Privacy Policy

SettleNote is operated by GlobalHashtag (글로벌해시태그), a sole proprietorship operated by Jaeseon Lee in the Republic of Korea. The operator is responsible for the information processed on its behalf under this policy.

This policy covers the app and product support correspondence. Visits to our public product pages are covered by the GlobalHashtag website Privacy Policy. Stores, advertising services, and user-controlled platform accounts also have their own privacy notices for processing they perform independently.

Website Privacy Policy

Depending on the features you use, SettleNote may process the following categories of information:

• Worry notes, review results, follow-up notes, open dates, and related timestamps stored on your device.
• Preferences and settings such as theme, reminder choices, app lock preferences, and backup metadata.
• Backup-related files and documents needed to create or restore encrypted backups using your platform account.
• Your Google account email address and authentication access used locally for Google Drive backup on Android. On iOS, iCloud manages Apple account access; the app does not receive your Apple account email address through this backup feature.
• Purchase and entitlement information needed to support Lifetime Pro purchases and purchase restoration.
• Advertising-related information that may be processed by ad providers for limited free-tier banner delivery, including device or other identifiers and app interaction data.
• Crash diagnostics when diagnostic reporting is enabled, and limited support records when you contact us. Diagnostic reporting is enabled by default, and you can turn it off in the app settings.

SettleNote does not require a standalone SettleNote account for the core note and review flow. The app is designed to keep core note and review data primarily on your device.

If you use backups, purchases, or platform services, your Apple or Google account and related providers may process information needed to operate those features.

• To save, reopen, and review your notes and related history.
• To manage reminders, app lock settings, backup state, and other device-dependent features.
• To verify purchases, restore entitlements, and operate Lifetime Pro features.
• To display, measure, secure, and troubleshoot limited ads in the free version of the app.
• To detect bugs, investigate crashes, improve reliability, and respond to support requests.
• To comply with legal obligations, enforce our terms, and protect users, the app, and our business.

SettleNote may offer optional encrypted backup and restore using platform services such as iCloud or Google Drive, depending on device support and app configuration.

Backup files are encrypted before upload. To restore a backup, you must provide the backup key that you create when saving the backup. Your backup key is intended to remain under your control and is not used as a public account credential for GlobalHashtag services.

If you use Google Drive backup on Android, Google may process your email address and account details to authenticate access to your Drive app data folder. If you use iCloud backup on iOS, Apple may process the account information needed to provide that storage service.

SettleNote may use third-party providers to support app operations, including the following categories:

• Apple and Google platform services for app distribution, billing, notifications, sign-in, and device features.
• iCloud or Google Drive for optional backup storage and restore support.
• RevenueCat for purchase entitlement state management and purchase restoration support.
• Google Mobile Ads and related Google advertising services for limited free-tier ad delivery and compliance operations.
• Firebase Crashlytics and Firebase Performance Monitoring for optional error reporting and performance diagnostics.
• Sentry for error diagnostics and sampled performance measurements. App content, photos, PIN values, and backup contents are excluded from these reports. Session replay and screenshots are disabled.
• Google-hosted email for the messages and attachments you send to product support.

These providers may process categories such as purchase records, app diagnostics, device or service identifiers, IP address, limited ad-delivery data, and support correspondence needed to provide their services. RevenueCat, Firebase diagnostics, and Sentry process app service information on our behalf. Stores and advertising providers also perform their own billing, security, advertising, and legal processing under their notices.

In practice, this can include email address for backup sign-in, files and documents used for encrypted backup storage, crash logs and diagnostics for app reliability, app interaction data for ad delivery and measurement, and device or other identifiers used for advertising, fraud prevention, security, or compliance.

In versions that include these diagnostics, you can turn diagnostic sharing off in the app's settings. This stops future optional diagnostics collection; it does not remove reports already received by a provider. Diagnostics may include technical information such as app version, device model, OS version, code stack locations, operation duration, and diagnostic identifiers. Providers also receive network information when reports are transmitted. Core app content stays on the device unless you explicitly share or back it up through a supported feature.

In versions with a diagnostics notice, it is shown once at the end of onboarding. You can turn sharing off there or later in About. Existing opt-out settings are preserved. Sharing diagnostics is not required to write notes, use reminders or app lock, create backups, or access purchased Pro features.

Optional app diagnostics may include operation stages, error codes, timings, and code stack locations. They do not include note text, PIN values, or backup contents. Advertising, purchases, and user-initiated backups have separate provider settings and are not disabled by the diagnostic sharing switch.

SettleNote may show a limited banner ad on selected in-app surfaces for free users.

Ad-related processing may involve device or advertising identifiers, IP address, approximate region information, and information about ad delivery or interaction, according to the policies of the ad provider.

We do not use the content of your notes for ad personalization. Free-tier ad processing is limited to the data reasonably needed to deliver, measure, secure, and troubleshoot ads on supported surfaces.

If consent or a privacy choice is required by applicable law for certain ad-related processing, SettleNote uses Google-provided consent or privacy messaging before requesting ads in supported regions. When Google requires a privacy options entry point, you can open it from the app's About screen.

• We do not sell your note content.
• We do not use your notes for advertising personalization.
• We do not use your notes for public social features.

SettleNote may request permissions such as notifications, biometric authentication, photo library or file access for import or share actions, and storage-related access depending on which features you enable. These permissions are used only to support the note, review, lock, backup, reminder, import, and share experience.

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction that requires a legal basis for processing, for example under the EU General Data Protection Regulation (GDPR) or the UK GDPR, we generally rely on one or more of the following:

• Performance of a contract or steps requested by you, for example to provide app features or restore purchases.
• Legitimate interests such as securing the app, preventing abuse, supporting reliability, and responding to support inquiries.
• Consent, where we ask for it under applicable law or platform policy, including for certain permission-based or ad-related processing.
• Legal obligations, where processing is required to comply with applicable law, lawful requests, or accounting duties.

You can delete individual notes or clear local app data from within the app. You can also uninstall the app, which may remove local data stored on your device, subject to platform behavior.

If you use optional backup features, you can also sign out of the connected platform account and manage or delete backup files through the relevant provider, such as Google Drive or iCloud, subject to that provider's own tools and policies.

Third-party providers may keep their own records for longer periods under their own policies and legal requirements. For example, purchase records, billing records, fraud-prevention records, and crash reports may be retained for operational, accounting, security, audit, or legal reasons.

To request deletion of support correspondence or other information under our control, email settlenote@globalhashtag.com. We review the request, verify it where necessary, and explain what can be deleted and any legal retention limits. We do not keep a readable copy of your notes or hold your backup key, so we cannot delete notes from your device remotely. Delete local notes in the app; manage cloud backups through your own Google Drive or iCloud account.

Requests for provider-held diagnostic or purchase records depend on whether the relevant records can be identified and on the provider's controls and legal obligations. Turning off diagnostics does not automatically erase existing reports. Do not send note content, PINs, backup files or keys, passwords, or payment card details with a deletion request.

Support correspondence includes the sender's email address, message, attachments voluntarily supplied, and our replies. We use it to handle the request and necessary follow-up, not to build an app-content archive.

Under this revised rule, routine correspondence is kept while the request and necessary follow-up are being handled. When that purpose ends, eligible messages and attachments are deleted without undue delay. Open requests are reviewed monthly; the review schedule does not permit keeping information after it is no longer needed.

If a specific legal obligation, ongoing dispute, or other lawful retention ground requires continued storage, we keep only the necessary records, restrict their use to that purpose, record the ground and retention period or end condition, and delete them when that ground ends.

Deletion is performed manually using the email service's deletion controls, including removal from Trash where available. This rule takes effect when this revised notice is published. Existing correspondence must also be reviewed under the rule; publication does not mean historical messages have already been deleted. Provider backups and independent provider records follow the provider's own deletion process.

Firebase Crashlytics retains crash traces and associated installation identifiers for 90 days before starting removal from its live and backup systems. Firebase Performance retains IP-associated events for 30 days and installation-associated or de-identified performance data for 60 days before starting removal. These periods describe the start of provider deletion, not guaranteed completion of all backup deletion.

Our Sentry organization currently uses the Developer plan with a 30-day error-event retention period. Records collected under an earlier plan follow the retention rule that applied when collected. Other data types and provider backups have separate retention rules.

Purchase and advertising records follow the applicable store or provider retention requirements. A local reset, uninstall, or diagnostic opt-out does not erase records already received by those providers.

Information is transmitted over the internet when you use a purchase or restore feature, request an ad, enable diagnostics, or email support. Encrypted backups are transmitted when you choose Google Drive or iCloud backup.

RevenueCat, Inc. processes purchase and entitlement information in the United States. Functional Software, Inc. (Sentry) stores the diagnostic events for our organization in the United States.

The information sent depends on the service: transaction and entitlement records for RevenueCat; technical errors, timings, and device or installation identifiers for diagnostics; advertising delivery and interaction information for Google Mobile Ads; and the correspondence you send for email support. The retention section explains the verified diagnostic periods and the limits of deletion requests.

You can stop optional diagnostic transfers using the app setting, manage advertising choices where offered, and choose whether to use backup or purchase features. These choices do not remove provider records already created. Contact the privacy contact below for access, deletion, or transfer-related requests. Required contractual safeguards or consent must apply to the particular transfer; accepting this policy alone is not consent to every international transfer.

Provider details: Firebase privacy and retention · Sentry retention · RevenueCat privacy · Google privacy.

Firebase Crashlytics and Performance Monitoring use Google's global infrastructure. Google does not designate a single processing country for these services; processing can occur at the Google Cloud and data-center locations it publishes. Google Mobile Ads also uses Google's global infrastructure under Google's privacy policy.

Product support email uses Google Workspace without a geographic data-region restriction under our current service. Google may process it where Google or its subprocessors have facilities. The published location lists describe possible processing locations, rather than a verified country for an individual report, ad request, or email.

Google Drive backups use your own Google account and are subject to that account's storage service and Google's privacy policy. Our support-email service settings do not determine the location of your backup. iCloud backups remain subject to Apple's platform service.

Firebase processing locations · Google Cloud countries and regions · Google data-center locations · Workspace processing locations · Google privacy policy

For processing subject to the Republic of Korea's Personal Information Protection Act, you may request access, correction or deletion, suspension of processing, or withdrawal of consent where applicable. You may submit a written request by email or act through an authorized representative. We request only the verification or authorization information reasonably needed to handle the request.

We handle requests within the period required by applicable law. If a request must be restricted, deferred, or refused on a lawful ground, we explain the reason and how to challenge the decision by contacting the privacy contact again. We cannot remotely access or delete local app content or identify every provider record; those limits do not remove your statutory rights.

You can also seek help from the KISA Personal Information Infringement Report Center or the Personal Information Dispute Mediation Committee. These independent bodies are separate from our product support service.

Depending on your location and applicable law, you may have rights that can include the right to request access to personal data, correction of inaccurate data, deletion, restriction, objection, withdrawal of consent, portability, and information about recipients or categories of recipients.

If you are a California resident and the California Consumer Privacy Act (CCPA, as amended by the CPRA) or another state privacy law applies, you may also have rights that can include the right to know, delete, correct, opt out of certain sale or sharing activity, limit certain uses of sensitive personal information, and receive equal service without unlawful discrimination for exercising your rights.

To submit a privacy, deletion, correction, access, or objection request, contact settlenote@globalhashtag.com and identify the product involved and your country or state where relevant. We may ask for additional information reasonably necessary to verify your request.

For requests related to data held by third-party providers, such as Apple, Google, Google Drive, iCloud, RevenueCat, Firebase, or Google Mobile Ads, we may direct you to the relevant provider controls or request process where appropriate.

SettleNote is not directed to children under 13, or to children who cannot validly consent under applicable law. If you believe a child has provided personal information to us in a way that requires action, contact us and we will review the request.

SettleNote is a self-reflection tool. It is not a medical, psychiatric, crisis response, or therapy service, and it should not be used as a substitute for professional care.

We may update this policy from time to time to reflect product changes, legal requirements, or changes in providers or processing practices. When we do, we will update the "Last updated" date on this page.

Privacy requests are handled by Jaeseon Lee, the GlobalHashtag operator. Contact settlenote@globalhashtag.com to request access, correction, deletion, restriction, or withdrawal of consent where applicable.

We ask only for information needed to verify and locate the relevant records. Do not send private app content, PINs, passwords, backup files or keys, or payment card details. An email address alone may not identify an SDK diagnostic record. We explain any identification or deletion limits and respond within the period required by applicable law.

settlenote@globalhashtag.com

Core notes use an encrypted local database. Optional backup files are encrypted before upload, using the backup key you create. Diagnostic reporting excludes private app content, PIN values, and backup contents; screenshots and session replay are disabled in the app configuration.

Support requests can contain personal information you choose to send. Send only the details needed to resolve your request. Privacy requests do not require sending your notes or photos. Provider access and deletion are handled through the relevant authorized account or provider process.