Jari — Privacy Policy

01 Who we are

Jari is built and operated by Pinekey, an independent mobile app studio, and is the data controller for the information described here. For any privacy question or request, contact pinekey.dev@gmail.com.

Privacy officer: Byunghun Lee (이병훈) — pinekey.dev@gmail.com.

02 Information we collect

• Anonymous guest identity. A device identifier (Android ID on Android, identifierForVendor on iOS) is sent to create an anonymous "guest" account. On our server it is stored only as a one-way hashed value — no name, email, or phone number is required to join a queue.
• Queue information. When you join a queue, your party size and a nickname are collected. The nickname and party size are shown to the store and to other waiting customers in that queue.
• Notifications. A push token (Firebase Cloud Messaging) so we can alert you when your turn is near.
• Optional account. If you choose to create an account with email or Google/Apple sign-in, we collect your email and a nickname. (The apps use anonymous guest mode by default.)
• Running a queue. There is no separate "store owner" account — one account can both run its own queues and wait in other people's. If you create a queue, its name (whatever you choose to call it, e.g. your store name) is stored and shown to everyone who scans that queue's QR code. We do not collect any business registration, owner phone number, or other business records.

What we do not collect

Jari does not collect your location/GPS, contacts, photos, or microphone. The camera is used solely to decode QR codes on your device — on Android by Google ML Kit's bundled on-device model, on iOS by Apple's built-in AVFoundation decoder. Either way the video never leaves your phone: camera images are never stored or uploaded.

The app may ask for permission to add to your photo library. This is write-only, and it is used for exactly one thing: saving your own queue's QR-code image to your gallery so you can print or share it. Jari never reads, browses, or uploads your existing photos.

03 How your data is stored

• Your queue and account data are stored in our PostgreSQL database on a server we operate on Amazon Web Services (AWS) in South Korea (Seoul region). Device identifiers are stored only as one-way hashes; passwords as hashes.
• Data is transmitted over encrypted HTTPS (jari-api.pinekey.io).
• On your device, your session tokens are stored locally.

Retention and deletion

You can delete your account from inside the app. Open the app, go to the profile screen, and choose 회원탈퇴 (Delete account). This is a permanent, immediate deletion on our server, not a deactivation, and it cannot be undone.

What is erased immediately, by database cascade:

• Your account record itself, and your login identities (guest device hash, email, Google, Apple) together with any stored password hash.
• Your push notification tokens.
• Any queue you own, along with its daily counters and every waiting record inside it.
• Your points, purchase and subscription records, if any exist.

One thing is detached rather than deleted, and we want to be precise about it: a waiting record you created in someone else's queue is kept as part of that store's own history of its day. Your account link is erased from it, so it can no longer be traced back to you — but the nickname and party size you typed when joining remain on that store's record. If you would rather not leave a recognisable nickname behind, use a nickname you are comfortable with when you join a queue.

If you cannot reach the in-app option — for example you have uninstalled the app already — email pinekey.dev@gmail.com and we will delete it for you.

Because a guest account is tied to an anonymous device identifier, uninstalling the app also removes that identity from your device. Uninstalling alone does not delete the server-side record — use the in-app deletion above for that.

04 Third parties

Jari relies on the following third-party services. There are no advertising networks, and we do not sell your data.

Service	Purpose	Data involved
Firebase Cloud Messaging	"Your turn" push notifications — iOS and Android	FCM device token
Firebase Crashlytics	Crash diagnostics — iOS and Android	Crash reports, device model and OS version, session data
Firebase Analytics	Usage analytics — Android only (not included in the iOS app)	Automatic app events (app open, screen view), device info
Google ML Kit (on-device)	QR-code decoding — Android only. The iOS app uses Apple's built-in AVFoundation decoder instead.	None — processed on your device
Google / Apple Sign-In	Optional login. These are the only two sign-in providers.	Email (only if you sign up)
Google Play / App Store Billing	In-app purchases (not yet active)	Purchase receipts, when enabled
Amazon Web Services	Hosting — our server (Seoul)	All queue and account data

These services process data under their own privacy policies (for example, Google's and Apple's).

05 Children's privacy

Jari is a general-audience utility for joining store queues and is not directed to children. We do not collect a birth date and do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

06 Changes to this policy

Jari is a new service, and this policy may change as the app is launched and evolves. Updates will be reflected on this page with a new "Last updated" date.

07 Contact

Questions or requests: pinekey.dev@gmail.com. To delete your account, the fastest route is the in-app option described in Retention and deletion.