Harumung Privacy Policy
90ms (“we”) respects the privacy of everyone who uses the Android and iOS app Harumung (the “app”). This policy explains what information the app handles, where it stays and how it is used.
1. Information we collect
The app has no sign-up or login, and we run no server that receives your information. Your records, special days, memos, daily reviews, pet and garden data and settings are stored only on your device and are never sent to us. We do not view, keep or share them.
The one exception: when the app crashes, the following crash report reaches us through Google’s Firebase Crashlytics so we can find and fix the cause. It never includes the records, memos or other content you enter.
- where in the code the error happened (stack trace) and the app’s state at that moment (app version, memory, orientation and similar)
- device information (model, OS version and similar)
- a Crashlytics installation identifier, used to count how many installs a crash affects; it does not identify you or your device
2. Ads and third-party services (Google AdMob)
The app is free and shows ads from Google AdMob. To serve and measure ads, Google may collect and process:
- device identifiers such as your advertising ID (the Android advertising ID or the iOS Identifier for Advertisers, IDFA), app set ID and the iOS identifier for vendors (IDFV), and device and app information (model, OS version, language and similar)
- your IP address and the approximate location derived from it
- how you interact with ads, such as views and taps
- diagnostic information about app and ad SDK performance, such as launch time and hang rate
Users in the European Economic Area, the UK, Switzerland and certain US states are asked for their choice through Google’s User Messaging Platform before any ad is requested. You can change that choice at any time in My records › Settings › Ad privacy choices. On Android you can also reset or delete your advertising ID in your device settings.
On iOS, the app asks for your permission through Apple’s App Tracking Transparency prompt before the IDFA can be used. Only if you allow it is the IDFA passed to Google, where it may be combined with information from other companies’ apps and websites for personalized ads and ad measurement (the App Store lists this as “Data Used to Track You”). Every feature works the same if you don’t allow it, and you can change your choice any time in Settings › Privacy & Security › Tracking on your iPhone or iPad.
See the Google Privacy Policy and How Google uses information from sites or apps that use its services.
3. Device permissions
- Calendar (optional; full calendar access on iOS): when you turn on external calendar sync, the app shows events from your device calendars and saves the records you choose to the calendar you pick. This happens on your device and nothing is sent to us. If that calendar syncs with an account such as Google Calendar, that service’s policy applies to the sync. On Android, if you tap Sync now or turn on automatic sync in Calendar connections, the app asks your device to sync that calendar account. On iOS, the app reads and writes the iCloud, Google and other calendars added to your device in the same way, on your device, and iOS handles the account sync.
- Notifications (with exact alarms and start at boot on Android): to deliver the record reminders, daily reflection and check-in reminders, morning briefing and evening preview you set on time, and keep them scheduled after a restart. Notifications are scheduled on your device and do not go through any server.
- Full-screen notifications (Android, optional): used only if you turn on the pet reminder screen.
- Internet and network state: to load ads, check your ad consent status and send the crash reports in section 1.
- App lock (optional): uses your device’s screen lock and biometric prompt (Face ID, Touch ID or your passcode on iOS). The app only learns whether you were verified and never accesses or stores fingerprints, face data or other biometric information.
- Add to Photos (iOS, optional): used only to save a keepsake card to your photo library. The app does not read your photos.
- Tracking (iOS, optional): asked so the IDFA in section 2 can be used.
- Siri and Shortcuts (iOS): when you say “Add a record to Harumung”, Apple turns your words into text and passes it to the app (Apple’s privacy policy applies), and the app saves that text as a record on your device.
- Share extension and widgets (iOS): text or links you share to Harumung from other apps, and the summary of today the widgets show, are kept in the app’s own storage on your device (an app group) for the app and widgets to read. Nothing is sent to us.
4. Backups
- File backup: a backup file you export is saved where you choose, and you control that file.
- Android backup: if Google backup is on for your device, the app’s data is included in your Google Account backup and kept under Google’s policies. We cannot access it.
- iOS backup: if iCloud Backup or a computer backup (Finder or iTunes) is on, the app’s data is included in that backup and kept under Apple’s policies or on your computer. We cannot access it.
- Saving and sharing images: a keepsake card you save goes to your device’s photo album, and a keepsake card or memo you share goes only to the app you choose. Nothing is sent to us.
5. Retention and deletion
App data is removed from your device when you delete it in the app or uninstall the app. Because we keep no user data, there is nothing for us to delete. Crash reports from section 1 are kept in Firebase for 90 days and then deleted. Information Google processes for ads is retained under Google’s policies.
6. Sharing
We do not share your personal information with third parties. Crash reports (section 1) are processed for us by Google LLC’s Firebase Crashlytics; when a crash happens they are sent over the network to Google’s servers, which may be in the United States or other countries, and kept for 90 days. Google also collects and processes information directly through the ad SDK in the app, as described in section 2, and it may be transferred to Google’s servers outside your country. In Google Play’s Data safety section, this information the ad SDK sends to Google is listed as “shared”, and in the App Store’s App Privacy section it is listed as data collected (with the device ID used to track you).
7. Children
The app is not directed to children under 13, and we do not knowingly collect information from them.
8. Your rights
All app data stays on your device, so you can view, edit and delete it directly in the app. You can change your ad choices as described in section 2. If you have questions, contact us below.
9. Contact
90ms
Email: harumung.app@gmail.com
10. Our website
The Harumung website (harumung.app) uses Cloudflare Web Analytics to count visits and see where visitors come from. It uses no cookies and collects no personally identifying information; Cloudflare counts only visit statistics such as the page address, the referring page, country, and browser and device type. The website has no ads, sign-up or forms that send information, and its demos (checking off to-dos, counting days) run only in your browser. Your entries in the app are not part of these statistics. Cloudflare handles this data under the Cloudflare Privacy Policy.
11. Changes
If this policy changes, we will post the new version on this page with its effective date. If the app adds features such as accounts or server backup that change what is collected, we will update this policy before those features are offered.