Privacy Policy
Arasaco ("we", "the company") respects your privacy. This policy explains what information BuddyRun ("the app") — the mobile application operated by the company — collects, how it is used, where it is stored, and how it is protected.
1. Information We Collect
1.1 Automatically Collected
- Lock session data: start/end time, duration, success/failure, virtual marathon distance, user-entered notes — stored on-device only. The virtual marathon distance is derived by multiplying elapsed lock time by a fixed speed; it is purely a visualization metric. The app does NOT use GPS, motion sensors, or any actual location data.
- Lock schedules: recurring lock plans you create (name, weekdays, start/end time, enabled state) — stored on-device only
- Installed app list: shown so you can pick "allowed apps". Never transmitted off-device
- App usage stats: read via Android Usage Stats API to detect blocked apps during a lock challenge. Never transmitted off-device
1.2 NOT Collected
- Personally identifiable info (name, email, phone)
- Location (GPS, IP geolocation)
- Contacts, call logs, messages
- Microphone, camera, photos
- Financial information
2. Purpose of Use
- Provide the lock-challenge feature (start, maintain, end)
- Show your past lock history on the stats page
- Trigger scheduled locks at the configured time
3. Storage Location and Retention
All data is stored exclusively on the user's device. Nothing is transmitted to any external server.
| Data | Storage Location (on-device) | Retention |
|---|---|---|
| Lock session records (time, duration, success, virtual distance, notes) | SQLite database | Until you delete the app or clear data |
| Lock schedules, allowed apps list | SQLite database | Until you delete the app or clear data |
| Schedule alarm metadata + reboot-recovery state (whether a lock is currently active, snapshot of allowed packages) | Native SharedPreferences (app-private) | Cleaned up automatically when the schedule/lock ends or when the app is uninstalled |
| User settings (theme, language, character, hat, palette, onboarding-completed flag) | Flutter SharedPreferences (app-private) | Deleted with the app |
Both the SQLite database file and the SharedPreferences directories are sandboxed by Android into the app-private storage area; no other app can read them (except on rooted devices).
4. Third-Party Sharing and Processors
We do not sell, share, or hand off your personal data to any third party. The app does not contact any analytics SDK, advertising SDK, or external server; all data stays on your device.
If a third-party processor is introduced in a future update (e.g., crash analytics, advertising, cloud backup), this policy will be updated and announced in the app or on this page at least 30 days before the change takes effect.
5. Permissions Used
- Display over other apps (SYSTEM_ALERT_WINDOW): Show the lock screen during a challenge
- Usage access (PACKAGE_USAGE_STATS): Detect blocked apps during a lock
- Query installed apps (QUERY_ALL_PACKAGES): Show app list for allowed-apps selection
- Reorder tasks (REORDER_TASKS): Bring the lock screen back to the foreground when a non-allowed app surfaces during a lock
- Exact alarms (SCHEDULE_EXACT_ALARM / USE_EXACT_ALARM): Start scheduled locks precisely at the configured time
- Foreground service (FOREGROUND_SERVICE_SPECIAL_USE): Maintain the lock until the user-set end time
- Notifications (POST_NOTIFICATIONS): Show lock progress notifications
- Boot completed (RECEIVE_BOOT_COMPLETED): Restore scheduled locks after a reboot
6. Your Rights
You may at any time:
- Delete all data in the app: uninstalling the app removes every lock record, note, and setting stored on the device. Because no external backup exists, deletion is irreversible.
- Contact us with any privacy questions: see below
7. Children's Privacy
This app is not directed at children under 14 and we do not knowingly collect data from children. Parents who become aware of such use should contact us at the email below for immediate deletion.
8. Changes to This Policy
If we change this policy, we will notify users at least 7 days before the effective date via in-app notice or this page. Material changes will be announced 30 days in advance.
9. Business Details & Contact
- Business name: Arasaco
- Representative: Kim Sangwoo
- Business registration number: 505-52-01124 (Republic of Korea)
- Email: hardyjumpit@gmail.com