Privacy Policy

Xeta (Representative: Seongju Park; "we" or "us"), based in the Republic of Korea, makes and operates the iPhone app "Dollop" (the "app"). This Privacy Policy explains how the app handles your information and the rights you have under the Personal Information Protection Act of the Republic of Korea.

Summary

• Ordinary task features require no account and do not send task content to us. Optional invitations use Apple sign-in and separate consent. We process invitation and reward data on a server as described at https://malang.xeta.im/en/referral-privacy.
• The app contains no analytics tools, advertising, or tracking.
• Your tasks and voice input are processed on your iPhone, and your iPhone also determines when you arrive at or leave a place you have registered. When the app gets a weather forecast, your location is sent to Apple's weather service. When you search for a place or view a map, your search terms and the map location are sent to Apple Maps.
• If you use iCloud sync, your tasks, history, and registered places are stored in your own iCloud account, and we cannot see them.
• Support emails are stored in Google's email service. If you opt into invitations, we also process account identifiers and invitation reward data under the separate notice.

1. Purposes of processing and information processed

For ordinary task features, we receive personal information only when you send us a support email. Optional invitation data is described separately. The information below is used for the app's features, but except for support emails, it is processed on your device or sent only to Apple services, and it is never sent to us.

• Tasks and history: The task titles, notes, times, repeats, and completion records you enter, along with Dollop's level, Closet items, and app settings, are used to show your tasks and remind you of them. This information is stored on your device.
• Voice: The "Add by voice" feature turns audio from your microphone into text with speech recognition on your device. Your voice is not saved as a recording and is never sent off your device.
• Location: If you use place reminders, the name, coordinates, and radius of each place you register are stored on your device, and your device determines when you arrive at or leave that place. When you search for a place or view a map, your search terms and the location shown on the map are sent to Apple Maps (MapKit). The app does not record your route.
• Weather: For the morning weather alert, when the app gets a forecast it sends the location of a place you registered (such as "Home"), or your approximate current location if you have no "Home" place, to Apple's weather service (WeatherKit). For the morning weather, the app stores your approximate location only on your device, and it is passed to Apple when the app gets the weather. We do not receive this location.
• Photos: The photo permission is used only to save report images to the photo library on your device. The app does not read the photos in your library or send them anywhere.
• Purchases: If you buy PLUS, Apple processes the payment. The app only checks on your device whether you have access to PLUS, and we cannot know your name, Apple Account, or payment method.
• Age range: Where the law requires it, the app may ask iOS for your age range, which it checks only on your device and does not keep or send anywhere.
• Support emails: If you contact us through "Contact us" in the app or by email, we receive your email address, the sender name in the email, the content of your message, and the app version and iOS version that the app fills in for you. We use this information only to answer you and to fix problems.

2. Retention and deletion

• Information stored on your device stays there until you delete it. Done and missed tasks are deleted automatically after the period you choose in "Keep done tasks" in the app's Settings (30 days or 1 year). They are kept if you choose "Forever". A missed task is a task that the app moves to your history after its date or deadline passes, and its retention period starts when it is moved.
• If you tap "Delete all data" in the app's Settings or delete the app, the information on your device is deleted. Information synced to iCloud can be deleted from iCloud storage management in the iPhone Settings app.
• We delete support emails without delay once we have answered and resolved them. However, records of complaints or disputes about payments or refunds are kept for 3 years in accordance with the Act on the Consumer Protection in Electronic Commerce of the Republic of Korea, and are then deleted.
• Electronic files are deleted in a way that cannot be recovered.

3. Disclosure to third parties

We do not provide your personal information to third parties.

4. Outsourcing and transfer outside Korea

We use the email service of the company below to receive and store support emails, and in this process support emails are stored on servers outside Korea. Optional invitation APIs and data storage use Amazon Web Services in Seoul, South Korea; details and retention are listed in Invitation privacy.

• Recipient: Google LLC (United States), privacy inquiries https://support.google.com/policies/contact/general_privacy_form
• Task outsourced: Receiving and storing support emails (Google Workspace email)
• Information transferred: The email address, sender name, message content, app version, and iOS version in a support email
• Countries, timing, and method: To the United States and other countries where Google operates data centers, sent over the internet when an email is received.
• Retention period: The same as the retention period for support emails in section 2.
• How to refuse: If you do not want your email stored outside Korea, please do not send us a support email. In that case you cannot receive answers by email, but this does not affect your use of the app.

5. Apple services

The app uses the Apple services below. Information processed by these services is handled between you and Apple, and Apple's Privacy Policy (https://www.apple.com/legal/privacy/) applies. We do not receive this information.

• iCloud (CloudKit): Syncs your tasks, history, and registered places across your devices. The information is stored in private storage in your own iCloud account, and we cannot see it.
• WeatherKit: Gets the forecast used for the morning weather alert. When it gets a forecast, your device sends your location to Apple.
• Maps (MapKit): When you search for a place or view a map, your search terms and the location shown on the map are sent to Apple Maps. If you have allowed location access, the map starts at your current location when you create a new place, so your current location is sent as well.
• Notifications: Task reminders and weather alerts are local notifications scheduled on your device, and they do not pass through any server of ours.
• App Store payments (StoreKit): Apple processes PLUS payments, renewals, cancellations, and refunds.
• Age check (Declared Age Range): Where the law requires it and the app asks, iOS tells the app the age range of your Apple Account. The app checks this age range only on your device and does not store it or send it anywhere.
• Siri and Shortcuts: When you add or finish a task with Siri, Apple's Siri processes the voice request, and the app stores on your device only the task details that Siri passes to it.

Information for iCloud, WeatherKit, Maps (MapKit), and Siri may be processed on Apple's servers outside Korea.

6. Your rights and how to exercise them

You may at any time ask to access, correct, or delete your personal information, or ask us to stop processing it. You can manage task content in the app. Delete the server invitation account in With friends, or contact dev@xeta.im for other rights requests.

• You can edit or delete tasks and history directly in the app, and export them to a file with "Export (CSV)" in the app's Settings.
• You can delete all information on your device at once with "Delete all data" in the app's Settings.
• You can turn off the Microphone, Speech Recognition, Location, Notifications, and Photos (add only) permissions at any time under Dollop in the iPhone Settings app. If you turn off a permission, only the features that need it stop working.
• To access, correct, delete, or stop the processing of a support email you sent us, write to dev@xeta.im. We will act on your request without delay and let you know the result.

You may also exercise your rights through a legal representative or a person you have authorized.

7. Security measures

Ordinary task content remains on your device and in your private iCloud. Invitation connections use HTTPS/TLS and authentication tokens are encrypted at rest. We include no analytics tools or advertising SDKs, and the app stores its information in app-only storage protected by iOS. Support emails are handled in an email account that only we can access, and they are deleted when the retention period ends.

8. Children's personal information

The app is rated 4+ and may be used by children. Ordinary task features do not collect personal information. Optional invitations require users to be 16 or older and give separate consent. If a child under 14 (the age set by Korean privacy law) wishes to contact us, we ask that a parent or legal guardian send the email on the child's behalf.

9. Automatic collection tools

Neither the app nor the website that hosts this policy (https://malang.xeta.im) uses cookies, visit analytics, or any other automatic collection tools. Because neither the app nor our website tracks you over time or across other websites, we do not respond to Do Not Track signals differently.

10. Privacy officer

Our privacy officer is Seongju Park, Representative of Xeta. Please send any questions, complaints, or requests for remedies about personal information to dev@xeta.im, and we will answer without delay.

11. Remedies for infringement of rights

If you need advice about, or want to report, an infringement of your personal information rights, you may contact the following agencies in Korea.

• Personal Information Dispute Mediation Committee: 1833-6972, https://www.kopico.go.kr
• Personal Information Infringement Report Center: 118, https://privacy.kisa.or.kr
• Supreme Prosecutors' Office: 1301, https://www.spo.go.kr
• Korean National Police Agency: 182, https://ecrm.police.go.kr

12. Changes to this Privacy Policy

On October 26, 2026, we announced the addition of optional invitations, separate consent, server records, reward recovery and deletion. The preceding policy is at https://malang.xeta.im/en/privacy-2026-10-24. If we change this Privacy Policy, we will post the changes and their effective date in the app and at https://malang.xeta.im/en/privacy starting 7 days before they take effect. For changes that significantly affect your rights, we will post them starting 30 days in advance.

13. Additional information for users in the United States

This section applies to users in the United States, in addition to the sections above.

• No sale of personal information: We do not sell your personal information, and we do not share it for advertising.
• Children under 13: The app is a general audience app and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe that a child under 13 has sent us an email, please contact dev@xeta.im and we will delete it unless section 2 requires us to keep it.
• Requesting your rights: You may ask us to tell you what personal information we hold about you, to give you a copy, to correct it, or to delete it. We will delete it unless section 2 requires us to keep it. Invitation accounts can be deleted in With friends. For support email records, please send your request to dev@xeta.im from the email address you used, or tell us how we can confirm the email is yours. An authorized agent may also make a request for you. We will respond without delay and will not treat you differently for making a request.

14. Additional information for users in the European Economic Area and the United Kingdom

This section applies to users in the European Economic Area and the United Kingdom, in addition to the sections above.

• Controller: Xeta is the controller of the personal data described in this section.
• Personal data and legal basis: For ordinary task features, the personal data we receive is a support email that you send us. We use it only to answer you and to fix problems, as described in section 1, and we keep it as described in section 2. Our legal basis is our legitimate interest in answering you and fixing problems, or the need to provide the app to you under our Terms of Use. When section 2 requires us to keep a record of a complaint or dispute about a payment or refund, our legal basis is our legitimate interest in meeting that requirement of Korean law. Optional invitations process the data listed in Invitation privacy based on your consent, which you may withdraw by deleting the invitation account.
• Retention: We keep a support email for the period described in section 2.
• Transfer: Support emails are stored with Google LLC in the United States and other countries where Google operates data centers, as described in section 4.
• Your rights: You have the rights of access, rectification, erasure, restriction of processing, objection, and data portability for that personal data. To exercise them, please email dev@xeta.im.
• Complaints: You may complain to a data protection authority, in particular in the country where you live or work (in the United Kingdom, the Information Commissioner's Office).

15. Effective date

This Privacy Policy is effective as of October 26, 2026.