Privacy Policy
[입력 필요: 운영자 상호 / Operator name] ("we") runs the TiniaCode website, accounts and payments, and collects only what we need to do that. This policy follows the EU General Data Protection Regulation (GDPR) and Korea’s Personal Information Protection Act (PIPA). It explains what we collect and why, how long we keep it, and the rights you have.
At a glance
- Just visiting? We collect no personal data. We only count daily totals, without cookies or identifiers.
- We only take your email when you type it in and give consent. Every email has an unsubscribe link.
- Card payments are handled by Lemon Squeezy. We never see or store your card number.
- Notes and messages synced through your account are stored on our server only as copies encrypted on your device.
- IP addresses are used in memory only to stop abuse, and are never saved.
1. What we process and why
| When | Data | Purpose | Basis (GDPR) |
|---|---|---|---|
| Update news or release alert sign-up | Email, language, sign-up source, time of consent, unsubscribe token | Emailing new-version news, or an alert when a build for the OS you asked about is out | Consent (Art. 6(1)(a)) |
| Send link to my PC | Email, language, time of consent, unsubscribe token | Emailing the download link you asked for from your phone | Consent (Art. 6(1)(a)) |
| Team inquiry | Company name, contact email, expected seats, message, language | Replying with a quote or onboarding help | Steps prior to a contract (Art. 6(1)(b)) |
| Creating an account and signing in | Email, name, nationality (optional), credentials derived from your password, account ID, registered device names, account recovery answers (encrypted) | Sign-in, device management, checking your Pro entitlement | Contract (Art. 6(1)(b)) |
| Using account features | Encrypted copies of notes, messages and sync data (we cannot read the contents) | Built-in messenger collaboration, multi-device data sync | Contract (Art. 6(1)(b)) |
| Buying Pro | Account ID, order and subscription IDs, payment status, amount and date, the email used at checkout, customer portal link | Activating, renewing and refunding Pro | Contract (Art. 6(1)(b)) |
| Browsing the site | Anonymous daily totals (e.g. "3 downloads today") | Understanding visits and downloads | Legitimate interests (Art. 6(1)(f)) |
| Every request | IP address (in memory only, never stored) | Blocking excessive requests | Legitimate interests (Art. 6(1)(f)) |
Account data is encrypted with a key unlocked by your password. If you lose both your password and your security-question answers, we cannot recover the data either.
Core (free) works without an account; the work history and notes inside the app stay on your device. The AI agents the app runs (Claude Code, Codex CLI and others) operate under their providers’ own terms and privacy policies.
2. How long we keep it
- Update news and link emails: until you unsubscribe or ask us to delete them. After you unsubscribe we keep only the address and the time, so we never email you again; ask and we delete that too.
- Team inquiries: 1 year after the conversation ends.
- Email delivery log (recipient, type, subject and result — never the body): 1 year.
- Account data and encrypted content: until you delete your account.
- Payment records: 5 years from the payment date, to handle refunds and disputes. Lemon Squeezy, as the seller, keeps its own tax and transaction records as the law requires.
- Anonymous totals: these are numbers that identify no one, so we may keep them as statistics.
When a retention period ends or the purpose is fulfilled, we delete the data without delay, in a way that cannot be restored. We do not keep paper records.
5. Your rights
You can ask to access, correct or delete your data, ask us to stop processing it, and withdraw consent at any time. Where the GDPR applies, you also have the right to restrict processing, to data portability, and to object.
- To stop emails: click the unsubscribe link at the bottom of any email. It takes effect immediately.
- Anything else: write to [입력 필요: 연락 이메일 / Contact email]. Once we verify it’s you, we respond within 10 days (within one month under the GDPR).
- Withdrawing consent does not affect processing that happened before.
- You can also make a request through a legal representative or someone you authorise.
6. How we protect it
- Every page and account connection is encrypted with HTTPS/WSS.
- Data synced through your account is encrypted on your device before upload; the server only holds encrypted copies.
- Operational data files are readable by the operator only, and the admin console sits behind separate authentication.
- We only act on payment notifications whose signature from the payment provider checks out.
- Access is limited to the operator, keeping the number of people who handle personal data to a minimum.
7. Children
We do not knowingly collect data from children under 14 (or, where the GDPR applies, under the age set by your country). If we learn that we have, we delete it right away.
8. Privacy contact
- Controller: [입력 필요: 운영자 상호 / Operator name] (Representative: [입력 필요: 대표자 / Representative])
- Privacy officer: [입력 필요: 개인정보 보호책임자 / Privacy officer] · Email: [입력 필요: 연락 이메일 / Contact email]
- Address: [입력 필요: 사업장 주소 / Business address]
- EU representative: [입력 필요: EU 대리인(해당 시) / EU representative, if any]
If you need help with a privacy concern, you can also contact the bodies below. If you live in the EU or the UK, you can lodge a complaint with your local data protection authority.
- Personal Information Dispute Mediation Committee (Korea): +82 1833-6972 (kopico.go.kr)
- Privacy Infringement Report Center (KISA): 118 within Korea (privacy.kisa.or.kr)
- Supreme Prosecutors’ Office: 1301 within Korea (spo.go.kr)
- Korean National Police Agency: 182 within Korea (ecrm.police.go.kr)
9. Changes to this policy
If we change this policy, we post the update on this page 7 days before it takes effect (30 days for changes that work against you). Previous versions are available on request.