Privacy Policy
LivingHits (“we”, “us”) operates the JONIVIEW app and the website joniview.com (the “Service”). This policy explains what personal information we process and why, how long we keep it and how we protect it.
1. The short version
- Your phone screen and what you tap on the car screen are never sent to or stored on our servers. The picture travels only between your phone and your car within your phone’s hotspot.
- The app does not access your location, microphone, camera, contacts, phone number, advertising ID, or hardware IDs such as IMEI.
- The website has no sign-up or payments and uses no advertising or tracking tools.
2. Information that stays on your phone
The app uses the following only on your phone and never sends it to us. We cannot see it.
- Your phone screen and what you tap on the car screen
- The list of apps installed on your phone (to show them on the car screen)
- The 6-digit connection code, car connection history and Wireless debugging pairing details
- Diagnostic logs for troubleshooting (stored in the app’s private storage on your phone)
3. Personal information we process
| Category | Data | Purpose | Legal basis |
|---|---|---|---|
| Account (when you sign in in the app) | Sign-in ID (Firebase UID), email address, sign-in method (e.g. Google) | Confirming who owns a license, managing registered devices, handling requests such as account deletion | Contract |
| Purchase | Google Play order ID and purchase token, product, purchase/refund status and time | Verifying your license, refunds, fraud prevention | Contract; legal obligation (keeping purchase records) |
| Device registration | A hash of a device identifier keyed with a server secret (the original is not stored), device model, app version, registration times, app integrity result (Play Integrity) | Enforcing the number of devices per license, fraud prevention | Contract |
| Server logs | IP address, request time and result — recorded automatically by our server platform (Google Cloud) | Operating and securing the Service, fixing faults | Legitimate interests |
| Support | Email address, name (if given), message content | Answering you, handling disputes | Contract; legitimate interests |
| Website logs | IP address, browser information, time and page — recorded automatically by our host (Cloudflare) | Providing and securing the website (blocking attacks) | Legitimate interests |
Payment methods and card details are handled by Google; we never receive them.
4. How long we keep it
- Account and device data: until you delete your account. We delete it within 10 days of a deletion request.
- Purchase and refund records: 5 years; complaint and dispute records: 3 years, as required by Korean e-commerce law. These are kept separately for that period even after account deletion, then destroyed.
- Support messages: 3 years after we answer.
- Server logs: 30 days. Website logs: per Cloudflare’s retention policy.
When a retention period ends or the purpose is fulfilled, we destroy the data without delay. Electronic files are deleted so they cannot be recovered; we do not keep personal information on paper.
5. Sharing
We do not sell your personal information or provide it to third parties, except where the law specifically requires it or authorities request it through legal procedures.
6. Service providers
| Provider | Role |
|---|---|
| Google LLC — Firebase, Google Cloud | Sign-in, storing account/license/device data, running our servers, app integrity checks (Play Integrity), verifying Google Play purchases |
| Google LLC — Gmail | Receiving and answering support email |
| Cloudflare, Inc. | Website hosting and security |
7. International transfers
| Recipient (contact) | Country | Data | When and how | Purpose / retention |
|---|---|---|---|---|
| Google LLC (support.google.com/cloud/contact/dpo) | USA. Servers and data are located in Korea (Google Cloud Seoul region), but Google may access them from abroad for operations and support, so we disclose this as a transfer. | Account, purchase, device and server-log data in section 3; support email | Over the network when you sign in or purchase in the app, or email us | Tasks in section 6 / periods in section 4 |
| Cloudflare, Inc. ([email protected]) | USA and other countries with Cloudflare data centres | Website logs | Over the network when you visit the website | Hosting and security / Cloudflare’s retention policy |
If you do not want your data transferred, you can choose not to sign in or purchase in the app; paid features will then be unavailable, but free features still work. Website logs are necessary to provide the website, so to avoid them you would need not to use the website.
8. Cookies and local storage
- We do not use cookies. Cloudflare may set strictly necessary cookies for security (blocking automated attacks).
- Your language choice on the website is stored only in your own browser (localStorage) and is not sent to us. Clearing site data in your browser removes it.
9. Automated checks
When verifying your license and registering devices, the app automatically checks purchase records and app integrity (Play Integrity). If such a check has refused you, you can ask us for an explanation or a review by a person using the contact below.
10. Your rights
- You can ask at any time to access, correct or delete your personal information, to restrict or object to its processing, to receive it in a portable format, or to withdraw consent.
- Email us at the contact below, preferably from the email address you signed in with so we can confirm it is you. A legal representative or someone you authorise can also make a request.
- We act within the period required by law (10 days for access, correction and deletion under Korean law) and tell you the outcome. If the law requires us to refuse or limit a request, we tell you why.
- You may also lodge a complaint with the data protection authority where you live.
11. Pseudonymised data
We do not process pseudonymised data.
12. Deleting your JONIVIEW account and data
You can delete your JONIVIEW account and associated data in either of these ways. Uninstalling the app alone does not delete your account.
- In the app: Settings → Account → Delete account
- By email: send an email with the subject “Delete JONIVIEW account” to [email protected] from the email address you signed in with. You can do this without the app installed.
- Deleted: your account (sign-in ID and email), device registrations, and the link between your account and your license.
- Kept: purchase and refund records for 5 years and dispute records for 3 years, as required by law, stored separately and then destroyed.
- Timing: we delete within 10 days of confirming your request and let you know.
- Deleting your account also removes the lifetime license on that account, and it cannot be restored. Google Play payment history is managed by Google.
13. Security
- Access to personal information is limited to our representative.
- Encryption in transit (HTTPS), least-privilege access, secrets kept in a dedicated secret-management service, device identifiers stored only as hashes, and no screen content, raw device identifiers or auth tokens in server logs.
- Data is stored in the secure data centres of Google Cloud and Cloudflare.
14. Children
The Service is not directed to children under 14 (or the minimum age in your country, if higher), and they cannot create an account. If we learn that we have collected such a child’s information, we delete it promptly.
15. Controller and contact
The controller of your personal information is LivingHits. Privacy officer: 김민겸 (representative) · [email protected]
16. Remedies in Korea
You can also seek mediation or advice from: Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr), Personal Information Infringement Report Center (118, privacy.kisa.or.kr), Supreme Prosecutors’ Office (1301, www.spo.go.kr), Korean National Police Agency cyber crime reporting (182, ecrm.police.go.kr).
17. Users outside Korea
- Legal bases: contract (account, purchase, device), legal obligation (keeping purchase records), legitimate interests (security, fraud prevention, logs, answering support requests).
- The European Union and the United Kingdom have adopted adequacy decisions for the Republic of Korea. Data transferred to US providers (Google, Cloudflare) is protected under each provider’s data protection terms (such as standard contractual clauses).
- We do not sell personal information or share it for targeted advertising.
18. Changes
We will announce changes on the website and in the app at least 7 days before they take effect, and at least 30 days before for significant changes to your rights, such as collecting new kinds of data.