ezHttps Privacy Policy
Mobsoft Co., Ltd. (the "Company") operates ezHttps (the "App") and complies with applicable data protection laws, including the Personal Information Protection Act of the Republic of Korea. This policy explains what information the App processes and why. If this English version differs from the Korean version, the Korean version prevails.
The App is distributed on Google Play by Enliple Co., Ltd. (developer name "포미션"). The Company is responsible for the personal information processed through the App. The App has no sign-up, login, advertising, or payment features.
1. Purposes
- Usage statistics and service improvement: counts of installs, launches and updates, use of the protection feature, connection check results, and usage by country and version
- Counting install sources (distribution channels)
- Providing App features: site name lookup (DNS) while protection is on, and connection checks
Statistics for purposes 1 and 2 are collected only if you agree in the notice shown when you first use the App. You can use the protection feature without agreeing, and you can withdraw your consent at any time in [Settings > Privacy] in the App.
2. Information we process
| Category | Items | How collected | Recipient |
|---|---|---|---|
| Usage statistics | Device identifier (a one-way SHA-256 hash of the Android ID, or of a random identifier created by the App if unavailable), client ID issued by the Company, App version, OS type, store, install source code | Sent automatically by the App after consent | Company server |
| Usage records | App install, launch and update; protection turned on (how it was turned on, protection level); days protection was on (once a day); connection check results; automatic method switch results; time of each record | Sent automatically by the App after consent | Company server |
| Connection information | IP address and the country derived from it | Recorded by the server when the above is sent | Company server |
| App analytics | App instance ID, Firebase installation ID, device information such as model, OS version and language, App version, automatically collected events such as first open, session start and engagement time, approximate location (country/city level) estimated from the IP address | Collected automatically by the Firebase SDK after consent | Google LLC (processor) |
3. Information we do not collect
The App does not send the following to the Company or to Google:
- Addresses of sites you visit (host names, URLs), browsing history, recent connection list
- Contents of your internet traffic
- List of installed apps, or apps you include in or exclude from protection
- Target or excluded site lists, DNS addresses you enter, connection check targets
- Advertising ID, name, email, phone number or other contact details, precise (GPS) location
4. Network communication needed for App features
The App performs protection on your device and does not send or relay your internet traffic through the Company's servers. The following communication happens to provide features; the Company does not receive or store its contents.
- Site name lookup (DNS): while protection is on, the names (domains) of sites you visit are sent over an encrypted connection (HTTPS) to the DNS server you chose in Settings (Cloudflare, Google, or an address you enter). That DNS operator's privacy policy applies.
- Connection check: when you tap [Check connection], the App makes one test connection to a site that recently failed to load (or a public test address if none).
- While protection is on, the device's DNS server may be set to Google Public DNS (8.8.8.8, 8.8.4.4).
The App uses Android's VpnService to create a virtual network that runs only on your device. It does not connect to a remote VPN server.
5. Retention
| Information | Retention |
|---|---|
| Usage statistics, usage records and connection information on the Company server | Deleted 1 year after collection. Aggregated statistics that cannot identify individuals may be kept without a time limit. |
| App analytics (Google Analytics) data | Deleted according to the Google Analytics retention setting (up to 14 months) |
| Settings and recent connection list on the device | Never leave the device; deleted when the App is uninstalled |
6. Sharing and processors
The Company does not provide your personal information to third parties. The Company uses the following processor for App usage analytics.
| Processor | Task | Items | Retention |
|---|---|---|---|
| Google LLC (Firebase, Google Analytics) | App usage analytics | App analytics items in section 2 | As in section 5 |
7. International transfer
| Recipient | Google LLC (contact: https://policies.google.com/privacy) |
|---|---|
| Countries | United States and other countries where Google operates data centers |
| When and how | While you use the App after agreeing to statistics collection, sent over HTTPS as events occur |
| Items | App analytics items in section 2 |
| Purpose and retention | App usage analytics; as in section 5 |
| How to refuse | Do not agree in the App's statistics notice, or withdraw in [Settings > Privacy]. Nothing is sent, and protection still works. |
8. Deletion
Information is deleted without delay when the retention period ends or the purpose is achieved. Electronic files are deleted in a way that cannot be recovered.
9. Your rights and data deletion requests
You may request access to, correction, deletion, or suspension of processing of your personal information at any time. ezHttps (developer: 포미션) has no accounts, so please use the following steps.
- Withdraw your consent in [Settings > Privacy] in the App. No statistics are sent after that.
- To delete information already sent, email the privacy officer in section 12 with the subject "ezHttps data deletion request", your device model, and the approximate date you installed the App. We may ask for additional information to confirm your device.
- Within 10 days of receiving your request, the Company deletes the usage statistics, usage records and connection information on its server and that device's data in Google Analytics, and lets you know.
Data deleted: usage statistics, usage records, connection information and app analytics data listed in section 2. Data kept: only aggregated statistics that cannot identify individuals. Uninstalling the App deletes all information stored on the device; information already sent is deleted after the period in section 5 even without a request.
10. Security
- Administrative: internal management plan and regular staff training
- Technical: encryption in transit (HTTPS), access rights management, access control
- Physical: restricted access to server rooms and storage
11. Children
The App is not directed at children under 14, and we do not knowingly collect their personal information.
12. Privacy officer
| Role | Name | Phone | |
|---|---|---|---|
| Privacy officer | Geunyoung Park | ky.park@tappstore.com | +82-70-4672-2303 |
13. Changes
We will announce changes to this policy on this page and in the App at least 7 days before they take effect.