Privacy
Privacy Policy
PaperDay ("the app") is an Android and iOS app made by CarrotSoftClan ("we"). This policy sets out what information the app handles, and how.
Signing in is optional. If you do not sign in, what you write stays on this device.
Weather, however, is on by default. Even without signing in, from first launch an approximate location rounded to a grid of about 11 km is sent through our server to a weather provider. You can turn it off in settings — see 4(a).
The app is free and shows ads, and you can buy Remove ads and the sync subscription inside it.
1. What we handle, and why
| Category | What | Why |
|---|---|---|
| Account (when you sign in) | The user identifier from the sign-in service you chose, your email address, and whether it is verified | To recognise your account and link your devices |
| Linked devices (when you sign in) | Device name and platform | To show them on the app's "Linked devices" screen |
| Synced content (while subscribed to sync) | Everything you write in the app (alarms, to-dos, subscriptions, contracts, medication, anniversaries, daily routine, timetable, diary) and the photos you attach to diary entries | To keep the devices you sign in on in step |
| Location (on by default, can be turned off) | Coordinates rounded to a grid of about 11 km, and your IP address. If you do not grant location permission, the capital city of your holiday country is used instead | The weather strip on the home screen |
| Advertising (while ads are shown) | Advertising identifier, device information, interactions with ads | To show ads |
| Purchases (when you subscribe) | The result of validating a store receipt — whether ads are removed, and when the subscription expires | To confirm subscription status |
| Support enquiries (when you write to us) | Subject, message, our reply, and diagnostic information if you choose to send it | To answer you |
We neither receive nor store your payment details. Payment is handled by Google Play or the App Store; what our server receives is only whether a subscription is valid and until when.
2. If you do not sign in — it stays on your device
Without signing in, your alarms, to-dos, subscriptions, contracts, medication, anniversaries, daily routine, timetable and diary are stored only on this device, in this app's storage area.
- Android: we have explicitly disabled Android's automatic cloud backup and device-to-device transfer. App data is not backed up to your Google account.
- iOS: app data is stored in the app's documents area and may be included in an iCloud device backup if you have that turned on. See 4(f).
- Photos attached to diary entries are not copied by the app. It remembers where a chosen photo lives and reads it when it needs to draw it; the original stays in your photo library. The app does not read your whole photo library and does not touch photos you did not choose. If you use sync, however, the actual bytes of those photos are sealed and uploaded to the server — see 4(b).
- The app does not ask for whole-device storage access or camera permission.
3. Permissions the app asks for
a. Android
| Permission | Used for |
|---|---|
| Internet · network state | Signing in, sync, weather, ads, confirming subscription status |
| Approximate location | The weather strip on the home screen. The app works without it — it then shows the weather for the capital of your holiday country |
| Advertising ID | Showing ads (AdMob) |
| In-app billing | Buying Remove ads and the sync subscription |
| Notifications | Showing alarm, medication, payment-date and expiry notifications |
| Full-screen notifications | Showing the alarm full-screen over the lock screen |
| Exact alarms | Scheduling alarms to fire exactly at the time you set |
| Run at restart | Re-registering scheduled alarms after the device is switched off and on |
| Wake lock · foreground service | Keeping sound and screen going while an alarm rings |
| Vibration | Alarm and notification vibration |
| Display over other apps | Showing the alarm screen while you are in another app |
| Read · write calendar | Used only when you turn on the optional "device calendar sync". Not requested at first launch. See 4(d) |
| Biometrics | App lock (fingerprint, face). Authentication happens on the device and biometric data is never passed to the app |
b. iOS
On iOS you are asked at the point of use.
| Item | Used for |
|---|---|
| Notifications | Showing alarm, medication, payment-date and expiry notifications |
| Location | The weather strip on the home screen. The app works without it |
| Calendar | Used only when you turn on the optional "device calendar sync". See 4(d) |
| Photos | Attaching a photo to a diary entry. Only the photos you choose; never the whole library |
| Face ID · Touch ID | App lock. Authentication happens on the device and biometric data is never passed to the app |
4. When information leaves your device
a. Weather (on by default, can be turned off)
For the hourly weather on the home screen, the app asks our server (pd-api.carrotsoftclan.com). This is on by default and runs from first launch.
- What leaves is coordinates rounded to a grid of about 11 km (0.1°) and your IP address. Your precise location does not leave the device.
- If you do not grant location permission, the capital city of your holiday country is used instead.
- Our server passes those coordinates to the weather provider Open-Meteo, and uses them only as a key for reusing a response for a short time.
- A single "Weather" switch in settings turns it off.
b. Signing in and syncing (optional)
When you sign in, the account information in section 1 is stored on our server. With the sync subscription, what you write in the app and the photos you attach are sent to and stored on our server, so the devices you sign in on show the same content.
It is encrypted in transit over HTTPS, and it is stored sealed on the server.
The sealing key is issued per account by our server, and the devices you sign in on download it to use.
c. Advertising (on by default)
The app shows banner and interstitial ads from Google AdMob. The advertising SDK may send your advertising identifier and ad interactions to Google.
- No ads are shown once you buy Remove ads, or for as long as a sync subscription is active.
- In the European Economic Area and the UK you are asked for consent to personalised advertising before the first ad; refusing does not stop you using the app. You can reopen the choice under "Privacy options" in settings.
d. Device calendar sync (optional, off by default)
With this on, an entry's title, time, repeat rule and place are written to the device calendar you choose. Notes and details are not written.
If you choose a calendar that syncs — a Google account calendar, say — that account's own sync moves the content off your device. That transfer is performed by the operating system and that service, not by this app, and what happens afterwards follows that provider's privacy policy. Choose a local, device-only calendar and nothing leaves the device.
- Because medication is health information, it can be turned off separately from the other kinds.
- Turning the feature off stops further writing. Entries already in the calendar stay there for you to clear.
e. Exporting a backup or calendar file (only when you run it)
Running an export writes the app's data and your diary photos into a single file, and you choose where it is saved.
The backup file is sealed so that it cannot simply be read. If you want stronger protection you can put a password on it.
If you forget that password, there is no way to open the backup. We do not keep a copy of it, so we cannot open the file for you.
- Choose a folder on the device and the file stays on the device.
- Choose a cloud document provider (a drive, say) and it is stored with that provider. What happens afterwards follows that provider's policy.
- A calendar file (.ics) export is not sealed, because other calendar apps have to read it.
f. iOS device backup (iCloud)
On iOS, app data may be included in an iCloud device backup if you have that turned on. This is the standard backup iOS provides for installed apps, and it goes to your own iCloud account. We cannot access that backup.
- To exclude it, go to Settings > Apple Account > iCloud > Backup on iOS.
- On Android the equivalent automatic backup is already disabled by the app — see section 2.
5. Third parties, processors and transfers abroad
| Who | What reaches them |
|---|---|
| Google (AdMob) | Advertising identifier, device information, ad interactions |
| Google Play · Apple App Store | Payment processing. We do not receive your payment details |
| Google · Facebook (Meta) · Kakao · LINE · Apple | Authentication for the sign-in route you choose. That service tells us your user identifier and email address |
| Open-Meteo | The grid-rounded approximate coordinates, for the weather lookup |
The Facebook sign-in component (SDK) contacts Meta's servers for app configuration when the app starts, even if you never use Facebook sign-in. That behaviour cannot be turned off, so we state it here. Its automatic event logging and advertising-identifier collection are switched off by us.
Where a party above is located outside your country, the information needed for that specific function is transferred to the country where that provider's servers are. If you would rather it were not, you can leave the corresponding feature unused (signing in, weather, buying Remove ads) or stop using the app.
6. Retention and deletion
- If you never signed in — everything is on the device only, so deleting it in the app removes it at once, and uninstalling the app removes it with the app.
- Deleting your account erases from the server your account, sign-in identities, device list, sign-in tokens, subscription records, everything you had synced including photos, and the sealing key. Do it in the app under More → Profile → Delete account; see the data deletion instructions. What is on this device is not deleted.
- Ninety days after a sync subscription expires we delete that account automatically, without waiting for a request. If you never subscribed there is no expiry date to count from, so this clock never starts — deleting the account in the app is then the only way.
- Access and error logs remain with the link to your account removed, and are physically deleted after 30 days.
- Support enquiries you sent remain, with the link to your account removed.
- Files you exported under section 4, entries written to a calendar, and copies inside an iOS device backup stay where they are; you clear those yourself.
7. Your rights
You can read, correct and delete what you have written at any time inside the app. You can also delete your account and the content stored on the server from inside the app (section 6); if you cannot use the app, write to contact@carrotsoftclan.com. You also have the right to request access to, and to object to or restrict, the processing described here — write to the same address and we will act on it under applicable law.
8. Children
This app is intended for people aged 18 and over. We do not knowingly collect personal information from children under 14, and if we learn that we have, we destroy it without delay.
9. Contact
- Business name: CarrotSoftClan (캐럿소프트클랜) · Owner Kim Gwanbin · Business Registration No. 339-77-00517
- Address: 208-3-60, 2F, 165 Hakdong-ro, Gangnam-gu, Seoul, Republic of Korea
- Data protection officer: Kim Gwanbin
- Email: contact@carrotsoftclan.com
10. Changes to this policy
This policy may be revised as the law or the app changes; any revision is announced on this page.
Revised September 9, 2026 — revised throughout to reflect the introduction of accounts, syncing across devices, weather, advertising and in-app purchases. The previous version (effective August 15, 2026) remains available here.