1. Scope and operator
Wonyoung Jang operates MOKKOO, an emotion-based journaling app. This policy describes local and server processing of your information. Privacy contact: nex5turbo.app@gmail.com.
2. Accounts, diaries and photos
Sign in with Apple and Supabase Auth process your account identifier, authentication information and the email address supplied by the login provider. Profiles may contain a username, profile settings and referral information. We do not receive your Apple password.
Your diary text, dates, emotions, pages, layout, selected decorations and attached photos are stored and synchronized using Supabase Database and Storage. Local drafts, pending changes and caches may also remain on your device to support offline editing and retrying synchronization. Diary content and photos are not limited to local storage. A reduced diary snapshot may be stored in the app's shared device container for its widget.
Photo access is used for images you choose to attach, import or export. Backups and exports you create can contain diary information. Copies saved to Photos, Files or another service remain subject to your device settings and that service's policies.
3. Analytics, ads and purchases
Firebase Analytics processes app and device information, screen views, usage events and a pseudonymous account ID. Diary-related events include counts such as pages, photos and stickers and subscription state; the event parameters defined by the app do not include diary text or photo pixels.
Google AdMob may process IP addresses, approximate location, advertising and device identifiers, ad interactions and diagnostics to provide and measure ads and prevent fraud. Consent and App Tracking Transparency choices, where presented, affect permitted advertising processing. Refusing tracking does not mean all advertising data processing stops.
RevenueCat processes an app user identifier, products, transaction and subscription status to verify purchases, restore access and manage subscriptions. Apple handles App Store payment information. We do not receive full payment card numbers.
4. Why we use information
We process information to authenticate you, save and synchronize diaries and photos, provide widgets and exports, manage referrals and subscriptions, display ads, measure use, resolve errors, protect accounts and respond to support or privacy requests. We do not use diary text or photos as parameters in our app-defined analytics events.
5. Retention and account deletion
Account information, diaries and photos are retained to provide your account and synchronization until you delete the relevant information or request account deletion. Account deletion in the app starts a recovery period, currently 30 days. After the period, scheduled server cleanup permanently deletes the account and associated user data and photos. Cleanup and provider backup cycles can delay removal of all copies; deletion is not instantaneous.
Local drafts, cached files, exports, widget snapshots and copies on other devices may require separate removal. Deleting the app alone does not delete your server account. Purchase records, provider logs and records required for legal or security purposes may have different retention; we explain applicable exceptions when handling a request.
6. Providers and international processing
- Supabase: account authentication, profiles, diaries, photos and synchronization.
- Google Firebase: usage analytics.
- Google AdMob: advertising and consent-related processing.
- RevenueCat: purchase verification and subscription management.
- Apple: sign-in, distribution, payments and device services.
Requests are transmitted over the network when you use the relevant features. Providers may process data in the United States and other countries where their infrastructure operates. Provider retention and backup rules depend on their service terms and configuration.
7. Your rights, security and children
You can edit or delete diary entries, manage photo permissions, use the account deletion option, and manage subscriptions through Apple. You may contact us to request access, correction, deletion, restriction of processing or other rights available under applicable law. We verify ownership before disclosing or deleting account data; never send your password or login token by email.
We use authenticated requests, account access controls and encrypted network connections. Permissions and device access restrictions help protect local copies. A parent or guardian may contact us to exercise a child's applicable rights or report improperly collected information.
8. Changes
This version replaces earlier descriptions that said diaries and photos were stored only on your device. It describes the app's account and cloud synchronization features. We keep previous versions and provide notice of material changes through the app or this page as applicable.