own data, and passwords are stored only as secure hashes by our authentication provider.
- Attached images are stored in cloud storage at an address that contains random identifiers. Anyone who obtains that exact address could open the image, so please avoid attaching images that contain highly sensitive information such as ID card or full card numbers.
- Access to production systems is limited to the operator, and we review our providers' security practices. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the authorities of a breach as required by law.
15. The LifeDue website
The LifeDue website does not use advertising or analytics cookies and does not require an account. Our hosting provider processes your IP address, browser information, and request logs to deliver the website and protect it from abuse. Web fonts are loaded from a public content delivery network (jsDelivr), which receives your IP address when the fonts are downloaded.
16. Changes to this Privacy Policy
We may update this Privacy Policy when the Service or the law changes. We will post the new version on this page with a new version number and effective date. For material changes, we will also notify you in the app or by email at least 7 days before they take effect, or earlier notice where the law requires it.
17. Contact
Operator and privacy officer: Zorleno
Email: zorleno.co@gmail.com