This page is a pre-launch draft. Items in [brackets] are not final yet.
ShoeShoeShuk

ShoeShoeShuk Privacy Policy

Effective date: [EFFECTIVE_DATE] Operator: RoundWorks (an individual developer, "I" / "we"), South Korea Contact: support@roundworks.app

1. What ShoeShoeShuk is

ShoeShoeShuk helps you track the mileage of your running shoes. It works without an account. By default your data stays on your device.

2. What we collect, and when

Data When Where it goes
Shoes, run logs (date, distance, pace), reviews, settings, foot profile (length, width, instep, arch), colors, shoe photos Always, on your device Stays on your device. If you sign in and sync, a backup of this data is stored in our cloud database (Supabase) and linked to your account.
Account data: email address, or Google/Apple account identifier, and a user ID Only if you create an account or sign in Supabase (authentication)
Workouts from Apple Health (running, walking, hiking) Only if you allow access and turn on the Health connection. Read-only — ShoeShoeShuk never writes to Apple Health. Read on your device. Workouts you assign to a shoe become part of your closet data, so they are included in the sync backup if you sync.
Photos and camera Only when you choose a photo or take one Stays on your device. Included in the sync backup if you sync.
Feedback you send, any screenshot you attach, and the app version, device type and app language Only when you send feedback (signing in is not required) Supabase (feedback storage). Not linked to your account.
"Hearts" under Support the developer: a random ID generated on your device, your nickname, and the count of hearts sent Only when you tap a heart Supabase. Not linked to your account or email, not included in sync, not shown in the app.
Support purchases (consumable in-app purchases) [CHECK: only if the Support menu is available in your store country] Only when you purchase Handled by Apple. We do not receive your payment details.

We do not use advertising, analytics or crash-reporting SDKs, and we do not track you across other companies' apps and websites.

Searching for shoe images: if you use "Find on Google Images", ShoeShoeShuk opens your browser with the shoe's brand and model name as the search text. That search is between you and Google. When you return, the app may read an image you copied to the clipboard, at your request.

3. Why we use it

4. Legal bases (EEA / UK users) [CHECK with counsel]

5. Who we share it with

We do not sell your data and we do not share it for advertising. We use these providers to run the app:

We may disclose data if the law requires it.

6. International transfers

Your data may be processed in Seoul, South Korea (ap-northeast-2), which may be outside the country where you live. Where required, we rely on the safeguards the provider offers (for example standard contractual clauses) [CHECK: confirm Supabase DPA / SCC applied to this project].

7. How long we keep it

8. Your choices and rights

9. Security

Data is sent over encrypted connections. Row-level security limits your synced data to your own account. No system is perfectly secure; if a breach affects you we will notify you and the authorities as the law requires.

10. Children

ShoeShoeShuk is not directed at children under 13 (under 16 where the law sets that age). We do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it. [CHECK: align with the App Store age rating you choose]

11. Regional notices

European Economic Area and United Kingdom (GDPR / UK GDPR). The controller is the operator above. [EU/UK REPRESENTATIVE — if required, see privacy-legal-matrix.md §UK/EU]. You have the right to access, rectify, erase, restrict, object, data portability, withdraw consent, and to complain to your supervisory authority (in the UK, the ICO).

United States. We do not sell or share personal information as those terms are defined in state privacy laws, and we do not use it for targeted advertising. Residents of California, Colorado, Connecticut, Virginia and other states with privacy laws may request access, correction, deletion and portability, and may appeal a refusal, by contacting us. We will not discriminate against you for exercising your rights. [CHECK: Washington My Health My Data Act and similar consumer-health-data laws — see matrix]

Japan (APPI / 個人情報保護法). Purposes of use are as listed in section 3. Your data may be stored on servers in Seoul, South Korea (ap-northeast-2); the protection system of that country: [CHECK: describe]. You can request disclosure, correction, suspension of use or deletion by contacting us. See also the Japanese version.

Taiwan (個資法), Hong Kong (PDPO), Singapore (PDPA). Collection and purposes are as above. You may request access to and correction of your personal data. Providing data is voluntary; if you do not sign in, ShoeShoeShuk still works with data stored on your device. Contact for requests (Hong Kong data access requests and Singapore data protection queries): support@roundworks.app. See also the Traditional Chinese version.

12. Changes

If we change this policy in a meaningful way we will update the effective date and tell you in the app.

13. Contact

RoundWorks · support@roundworks.app · [POSTAL_ADDRESS — [CHECK: needed for some markets; see matrix]]