haruchi Privacy Policy
This is a translation. If it differs from the Korean original, the Korean original applies.
Effective date: October 14, 2026
Park Chan-bin (the "operator"), who operates haruchi (getharuchi.com, hereinafter "haruchi"), establishes this policy to protect users' personal information and promptly address related complaints in accordance with the Personal Information Protection Act of Korea.
At a glance
- Goals, events, and study records are stored only on your device (browser) and are not sent to us.
- We do not use account registration, cookies, advertising, or visitor analytics tools.
- The personal information we directly review consists of inquiry emails sent to help@getharuchi.com.
- Cloudflare processes connection information (such as IP addresses) when delivering the site. We do not store individual access logs and only view aggregate visit figures in the Cloudflare dashboard.
1. Personal information processed: categories, purposes, legal bases, and retention periods
We process only the minimum personal information necessary for the purposes below. All personal information below is processed without the data subject's consent, on the legal bases stated in the table. We do not process any personal information on the basis of consent.
| Category | Information | Purpose | Legal basis | Retention period |
|---|---|---|---|---|
| Inquiry emails | Email address, name (if provided), inquiry content, and attachments | Reviewing and responding to inquiries | Article 15(1)4 of the Personal Information Protection Act of Korea (performing a service contract and taking steps at the data subject's request in the process of entering into a contract), and Article 15(1)6 (legitimate interests in responding to inquiries received and referring to previous inquiries about the same matter) | 30 days from the date we finish responding (to refer to the inquiry if you contact us again about the same matter). If you request deletion before then, we delete it without delay |
| Connection information | IP address, browser information (User-Agent), requested URL, and access time | Site delivery and security, including blocking attacks | Article 15(1)4 and 6 of the same Act (legitimate interests in providing the service and maintaining security) | We do not store this information. Cloudflare processes it under its own privacy policy for as long as necessary to provide its services and meet legal obligations, and does not disclose specific periods |
- We do not collect personal information other than the categories above.
- haruchi is not a service primarily intended for children under 14, and we do not operate a separate procedure for collecting children's personal information. We do not verify or collect users' ages.
- We do not request unique identification information, such as resident registration numbers, or sensitive information, such as health information. Please do not include such information in inquiry content or attachments. If information unnecessary for handling an inquiry is included, we delete it without delay.
2. Information stored only on your device
haruchi stores plans and settings in your browser storage (localStorage). This information is not sent to us, and we cannot view, recover, or delete it on your behalf. There is no set automatic deletion period. It remains until you delete it or your browser clears the site data.
| Stored information | Storage location (name) | How to delete it |
|---|---|---|
| Goals, topics, events, study records, and available study time for each day of the week | Browser storage (haruchi:v1) | Use "Erase all records" in haruchi settings, or delete this site's data in your browser |
| Language, screen theme, overall event view mode, and guidance already viewed | Browser storage (haruchi:lang, haruchi:theme, haruchi:overview, haruchi:hints) | Delete this site's data in your browser |
| App files for opening the app without an internet connection | Browser cache (service worker) | Delete this site's stored data and cache in your browser settings. Removing only the home screen app may leave browser data behind |
| Plan files and calendar files you export | A location you choose | You manage these yourself |
Deleting browser data deletes the records stored in that browser. Records do not transfer automatically when you change devices. To use them on another device, save a plan file using "Export to file" in settings, then import it on the new device.
3. Procedures and methods for destroying personal information
- We destroy personal information without delay when its retention period ends or its processing purpose has been fulfilled.
- We delete inquiry emails from the Gmail mailbox and then permanently delete them from the trash. Copies remaining in Google's systems are deleted under Google's deletion policy (see 6 below).
- We do not keep personal information in paper documents.
4. Disclosure of personal information to third parties
We do not disclose users' personal information to third parties, except where specifically provided for by law.
5. Outsourcing of personal information processing
| Recipient (processor) | Outsourced tasks |
|---|---|
| Cloudflare, Inc. | Site delivery and security, inquiry email delivery (Email Routing) |
| Google LLC | Inquiry email storage (Gmail) |
The Customer Data Processing Addendum (Customer DPA) we have entered into with Cloudflare sets out matters such as prohibiting processing for purposes other than the outsourced tasks, safeguards, and management of subprocessors. Inquiry emails are stored in the operator's personal Gmail account, to which Google's Terms of Service and Privacy Policy apply. We have not entered into a separate agreement with Google for outsourced processing of personal information. If a processor changes, we promptly update this policy.
6. Overseas transfers of personal information
We transfer personal information overseas for the tasks in 5 above. The forms of transfer are outsourced processing and storage. The legal basis is Article 28-8(1)3(a) of the Personal Information Protection Act of Korea. These transfers constitute outsourced processing and storage of personal information necessary to enter into and perform a service contract, and we disclose the matters specified in paragraph 2 of the same Article in this policy.
| Recipient and contact details | Destination countries | Information transferred | Timing and method of transfer | Purpose and retention period |
|---|---|---|---|---|
| Cloudflare, Inc. dpo@cloudflare.com 101 Townsend St., San Francisco, CA 94107, USA | Transmission: locations near the user among the countries and regions with Cloudflare data centers listed after this table Logs: Cloudflare data centers in the United States and Europe (Cloudflare does not separately disclose the countries within Europe, so this may be any of the European countries in the list below) | Site delivery: IP address, browser information, requested URL, and access time Inquiry email delivery: sender address, recipient address, subject, body, attachments, and delivery status | Transmitted over the network when you access the site or when an inquiry email is received | Site connection information: site delivery and security. Cloudflare retains it for as long as necessary under its own policy and for legal obligations, and does not disclose specific periods. We do not store individual access logs Inquiry emails: email delivery. Bodies and attachments are not stored; sender addresses, recipient addresses, subjects, and delivery status logs are retained for 31 days |
| Google LLC https://support.google.com/policies?p=privpol_privts 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA | Locations selected by Google in the United States, Chile, Uruguay, Belgium, Denmark, Finland, Germany, Ireland, the Netherlands, the United Kingdom, Japan, Singapore, or Taiwan (based on Google's data center list as of October 2026: https://datacenters.google/locations/) | Entire inquiry emails (email address, name, content, and attachments) | Transmitted over the network when an inquiry email is received | Inquiry email storage. 30 days from the date we finish responding. After we delete an email, deletion from Google's systems typically takes about 2 months, and copies may remain in backups for up to 6 months (Google's data retention policy) |
Countries and regions with Cloudflare data centers (based on https://www.cloudflare.com/network/ as of October 14, 2026, excluding the Republic of Korea): Albania, Algeria, Angola, Argentina, Armenia, Australia, Austria, Azerbaijan, Bahrain, Bangladesh, Barbados, Belarus, Belgium, Bhutan, Bolivia, Botswana, Brazil, Brunei, Bulgaria, Burkina Faso, Cambodia, Cameroon, Canada, Chile, Colombia, Costa Rica, Croatia, Cyprus, Czechia, Côte d’Ivoire, Democratic Republic of the Congo, Denmark, Djibouti, Dominican Republic, Ecuador, Egypt, Estonia, Ethiopia, Fiji, Finland, France, French Polynesia, Georgia, Germany, Ghana, Greece, Grenada, Guam, Guatemala, Guyana, Honduras, Hong Kong, Hungary, Iceland, India, Indonesia, Iraq, Ireland, Israel, Italy, Jamaica, Japan, Jordan, Kazakhstan, Kenya, Kuwait, Kyrgyzstan, Laos, Latvia, Lebanon, Lithuania, Luxembourg, Macao, Madagascar, Malaysia, Maldives, Mauritius, Mexico, Moldova, Mongolia, Mozambique, Namibia, Nepal, Netherlands, New Caledonia, New Zealand, Nigeria, North Macedonia, Norway, Oman, Pakistan, Palestinian Territories, Panama, Paraguay, Peru, Philippines, Poland, Portugal, Puerto Rico, Qatar, Romania, Russia, Rwanda, Réunion, Saudi Arabia, Senegal, Serbia, Singapore, Slovakia, Slovenia, South Africa, Spain, Sri Lanka, Suriname, Sweden, Switzerland, Taiwan, Tajikistan, Tanzania, Thailand, Trinidad & Tobago, Tunisia, Türkiye, Uganda, Ukraine, United Arab Emirates, United Kingdom, United States, Vietnam, Zambia, Zimbabwe. Data centers in mainland China are available only through a separate subscription (China Network) for customers on an Enterprise plan, which haruchi does not use.
If you do not want overseas transfers, you can refrain from sending inquiry emails. In that case, you cannot make inquiries by email. Site access must go through Cloudflare, so you cannot use haruchi if you refuse overseas transfers of connection information.
7. Rights of users and legal representatives and how to exercise them
- You may request access to, correction or deletion of, or suspension of processing of your personal information held by us (inquiry emails) by contacting help@getharuchi.com.
- After verifying that the requester is you or an authorized representative, we provide access or notify you of the outcome of correction, deletion, or suspension of processing within 10 days of receiving the request. If we restrict or refuse a request on grounds provided by law, we notify you of the reasons and how to object within the same period. If you disagree with the outcome, you may request a further review at the same email address.
- You may also make requests through a representative. The representative must submit a power of attorney using attached Form No. 11 of the Korean Notice on Methods of Processing Personal Information.
- The legal representative of a child under 14 may also request access to, correction or deletion of, or suspension of processing of the child's personal information. Minors aged 14 or older may exercise their rights directly or through a legal representative. We may request the minimum documentation necessary to verify that the requester is the minor's legal representative.
- Requests for access may be restricted or refused under Article 35(4) of the Personal Information Protection Act of Korea, and requests for suspension of processing may be refused under Article 37(2) of the same Act.
- We do not hold information stored only on your device (2 above), so you can view, edit, and delete it yourself through haruchi and your browser.
8. Measures to safeguard personal information
- Administrative measures: only the operator handles personal information.
- Technical measures: users' plan data is not stored on our servers. The site is provided only over encrypted connections (HTTPS).
- Access control: the operator's account is the only account that can view inquiry emails.
- Encryption of inquiry emails while they are being delivered to us may vary depending on the settings of the sender's email service.
9. Installation, operation, and refusal of automatic collection mechanisms
- haruchi does not use cookies.
- Browser storage (2 above) keeps plans on your device and is not sent to us.
- You can prevent this site from storing data through your browser settings. In that case, plans will not remain on your device.
10. Personal information protection officer
| Name | Position | Contact |
|---|---|---|
| Park Chan-bin | Operator | help@getharuchi.com |
Inquiries, complaints, and requests for remedies relating to personal information are accepted at the contact address above. We respond within 5 days of receipt, excluding Saturdays, Sundays, and public holidays in the Republic of Korea. If we cannot complete the handling of a matter within that period, we provide an update on progress and an expected timeline. This response period does not extend the statutory deadlines for handling requests in 7 above.
11. Remedies for violations of rights
If you need advice or remedies regarding a personal information infringement, you may contact the following institutions.
| Institution | Phone | Website |
|---|---|---|
| Personal Information Dispute Mediation Committee | (without an area code) 1833-6972 | www.kopico.go.kr |
| Personal Information Infringement Report Center (KISA) | (without an area code) 118 | privacy.kisa.or.kr |
| Public Prosecution Service (공소청) | (without an area code) 1301 | www.spo.go.kr |
| Korean National Police Agency Cyber Crime Report System | (without an area code) 182 | ecrm.police.go.kr |
12. Changes to this policy
- This policy remains published at getharuchi.com/privacy.
- If we change its content, we announce the changes and effective date on this page and in haruchi. We announce changes materially affecting users' rights before they take effect. If compliance with laws or urgent protective measures makes advance notice difficult, we announce the changes and reasons immediately after making them.
- When changing important matters, such as the categories of information processed or the purposes of processing, we also publish a table comparing the provisions before and after the changes side by side.
- When adding features through which we will receive personal information, such as login or synchronization between devices, we update this policy and provide notice before launching those features.
- Previous policies and the period during which each policy applied can be viewed on this page. Previous policies: none (first effective on October 14, 2026).
Supplementary provision
This policy takes effect on October 14, 2026.