Privacy Policy
How DESAIL handles personal information.
- Effective date
1. Scope
DESAIL (the Company) takes your personal information seriously and complies with Korea's Personal Information Protection Act and related laws. This policy applies to every mobile application and the website the Company provides.
Our apps do different jobs, so they handle different data. Some send nothing to a server at all; others create an account. This document sets out those differences in a per-app table.
The Company's website uses no cookies and no analytics tools. Simply browsing it collects no personal information whatsoever. Our hosting provider may keep short-lived access records for security and fault handling.
2. Why we process personal information
The Company processes personal information for the purposes below. We do not use it for anything else, and if a purpose changes we will tell you first and ask for separate consent.
- Providing the service — running the features you ask for and showing you back what you saved
- Account management — verifying you through social sign-in, preventing abuse, answering enquiries
- In-app purchases — confirming what you bought and restoring it when you change devices
- Advertising — showing ads in apps that carry them, and measuring how they perform
- Improving the service — usage analysis and diagnosing errors
The Company does not sell your personal information, and does not pass it outside the Company except for the processing entrusted below.
3. What we collect, and how
Here is what each app handles.
| App | Account | Data collected | Stored | Ads | Analytics | Permissions |
|---|---|---|---|---|---|---|
| Ō Camera | No sign-in | Purchase receipt identifier | On your device only | No | No | Camera · Microphone (video) · Photo library (saving) |
| Budget | No sign-in | Advertising identifier (IDFA / AAID) · IP address · Device model and OS version · Purchase receipt identifier | On your device only | Yes | No | None |
| Mobu | Social sign-in (Google / Apple) | Email address · Nickname · In-app activity records · Device model and OS version · Crash and error logs · Purchase receipt identifier | Cloud (Seoul region) | No | Yes | Notifications |
There are two collection methods: (i) you enter something in the app or agree to social sign-in, and (ii) data generated automatically as you use the app (advertising identifier, device information, error logs).
Separately, if you write to support@desail-company.com, we collect your email address and the content of your enquiry as needed to reply. We keep it for three years afterwards and then destroy it, as required by Korea's Act on Consumer Protection in Electronic Commerce for records of consumer complaints and disputes.
4. How long we keep it, and how we destroy it
The Company destroys personal information without delay once the purpose for collecting it has been fulfilled. Retention by category:
- Device-only data
- We never store it. Deleting the app removes it from your device.
- Account and activity records
- Erased in full without delay when you delete your account. There is no grace period.
- Payment, ad, and error data
- Until the purpose entrusted to each processor is fulfilled
- Enquiry records
- Three years after the reply (retention required by law)
Where the law requires us to keep something for a set period, we keep it for that period only and use it for nothing but that retention.
How we destroy it — electronic files are deleted by a method that makes recovery impossible; anything printed is shredded or incinerated.
5. Providing data to third parties
The Company does not provide your personal information to third parties. What we collect is used inside the Company only, for the purposes in section 2.
The exceptions are:
- where you have given prior consent, and
- where a law specifically requires it, or an investigative authority requests it following the procedure and method laid down by law.
Entrusted processing — work we hand to outside providers because the service cannot run without it — is a different thing, and is set out in section 6.
6. Processing we entrust to others
To run the service, the Company entrusts personal data processing as follows.
| Processor | Entrusted work | Apps | Data entrusted | Retention |
|---|---|---|---|---|
| Supabase, Inc. | Account authentication and storing or retrieving activity records | Mobu | Email address · Nickname · In-app activity records | Erased without delay when you delete your account |
| RevenueCat, Inc. | Verifying in-app purchases and restoring them | Ō Camera, Budget, Mobu | Purchase receipt identifier · Device model and OS version | Until the entrusted purpose is fulfilled |
| Google LLC (Google AdMob) | Serving personalised ads and measuring their performance | Budget | Advertising identifier (IDFA / AAID) · IP address · Device model and OS version | Until the entrusted purpose is fulfilled |
| Google LLC (Firebase Analytics · Crashlytics) | Usage analysis and diagnosing errors | Mobu | In-app activity records · Device model and OS version · Crash and error logs | Until the entrusted purpose is fulfilled |
| Google LLC | Social sign-in authentication | Mobu | Email address | Until the entrusted purpose is fulfilled |
| Apple Inc. | Social sign-in authentication | Mobu | Email address | Until the entrusted purpose is fulfilled |
When we sign a processing agreement we require in writing that the data not be used beyond the entrusted purpose and that it be handled securely. If the entrusted work or the processor changes, we will update this policy to say so.
7. Transfers outside South Korea
Under Article 28-8 of Korea's Personal Information Protection Act, the Company discloses transfers of personal information abroad as follows.
| Recipient | Country | When and how | Data transferred | Purpose | Retention |
|---|---|---|---|---|---|
| RevenueCat, Inc. | United States | Sent as you use the service, over an encrypted connection | Purchase receipt identifier · Device model and OS version | Verifying in-app purchases and restoring them | Until the entrusted purpose is fulfilled |
| Google LLC (Google AdMob) | United States | Sent as you use the service, over an encrypted connection | Advertising identifier (IDFA / AAID) · IP address · Device model and OS version | Serving personalised ads and measuring their performance | Until the entrusted purpose is fulfilled |
| Google LLC (Firebase Analytics · Crashlytics) | United States | Sent as you use the service, over an encrypted connection | In-app activity records · Device model and OS version · Crash and error logs | Usage analysis and diagnosing errors | Until the entrusted purpose is fulfilled |
| Google LLC | United States | Sent as you use the service, over an encrypted connection | Email address | Social sign-in authentication | Until the entrusted purpose is fulfilled |
| Apple Inc. | United States | Sent as you use the service, over an encrypted connection | Email address | Social sign-in authentication | Until the entrusted purpose is fulfilled |
How to refuse a transfer — you may refuse. Transfers for advertising can be blocked directly in your device settings using the method in section 8. To refuse transfers for payment or error analysis, write to support@desail-company.com. Note that refusing the transfer needed for payment verification may prevent you from buying or restoring paid features.
8. Automatic collection, and how to switch it off
Apps that carry ads use the advertising identifier provided by your operating system (IDFA on iOS, Advertising ID on Android) to show you more relevant ads. It is not linked to your name or contact details, and you can switch it off or reset it at any time.
- iOS
- Settings → Privacy & Security → Tracking → turn off ‘Allow Apps to Request to Track’
- Android
- Settings → Privacy → Ads → ‘Delete advertising ID’ or ‘Reset advertising ID’
You can keep using the app after opting out. You may simply see ads that are less relevant to you.
Apart from that advertising identifier, our apps embed nothing that follows you around, and the website carries no automatic collection devices at all, cookies included.
9. Your rights and how to exercise them
You may exercise the following rights against the Company at any time.
- the right to request access to your personal information
- the right to request correction of anything inaccurate
- the right to request deletion
- the right to request that processing be suspended
Write to support@desail-company.com in writing or by email and the Company will act without delay. If you are acting through a representative, please include a letter of authority.
Data that lives only on your device is not in our hands, so you can remove it yourself in the app or by deleting the app.
10. Children
Our apps can be used at any age. The investment simulator involves no real money, so we place no age restriction on it either.
Apps that need no account collect no personal information at all, so anyone can simply use them.
Apps that do need an account support social sign-in (Google, Apple) only — the Company creates no accounts of its own. The minimum age therefore follows each provider's own policy: in South Korea, Google and Apple both require you to be 14 or over to manage your own account, and younger children can sign in only through a guardian-managed family account (Google Family Link, Apple Family Sharing).
The Company does not separately verify your age and does not knowingly collect personal information from children under 14. If we learn we hold such information without a legal guardian's consent, we destroy it without delay.
Legal guardians may at any time request access to, correction of, or deletion of their child's personal information. Write to support@desail-company.com and we will act without delay.
11. How we keep it safe
The Company takes the following measures to protect personal information.
- Collect the minimum — we ask only for what the service genuinely needs. Data never collected cannot leak.
- Restrict access — as few people as possible can reach systems holding personal data, and permissions are separated.
- Encryption — data is encrypted in transit (HTTPS/TLS) and at rest.
- On-device processing — anything that does not need to reach a server is never sent to one, and is handled on your device instead.
12. Privacy officer
The Company has designated a privacy officer with overall responsibility for personal data processing and for handling complaints and remedies relating to it.
- Name
- 천세훈
- Position
- Representative
- Contact
- support@desail-company.com
If you feel your personal information has not been protected, or you simply have a question, please get in touch. The Company will answer you properly.
13. Where to go for help
If you wish to seek a remedy for a privacy infringement, you may apply to any of the bodies below for mediation or advice.
- Personal Information Dispute Mediation Committee
- 1833-6972 · https://www.kopico.go.kr
- Privacy Infringement Report Centre (KISA)
- 118 · https://privacy.kisa.or.kr
- Supreme Prosecutors' Office, Cyber Investigation Division
- 1301 · https://www.spo.go.kr
- Korean National Police Agency, Cybercrime Reporting System
- 182 · https://ecrm.police.go.kr
You may also file an administrative appeal under Korea's Administrative Appeals Act if an act or omission by the Company has infringed your rights or interests.
14. Changes to this policy
The effective date of this policy appears at the top of the document.
When we change it because the law or the service has changed, we will post notice here at least 7 days before it takes effect. For changes that materially affect your rights, we will give at least 30 days' notice, and where necessary tell you inside the app as well.
This document was written in Korean. Where a translation differs in meaning, the Korean version prevails.
15. Business information
- Company
- DESAIL (디세일)
- Representative
- 천세훈
- Business registration no.
- 345-35-01559
- Address
- Buldang 21-ro, Seobuk-gu, Cheonan-si, Chungcheongnam-do, South Korea
- support@desail-company.com