Naekiro iOS Privacy Policy
Effective date: September 28, 2026
Operator: BathTime Studio (바스타임스튜디오)
Contact: getbathtime@gmail.com

1. Information stored in the app
Naekiro does not require an account. Recent songs, playlist names, saved song titles, video and thumbnail URLs, and semitone settings are stored in the app's private space on your device. Your last “Prefer backing tracks” setting and home song group are also stored on the device. This information is not sent to the operator's servers. The app does not provide its own cloud synchronization. iOS or iCloud device backups may include app data, subject to your Apple backup settings and policies. Suggestions and thumbnails are temporarily cached in memory while the app runs. Chart song titles, artists, chart periods and refresh times are stored on the device for offline display.

App language and whether recent playback is recorded are also stored on the device. Turning recording off stops adding new history. Existing history can be cleared separately in Settings without changing your library.

When you choose to back up your library, playlist names, song titles, video and thumbnail URLs, and saved keys are exported to a document location you select. Audio, video files and recent history are not included. Backups are not encrypted and can be read by anyone with access to that location. A cloud document provider may transfer and store the file if you select that provider. Restore reads a file you select and adds its playlists to your library. Exported files survive app removal; delete them from the chosen storage location when no longer needed.

When you share a YouTube link from another app, the video identifier and receipt time are temporarily stored in a space shared only by Naekiro and its share extension. The item is removed after Naekiro reads it. Items older than 24 hours are removed without being searched. The extension does not send the link to a server.

2. Connections to external services
Search, suggestions, video playback and thumbnails connect directly to Google/YouTube and the relevant content servers. When you pause typing, suggestions may send part or all of the query before you press Search. Requests may include the query, selected video identifiers, and language/country settings corresponding to the app language. With backing search enabled, a localized backing keyword may be added to the query. Your IP address and request headers are transmitted in the course of internet communication. External services handle and retain information under their own policies.
Videos play on YouTube webpages in the in-app browser. The browser uses a temporary website data store managed by the app and does not import sign-in data from Safari or other apps. Page cookies may be used during the browser session. Key adjustment processes playing audio temporarily in device memory; this processing does not create audio files or send audio to the operator’s server. YouTube’s policies apply to service delivery and data processing within its webpages.
Google Privacy Policy: https://policies.google.com/privacy?hl=en

Refreshing Korean songs connects directly to TJ Media's public chart; refreshing Japanese songs connects to the JOYSOUND (XING) public chart. Requests include the chart type, period or public page address, but not your personal queries, playback history or playlists. Your IP address and request headers are sent to the respective servers. Pop recommendations are included in the app and require no chart request to display. Tapping a source or reference catalog link opens that website in an external browser.
TJ Media Privacy Policy: https://www.tjmedia.co.kr/terms?cate_cd=T01
JOYSOUND (XING) Privacy Policy: https://xing.co.jp/privacy

3. Optional usage analytics and advertising
Usage analytics is off by default. PostHog EU is used only after you agree in the first notice or Settings. Previous Firebase consent is not reused. To improve features and reliability, we measure app screens, search outcomes and result counts, actual playback time, key changes, saving and queueing songs, reuse of saved songs, and banner impressions or load failures. Events include app language/version/platform, debug/release build type, orientation, numeric or category values, event time and a random event ID. We do not send search queries, song titles or video URLs, playlist names, email addresses or audio as analytics events.
Events are sent over HTTPS to PostHog Inc.'s EU service in Frankfurt, Germany, with a random installation UUID created after consent. It is not linked to a login account or advertising ID. We do not enable automatic screen capture, session recording or person profiles. Internet communication transmits the IP address to the service, but location enrichment is disabled and the project's discard-IP setting is used. Pending events are held only in device memory. Turning analytics off stops sending and removes the local analytics ID and pending events. Previously sent server records are not immediately deleted. All practice features remain available without analytics consent.
Analytics data is processed under PostHog's service and project retention settings. Withdrawing consent or deleting the app does not automatically delete server records. Contact getbathtime@gmail.com for analytics access or deletion requests. Without an account, an email alone may not identify a particular installation's records; we will explain what can be located and the available procedure.
PostHog Privacy Policy: https://posthog.com/privacy
PostHog processing and EU hosting: https://posthog.com/docs/privacy
Builds without an analytics configuration state that no usage statistics are collected and send no events.

Google AdMob banners may appear on Home, below the portrait player controls and above the landscape player. Independently of optional usage analytics, the advertising SDK may process IP addresses and approximate location derived from them, app interactions, diagnostics and advertising/app/device-related identifiers for ad delivery, measurement and fraud prevention. No precise-location permission is requested. Google consent notices are provided where required; available choices can be reopened through Advertising privacy choices in Settings.
Google may process information on servers in other countries. Service-specific processing and retention follow Google's policies and the applicable consent and project settings. No account, payment or voice-recording feature, or contacts/location/microphone/camera permission has been added.
Google's use of information from partner apps: https://policies.google.com/technologies/partner-sites?hl=en

4. Retention and deletion
You can delete saved songs and recent history within the app. Choosing Delete App in Settings > General > iPhone Storage also removes app data; Offload App keeps it. Manage any remaining iCloud or computer device backups separately in their backup settings. Uninstalling also removes the app's data from your device. Clearing all data or uninstalling can erase saved playlists and should be your own choice. For information independently processed by external services, use those services' rights-request procedures.

5. Support inquiries
The contact screen only displays the support email address (getbathtime@gmail.com). The in-app form and automatic sending are disabled. Tapping the address lets you compose and send an email yourself in an external email app. Naekiro does not automatically attach app or iOS versions, playback history, your library or device identifiers.
The operator uses the email address and message you send to handle and answer your inquiry. Your chosen email service and the operator’s Gmail service process and store the email under their respective privacy policies.
Do not send passwords, identity documents or payment details. To request access, correction or deletion, contact the same support address. The operator deletes inquiry emails when the response and follow-up are complete, except where a legal retention obligation applies. Sending an inquiry is optional; search, playback and your library work without it.

6. Protection and contact
External app requests use HTTPS. Locally stored information is kept in the app's private storage. Send privacy questions or rights requests to BathTime Studio (getbathtime@gmail.com).