Privacy Policy

Tazic is operated by GlobalHashtag (글로벌해시태그), a sole proprietorship operated by Jaeseon Lee in the Republic of Korea. The operator is responsible for the information processed on its behalf under this policy.

This policy covers the app and product support correspondence. Visits to our public product pages are covered by the GlobalHashtag website Privacy Policy. Stores, advertising services, and user-controlled platform accounts also have their own privacy notices for processing they perform independently.

Website Privacy Policy

Depending on the features you enable and how you use the app, Tazic may process the following categories of information:

• Security event history, including unlock-related events, motion events, charger disconnect events, timestamps, and session history.
• App activity timeline information collected through Android Usage Access to build session timelines, such as package names, app labels, foreground events, and background events during a monitoring session.
• Optional event photos captured by the front camera when photo capture is enabled for supported unlock events.
• Settings and preferences, such as enabled modes, alarm behavior, retention preferences, language, theme, and custom alarm text.
• Protected security data, such as PIN-related values and other sensitive settings stored with Android security protections.
• Purchase and entitlement information needed to support Tazic PRO purchases and purchase restoration.
• Advertising and diagnostics information that may be processed by third-party SDKs, such as device or app identifiers, IP address, crash diagnostics, and product interaction information.
• Firebase Cloud Messaging registration and subscription information for update notices and app messages, and Firebase Remote Config installation information for update policy delivery.
• Support request information that you send to us, such as your email address and the contents of your message.

Tazic does not require you to create a user account to use core app features. We do not currently operate a standalone in-app account system for Tazic users.

We use information processed in connection with Tazic for the following purposes:

• To activate, operate, and maintain anti-theft and monitoring features.
• To create local event history, session history, and app timeline views.
• To capture optional photo evidence when you enable photo-related monitoring features.
• To save and apply your settings, preferences, and security choices.
• To verify purchases, restore entitlements, and operate paid features.
• To display, measure, secure, and troubleshoot ads in the free version of the app.
• To detect bugs, investigate crashes, improve reliability, show update notices, and respond to support requests.
• To comply with legal obligations, enforce our terms, prevent abuse, and protect users, the app, and our business.

Tazic may request or rely on the following Android permissions or system capabilities when relevant to the features you enable:

• Camera to capture optional unlock event photos.
• Usage Access to build app activity timelines associated with monitoring sessions.
• Full-screen alarm display to show alarm UI prominently when needed, including on the lock screen where supported.
• Notifications to show monitoring state and alarm notifications.
• Foreground services to keep monitoring features running reliably.
• Battery optimization exemption to reduce disruption of monitoring behavior by device power controls.
• Vibration and device hardware capabilities to provide alarm behavior.
• Device admin for the optional feature that locks the screen when an alarm is triggered.

Some of these permissions involve access to personal or sensitive device data. Where required by Google Play policy or applicable law, in-app disclosures and consent flows may appear before access is used.

Tazic is designed to keep core monitoring history on your device. Event logs, settings, and optional captured files are stored in app-private storage. Sensitive settings, including PIN-related values, are protected using Android security features. Optional photo files are processed into secure storage and plaintext source files are removed after secure processing.

No security measure is perfect. We use reasonable technical and organizational measures intended to protect information processed through Tazic, but we cannot guarantee absolute security.

Tazic may use third-party providers to support app operations, including the following categories:

• Google Play and Google Play Billing for app distribution, payments, and purchase records.
• RevenueCat for purchase entitlement state management and purchase restoration support.
• Google Mobile Ads and related Google advertising services for free-tier ad delivery, measurement, fraud prevention, and related compliance operations.
• Firebase Crashlytics, Firebase Performance Monitoring, and related Google services for error reporting, performance diagnostics, app reliability analysis, update policy delivery, in-app notices, and notification-related operations.
• Sentry for error diagnostics and sampled performance measurements. App content, photos, PIN values, and backup contents are excluded from these reports. Session replay and screenshots are disabled.
• Google-hosted email for the messages and attachments you send to product support.

These providers may process categories such as purchase records, app diagnostics, device or service identifiers, IP address, and limited usage or interaction data needed to provide their services. RevenueCat, Firebase diagnostics, and Sentry process app service information on our behalf. Stores and advertising providers also perform their own billing, security, advertising, and legal processing under their notices.

In versions that provide the "Help improve Tazic" setting, optional error and performance reporting is off until you choose to share. A choice you previously saved is preserved when you update the app. You can use all app features without enabling this setting and change your choice in Settings at any time. This setting controls diagnostic reporting, not the separate processing needed for ads, purchases, or update notices. Turning it off stops future optional diagnostics collection; it does not remove reports already received by a provider. Diagnostics may include technical information such as app version, device model, OS version, code stack locations, operation duration, and diagnostic identifiers. Providers also receive network information, including your IP address, when reports are transmitted. These reports are not described as completely anonymous. Core app content stays on the device unless you explicitly export or share it through a supported feature.

The free version of Tazic may display ads. Tazic PRO is intended to remove ads from the in-app experience. Ad-related processing may involve device or advertising identifiers, IP address, diagnostic data, approximate region information, and information about ad delivery or interaction.

We do not state that we sell personal information for monetary consideration. However, depending on your location and the legal definitions that apply, certain ad-tech disclosures or transfers involving third-party advertising services could be treated as a form of sharing or targeted advertising.

If consent or a privacy choice is required by applicable law for certain advertising or tracking-related processing, Tazic uses Google-provided consent or privacy messaging before requesting ads in supported regions.

When Google requires a privacy options entry point, you can review or change ad-related privacy choices from the app's settings screen. Availability and wording can depend on region, platform requirements, and the ad-tech providers involved at the time of use.

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction that requires a legal basis for processing, for example under the EU General Data Protection Regulation (GDPR) or the UK GDPR, we generally rely on one or more of the following:

• Performance of a contract or steps requested by you, for example to provide app features, restore purchases, or respond to product requests.
• Legitimate interests, for example to secure the app, prevent abuse, maintain app reliability, support core operations, and respond to support inquiries, provided those interests are not overridden by your rights.
• Consent, where we ask for it under applicable law or platform policy, including for certain permission-based or advertising-related processing.
• Legal obligations, where processing is required to comply with applicable law, lawful requests, accounting duties, or enforcement obligations.

Tazic stores much of its monitoring information locally on your device until you delete it, reset the app, uninstall the app, or the app removes it through retention controls.

Optional event photos are subject to your configured retention settings and an additional cap on retained photo-bearing events. Local history items may also be deleted manually from within the app.

Third-party providers may keep their own records for longer periods under their own policies and legal requirements. For example, purchase records, billing records, fraud-prevention records, and crash reports may be retained for operational, accounting, security, audit, or legal reasons.

Diagnostic reports are retained according to the applicable Firebase and Sentry service retention rules and project settings. Turning off diagnostic sharing, resetting the app, or uninstalling it does not automatically delete reports already received by these services. You may contact tazic@globalhashtag.com to request assistance with a privacy or deletion request. Whether we can locate a particular report depends on the limited information it contains; we do not collect your photos or PIN to identify diagnostic reports.

Support correspondence includes the sender's email address, message, attachments voluntarily supplied, and our replies. We use it to handle the request and necessary follow-up, not to build an app-content archive.

Under this revised rule, routine correspondence is kept while the request and necessary follow-up are being handled. When that purpose ends, eligible messages and attachments are deleted without undue delay. Open requests are reviewed monthly; the review schedule does not permit keeping information after it is no longer needed.

If a specific legal obligation, ongoing dispute, or other lawful retention ground requires continued storage, we keep only the necessary records, restrict their use to that purpose, record the ground and retention period or end condition, and delete them when that ground ends.

Deletion is performed manually using the email service's deletion controls, including removal from Trash where available. This rule takes effect when this revised notice is published. Existing correspondence must also be reviewed under the rule; publication does not mean historical messages have already been deleted. Provider backups and independent provider records follow the provider's own deletion process.

Firebase Crashlytics retains crash traces and associated installation identifiers for 90 days before starting removal from its live and backup systems. Firebase Performance retains IP-associated events for 30 days and installation-associated or de-identified performance data for 60 days before starting removal. These periods describe the start of provider deletion, not guaranteed completion of all backup deletion.

Our Sentry organization currently uses the Developer plan with a 30-day error-event retention period. Records collected under an earlier plan follow the retention rule that applied when collected. Other data types and provider backups have separate retention rules.

Purchase and advertising records follow the applicable store or provider retention requirements. A local reset, uninstall, or diagnostic opt-out does not erase records already received by those providers.

You can manage or delete certain data as follows:

• Delete individual history items and photos from within the app where the feature is available.
• Use Reset app to remove locally stored settings and logs from the app.
• Uninstall the app to remove remaining app-private data stored on the device, subject to Android platform behavior and any provider-controlled records outside the device.

Because Tazic does not currently operate a standalone account system, there is no separate Tazic account deletion portal at this time.

Information is transmitted over the internet when you use a purchase or restore feature, request an ad, enable diagnostics, or email support.

RevenueCat, Inc. processes purchase and entitlement information in the United States. Functional Software, Inc. (Sentry) stores the diagnostic events for our organization in the United States.

The information sent depends on the service: transaction and entitlement records for RevenueCat; technical errors, timings, and device or installation identifiers for diagnostics; advertising delivery and interaction information for Google Mobile Ads; and the correspondence you send for email support. The retention section explains the verified diagnostic periods and the limits of deletion requests.

You can stop optional diagnostic transfers using the app setting, manage advertising choices where offered, and choose whether to use backup or purchase features. These choices do not remove provider records already created. Contact the privacy contact below for access, deletion, or transfer-related requests. Required contractual safeguards or consent must apply to the particular transfer; accepting this policy alone is not consent to every international transfer.

Provider details: Firebase privacy and retention · Sentry retention · RevenueCat privacy · Google privacy.

Firebase Crashlytics and Performance Monitoring, plus Cloud Messaging and Remote Config use Google's global infrastructure. Google does not designate a single processing country for these services; processing can occur at the Google Cloud and data-center locations it publishes. Google Mobile Ads also uses Google's global infrastructure under Google's privacy policy.

Product support email uses Google Workspace without a geographic data-region restriction under our current service. Google may process it where Google or its subprocessors have facilities. The published location lists describe possible processing locations, rather than a verified country for an individual report, ad request, or email.

Firebase processing locations · Google Cloud countries and regions · Google data-center locations · Workspace processing locations · Google privacy policy

For processing subject to the Republic of Korea's Personal Information Protection Act, you may request access, correction or deletion, suspension of processing, or withdrawal of consent where applicable. You may submit a written request by email or act through an authorized representative. We request only the verification or authorization information reasonably needed to handle the request.

We handle requests within the period required by applicable law. If a request must be restricted, deferred, or refused on a lawful ground, we explain the reason and how to challenge the decision by contacting the privacy contact again. We cannot remotely access or delete local app content or identify every provider record; those limits do not remove your statutory rights.

You can also seek help from the KISA Personal Information Infringement Report Center or the Personal Information Dispute Mediation Committee. These independent bodies are separate from our product support service.

Depending on your location and applicable law, you may have rights that can include the right to request access to personal data, correction of inaccurate data, deletion, restriction, objection, withdrawal of consent, portability, and information about recipients or categories of recipients.

If you are a California resident and the CCPA or another state privacy law applies, you may also have rights that can include the right to know, delete, correct, opt out of certain sale or sharing activity, limit certain uses of sensitive personal information, and receive equal service without unlawful discrimination for exercising your rights.

Rights are not absolute and may depend on the jurisdiction, the nature of the information, the role we play, and applicable exceptions. If we cannot fulfill a request in full, we may explain the reason, request additional verification, or direct you to a provider that controls the relevant records.

Privacy requests are handled by Jaeseon Lee, the GlobalHashtag operator. Contact tazic@globalhashtag.com to request access, correction, deletion, restriction, or withdrawal of consent where applicable.

We ask only for information needed to verify and locate the relevant records. Do not send private app content, PINs, passwords, backup files or keys, or payment card details. An email address alone may not identify an SDK diagnostic record. We explain any identification or deletion limits and respond within the period required by applicable law.

tazic@globalhashtag.com

In addition to contacting us by email, Tazic may provide in-app controls for privacy-related settings, depending on your device and region. These controls can include deleting local history, resetting the app, managing permissions, restoring purchases, and reviewing privacy or advertising choices where available.

If a privacy or consent choice screen is made available in the app, using that screen is generally the fastest way to update ad-related preferences for the current device.

Tazic is not directed to children under 13, and is not intended for use by children who cannot validly consent under applicable law. If you believe a child has provided personal information to us in a way that requires action, contact us and we will review the request.

We do not use personal data processed through Tazic for automated decision-making that produces legal effects or similarly significant effects about individuals.

We may update this policy from time to time to reflect product changes, legal requirements, or changes in our providers or processing practices. When we do, we will update the "Last updated" date on this page. Material changes may also be communicated through the app, the website, or other appropriate channels when required.

Optional event photos use encrypted app-private storage. PIN-related settings use Android security controls. Event history and app activity timelines remain in app-private storage. Diagnostic reporting excludes private app content, PIN values, and backup contents; screenshots and session replay are disabled in the app configuration.

Support requests can contain personal information you choose to send. Send only the details needed to resolve your request. Privacy requests do not require sending your notes or photos. Provider access and deletion are handled through the relevant authorized account or provider process.