YakKok ("the App" or "the Company") values your privacy and complies with the Personal Information Protection Act (PIPA) of the Republic of Korea.
1. Information We Collect
a. Processed on your device only (not transmitted to the Company)
- Medication information (medication name, dosage time, dosage amount, remaining stock)
- Intake records and medication history
- Notification settings
- Text recognized from photos of medication packets or prescriptions (recognition runs on your device; neither the images nor the recognition results are transmitted externally)
b. Collected and stored by the Company only if you turn on Cloud Backup Optional
- Account information: email address and the account identifier issued by your login provider (Google or Apple)
- Backup data: medication information, intake records, notification settings
- Device information: an app-generated device identifier, device name, and the time of the most recent backup
c. Collected automatically by the advertising service
- Device Advertising ID, IP address, ad interaction data, device and diagnostic information
d. Collected if you purchase a paid product
- Purchase token, purchase state, purchased product identifier (payment method details are handled by Google Play and are not collected by the Company)
Sensitive Information Requires Separate Consent
- Health-related information (medication information, intake records, medication history)
Medication information is sensitive information under Article 23 of the Personal Information Protection Act. The Company transmits and stores it on Supabase servers only if you turn on Cloud Backup in Settings. If you do not turn on Cloud Backup, this information never leaves your device. You can use all core features of the App without Cloud Backup.
2. Purpose of Collection and Use
- Providing medication reminder services
- Managing and viewing medication records
- Storing and restoring backup data and transferring data between devices, if you turn on Cloud Backup
- Account authentication and device management for Cloud Backup
- Serving in-app ads and measuring ad performance (non-personalized ads only)
- Processing and verifying purchases of paid products and responding to related inquiries
- Improving app features and service quality
3. Retention and Use Period
🔒 By default, all data is stored locally on your device and is not transmitted to external servers.
Only if you turn on Cloud Backup in Settings, your medication information, intake records, email address, and device name are transmitted to Supabase servers and stored there. Transmission uses an encrypted connection. Cloud Backup is off by default and can be turned off at any time.
- On-device data: all data is automatically deleted when you uninstall the app.
- Cloud Backup data: retained until you delete the backup or close your account, and destroyed without delay upon request.
- Backup history: recent backup history is retained and destroyed together with your account when you close it.
- Data is immediately deleted upon user request.
3-2. Destruction Procedure and Method
The Company destroys personal information without delay once the retention period has elapsed or the purpose of processing has been achieved.
- Procedure: when you uninstall the app, delete a backup, or close your account, the data is classified for destruction and destroyed without delay. Where retention is required by law, the data is stored separately for that period and then destroyed. Legal basis and items: under Article 6 of the Act on Consumer Protection in Electronic Commerce and Article 6 of its Enforcement Decree, records of paid-product contracts and withdrawals and of payment and delivery (purchase token, purchase status, product identifier, account identifier) are retained for 5 years, and records of consumer complaints and dispute handling for 3 years.
- Electronic files: permanently deleted from the database so that they cannot be recovered or reproduced.
- On-device data: the operating system deletes the app's private storage area when the app is uninstalled.
4. Disclosure to Third Parties
The App does not share your personal information with third parties except as described in the table below.
| Recipient | Items disclosed | Purpose | Retention period |
|---|---|---|---|
| Google LLC (Google AdMob) | Device Advertising ID, IP address, ad interaction data, device and diagnostic information | Serving in-app ads and measuring ad performance | Per Google's privacy policy |
| Google LLC (Google Play Billing) | Purchase token, purchase state | Processing and verifying in-app purchases | Per Google's privacy policy |
✅ The Company does not use personalized (behavioral) advertising. All ad requests in the App are set to Non-Personalized Ads, and your medication information is never used for advertising purposes or provided to advertising partners.
How to opt out of advertising identifier collection
- On Android, go to Settings > Google > Ads and select "Delete advertising ID".
- Purchasing the ad-removal product in the App removes ads.
- Opting out does not restrict core features such as medication reminders.
5. Outsourcing of Data Processing
The Company entrusts the storage of Cloud Backup data and account authentication to Supabase Inc. Details are provided in the table below.
| Processor | Entrusted work | Retention period |
|---|---|---|
| Supabase Inc. | Storage of Cloud Backup data and account authentication processing | Until you delete the backup or close your account |
The Company specifies the requirements necessary for the safe management of personal information when entering into processing agreements, and supervises its processors. Any change to the entrusted work or the processor will be disclosed through this policy.
5-2. Overseas Transfer of Personal Information
Pursuant to Article 28-8 of the Personal Information Protection Act and Article 31(1)(2) of its Enforcement Decree, the Company transfers personal information overseas as follows.
| Recipient / Contact | Country | Items transferred | Timing and method | Purpose | Retention period | Legal basis |
|---|---|---|---|---|---|---|
| Google LLC (AdMob) https://support.google.com/admob |
United States | Advertising ID, IP address, ad interaction data, device and diagnostic information | Transmitted over TLS-encrypted connections when the app runs and requests ads | Serving non-personalized ads and measuring ad performance | Per Google's privacy policy | Separate consent of the data subject (Art. 28-8(1)(1)) |
| Google LLC (Google Play Billing) https://support.google.com/googleplay |
United States | Purchase token, purchase state | Transmitted over TLS-encrypted connections when a purchase is requested and verified | Processing and verifying in-app purchases | Per Google's privacy policy | Entrusted processing for the conclusion and performance of a contract (Art. 28-8(1)(3)(a)) |
| Google LLC / Apple Inc. (social login) |
United States | Email address, account identifier | Transmitted over a TLS-encrypted connection at the moment you sign in | Account authentication for Cloud Backup | Per each provider's privacy policy | Entrusted processing for the conclusion and performance of a contract (Art. 28-8(1)(3)(a)) |
| Supabase Inc. https://supabase.com/privacy |
United States (Supabase Inc. headquarters) — the storage region follows the Supabase project settings; if data is stored outside the United States, the country will be specified by amending this policy | Medication information, intake records, notification settings, email address, device identifier and device name | Transmitted over a TLS-encrypted connection whenever data changes after you turn on Cloud Backup | Storage of Cloud Backup data and account authentication | Until you delete the backup or close your account | Entrusted processing and storage for the conclusion and performance of a contract (Art. 28-8(1)(3)(a)) |
How to refuse overseas transfer, the procedure, and its effect
- Refusing transfers for advertising: on Android, go to Settings > Google > Ads and select "Delete advertising ID", or purchase the ad-removal product in the App.
- Refusing transfers for backup and authentication: turn off Cloud Backup in the app settings, or do not sign in. No such transfer occurs in that case.
- Effect of refusal: refusing transfers for advertising does not restrict core features such as medication reminders. Refusing transfers related to Cloud Backup means you cannot transfer or restore data across devices, and your data remains on your device only.
5-3. App Permissions
Pursuant to Article 22-2 of the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Company discloses the permissions used by the App as follows.
Required permissions
- Notifications: required to display medication reminders.
- Exact alarm scheduling: required to trigger reminders precisely at the scheduled time.
- Boot completed: required to keep scheduled reminders after the device restarts.
Optional permissions
- Camera: used to photograph a medication packet or bottle so that medication details can be entered automatically.
- Photos: used to read medication details automatically from stored images.
- Vibration, wake screen, battery optimization exemption: used to prevent reminders from being delayed or missed.
You can use all services of the App except the corresponding features without granting optional permissions. Permissions can be changed at any time in your device settings.
6. Your Rights
You may exercise the following rights at any time:
- Request access to your personal information
- Request correction of your personal information
- Request deletion of your personal information
- Request suspension of processing your personal information
You can exercise these rights through the settings menu in the app, or by written request or email to the contact in Section 8, and the Company will act on your request without delay. These rights are based on Articles 35 (access), 36 (correction and deletion), and 37 (suspension of processing) of the Personal Information Protection Act.
Personal information of children under the age of 14 is processed only with the consent of their legal representative. A legal representative may request access, correction, deletion, or suspension of processing of a child's personal information through the contact in Section 8.
The Company does not make automated decisions that significantly affect the rights or obligations of data subjects (Article 37-2 of the Personal Information Protection Act), and does not process pseudonymized information. The App also provides no feature that publicly discloses a user's sensitive information.
7. Security Measures
- On-device data is kept in the app's private storage area, which other apps cannot access.
- TLS encryption is applied to the entire transmission path for Cloud Backup data.
- Cloud Backup data can be viewed and restored only after authenticating with your own account.
- Access to personal information is limited to the minimum number of personnel.
- Text recognition (OCR) of medication packets and prescriptions runs entirely on your device, and captured images are not transmitted externally.
- You can add further protection through device security features such as a screen lock.
8. Privacy Officer
Privacy Officer: David Byun
Position: Representative (under Article 32(1) of the Enforcement Decree of the Personal Information Protection Act, the business owner of a small enterprise serves concurrently as the privacy officer)
Address: 2F A1081, 47 Gangnam-daero 112-gil, Gangnam-gu, Seoul, Korea
Email: wirelean@gmail.com
You may direct any inquiry, complaint, or remedy request relating to privacy to the contact above, and the Company will respond and act without delay.
9. Changes to This Policy
This privacy policy may be updated in accordance with changes in laws or our policies. Any change will be announced in the app and posted on this page before it takes effect.
| Version | Effective date | Summary of changes |
|---|---|---|
| 2.0 | 2026-09-03 | Added collection, outsourcing, and overseas transfer disclosures for Cloud Backup; clarified the scope of sensitive information processing; added destruction procedure, app permissions, paid purchases and withdrawal of subscription, seller identification, and expanded privacy officer details |
| 1.0 | 2026-01-22 | Initial version |
10. Contact for Privacy Concerns
If you have any questions or concerns about this privacy policy or our data practices, please contact us at wirelean@gmail.com.
Users in Korea may also contact the following bodies:
- Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972)
- Privacy Infringement Report Center (privacy.kisa.or.kr, 118)
- Supreme Prosecutors' Office Cybercrime Investigation Unit (spo.go.kr, 1301)
- National Police Agency Cyber Bureau (ecrm.police.go.kr, 182)
- Personal Information Protection Commission (www.pipc.go.kr)
11. Paid Purchases and Withdrawal of Subscription
Paid products in the App (ad removal, cosmetics, premium, cloud backup) are billed through Google Play. Payment method details are handled by Google and are not collected by the Company.
Withdrawal of subscription (Article 17 of the Act on the Consumer Protection in Electronic Commerce)
- You may withdraw your purchase within 7 days of buying a paid product.
- However, under Article 17(2)(5) of the same Act, withdrawal is restricted once provision of the digital content has begun.
- Under Article 17(6), the Company provides free trial use of the App's core features so that you can evaluate it before purchase.
- Where the digital content is divisible, withdrawal remains available for the portion whose provision has not begun.
- If the product differs from its description or advertising, or the contract is performed differently from its terms, you may withdraw within 3 months of the supply date or within 30 days of the date you became aware or could have become aware of that fact (Article 17(3)).
- Withdrawal and refunds for in-app purchases are processed through the Google Play refund policy and can be requested from your order history in the Google Play app or website. Requests may also be sent to the email address in Section 8.