Privacy Policy

DONDOKHAM (the "Service") takes users' personal information seriously and processes only the minimum necessary. The core principle of the Service is that settlement data is stored only in users' Google Drive, and the operator's servers do not permanently store settlement data.

1. Personal Information We Process

• Basic Google account information: name, email address, profile photo, and account identifier (sign-in scopes: openid, email, profile)
• Google Drive file access (drive.file scope): limited to files the Service created or the user selected (connected). The Service does not access any other files in your Drive.
• Expense, participant, and share information the user enters in a settlement room, and receipt images attached to expenses (see Section 3 for storage location)
• Names (nicknames) and Google email addresses of other people the user registers in their friends list (stored as an app data file in the user's own Drive)
• An optional display name entered by the user (stored as an app data file in the user's own Drive)
• Optional settlement account details entered by the user (bank name and account number): visible to participants of the same room, with the account number stored encrypted in the room sheet. Users can delete it directly at any time, and bulk deletion can be chosen when archiving a room.
• Service usage statistics: visited page URLs and access environment (browser and device type) are aggregated anonymously without cookies (Vercel Web Analytics). No individual can be identified, and the data is used solely to improve the service.

2. Purposes of Processing

Collected information is used only for Google account authentication, creating and viewing settlement rooms, recording expenses and calculating settlements, and providing sharing features among participants.

3. Retention and Storage

• A room's data (expenses, participants, shares, and receipt images) is stored in the Google Drive of the person who created the room (the storage keeper). Information entered by invited participants is also stored in that keeper's Drive and can be viewed by participants of the same room.
• The storage keeper can be changed to another participant via the transfer feature in room settings, in which case the storage location moves to the new keeper's Google Drive.
• The friends list is stored as an app data file in the user's own Google Drive.
• If the storage keeper turns on guest view, part of the settlement data (participant names, expense entries with memos, and settlement results) is published as a passcode-locked file, and anyone with the view link and passcode can read it without signing in. Account information such as participant emails is not included, and turning guest view off immediately invalidates the link.
• Access tokens are used only in browser memory and are never stored permanently.
• The refresh token used to keep you signed in is encrypted and kept only in an httpOnly cookie in your browser; it is not stored on the operator's servers.

4. Third-Party Provision and Outsourcing

The Service does not sell or provide users' personal information to third parties. To operate the Service we use cloud hosting (Vercel) and Google APIs, and data may be transmitted and processed in the course of doing so.

5. Google API Data Use Disclosure (Limited Use)

The Service's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The Service uses Google user data only to provide the features described above, and does not use it for advertising or sell it to third parties.

6. Your Rights and Disconnecting

You can disconnect the Service from your Google account at any time in the settings screen. Even after disconnecting, settlement files stored in your Drive remain and can be deleted by you directly. You can also revoke the Service's access in your Google account settings.

7. Contact

Service operator: MOD PING
Inquiries about personal information handling can be sent to modping373@gmail.com.