Privacy Policy
App: Wash Timing (워시타이밍) Data controller: Nam Yonghyun Operating name: Sometimes Studios (individual developer brand) Effective date: 2026-07-20 Last updated: 2026-07-20 Version: 1.0
This English version has the same substantive content as the Korean version and applies to users worldwide. In case of any discrepancy between the two language versions, the Korean version prevails.
Summary
Wash Timing recommends good days to wash your car based on third-party weather forecasts. Your wash records, cycle, preferred weekday, and settings are stored only on your device and are not stored on any developer server.
- Wash records, cycle, and settings are stored only on your device and are not sent to a developer server.
- The app does not use GPS or location permission. You choose your area from a list.
- The app does not access contacts, phone, SMS, or other personal data.
- To retrieve forecasts, the app sends only your selected city to a weather relay server operated by the developer. Personal data such as your wash records is not sent.
- For advertising (Google AdMob), the ad SDK processes advertising-related information such as an advertising identifier. You can keep using the wash-recommendation features even if you decline personalized-ads consent.
- Deleting the app immediately deletes all app data on your device.
1. Controller and Contact
| Item | Detail |
|---|---|
| Data controller | Nam Yonghyun |
| Operating name | Sometimes Studios (individual developer brand) |
| privacy@sometimesstudios.com | |
| Response target | Within 7 business days of receipt |
This app is operated by Nam Yonghyun as an individual, and "Sometimes Studios" is an individual developer brand name. There is no separate business registration or legal entity.
Residents of Korea may report to the Personal Information Protection Commission (www.pipc.go.kr) or the Privacy Infringement Report Center (118).
2. Information We Process and Purposes
2-1. Information processed on your device
| Item | How | Purpose | Legal basis |
|---|---|---|---|
| Wash records (date, tier at the time) | Entered by you; stored in the on-device database | Update last-wash date; compute wash history and cycle | Performance of contract (core feature) |
| Wash cycle, preferred weekday, base city, secondary cities | Set by you; stored on device | Compute recommended wash days; determine the area to query weather for | Performance of contract (core feature) |
| Notification settings (on/off, time windows, language) | Stored on device | Maintain notification conditions and timing | Performance of contract (core feature) |
| Support / bug-report email | Received by the developer only when you choose to send it from your own mail app | Respond to inquiries, investigate errors, improve the app | Processing at your request and legitimate interest |
All of the above is stored only on your device and is not sent to a developer server or used for ad targeting.
2-2. Weather retrieval (developer weather relay server)
To retrieve forecasts, the app sends requests to a weather relay server (Cloudflare Workers) operated by the developer. This server only relays and caches forecasts obtained from a commercial weather provider (OpenWeather).
| Item | Detail |
|---|---|
| Sent to the relay | Your selected city identifier (e.g., a region code) and standard network information inherent to internet communication (e.g., IP address) |
| Not sent | Personal data such as wash records, cycle, preferred weekday; name or contacts; precise (GPS) location |
| Server storage | Forecasts are cached briefly per city; individuals are not identified or stored |
| Purpose | Retrieve forecasts for the selected area and manage response speed / request volume |
The relay is used solely to provide forecasts to this app and does not redistribute the received weather data as a third-party weather API or for external resale.
2-3. Information we do NOT process
The app does not collect or access the following.
- Location (GPS / Wi-Fi / cell-based) — you select the area from a list
- Contacts, phone numbers, call logs, SMS content or logs
- Account information (email/password — there is no account feature)
- Advertising identifier (GAID) — not collected by the app itself. The AdMob SDK's own processing is described in 2-4.
- Demographics, sensitive data, or unique identifiers (resident registration number, etc.)
- Analytics, behavioral-tracking, or marketing-analytics SDKs — not used. There is no feature that collects app-usage statistics to a developer server (the ad SDK's ad-purpose processing is in 2-4).
Notifications do not display personal data. They contain only generic text guiding the wash recommendation, and include no ads or affiliate links.
2-4. Information processed by third-party SDKs and services
| Service | Provider | Information | Purpose | Policy |
|---|---|---|---|---|
| Google AdMob | Google LLC | Advertising identifier, device info, IP, app-usage data (ad-related scope) | Show ads (currently banner; interstitial etc. may be added later) | https://policies.google.com/privacy |
| Google User Messaging Platform (UMP) | Google LLC | Ad-consent status, privacy-choice status | Collect ad consent and manage ad privacy choices | Same as above |
| OpenWeather (weather data) | OpenWeather Ltd. | Region coordinates relayed by the server (not personal data) | Provide weather forecast data | https://openweather.co.uk/privacy-policy |
| Cloudflare (relay infrastructure) | Cloudflare, Inc. | Standard network info (IP, etc.) inherent to relay requests | Host the weather relay server | https://www.cloudflare.com/privacypolicy/ |
Personal data such as wash records, cycle, and settings is not provided to AdMob or any third party for ad targeting.
In regions requiring ad consent (EU/EEA, UK, Switzerland, etc.), a separate ad-consent screen may be shown through AdMob's UMP, and the app requests ads only after checking consent status.
In regions requiring separate ad-privacy choices (e.g., California, US), you can manage choices through Google's ad-privacy settings.
Declining or limiting ad-privacy choices does not block the app's wash-recommendation, records, or notification features. Ads may be limited or shown as non-personalized under Google's SDK policies.
If additional ad networks or mediation partners are added in the future, this table and the Data Safety declaration will be updated together, and applied only after advance notice under the change procedure in Section 15.
3. Storage and Security
- Storage location: All app data such as wash records, cycle, and settings is stored only in the on-device SQLite database and local storage. It is not stored on a developer server, the cloud, or external storage.
- External communication: The app (1) sends city information to the relay server to retrieve forecasts, and (2) communicates via the AdMob/UMP SDK to show ads. Otherwise there is no feature that automatically transmits your personal data. If you send a support/bug-report email yourself, its contents are delivered to the developer.
- Encryption: Device encryption applied by Android to app-internal storage applies, and all external communication is encrypted via HTTPS (cleartext blocked).
- Backup blocked:
android:allowBackup="false"disables Google auto-backup.
4. Retention and Deletion
| Data | Retention | Deletion |
|---|---|---|
| Wash records, cycle, settings | For the app's installation period (deleted immediately when you delete them in the app) | Delete the app or Settings → App → Clear data (permanent electronic deletion) |
| Weather cache (relay server) | Cached per city for a short period (hours to tens of hours), then auto-expires | Auto-deleted after retention (not stored to identify individuals) |
| Support / bug-report email | Kept as needed to handle the inquiry and follow-up, and in principle deleted within one year after the final response (may be kept longer where needed for disputes, security investigation, or legal obligations) | Deleted upon email request after verification |
Deleting the app deletes all app data on the device. Because personal data does not exist on a developer server, deleting the app fully disposes of it.
5. Your Rights
Under applicable laws such as the GDPR (EU/EEA), UK GDPR, Korea's PIPA, CCPA/CPRA (California), and Japan's APPI, you may exercise the following rights.
| Right | Detail | How |
|---|---|---|
| Access | Confirm information being processed | Check directly in the app or request by email |
| Rectification | Correct inaccurate information | Edit in the app or request by email |
| Erasure | Delete data | Immediate on app deletion / delete items in the app |
| Portability | Export data | Request by email (wash records and settings are stored only on the device) |
| Restriction / objection | Stop processing for a specific purpose | Ad-privacy settings or email request |
| Withdraw consent | Withdraw ad-privacy consent, etc. | In-app ad-privacy settings; device Settings → App → Permissions |
| Do not sell/share (CCPA) | Personal data such as wash records is not sold/shared. Advertising-identifier choices are managed via Google ad-privacy settings | In-app ad-privacy settings or email request |
If you exercise rights by email, the controller replies within 7 business days after verification (or a shorter period where required by law).
Effect of denying permissions
| Permission | Required? | Effect if denied |
|---|---|---|
Internet (INTERNET) | Required | Forecasts cannot be retrieved, so wash recommendations are unavailable (granted at install; no runtime prompt) |
Notifications (POST_NOTIFICATIONS) | Optional | In-app features work normally, but wash notifications cannot be received |
The app does not request location, contacts, exact-alarm, SMS, or phone permissions.
6. Automated Decision-Making and Profiling
The app does not perform automated decision-making or profiling under GDPR Article 22. The wash recommendation (traffic light) is a convenience indication computed by fixed rules from the third-party forecast for your selected area and the wash cycle/preferences you set; it is not our own weather prediction about you or personal profiling.
7. Third-Party Sharing and Processing
- Personal data such as wash records is not sold to third parties or shared for marketing.
- Aside from the services in 2-4 (AdMob, UMP, OpenWeather, Cloudflare), there is no processing delegation or third-party provision.
- Third-party services' own processing: the services in 2-4 process data under their own privacy policies and are responsible for that processing. Content on externally linked pages is outside the scope of this policy.
- Where there is a lawful request from investigative or supervisory authorities under applicable law, we follow the procedures required by law.
8. International Transfers
The app itself does not transfer personal data abroad. However, the services in 2-4 use infrastructure of overseas operators, as follows.
| Recipient | Items | Purpose | Safeguards |
|---|---|---|---|
| Google LLC (US) | Advertising identifier, device info, IP, consent status | Show ads; manage ad consent and privacy choices | Google Standard Contractual Clauses (SCCs), etc. |
| OpenWeather Ltd. (UK) / Cloudflare, Inc. (US) | Region coordinates, standard network info (IP, etc.) | Provide weather data and relay infrastructure | Each provider's contractual safeguards and HTTPS encryption |
9. Children
This app is not directed to children under 14 (Korea) / 13 (US COPPA, EU GDPR-K) and is registered as Not designed for children on the Google Play Console.
The AdMob SDK operates under the not-for-children setting. If the developer becomes aware that a child under 14 is using the app, we will inform the guardian how to delete the app or its data.
10. Backup and Device Transfer
The app does not currently provide its own backup (export/import) feature. Because wash records and settings are stored only on the device, users should check and manage important information themselves before changing devices.
If a backup or device-transfer feature is added later, it will be used only after the user's explicit choice, and its scope, storage location, encryption method, retention period, and deletion method will be announced separately in this Policy and in the app before it applies.
11. Security Measures
- Data is isolated in the Android app sandbox (app-internal storage) so other apps cannot access it.
allowBackup=falseblocks Google auto-backup, and cleartext (unencrypted) network traffic is blocked.- We follow data-minimization and least-permission principles — we do not collect information or request permissions beyond what the app needs.
- External communication is encrypted via HTTPS.
12. Breach Notification
If the controller becomes aware of a breach such as loss, theft, leakage, or alteration of personal data, we take necessary measures within the periods required by applicable law, including notifying data subjects and reporting to supervisory authorities (e.g., the 72-hour standard under Korea's PIPA / EU GDPR).
However, because the app does not store personal data on a developer server, the likelihood of a developer-side breach is very low. Data exposure due to loss, theft, or hacking of the user's own device is within the user's device-security responsibility.
13. Region-Specific Notes
Korea (PIPA)
- This policy can be reviewed at any time on this page (the distribution page) or from the app's settings menu.
- Location: the app does not collect personal location such as GPS; you select the area from a list.
- Deletion: deleting the app or Settings → App → Clear data deletes data irrecoverably.
- Report: Personal Information Protection Commission (www.pipc.go.kr) / Privacy Infringement Report Center (118).
California (CCPA/CPRA)
- Personal data such as wash records is not sold or shared for cross-context behavioral advertising.
- Advertising-related information processed by Google SDKs can be managed via Google's ad-privacy choices.
- We provide the same service without discrimination based on residency.
EU/EEA and UK (GDPR / UK GDPR)
- Legal bases: consent (ad-privacy choices), performance of contract (wash recommendation, notifications, settings), legitimate interest (app stability).
- Right to lodge a complaint with your national data-protection authority.
- Consent may be withdrawn at any time (in-app ad-privacy settings; device Settings → App → Permissions).
Japan (APPI)
- Purpose: wash recommendation and notifications based on third-party forecasts.
- External services: Google AdMob, UMP, OpenWeather, Cloudflare.
- You may request access, correction, deletion, or suspension of use by email above.
14. Alignment with Google Play Data Safety
| Item | Answer |
|---|---|
| Data collected (transmitted off device)? | Yes — the AdMob SDK transmits advertising identifier/device info to Google, and the app sends city information and standard network info to the relay server to retrieve weather |
| Location collected | No — no location permission; area is chosen manually |
| Off-device transmission of personal data such as wash records | No — stored only on device |
| Data shared? | Yes — Google AdMob/UMP (advertising purposes) |
| Data sold? | No |
| Encrypted in transit | Yes (HTTPS) |
| Deletion mechanism | Full deletion by deleting the app |
15. Changes to This Policy
If we change this policy, we announce the change, its effective date, and the reason on this page 7 days before the effective date. The following are announced 30 days before.
- Changes to collection/use purposes
- Addition of new ad networks / mediation partners or third-party SDKs, or addition of processing delegation
- Extension of retention periods
- Other changes unfavorable to users
For significant changes, we notify you via an in-app notice or when you first open the app after the change.
16. Applicable Laws and References
This policy is not legal advice and was prepared by an individual developer with reference to the following laws and guidelines.
- Personal Information Protection Act (Korea)
- Standard Personal Information Protection Guidelines (PIPC notice)
- Privacy Policy Drafting Guidelines (April 2025, PIPC)
- Act on the Protection and Use of Location Information (Korea) — no location collected
- EU General Data Protection Regulation (GDPR) / UK GDPR
- California Consumer Privacy Act (CCPA/CPRA)
- Japan Act on the Protection of Personal Information (APPI)
- US Children's Online Privacy Protection Act (COPPA)
- Google Play permissions policy and Data Safety section policy
Addendum This policy takes effect on 2026-07-20.