Effective November 6, 2026 (revision announced October 29, 2026 — renames study groups to “mate groups” and adds the work timer to the status members can see (when you started it, and whether what you are running or ran most recently is study or work) · revised October 30, 2026 (effective the same day) — widens the friend invite event item into an events item that covers progress records for the Bana bunch 7 days, group and first-month-discount-during-the-free-trial events and records of App Store offer codes given, and reflects them in deletion on account deletion · revised November 3, 2026 (effective the same day) — adds Today’s cheer on Home (cheer lines that users send, of which the ones the operator picks are shown on other users’ Home with the sender’s nickname) and reflects it in deletion on account deletion · on the same day adds Auto-seat in the Study Lounge (while a study or work timer runs you appear as an anonymous character in the Study Lounge website run by the operator) and reflects it in deletion on account deletion · revised November 5, 2026 (effective the same day) — adds Study Lounge link (if you choose it when entering the lounge from the Groups tab, your nickname, gender and whether you are 14–18 are passed on, and study and work timers are kept in sync) and reflects it in deletion on account deletion · revised November 6, 2026 (effective the same day) — adds meal, sleep and break timer sync and your timer list (study and work item names) to Study Lounge link, and states that the name of what you are doing is also shown to other lounge users · revised November 7, 2026 (effective the same day) — stops storing reporters’ IDs on Community posts (they are kept only in the report records), adds when you first joined the school ranking from a school (so your school’s ranking opens one day later) and the group password attempt record (to stop excessive attempts), and reflects them in deletion on account deletion · revised November 11, 2026 (effective the same day) — adds to App usage records whether Simple mode is on and the days you used Edit entry and Add plan on the timeline (the last date and the number of days — not what you recorded or planned), and reflects them in deletion on account deletion · revised November 14, 2026 (effective the same day) — states that the operator (admin account) can see profile photos in the member list of the admin screen to run the Service, for example to check for inappropriate photos / earlier: October 31, 2026 (revision announced October 24, 2026 — adds study groups (group chat) between friends: the group, messages and the study status members can see, and reflects them in notifications, reports, usage counts, camera use, deletion on account deletion, information that may remain and file storage outsourcing · the school ranking is now shown to everyone who joined from the same school instead of the same grade (high school students no longer send a grade) · app usage records now include iPad use and Apple Watch app installation and last use times · adds a nickname change record (previous and new nickname and when it changed) · adds a deleted-member record (nickname, age group, gender, sign-up date and deletion time, kept for 1 year) · groups now show your profile Bana instead of your profile photo · states that the operator (admin account) can view group screens to run groups and handle reports / earlier: October 24, 2026 (revision announced October 17, 2026 — describes direct nearby sync between your own devices (encrypted, no server) · adds the area you chose for home weather to your life record backup so your devices show the same area · adds the budget book (income and expense entries, fixed expenses, income and standing transfers, asset balances, budgets and savings goals), exam and university grades, kids’ names and the study planner’s daily goal line to the life record backup, adds the optional school ranking and removes the discontinued founder key dates and key numbers · adds the friend invite event records and their deletion on account deletion · states automatic error reports and device type under Feedback · states how community report records are stored · adds today’s key time for your life type to the time record friends see / earlier: October 11, 2026 (revised from the October 9, 2026 policy to cover backups of Ideas and Baby notes and D-days, the kinds of devices you use, daily usage counts for abuse prevention and genuine-app checks (App Check); on the same day we clarified disaster-recovery backup retention, operator access, how notifications are deleted automatically, chat previews, file storage outsourcing and web tool access logs to match how the Service actually runs, and added Bana dress-up and the line for your friends; on October 13 we clarified camera and photo use, community records, app language and block list, records that may remain after account deletion, and information for users in the EEA and UK, and made your Bana outfit visible to other users as your profile Bana; on October 14 we added today’s net study time and this week’s after-work growth time to the summary shared with friends; on October 15 we added tax calendar settings, key dates and key numbers, and job-search records (companies, hiring steps and per-company to-dos) to work records)))
Leben Studio (“we”, “us”) operates Banana Plan (the “Service”). We take your personal information seriously and
comply with Korea’s Personal Information Protection Act and other applicable laws.
At a glance
Your life records (timers, to-dos, goals, etc.) are stored only on your device and in an account backup that only you can open. We do not open them (the app and the admin screen block access with security rules). For statistics we receive numbers only, such as average hours per category (see App usage records in Section 1).
We do not collect your location (GPS) and never ask for location permission.
Apple Health sleep records, timetable photos, your birthday, the apps you choose for Focus lock and your app lock pattern stay on your device.
Promotional messages are sent as in-app notifications only to people who opt in separately. We never sell your personal information or hand it over for advertising.
If you delete your account in the app, your account and records are deleted immediately. They remain only in disaster-recovery database backups for up to 7 days and are then deleted automatically. Your nickname, age group, gender, sign-up date and deletion time are kept separately for 1 year to check abuse and for deletion statistics, and are then deleted (see section 5).
This summary is for convenience; the full text below governs.
1.What we collect and how
Email sign-up
Collected
Email address, password (stored encrypted), nickname, age range, gender (optional)
How
Entered by you
Your app language (Korean, English or German), community language and the list of members you blocked are also stored with your account.
Social sign-in (Kakao, Apple, Google)
Collected
Your account identifier with that service
Email address — Kakao only if you agree to share it; for Apple, the relay address Apple creates if you choose “Hide My Email”
Which service you signed up with (Kakao, Apple or Google)
Nickname, gender and age range are entered by you, as with email sign-up
How
Provided by that service when you sign in
A name or nickname provided by that service is used only to pre-fill the nickname field and is not stored.
We never receive passwords for social sign-in.
Community
Collected
The posts and comments you write and when, and the posts you liked, viewed or reported (recorded by your member ID — like and view IDs are stored on that post and are not shown on screen; the IDs of people who reported a post are not stored on the post, only in the report records under “Reports” below)
How
Posted by you
Groups
Collected
Nickname; balance and completion figures; per-area completion, time mix and balance chart figures; today’s drift and time left;
whether a timer is running (the activity type and start time)
How
Calculated automatically on your device and sent
Visible to other members of the same group. The underlying time records (individual entries and times) are not sent. The operator (admin account) can view the same group screens as members to run groups and handle reports; the admin account does not appear in the member list.
Friends
Collected
Friend connections (the other member’s identifier and nickname, and when you became friends); custom names you give friends (visible only to you); friend request history (sender, recipient, accepted/declined, time); your invite code;
your sharing settings (on/off for to-dos, balance, completion, time log and patterns);
your shared summary (only the items you turn on, for yesterday and today: yesterday’s and today’s to-do lists and whether they are done, to-dos you’ve already added for tomorrow, yesterday’s and today’s balance score and chart figures, yesterday’s and today’s completion,
yesterday’s and today’s time per area, today’s net study time (study time minus timetabled classes), today’s key time for your life type (net study time for students and job seekers, growth for employees, hours worked for founders, work time for freelancers, shop time for shop owners, me-time for homemakers and parents — which one it is and how long), this week’s after-work growth time (if you use the After work card), drift and time left, the item name and start time of a running timer, this week’s top area, the hours when drift piles up, and average sleep);
cheers you send (sender, time and any message you write);
your friend list (your friends’ identifiers and nicknames, used for the friend count and friend list on your profile); your “Requests from friends of friends” setting (on/off); and, for friend requests sent from a friend’s friend list, the identifier of the mutual friend
How
When you add or accept a friend or turn on a sharing item, your device calculates the summary automatically and sends it; your device sends your friend list automatically when it changes; when you change the setting or send a request to a friend of a friend
Your shared summary is shown only, inside the app, to people you have accepted as friends. If you turn an item off in Profile › Share with friends, it disappears immediately.
All five items are on by default (you can choose when you first become friends) and you can change them at any time. Unfriending or blocking hides everything on both sides immediately.
The underlying time records (individual entries and times) are not sent, and average sleep does not include sleep imported from Apple Health.
Cheer messages stay in the recipient’s notifications; those older than 90 days are deleted automatically when the recipient opens the app, and all are deleted when the recipient deletes their account.
Your friend list (nicknames) is visible only to your friends. In a friend’s friend list, people who aren’t your friends appear only with their nickname and the app’s character (Bana); their photo, posts, bio and friend list are not shown.
Your “Requests from friends of friends” setting is used to decide whether others see a request button. If you turn it off, people can’t send you requests from a friend’s friend list (requests by nickname or invite link still work).
School ranking (middle school 3rd grade and high school students, optional)
Collected
School (the public-data school code and school name) and school level (middle or high school), grade (only to confirm 3rd grade for middle school students — not collected from high school students), nickname (the same as your member nickname), today’s and this week’s study time (minutes) with the date and week they refer to, whether a study timer is running, when it was last updated, and when you first joined from that school (recorded by our server)
How
From when you join the school ranking on the Study screen, your device calculates and sends these automatically
Joining is optional and off by default. Middle school students can join only in 3rd grade (age 14 or older). Once you join, your nickname, your study-time ranking and whether you are studying right now are shown only to members who joined with the same school (regardless of grade); your class, number, photo, bio and friend list are not shown.
When you leave the school ranking, the information is deleted immediately. Because your school’s ranking opens one day after you join from that school, the school (school code) and when you first joined are kept separately on our server and are deleted when you delete your account. People you have blocked do not appear in your ranking.
Messages (1:1)
Collected
The identifier of the friend you’re talking to; the messages you send (text or photo) and when; the last message in each chat (60 characters), read time and pinned message
How
When you send a message to a friend
Only the two people in a chat can see it. We do not read chats (we only check a single message if it is reported).
Messages are deleted automatically 30 days after they are sent (one year if either person has Premium), and the sender can delete them at any time.
Photos are resized on your device (long side 2048px) and photo metadata such as location is removed before sending. Chats are stored encrypted on our server (Google Firebase)
but are not end-to-end encrypted. New-message notifications may show the start of a message; you can turn previews off in iOS Settings.
Mate groups (group chat)
Collected
The group name; the identifiers and nicknames of members and invited friends; the messages you send (text or photo) and when; the group’s last message (60 characters), read times, pinned message and which members muted it; the status members can see (when you started a study or work timer and whether what you are running or ran most recently is study or work, today’s and this week’s net study time) and the “started studying” line
How
When you create a mate group, accept an invite or send a message, and while you are a member, when you start or stop a study or work timer or your study time changes
You can invite only friends (up to 10 people), and they join only if they accept. Messages and study and work status are visible only to that group’s members; we do not read them (we only check a single message if it is reported).
Messages are deleted automatically 30 days after they are sent (one year if any member has Premium), and the sender can delete them at any time. Photos are handled and stored the same way as in 1:1 messages.
When you leave a group, your study status there is deleted immediately. Messages from people you blocked are hidden.
Profile photo
Collected
One photo you choose (a 192×192px square copy made on your device)
How
When you choose a photo in Profile (optional)
Your profile photo is visible only to your friends, not in groups or the community (they show your profile Bana). Photo metadata such as location
is not kept when the photo is resized. You can change or remove it at any time, and removing it takes it off your friends immediately. Without a photo, the app’s character (Bana) is shown instead.
Reported photos are reviewed by us, and photos that break the rules may be deleted. The operator (admin account) can see profile photos in the member list of the admin screen to run the Service, for example to check for inappropriate photos.
Profile bio
Collected
The bio you write (up to 150 characters) and when you last edited it
How
When you write a bio in Friends › your profile › Edit profile (optional)
Your bio is visible only to your friends, not in the community. You can edit or clear it at any time, and clearing it deletes it right away.
We may delete bios that break the rules.
Auto-seat in the Study Lounge
Collected
Whether a study or work timer is running and which (study/work), when you started it, the gender you chose at sign-up (if any), and a random seat ID that is not linked to your account
How
Automatically when a signed-in user with the Korean interface starts a study or work timer (on by default · you can turn it off in My info › Auto-seat in the Study Lounge)
You appear as an anonymous character sitting in the Study Lounge run by the operator (lebenstudio.web.app/lounge, a public website). We do not send your nickname, email, member number or anything else that identifies you;
the character follows the gender you chose at sign-up and wears a random outfit. It is removed as soon as you stop the timer, switch to another timer, sign out or turn this off, and timers started more than 14 hours ago are not shown. It is deleted when you delete your account.
Study Lounge link
Collected
Passed to the lounge: your nickname, the gender you chose at sign-up (if any) and whether you are 14–18 · Kept in sync: whether a study, work, meal, sleep or break timer is running and which, the item you are doing (during a break, the study or work you were doing), when you started it, today’s recorded study and work totals, when you started or stopped a timer in the lounge, and your timer list (study and work area names and the item names you turned on, meal, sleep and break names) · For the link: a one-time entry code (15 minutes) and a link key (only an irreversible hash is stored on our server)
How
Only when you tap Study Lounge in the Groups tab and choose Enter with my name (the first time we show what is passed on · you can also choose Enter anonymously)
In the Study Lounge run by the operator (lebenstudio.web.app/lounge) your character shows your Banana Plan nickname and gender, and starting or stopping a study, work, meal, sleep or break timer in either the lounge or Banana Plan updates the other and is recorded in Banana Plan (sleep in the lounge is recorded as sleep if it lasts 30 minutes or more and starts after 10 PM or runs on into the early morning, otherwise as rest). The name of the item you are doing (e.g. Math) is also shown to other lounge users with your character.
Users aged 14–18 cannot send or receive 1:1 chats or study mate requests in the lounge. We do not pass on your email, member number or other account details. Turning off My info › Study Lounge link deletes the link key and sync record right away, and they are deleted when you delete your account.
Today’s cheer
Collected
Your cheer line (up to 40 characters), your nickname, and the date and time you sent it
How
When you send a line from Today’s cheer on Home (optional · once a day; sending again on the same day replaces it)
The operator reviews the lines you send, and only the ones the operator picks are shown on other users’ Home screens with your nickname. Lines that are not picked are not shown to other users.
The operator may delete lines that break the rules. When you delete your account, your lines are deleted and any line shown on Home is taken down by the operator without delay.
Bana dress-up · a line for your friends
Collected
The items you put on Bana (kinds of hat, hair accessory, glasses, neckwear and shoes), and a line for your friends (up to 30 characters) with when you wrote it
How
When you choose and save them in Dress up Bana (optional)
Your outfit is shown on your profile Bana to other signed-in users (in friend lists, community comments, groups and friend requests; friends see your profile photo instead if you set one).
Your line is visible only to your friends. When a friend switches you on in their friend list, your Bana visits their Home screen and shows your line in a speech bubble (it stops showing at midnight on the day you write it).
Which friends’ Banas visit your Home (up to 3) is saved only in your own settings (with your life record backup) and is not shown to them. You can change or clear it at any time, and it is deleted when you delete your account.
Friends’ News (posts, stories, comments)
Collected
Text you post (up to 500 characters for a post, 120 for a story); photos (up to 3 per post, 1 per story — copies resized on your device to a long side of up to 1440px, plus a preview 540px on the short side);
a “day card” (that day’s balance score and chart values, completion rate, time used, time drifted and top area); when you posted and your nickname;
comments (up to 300 characters) and when they were made; who liked a post and when
How
When you post a story or post, or leave a comment or like, in Friends › News (optional)
What you share in News is visible only to people who are friends with you, not in the community. Unfriending or blocking hides it right away.
Stories disappear after 24 hours and are deleted from our server automatically. You can delete your posts and comments at any time;
deleting a post also deletes its photos, comments and likes (you can also delete comments on your own posts).
Photo metadata such as location is not kept when photos are resized. Photos you view may be stored briefly on your device so they load faster next time.
We do not read News; we review only reported posts, stories and comments, and may delete them if they break the rules.
Push notifications (friends, comments)
Collected
Your device’s notification token (a value Apple Push Notification service issues for each device) and your settings for each notification type
How
Registered automatically when you allow notifications in the iPhone app (refreshed once a day)
Sent for friend requests, accepts, cheers, 1:1 messages, mate group messages and invites, friends’ new News posts and stories, comments on your News posts, and comments on your posts or replies to your comments. You can turn each type off in Profile › Notifications,
and nothing is sent if notifications are off in iOS Settings. Promotional notifications are never sent with this token; they follow the separate consent below.
Reports
Collected
What you report and why; a copy of the text if you report a cheer message; a copy of that single message if you report a 1:1 or mate group message; a copy of the text if you report a News post, story or comment (for a reported profile photo or News photo, no copy is kept — we review the photo itself)
How
Entered by you
Feedback
Collected
Your feedback, the options you pick, app version and lifestyle, device type (device model and iOS version), one optional attached photo (made smaller on your device before sending) · automatic error reports (error message, the screen it happened on, app version and device type — never what you typed)
How
Entered by you · error reports are sent automatically when the app hits an error (at most 5 per launch)
Life record backup
Collected
Timer records, timeline plans, to-dos, recurring to-dos and recurring blocks, goals, priority items (to-dos you typed),
challenges you’ve joined, notes you write (text, drawings and projects in Ideas and Baby notes) and D-days, work records (freelance projects, rates, invoice amounts and due dates, the names and intervals of people you keep in touch with, shop checklists, order schedules and daily sales, the budget book (dates, amounts, memos and categories of income and expense entries, fixed expenses, income and standing transfers, the kinds and balances of liquid assets, per-category budgets, which asset sales and payments go into, and savings goals with their name, amount, deadline, linked asset and amount saved), tax calendar settings (country, business type and whether you have employees), the name and representative coordinates of the area you chose for home weather, job-search records such as company names, roles, application periods, hiring steps, per-company to-dos and results, study records such as exam grades (exam name, date, score and grade per subject) and university grades (courses, credits and grades per semester, and the grading scale), the study planner’s daily goal line, household records such as whether you have kids and the names or nicknames you use to tell them apart, kids’ dates and things to bring, recurring chores, shopping lists, dinner plans and, if turned on, baby feed, diaper and nap logs — never shown to friends), the kinds of devices you use (iPhone, iPad) and when each was last used (only to decide which device gets reminders), app settings — all of your home-screen life records
How
Backed up automatically by your device (signed-in accounts only)
Events (only while one is running)
Collected
Friend invites: the member ID of a new account that joined with an invite code and became friends, the inviting member’s ID, the event name and time; per-inviter invite counts and the list of invited accounts
Bana bunch 7 days: for each day of the event (Korean date), that day’s number of records, number of to-dos and number of to-dos done (last 14 days; not what you recorded or wrote), your streak and whether you completed it
Joining a group: the dates your daily status was posted to a group in the Groups tab, the IDs of the groups you joined, active days and whether you completed it
First-month discount during the free trial: your claim (event, stage, time) and its result
All events: reward records (recipient, event name, type of benefit (time or discount rate), the App Store offer code given, time granted, time you opened the code)
How
Friend invites are recorded automatically by the app when a new account becomes friends through an invite code (within 7 days of sign-up and only when both are friends) · for Bana bunch 7 days the app records only today’s and yesterday’s numbers · group days are counted by the server from group status records · the first-month discount is recorded when you tap to claim it on the purchase screen · completion is checked and rewards are given by the server
Event rewards are given as extra Premium time or as a one-time App Store offer code; the conditions and period are shown in the app under Profile › event notice (the first-month discount on the purchase screen). Payment and renewal of a subscription started with an offer code are handled by Apple and our payment processor (RevenueCat).
Consent to promotional notifications (optional)
Collected
Whether you agreed to receive promotional information (app push), when you agreed or withdrew, and when we last reminded you of your consent
How
Chosen by you on the sign-up screen or in Profile › Notifications (off by default)
You can use every feature without agreeing. You can withdraw at any time in Profile › Notifications;
when you agree or withdraw, we show you the result (sender, date, result) in the app. We remind people who agreed every two years,
never send between 9 PM and 8 AM, and mark these notifications “(Ad)”.
App usage records
Collected
App version and build number, platform (iOS/web), last access time, when you last opened the app on an iPad, when we last confirmed the app is installed on a paired Apple Watch and when you last used the Watch app (times only — not what you did on the Watch), the days you opened the app during the first 60 days after signing up (which day since sign-up), the last date you logged anything, and when you last logged time or wrote a to-do (not their contents), the days you opened the Community, Groups or Challenges tabs, and the days you opened the subscription screen, where you opened it from and when you subscribed (for conversion statistics), the lifestyle you chose at sign-up, the main category of a timer you have running (one of Work, Study, Exercise, Rest, People, Sleep or Drift) and when it started, your average daily hours per category over the last 7 days (numbers only — no sub-items, to-dos or notes), whether Simple mode is on, and the days you used Edit entry and Add plan on the timeline (the last date and the number of days — not what you recorded or planned)
How
Recorded automatically when the app opens, when you start or stop a timer and when you save an entry or a plan (for troubleshooting, old-version notices and service-improvement statistics). Average hours per category are calculated on your device and only the numbers are sent; in our statistics we look at them only as averages of groups of 5 or more people.
Abuse prevention and genuine-app checks
Collected
How many times you did certain things that day (News posts, stories, likes and comments; 1:1 and mate group messages and photos; Community posts and comments) and the date, your last attempt to join a password-protected group (group ID, the encrypted value of the password you entered, the time and how many tries that day), and the result of checking that a request came from the genuine Banana Plan app (Apple App Attest and Firebase App Check values — these contain nothing that identifies you, such as your name or email)
How
Processed automatically when you post, send a message or make a request to our servers (to stop spam, excessive use and abnormal requests). The counts restart at midnight Korea time and are deleted when you delete your account.
Paid subscription
Collected
Apple transaction ID, subscription product, status and expiry date
How
Collected automatically when you pay through the App Store
2.Information stored on your device or processed only on your device
Life records and backup
Your home-screen life records (timers, plans, to-dos, goals, etc.) are stored on your device (local storage).
To restore them on a new phone or after reinstalling, and to keep several devices in sync, they are backed up over an encrypted connection to
storage (Firestore) that only your own account can access.
Backup data is used only for restore and sync. We do not view or analyse any individual’s life records.
Sleep records imported from Apple Health are excluded from this backup and stay on your device.
When another device on the same account (iPhone, iPad) is nearby, your life records are exchanged directly between the devices over Bluetooth and Wi-Fi to keep them in sync, even without internet (Local Network permission · only for accounts that use two or more devices).
The data is encrypted with a key only your devices share, never passes through a server or the operator, and excludes Apple Health sleep records.
Apple Health (HealthKit) sleep data
Only if you turn it on in settings, the app reads the sleep time recorded by your iPhone or Apple Watch and shows it on the sleep pattern screen.
Imported sleep records (individual periods such as when you fell asleep and woke up) are stored only on your device, are not included in the cloud backup and are never sent to a server.
They are never used for advertising or marketing or provided to third parties. Banana Plan does not write any data to Health.
You can turn this off at any time in settings; doing so deletes the imported sleep records from your device.
However, if you are in a group, share “time records” or “balance” with friends, or attach a “today card” to a friends’ news post, this sleep time is added, without distinction,
to the total Rest time and the balance score those people can see
(individual sleep periods and sleep/wake times themselves are not sent). If you use none of these, this figure is not sent either.
Timetable photo (camera, photo library)
Only when you tap “Timetable” and choose or take a photo, the text in it (days, times, subjects, places) is read
on your device to create a list of recurring blocks.
The original photo and the text read from it are never sent to a server, and the photo is not saved in the app.
Only the recurring blocks you confirm and save (subject, time, place) are backed up to your account like other records.
The camera and photo library are used only when you take or choose a photo yourself (reading a timetable, feedback attachments, your profile photo, 1:1 and mate group photos, News posts and stories), and you can turn access off at any time in iOS Settings. Only timetable photos are processed solely on your device; the others are resized and uploaded as described for each item.
Home weather (an area you choose; your App Store country’s capital until you choose)
Banana Plan does not collect your device’s location (GPS etc.) and never asks for location permission.
Only if you search for and choose an area in settings, the area’s name and representative coordinates are stored on your device and, so that your other devices on the same account (iPhone, iPad) show the same area,
in your life record backup together with your app settings (deleted when you delete your account).
To show the weather on the home screen, the app asks Apple’s weather service (WeatherKit) for current weather using that area’s coordinates;
only the coordinates are sent to Apple. Area name search is handled by Apple Maps search.
Until you choose an area, the weather for a default area is shown: the capital of the App Store country set on your device
(for example Seoul for Korea, Washington, D.C. for the United States), or Seoul if the country is unknown or not on our list.
The App Store country is used on your device only; only the capital’s representative coordinates are sent to Apple, with no information about you.
The sun, moon, dawn and sunset in the sky follow sunrise and sunset times calculated on your device from that area’s coordinates.
You can turn this off at any time under “Home weather” in settings.
Special-day decorations (birthday, optional)
Only if you enter your birthday (month and day) under “Special-day decorations” in settings, it is
stored on your device to decorate the home screen and calendar on that day. It is not backed up or sent to a server, and we never ask for your birth year.
You can delete it at any time, and it is deleted from the device when you delete your account.
3.Why we process personal information
To identify members and keep you signed in
To provide core features such as community, groups, friends and the school ranking
To send notifications needed to use the Service (push) — friend requests, accepts, cheers, comments and replies
To prevent misuse and handle reports
To respond to inquiries to improve the Service
To produce usage statistics to improve the Service (no individual is analysed separately)
To check how the Service is running (each member’s subscription status, the main category of a running timer, etc.)
To tailor the Service, such as screen layout, using gender and age range (personalisation)
To send event and offer notifications to users who separately agreed
To anonymise and aggregate collected information for service improvement and statistics
(results contain nothing that identifies an individual)
Legal basis: information needed for sign-up, sign-in, record backup, groups, friends, community, notifications and subscription management is processed to perform our service contract with you
(PIPA Article 15(1)(4)); gender and age range are processed based on the consent you give at sign-up (Article 15(1)(1)).
Promotional messages are sent based on your separate optional consent (Article 15(1)(1) and Article 50 of the Act on Promotion of Information and Communications Network Utilization and Information Protection).
If you are in the EEA, the UK or Switzerland: we process your data to perform our contract with you (GDPR Art. 6(1)(b)), on your consent for optional items such as gender, age range and promotional messages (Art. 6(1)(a)),
and on our legitimate interest in preventing abuse (Art. 6(1)(f)). Your data is stored in the Republic of Korea (Seoul), which has adequacy decisions from the European Union and the United Kingdom.
Transfers to our processors in the United States (Google, RevenueCat and Apple) rely on the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
You may request access, correction, deletion, restriction, portability or object to processing, and you may lodge a complaint with the data protection authority where you live.
4.Retention period
We keep your information until you delete your account, then handle it as described in Section 5.
Where laws require us to keep information, we store it separately for that period and then destroy it.
5.When you delete your account
When you use “Delete account” in the app:
Deleted immediately
Your sign-in account (email/password and linked social sign-ins) — if you signed in with Apple, the link between your Apple Account and the Service is also revoked.
Your profile (nickname etc.) — your reserved nickname is released so others can use it.
Your life record backup (timers, to-dos, goals, priorities, notes, D-days, etc.)
Posts and comments you wrote, and feedback you sent through “Send feedback” (including attached photos)
Your membership in groups (including your figures shown in those groups)
Friend connections (also removed from the other person’s friend list), friend requests, invite code, shared summary, device notification tokens and in-app notifications
Messages and photos you sent in 1:1 chats
Messages and photos you sent in mate groups, and your study and work status (you leave every group you are in and any invites are declined)
Your profile photo (including copies shown to friends and groups)
Your profile bio
Your Bana outfit and your line for friends
Lines you sent to Today’s cheer (any line shown on Home is taken down by the operator without delay)
Your Study Lounge auto-seat record
Your Study Lounge link (entry code, link key and timer sync record)
What you had on the school ranking (school, grade, nickname, study time) and the school and time you first joined
Values kept for operator statistics (lifestyle, the main category of a running timer, average daily hours per category, whether Simple mode is on, and the days you used Edit entry and Add plan on the timeline)
Your daily usage counts kept for abuse prevention and your group password attempt record
Your shared friend list and your “Requests from friends of friends” setting
News posts and stories you shared (including photos), and comments and likes you left
Event records (the accounts you invited, reward records, event progress records and discount claims, and your ID in other members’ invite lists and in the records of offer codes given)
Kept only in a form that cannot identify you
One deletion statistic — only the time of deletion, whether you had a paid subscription, how many days you used the app and your platform (iOS/web).
It contains no identifier (email, nickname or member number) and is used only for service-improvement statistics.
The optional “why are you leaving” survey (the options you pick and anything you write) is stored separately from your account,
so no one can tell who left it, and is used only to improve the Service.
Information that may not be deleted immediately
Deleted-member record — your nickname, age group, gender, sign-up date, when you deleted your account, how many days you used the app and whether you had a paid subscription.
Our server keeps it automatically to check abuse (such as re-signing up to misuse the Service or impersonation) and for deletion statistics. Only operators can see it, and it is deleted automatically 1 year after you delete your account. It contains no email address and none of your records.
Notifications delivered to other users’ notification lists because of your activity on their posts or comments belong to those users,
so they are not deleted immediately; those older than 90 days are deleted automatically when that user opens the app.
In the other person’s 1:1 chat list, the last-message preview (up to 60 characters), a copy of a pinned message and your nickname shown for that chat may remain as part of their chat information.
Contact us and we will check and delete them.
In mate groups, the last-message preview (up to 60 characters), a copy of a pinned message and your nickname shown for that group, and the name of a group you created, may remain for the other members.
Contact us and we will check and delete them.
The name and settings of groups you created may remain for their other members. Contact us and we will check and delete them.
Tab-visit and subscription-screen counts (date and member ID only, no record content) may remain after you delete your account; we delete them on request.
Some records needed to run the Service, such as reports by other users, and — if you wrote a very large number of posts or comments —
some of them, may not be deleted immediately. Contact us and we will check and delete them.
Deleted information is not kept for individuals and cannot be recovered for you. It remains only in whole-database disaster-recovery backups (daily, kept up to 7 days)
and point-in-time recovery data (up to 7 days), which are deleted automatically and used only to recover the whole Service from an outage.
Even if you ask after deletion, we cannot restore earlier records, so please check what you need before deleting your account.
6.How we destroy personal information
Procedure: personal information whose retention period has ended or whose purpose has been fulfilled is destroyed without delay.
Information that laws require us to keep is stored separately and destroyed when that period ends.
Method: electronic files are deleted in a way that cannot be recovered.
We do not create personal information on paper.
7.Provision to third parties and outsourcing
In principle we do not provide your personal information to anyone outside.
To provide the Service, we outsource processing as follows.
Google LLC (Firebase)
Work
Member authentication (email and social sign-in), database storage (community, groups, feedback, life record backup) · file storage (feedback attachments · 1:1 chat and mate group photos)
Storage location
Firestore: Seoul region (asia-northeast3) / Storage: Seoul region (asia-northeast3) / Authentication: Google infrastructure
RevenueCat, Inc.
Work
Subscription receipt validation and subscription status management (member identifier, Apple transaction ID, subscription status)
Storage location
United States (RevenueCat infrastructure)
Apple Inc.
Work
In-app purchases; delivering push notifications (Apple Push Notification service — device token, notification title and text); home weather (WeatherKit) and area name search (Apple Maps) — the coordinates of the area you chose (your App Store country’s capital until you choose) and your search terms
Storage location
App Store / Apple infrastructure
8.Transfers of personal information outside Korea
Some of the processing above takes place on servers outside the Republic of Korea. As outsourcing and storage needed to perform our service contract,
we notify you as follows under Article 28-8(1)(3) of the Personal Information Protection Act.
Google LLC — Firebase Authentication
Items
Email address, encrypted password, social sign-in identifier, sign-in history
Country
United States and other countries with Google data centres
When and how
Sent over an encrypted network when you sign up or sign in
Purpose and retention
Member authentication · until you delete your account
If you do not want these transfers, simply don’t use optional features such as subscriptions and home weather, and that information will not be transferred.
Member authentication is essential to use the Service, so if you refuse it you cannot use the Service.
9.Your rights and how to exercise them
You may at any time ask to access, correct or delete your personal information or to stop its processing.
For requests that the in-app features (such as Delete account) do not cover, contact our privacy officer and we will act without delay.
10.Children
The Service does not accept sign-ups from children under 14 and checks age at sign-up.
If we learn that we have collected personal information from a child under 14, we destroy it without delay.
The Service is not directed at children.
11.Security measures
Passwords are stored encrypted by Firebase Authentication, and we cannot view them.
For social sign-in (Kakao, Apple, Google), we never receive or store that service’s password.
Database access is restricted by server-side security rules. In particular, your life record backup can be viewed only by you;
we do not view it. The app and the admin screen block access with security rules, and cloud administrator access (the Firebase console), which security rules do not cover,
is limited to a single operator account protected by two-step verification and used only to respond to outages affecting the whole Service.
Only as needed to run the Service (handling reports, restrictions, troubleshooting, checking subscription status, checking consent to promotional notifications), we can view account information.
It is limited to the following.
Nickname, email, sign-up date, sign-up method (email, Kakao, Apple, Google), gender and age range
Last access time, app version and build number, platform (iOS/web), whether you use iPad or the Apple Watch app and when you last did
Nickname change record (previous and new nickname and when it changed) — kept automatically by our server to check impersonation and abuse, and deleted when you delete your account
Subscription and trial status, number of groups joined
Lifestyle, and the main category of a running timer and when it started
Whether Simple mode is on, and the days you used Edit entry and Add plan on the timeline (the last date and the number of days)
Average daily hours per category (numbers) — in our statistics we look at them only as averages of groups of 5 or more people
Whether and when you consented to promotional notifications
The number of times your content was deleted after a report and whether you are restricted
Posts, comments and feedback you submitted yourself
We do not view life records beyond this, and security rules block it.
Admin functions are allowed only for one operator account designated in the server-side security rules, and that access is limited to
the information listed above.
The operator accounts that manage the service infrastructure (database and authentication settings) use two-step verification.
12.Automatic collection (cookies etc.)
The Service does not use cookies or the advertising identifier (IDFA) for advertising or tracking.
We use your device’s app storage to remember your sign-in, settings and life records. This stays on your device
and is deleted when you delete the app.
The web tool pages that need no sign-in (the study timer, net study time calculator and exam D-day at bananaplan.app) keep what you type only in your browser’s storage,
and we count visits anonymously (only the number of visits per page, language, device type and referral source — no cookies, device identifiers or account information. The counting server’s request logs may automatically record the connecting IP address; it is not used for counting and is deleted automatically after the cloud’s default retention period of 30 days).
These pages may show an affiliate ad banner (Coupang Partners); the banner area is operated by that company under its own policies, and when it is shown Coupang may set its own cookies.
13.Privacy officer
For questions, complaints or remedies about how we handle personal information, contact the officer below. We will reply and act without delay.
Please contact our privacy officer first and we’ll look into it right away.
If that doesn’t resolve it, you can get advice or dispute mediation from the following Korean bodies.
Personal Information Dispute Mediation Committee — 1833-6972 (in Korea) · www.kopico.go.kr
Personal Information Infringement Report Center (Korea Internet & Security Agency) — 118 (in Korea) · privacy.kisa.or.kr
If you live outside Korea, you may also contact the data protection authority in your country.
15.If a data breach occurs
If we learn that personal information has been or may have been leaked, we will notify you within 72 hours of becoming aware of it
under Article 34 of the Personal Information Protection Act and, where required by law, report it to the Personal Information Protection Commission or the Korea Internet & Security Agency.
16.Changes to this policy
This policy may change as laws or the Service change. When it does, we will let you know through notices in the Service.