Privacy Policy
Effective date: October 23, 2026
1. Operator and contact
hetki is provided by REFLECTED in the Republic of Korea. Legal business name: REFLECTED(리플렉티드). Representative and privacy contact: Hyunwoo Lee. Business address: B1, 701, 25-11, Seongji-gil, Mapo-gu, Seoul, Republic of Korea. Telephone: +82 10-9033-2874. For privacy requests and support, email hetki.support@reflected.co.kr.
2. Overview
hetki lets you customize clock, calendar and photo widgets. No hetki account is required. We do not operate a server to receive your widget settings, photos or calendar events. The app contains no third-party advertising, analytics or tracking SDK, and does not sell personal information or track you across other companies' apps and websites.
3. Widget settings and purchases
Saved designs, selected options, ordering and preferences are stored on your device. The app shares data with its own Home Screen widget extension through an iOS App Group container. A chosen time zone is a setting, not GPS location; hetki does not request location access.
Apple StoreKit supplies product details and verified purchase information, such as product, purchase/expiration or revocation status, so the app can provide and restore Plus access. The app stores a local access flag for its widget extension. We do not receive your payment card details. Apple processes billing and maintains purchase records under its own policies. Purchase verification may require Apple's network services.
4. Photos
Photo widgets use Apple's system photo picker. Only a photo you select is copied into local shared widget storage; using that picker does not require access to your entire library. If you separately grant Photos access in Permissions, the app reads the authorization status. It does not scan or upload your library, modify originals or use your photos for AI training.
Selected images are resized and re-encoded for widget display without copying original location metadata. Copies remain available to saved photo widgets even if you revoke Photos access or delete the original. Replacing a photo or deleting a saved widget removes a copy when no saved widget references it. Unused imports older than one day are removed on a later app launch. iOS may temporarily retain rendered widget snapshots.
5. Calendar
With your full calendar access permission, Tear-Off Calendar reads events on this device to show an ongoing or next event today. If tomorrow's events are enabled and no event remains today, it may show one event tomorrow. It uses event titles, start/end times, all-day status, calendar names and event identifiers. Cancellation status and your attendee response are checked to exclude canceled or declined events; attendee details are not retained in the widget's event summary.
Calendar data is processed locally, not uploaded to us, written back to Calendar or saved in app preferences. iOS may cache event content in widget timelines and snapshots. Calendar providers you use have their own syncing practices. You can revoke access in iPhone Settings → Apps → hetki → Calendar. New reads then stop; an existing Home Screen snapshot may remain until iOS refreshes it. Remove the Home Screen widget if you need to hide its content immediately.
6. Feedback and support email
Feedback opens Apple's Mail composer with hetki.support@reflected.co.kr as recipient. Nothing is sent until you choose Send. If you contact us, we receive your email address, any displayed sender name, message and attachments you include, and correspondence needed to respond. These are used only to handle your request, troubleshoot problems and protect legal rights. Please avoid sending sensitive information or other people's information unless necessary.
We use Google Workspace (Gmail) to send, receive and store support correspondence. Our current Business Starter edition does not include customer-selectable data-region controls. Google and its authorized subprocessors provide mail delivery, hosting and security under the applicable Workspace agreement and Cloud Data Processing Addendum: https://cloud.google.com/terms/data-processing-addendum/. Email is transmitted electronically when you send or receive a message. Processing can take place outside Korea under the applicable agreement. The contracted Workspace supplier identified on our invoice is Google Asia Pacific Pte. Ltd., located in Singapore at 70 Pasir Panjang Road, #03-71, Mapletree Business City, Singapore 117371. Google Workspace privacy inquiries can be routed through its Cloud Data Protection Team (administrator contact): https://support.google.com/a/contact/googlecloud_dpr. The supplier's Singapore address does not establish where all email data is stored. Google's published Workspace Core Services subprocessor list identifies data-center operations in Belgium, Canada, Chile, Denmark, Finland, Ireland, Japan, Mexico, the Netherlands, Singapore, Taiwan and the United States. The wider published maintenance, support and security scope also includes Argentina, Australia, Brazil, Bulgaria, Colombia, El Salvador, France, Germany, Hong Kong, India, Israel, Italy, Malaysia, New Zealand, the Philippines, Poland, Romania, South Korea, Spain, Sri Lanka, Sweden, Switzerland and the United Kingdom. This is the published potential service scope checked on October 23, 2026, not a statement that this account or each email is processed in every location. Customer-initiated technical support may involve additional authorized processing within that scope. Current entities, activities and countries are published at https://workspace.google.com/terms/subprocessors/.
This processing covers the sender/recipient email addresses, displayed name, message, attachments and necessary correspondence metadata. You can choose not to email us; this does not affect unrelated app features, but we may be unable to respond to an email support request. Privacy requests and any applicable objection to overseas processing can be sent to hetki.support@reflected.co.kr.
7. Sharing, platform services and backups
We do not send your local photos, calendar events or widget settings to advertisers or analytics services. Apple provides the App Store, purchases, permissions, device storage and optional system backups under its own privacy policy: https://www.apple.com/legal/privacy/.
If you enable iCloud/device backups, Apple may include app data according to your settings. Email sent to support is handled by your chosen email service and our confirmed support-mail provider described above. We disclose information when legally required, or as necessary to handle a lawful request and protect users' rights. No app-operated cross-border upload of local widget content takes place.
8. Retention, removal and security
Saved widget settings are retained locally until you remove or change them. Delete saved designs in My Widgets; permissions alone do not delete saved designs or imported photos. Removing a Home Screen widget only removes that placement. Removing the app does not cancel an Apple subscription, delete support correspondence, or necessarily erase system backups or all shared-container copies. You manage backups in Apple's settings.
General support inquiries are retained while being handled and for no more than one year after resolution, solely for necessary follow-up and the handling of recurring issues. Unnecessary personal details or attachments are removed earlier. When retention is no longer necessary, or the applicable period expires, we delete the records without undue delay.
Where Korea's Act on Consumer Protection in Electronic Commerce and its Enforcement Decree apply to records we actually hold, necessary consumer complaint/dispute-handling records are preserved for three years, and contract/cancellation, payment and supply records for five years, for the statutory purposes. These records are separated or access-restricted and deleted when the legal period ends. This does not mean that every inquiry email is retained for three or five years or that we obtain Apple's payment records. Any other legally required preservation is limited to the records and period required by that law.
We use the mail service's deletion functions, including permanently deleting applicable Trash items, and remove any support copies or exports we control. Google's remaining system copies follow its contractual deletion process; local deletion does not mean every provider backup disappears immediately. Legal holds or retention rules, if applicable, must be identified and limited to their lawful purpose.
The app uses iOS sandboxing and its App Group container. Imported photo files use iOS data protection. No storage or transmission method is absolutely secure. Do not send passwords or payment-card details by email.
9. Your choices and rights
Calendar and Photos access are optional; you can use unrelated features without granting them. Manage access in iPhone Settings → Apps → hetki. Local-only content is not accessible to us remotely, so we cannot retrieve it for you. For support information we hold, contact hetki.support@reflected.co.kr to request access, correction, deletion, restriction, objection, portability or withdrawal of consent where applicable. We may request proportionate verification and explain any lawful limit. You may also complain to your local privacy regulator. Withdrawing permission does not affect processing that was lawful before withdrawal.
10. Children and changes
hetki does not ask for age or birth date and does not operate child accounts. Children and guardians must follow applicable age and consent requirements, including Apple's purchase rules. Contact us if a child has sent personal information to support so we can address it appropriately.
We will publish revisions with their effective date in the app and on the public policy page. Material changes will be communicated through an in-app notice or another appropriate method before they take effect where required. Contact hetki.support@reflected.co.kr with questions.
11. Public support and policy website
Our public support and policy pages are hosted by Cloudflare. When you visit these pages, Cloudflare may process your IP address and technical request, browser, device and traffic information to deliver the pages and maintain network security. Cloudflare operates a global network and processing may take place outside your country, including the United States. Its handling, retention and international transfer practices are described at https://www.cloudflare.com/privacypolicy/ and https://www.cloudflare.com/cloudflare-customer-dpa/. We do not add advertising, analytics scripts, contact forms or user accounts to these pages. Website visits do not upload the app's local widget settings, photos or calendar events. Email links open your own mail application; sending a message is your choice and the support-email handling above then applies.