한국어

Privacy Policy

Vision Focus Co., Ltd. (the "Company") operates the Tomatoma app (the "App") and processes users' personal information in accordance with the Personal Information Protection Act of Korea and related laws. This policy explains what information the Company collects, why, how long it is kept, and who processes it on our behalf.

1. Information We Collect and How

(1) Information you enter

  • Nickname
  • Date of birth and gender (when you fill in your profile; optional on iOS)
  • Inquiries: subject, message, and attached photos (optional)

(2) Information received when you sign in with Google or Apple

  • Email address and the account identifier of that service
  • Sign-in is authenticated through Google's and Apple's sign-in services. If you use the App as a guest, no email address is collected.

(3) Information generated automatically while you use the App

  • Focus records: session start/end times, focus and away intervals, and service records such as tomatoes, league and missions
  • App usage events: screens viewed and features used within the App
  • Device information: device model, operating system and version, app version, language setting
  • Device identifiers: see Section 5
  • Push notification token and whether notifications are allowed
  • Access logs: IP address, time and path of requests to our server
  • Error information: crash details and device/app state when an error occurs

(4) Information we do not collect

  • Camera footage: The App uses the camera to detect, in real time and on your device, whether you are present, as part of the timer. Camera footage is not stored and is not sent to our server or anyone else. Only the result (focus time based on whether you were present) is reflected in your focus records.
  • Time-lapse videos: Stored only on your device and never uploaded to our server. They leave the App only when you save them to your gallery or share them yourself.
  • Location: The App does not collect GPS or other device location. Our analytics provider may estimate an approximate country/region from the IP address.
  • The App does not use the Android advertising ID permission and does not request iOS App Tracking Transparency permission.

2. Purposes of Use

  • Identifying members, sign-in, and account linking
  • Providing the service: focus timer, presence detection, focus records and statistics, leagues, missions
  • Sending push notifications (if you allowed them)
  • Responding to inquiries
  • Preventing abuse, such as repeat sign-ups or duplicate accounts used to obtain rewards
  • Service improvement: usage statistics, finding and fixing errors. Date of birth is converted to an age range before it is used for analytics.
  • Keeping user statistics accurate (so the same device is not counted as several users)

3. Information Shown to Other Users

Because of how the service works, your nickname, representative animal, and part of your focus records (league ranking, profile calendar, "Focusing now" status, etc.) are shown to other users. You can turn off "Focusing now" visibility in settings.

4. Retention Period

  • Member information and focus records: kept until you delete your account.
  • When you delete your account: your sign-in information (linked social account identifier and sign-in tokens) is removed immediately, the account can no longer be used, and other users see "Ghost Tomato" instead of your nickname. Photos attached to your inquiries are deleted.
  • However, member information and usage records needed to prevent abuse (e.g. re-registering to obtain rewards again) and for service statistics are kept for as long as necessary for those purposes and then destroyed.
  • Server access logs: kept in the service database for 90 days, then moved to compressed archives and deleted 12 months after the month they were created.
  • Where a law requires retention, information is kept for the period that law specifies.
  • Time-lapse videos: stored only on your device; you can delete them at any time.

5. Device Identifiers and Automatic Collection

The App uses the following identifiers:

(1) A random ID generated by the analytics tool (Amplitude device ID)

(2) A device-level identifier: on Android, the ANDROID_ID the operating system provides to the App; on iOS, a random ID the App creates on first launch and stores in this device's Keychain. The iOS ID is not synced via iCloud, and it may remain on the device after the App is deleted.

  • Identifier (2) is sent only to our server, stored linked to your account, and used only to prevent abuse through repeat sign-ups and to keep user statistics accurate.
  • Device identifiers are not used for advertising or for tracking you across other apps or websites, and are not provided to third parties.
  • How to refuse: deleting the App stops collection of identifier (1). Device identifiers are essential for preventing abuse, so if you refuse their collection you cannot use the service. To refuse, contact the Personal Information Protection Officer in Section 11, or delete your account and then the App.

6. Provision to Third Parties

The Company does not provide users' personal information to third parties, except where required by law.

7. Processors and Transfer Overseas

The Company entrusts the following companies with processing, to the extent needed to run the service.

  • Amazon Web Services: server operation and data storage (servers located in the Republic of Korea)

The following processors are located overseas, so the information below is transferred abroad. This transfer is an entrustment of processing necessary to perform our service contract with you, made under Article 28-8(1)(3) of the Personal Information Protection Act. It is sent over the network from time to time while you use the App, and is kept until the purpose is achieved or the contract ends.

  • Amplitude, Inc. / USA / privacy@amplitude.com / member number, app usage events, device information, analytics device ID, age range, language, sign-in method, IP address / usage analytics
  • MoEngage Global Inc. / USA / privacy@moengage.com / member number, push notification token, notification permission status, app usage events, device information, age range, language, sign-in method / push notifications, usage analytics
  • Google LLC (Firebase) / USA / https://policies.google.com/privacy / push notification token, Firebase installation ID, device and app information / push delivery (Firebase Cloud Messaging), remote app configuration (Remote Config)
  • Functional Software, Inc. (Sentry) / USA / compliance@sentry.io / error details, device and app information / finding and fixing errors
  • Code Town, Inc. (Shorebird) / USA / privacy@shorebird.dev / app version and platform information / delivering app updates

If you do not want your information transferred overseas, you can ask the Personal Information Protection Officer in Section 11. In that case some features, such as push notifications, may not be available.

8. Destruction Procedure and Method

  • Destruction procedure: when the retention period ends or the purpose is achieved, personal information is destroyed without delay.
  • Destruction method: electronic files are deleted in a way that cannot be restored.

9. User Rights

You can request access to, correction or deletion of, or suspension of processing of your personal information at any time.

  • Nickname, date of birth and gender can be edited in profile edit.
  • You can delete your account in settings.
  • You can turn off push notifications in settings or in your device settings.
  • For other requests, contact the Personal Information Protection Officer in Section 11.

10. Security Measures

  • Data is sent to our server over encrypted connections (HTTPS).
  • Access to personal information is limited to those who need it.
  • Sign-in tokens and similar values are masked in server logs.

11. Personal Information Protection Officer

For inquiries regarding the handling of personal information, please contact:

Contact Person: Jeongho Park

Email: holden@tomatoma.org

12. Changes to This Policy

This policy may change due to changes in laws or in the service. Changes will be announced through in-app notices.

Addendum

This policy takes effect on January 1, 2025.