MyIdol Privacy Policy

Effective date: October 15, 2026
Operator: AYH Labs
Contact: [email protected]

This is an English translation for convenience. The Korean version is the official text, and it prevails if the two differ.

MyIdol is built to handle only what it needs, and to keep as much as possible inside your PC. This document explains what is stored where, when the app uses the internet, and who processes that information.

Notice of changes (posted October 8, 2026) Now that MyIdol is free, we removed everything about the trial period, license keys, and purchases (including the payment provider Lemon Squeezy). We also added that notes sync was removed from the app in v0.1.7, and that the sync server will shut down on November 7, 2026, with all server data deleted. This version takes effect on October 15, 2026. Paid sales never started, so no purchase information was ever processed. If you need the previous version (effective October 1, 2026), please contact us.

At a glance

MyIdol is free. We do not handle payments or purchase information.
There is no account. The app does not collect your name or email.
To-dos, notes, records, and settings are stored only on your PC.
The app does not send any data to our servers. Notes sync ended in v0.1.7, and server data from users who used sync in older versions will all be deleted on November 7, 2026.
The app does not read what you type on your keyboard.
The app has no feature that sends visit or usage statistics or error reports to us.

1. Information we process and why

Category	Information	Purpose	Where it is stored	Retention
Core app features	To-dos, notes, records, settings	Providing app features	Your PC	Until you delete it or clear the app data
Calendar (optional)	The calendar (ICS) URL you enter	Showing your schedule	Your PC (Windows Credential Manager)	Until you delete it
Notes sync (ended; v0.1.6 or earlier)	Connection code, encrypted notes and related information	Syncing notes between PCs	Connection code on your PC, ciphertext on the sync server	All deleted on November 7, 2026 (see section 5)
Inquiries	The email address you write from and the content of your message	Answering inquiries	Our email (Google Gmail)	3 years after handling (consumer complaint and dispute records)

The app does not send us any information other than what is listed above.

2. What is stored on your PC

%APPDATA%\MyIdol folder: to-dos, notes, records, settings, and their backup files
Windows Credential Manager: calendar (ICS) URL, and the connection code if you turned on notes sync in v0.1.6 or earlier (v0.1.7 deletes it on first launch)
Windows registry HKEY_CURRENT_USER\Software\MyIdol: not used by the current version. If you ever used v0.1.5 or earlier, which had a trial, the trial start time recorded then may remain. It contains nothing that identifies you.
Windows registry Run entry: created only in the installed version when you turn on "Launch when Windows starts" in settings, and removed when you turn it off.
Pictures\MyIdol folder: created only when you save a card image yourself.
Windows WebView2 cache: a cache Windows creates to draw the app's screens, stored next to the app data folder.

The app does not see what you type. There is no global keyboard hook; it only checks whether you are at your desk (time since your last input) using a value Windows provides, and this value is never sent to us.

3. When the app uses the internet

Feature	Recipient	What is sent	Required?
Calendar	The server at the ICS URL you entered	An ordinary request to that URL. It does not go through our servers.	Optional
Add to calendar	Google Calendar or Microsoft Outlook (in your browser)	The to-do title and time are placed in a link that opens in your browser; you save the event yourself.	Optional
Notes sync (v0.1.6 or earlier; ends November 7, 2026)	Our sync server (`sync.ayhlabs.com`, run on Cloudflare)	Auth token, encrypted notes, change information (see section 4). v0.1.7 and later never connect to this server.	Optional
Downloading the installer	GitHub	Your download request (connection data is processed by GitHub)	When needed

Beyond this, the app has no feature that automatically sends information to us or to third parties (usage statistics, error reports, automatic update checks, and so on).

4. Notes sync (ended)

Notes sync was removed from the app in v0.1.7. The sync server shuts down on November 7, 2026, when the server and its database will be deleted. The following applies if you turned on sync in v0.1.6 or earlier.

How it works

Your connection code is created on your PC, and two things are derived from it: an auth token presented to the server, and an encryption key that encrypts your notes. Notes are encrypted on your PC with AES-256-GCM before they are sent. The encryption key and the connection code are never sent to the server, so we cannot read your notes.

What the server stores

Space ID: a hash (SHA-256) of the auth token. The connection code and the token themselves are not stored.
Per note: a random ID, modification time, deleted flag, and ciphertext
Per space: creation time, last-used date (updated at most once a day), number of notes, storage used

What the server does not store

Note contents in plain text, the connection code, or the decryption key
Name, email, or account information
IP addresses. The sync server does not record IP addresses in its database. However, Cloudflare temporarily processes IP addresses and other network information while handling connections (see section 7).

Good to know

Even when encrypted, the number, size, modification times, and deleted status of notes are visible to the server.
Anyone who knows your connection code can access, read, and edit the same note space, so do not share the code with others.
If you lose your connection code, we cannot recover it. If another PC is already connected with the code, you can look it up on that PC.

5. Retention and deletion

Data on the sync server

Service shutdown: on November 7, 2026, the sync server and its database will be deleted, and all data remaining on the server will be removed. After that it may remain in the database recovery history of the service provider (Cloudflare) for up to 30 days; we do not restore from it.
Deleted notes: when you delete a note, its ciphertext is cleared immediately. A deletion record (ID and deletion time) is kept for 90 days to pass the deletion on to your other devices, and is then removed automatically.
Unused data: data for a connection code that has not been used for one year is deleted automatically.
Deleting it yourself: in the app, Settings → Notes sync → Delete notes on server immediately removes that space's data from the server database and disconnects this PC. It may remain in the database recovery history of the service provider (Cloudflare) for up to 30 days; we do not restore from this history, and it is removed automatically after that period.
Other PCs: if another PC is still syncing with the same connection code, it may upload its notes to the server again at its next sync. To remove server data completely, turn off sync or disconnect on every connected PC before deleting.

Data on your PC

Uninstalling the app may leave behind the %APPDATA%\MyIdol folder, the Credential Manager entries, and registry values left by older versions.
To remove everything, delete the following yourself:
1. The %APPDATA%\MyIdol folder
2. In Credential Manager, the entries ending in com.lani319.myidol (ics_url.com.lani319.myidol, notes_sync_code.com.lani319.myidol, and license_key.com.lani319.myidol if you registered a key in an older version)
3. In Registry Editor, HKEY_CURRENT_USER\Software\MyIdol (if present)

6. Sharing with third parties

We do not sell or provide your personal information to third parties. The only exception is a lawful request from an investigative authority or similar body under applicable law, and we note that the sync server holds no readable note content.

7. Processors and international transfer

Company	Country	Information transferred	When and how	Purpose	Retention
Cloudflare, Inc.	USA	(When sync is used in v0.1.6 or earlier, until November 7, 2026) the encrypted note information in section 4, network information such as IP addresses during connections, website visit statistics, and forwarding of email sent to our addresses	Sent over TLS-encrypted connections whenever you use sync	Running the website and the notes sync server	As in section 5 (network information follows Cloudflare's policy)
Google LLC	USA	Email addresses and content of inquiries	When you email [email protected] or [email protected]	Answering inquiries	As in section 1
GitHub, Inc.	USA	Connection information such as the IP address of download page visitors	When a visitor's browser calls the GitHub API to check the latest version, or downloads the installer	Distributing the installer, checking the latest version	Follows GitHub's policy

Each provider's privacy information: Cloudflare, GitHub. Contact details are available at each link.
How to refuse the transfer: the app (v0.1.7 and later) does not send any data to our servers. If you turned on notes sync in v0.1.6 or earlier, you can delete the server data as described in section 5, and any remaining data will be deleted on November 7, 2026. The installer is distributed only through GitHub, so if you do not want this, you will not be able to use the download service.

8. Website

Visit statistics are collected with cookie-free Cloudflare Web Analytics, and no personally identifying information is collected.
The website does not use advertising or tracking cookies.
To check the latest version, the download page calls the GitHub API from the visitor's browser. This passes the visitor's IP address to GitHub.
If you contact us by email, we process your email address and message to answer your inquiry.

9. Your rights and how to exercise them

You may at any time ask to access, correct, delete, or stop the processing of personal information we hold about you, or withdraw your consent.

Information in the app: we cannot access it; you can manage it yourself as described in section 5.
Data on the sync server: you can delete it yourself with Delete notes on server in the app. Without the connection code, we cannot tell which space is yours, so we cannot view or delete it on your behalf.
Inquiry information: send your request to [email protected]. We will handle it within 10 days of confirming it and let you know the result.
You may also make a request through a representative; a power of attorney may be required.

10. Security measures

Notes are encrypted on your PC with AES-256-GCM before they are sent, and connections are protected with TLS.
Calendar URLs and connection codes are stored in Windows Credential Manager.
The sync server stores only a hash of the auth token, and limits both request rates and storage.
Information we can access (such as inquiry emails) is accessible only to those who need it.

11. Children's personal information

MyIdol is not intended for children under 14, and we do not knowingly collect personal information from children under 14. If you believe a child's information has been collected, please let us know at [email protected] and we will delete it without delay after confirming.

12. Privacy officer

Officer: AYH Labs operator
Email: [email protected]

13. Remedies for infringement

If you need help with a privacy infringement, you can also contact the following Korean agencies.

Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
Korean National Police Agency: 182 (ecrm.police.go.kr)

14. Changes to this policy

When this policy changes, we will post the change on this page along with its effective date. Changes that are unfavorable or significant to users will be announced 30 days in advance, and other changes 7 days in advance. If you need a previous version, please contact us.