Privacy Policy

Effective date: September 11, 2026

Snowball (눈덩이, the "Service") treats your personal information with care and complies with the Personal Information Protection Act of the Republic of Korea and other applicable laws. The Service is operated from the Republic of Korea, and personal information is processed on servers located in the Republic of Korea.

This English version is provided for your convenience. If there is any difference in meaning between this version and the Korean original, the Korean original prevails.

1. Personal information we collect

The following information may be collected when you use the Service.

When you sign up: email address, nickname
When you use social login: the unique identifier of your social account, and your email address if the provider supplies it
For app settings: the language, country, time zone and display currency settings of your device
When you use the Service: the expense and income entries, saving records, goal and asset information, parked purchases, shared-ledger and trip-ledger entries and comments, one-line notes shared through the Echo feature, and inquiry messages that you enter yourself
When you use a money briefing: the briefing identifier linked to your account, the time of your first view, and the reaction type you select
Collected automatically: device identifier for push notifications (FCM token), access logs
Collected automatically (usage analytics): app usage records (screen views, feature usage events), device information, app instance identifier — Google Firebase Analytics
Collected automatically (crash diagnostics): app crash logs and diagnostic information — Google Firebase Crashlytics
Collected automatically (advertising): advertising identifier (Android ADID / iOS IDFA, on iOS only if you allow tracking through App Tracking Transparency) — Google AdMob

Note: usage analytics do not include the product names, memos or exact amounts you enter. Amounts are processed only as ranges.

2. Why we collect and use it

To provide the Service and manage your account
To display the Service in the language and currency that suit you
To send personalized notifications (push)
To show entries that you chose to share — in a shared ledger, a trip ledger or Echo — to the members of that shared space
To improve the Service and analyze anonymized usage statistics
To prevent duplicate briefing views, calculate view and reaction statistics, and show the reaction you selected
To diagnose errors and improve app quality
To serve advertising
To meet obligations under applicable law

3. How long we keep it

Your information is deleted immediately when you delete your account. Where applicable law requires retention, we keep it for the period required.

Records of e-commerce transactions: 5 years (Korean Act on Consumer Protection in Electronic Commerce)
Access logs: 3 months (Korean Protection of Communications Secrets Act)
Usage analytics (Firebase Analytics): up to 14 months from collection
Money briefing view and reaction records: until you delete your account or the briefing is deleted, whichever comes first

4. Providing information to third parties

As a rule, the Service does not provide your personal information to outside parties. Exceptions apply where you have given consent or where disclosure is required by law. Showing entries that you chose to share in a shared ledger, a trip ledger or Echo to the members of that shared space is part of providing the Service itself. If you choose to read the original source for a money briefing, the source website opens in your device's default browser or linked app, not inside the Service. Information subsequently processed by that website is governed by its own privacy policy.

5. Processors we work with

Amazon Web Services (AWS): server infrastructure
Google Firebase: push notifications (FCM), usage analytics (Analytics), crash diagnostics (Crashlytics)
Google Analytics: visit statistics for this website (uses cookies; non-identifying data such as pages viewed and referral source)
Google AdMob: in-app advertising
Kakao / Google / Apple: social login

6. Your rights

You may exercise the following rights at any time.

Request access to your personal information
Request correction or deletion of your personal information
Request that processing be suspended
Delete your account (in the app: Profile → Delete account)

7. How we keep it safe

Encryption in transit (HTTPS/TLS)
JWT-based authentication and token management
Passwords stored with one-way encryption (BCrypt)

8. Privacy contact

Name: Jinseop Bae (배진섭)
Email: poxy1535@gmail.com

You are welcome to write to us in English.

9. Revision history

2026-08-31: English version established (based on v1.7.0 — language, country, time zone and currency settings; expense, income, shared-ledger, comment and inquiry data; social login processors Kakao/Google/Apple)
2026-09-11: Added account-linked unique view and reaction records for money briefings, their purposes and retention period, and external-source navigation