shoWork — Privacy Policy

shoWork · Operated by YS Labs
Effective date: 2026-11-03

The short version

shoWork checks math you write by hand on an iPad. To check a line, the app sends a picture of that line to our server (hosted by Netlify), which passes it to Anthropic's Claude to read and check it.
We keep no copy of your handwriting or your lines. A check result is held on our server until the app collects it (usually seconds). One the app never collects is deleted within 70 minutes.
Problems you finish are saved as text on your iPad only.
There are no accounts, no ads, and no analytics or tracking.
To find and fix errors, the app and our server send error reports to Sentry. They contain no handwriting, math, device ID or IP address.
The app makes a random device ID so it can count your problems and remember your plan. It is not an advertising or hardware ID.
We do not sell personal information or share it for advertising.
Please do not write your name, school or other personal details on the page. The app shows this request when you first open it.

Who we are

YS Labs ("we", "us") develops and operates shoWork.
Yongin-si, Gyeonggi-do, South Korea
Email: contact@yslabs.dev

1. What stays on your iPad

Data	Kept on the iPad
History: each finished problem as text (problem and lines as math text, marks, the short explanations, hints you opened, date and time, solving time, and the topic, level and type of the first mistake)	Until you delete it (Settings → Delete all history) or delete the app
Settings and the first-run notice choice	Until you delete the app
Random device ID (in the iPad's Keychain)	Stays after the app is deleted, so problem packs and a family link still work after reinstalling. It is removed if the iPad is erased

No images or pen strokes are saved in History.

2. What leaves your iPad, and why

Data	When	Purpose	Stored by us?
A picture of the line you just wrote (PNG), the lines already read on the same page (as math text), and your iPad's number format (decimal point and digit separator)	Each time you finish a line	To read the line	No — passed to Anthropic and not kept
The problem and your lines as math text, the explanation language (English or Korean) and a school-level setting	When a line is checked, when you ask for a hint, and once when a problem is finished (to label its topic, level and type of mistake for History)	To check the line, write a hint, or label the problem	No — passed to Anthropic and not kept. The check result (marks, line numbers, short explanation) is kept until the app collects it, then deleted; one that is never collected is deleted within 70 minutes
Random device ID (we store only a shortened one-way hash of it)	With every request	To count requests per device, count problems against your plan, keep problem-pack balances, and link iPads in a Family plan	Yes — see Section 4
A random problem ID for each problem	With every request for that problem	To count each problem once against your plan	Yes, in the records for your plan or pack
Purchase information from Apple (product, purchase and expiry dates, Apple's transaction identifiers, refund or revocation status)	When you buy, restore or renew, and when Apple notifies us of a change	To know which plan or pack is active	Yes — see Section 4
Family plan: the family code and the hashed device IDs of joined iPads	When you create, join or leave a family	To share one plan across up to 3 iPads	Yes — see Section 4
Free weekly problem: when the last free problem started and its problem ID	When a free problem starts	To give each iPad 1 free problem every 7 days	Yes — see Section 4
Error reports: the kind of error, an error code, the response status and timing, the app and iPadOS versions, and the iPad model	When something goes wrong in the app or on our server	To find and fix errors	Sent to Sentry — see Sections 3 and 4. They contain no line pictures, math text, explanations, hints, device ID or its hash, purchase identifiers, IP address, iPad name or screenshots

No sharing with Anthropic of who you are. We do not send Anthropic your device ID, the problem ID or your IP address.
Request logs. Our server writes one log line per request. A line contains: the hashed device ID, which function was used, the explanation language, the school-level setting, the AI model, token counts, cost, timing, the resulting mark and line number, safety-check flags, and, once per finished problem, how many lines were rewritten or could not be read. Logs never contain images, your lines, explanations, hints or device tokens. Our hosting provider keeps these logs for up to 7 days.

3. Who processes data for us

Provider	Role	What it receives	Where
Netlify, Inc.	Hosting and our server	Requests in transit, the records in Section 4, request logs	United States
Anthropic, PBC	Reads handwriting and checks steps (Claude)	Line pictures, math text, the explanation language and school-level setting	United States
Functional Software, Inc. (Sentry)	Error reports	The error reports in Section 2 (no identifiers)	United States
Apple	App distribution and payments	As described in Apple's own policies (independent controller)	Its locations

Netlify, as a hosting provider, may also process technical connection data such as IP addresses to deliver and secure its service, under its own policy.
We do not use RevenueCat, analytics services or advertising networks.
Sentry is set not to store IP addresses.

4. How long data is kept

Data	Kept
Line pictures and math text	Not stored by our server. Anthropic does not use them to train its models and deletes them within 30 days (if flagged for breaking its usage policy: inputs and outputs up to 2 years, safety classification scores up to 7 years)
Check results	Deleted as soon as the app collects them. The app can collect a result for 10 minutes; one never collected is deleted at the next hourly clean-up (within 70 minutes)
Subscription records (purchase information) and the family code with its joined device hashes	While the subscription is active and for up to 24 months after it ends or is revoked (to restore purchases and handle refunds or disputes), then deleted
Device record: plan link, problem counts and problem IDs for the current and previous monthly cycle	Up to 24 months after the device was last used, then deleted
Problem-pack balance	While unused problems remain; once the balance is used up, deleted 24 months after it was last used
Problem-pack purchase records (to stop a purchase being applied twice)	Up to 24 months after the purchase, then deleted
Daily request counters per hashed device ID	Deleted 2 days after that day
Free-problem record (when the last free problem started and its problem ID)	Up to 38 days after the last free problem started (the 7-day period plus 31 days), then deleted
Check, hint and label counters per problem	Up to 31 days, then deleted
Error reports	Up to 90 days (kept by Sentry), then deleted
Request logs	Up to 7 days (kept by our hosting provider)
History and settings on the iPad	Until you delete them or the app

shoWork has no accounts, so there is no account to delete. To ask us to delete a record, email contact@yslabs.dev. Include the Order ID from your App Store receipt, so we can find a plan or pack record.

5. Your choices

Delete one problem from History or all of it (Settings → Delete all history). Deleting the app removes History and settings.
Leave a Family plan from Settings → Family. The plan owner can make a new family code, which disconnects the other iPads.
You can stop sending data at any time by not checking lines. History stays available on the iPad.

6. Subscriptions

shoWork Basic, Premium and Family are auto-renewing subscriptions (monthly or yearly). Problem packs are one-time purchases.
Payment, renewal, cancellation and refunds are handled by Apple under its policies. We never receive your payment card details.
See the Terms of Use and Support for how to cancel.

7. Children

shoWork is made for students, including children under 13 (or under the age of digital consent in their country). It is rated 4+ on the App Store.
shoWork does not ask for a name, email, birthday, phone number, photo or location. It has no accounts, chat, social feed, public sharing or advertising.
The first time the app opens, it asks students not to write their name or other personal details on the page.
The line pictures and math text a student writes are used only to give back the check, hint or History label that student asked for. They are not stored by us, not used to contact anyone, and not used to build profiles or show ads.
The random device ID and problem IDs are used only for the app's internal operations: counting problems, keeping plan and pack status, giving the free weekly problem, and limiting requests.
Error reports carry no identifier and are used only to keep the app working.
Purchases go through Apple, where parents can require approval with Ask to Buy.
Parents and guardians can ask us to review or delete records about their child's iPad by emailing contact@yslabs.dev. Because we hold no name or contact details, we may ask for the Order ID from the store receipt. If a child under 13 emails us, we use the email address only to reply once and then delete it, unless a parent contacts us.
COPPA. shoWork is designed to comply with the U.S. Children's Online Privacy Protection Act (COPPA). It collects no personal information from children that requires parental consent: line pictures and math text are not stored and are sent to Anthropic without any identifier, and the random device ID and problem IDs are used only to support the App's internal operations (listed above). They are never used to contact a child, build a profile or show ads, and are not combined with other information. For this reason we do not ask for parental consent.
No AI training. Anthropic does not use the lines it receives to train its models.
Not based on consent. We do not process children's data on the basis of consent, so the GDPR's parental-consent rule for information society services (Article 8) does not apply. The plan or pack is a contract with the person who bought it; for a child, a parent or guardian accepts the Terms (Terms, Section 2).

8. Security

Data that leaves the iPad is sent over encrypted connections (HTTPS).
We keep as little as possible, store a hashed device ID instead of the ID itself, keep no copies of handwriting, and limit access to the hosting dashboard to YS Labs.

9. Users in the EEA, the UK and Switzerland (GDPR / UK GDPR)

Controller: YS Labs (contact above). YS Labs is in South Korea, which the European Commission and the UK Government recognize as providing adequate protection.

Processing	Purpose	Legal basis
Reading and checking lines, hints, History labels (Anthropic, via our server)	To provide the checks you ask for	Performance of a contract with the person who bought the plan or pack (Art. 6(1)(b)); for a child's use, also our legitimate interest in providing the study feedback the parent paid for (Art. 6(1)(f))
Plan, pack and family records (Apple, Netlify)	To provide the plan or pack you bought	Performance of a contract (Art. 6(1)(b))
Request counting, request logs and the free-problem record	To keep the service working, give the free weekly problem and prevent misuse	Legitimate interests (Art. 6(1)(f))
Error reports (Sentry)	To find and fix errors	Legitimate interests (Art. 6(1)(f))

International transfers: Netlify, Anthropic and Sentry process data for us in the United States, under the safeguards they offer (such as the EU–U.S. Data Privacy Framework or Standard Contractual Clauses). Email us for a copy of the safeguards.
Do you have to provide data? Only to check lines. Without sending a line, it cannot be checked. History works without sending anything.
We do not make automated decisions that have legal or similarly significant effects. The marks and explanations are study feedback only.
Your rights: access, rectification, erasure, restriction, objection and data portability, and the right to complain to your local data protection authority (in the UK, the ICO). Because we do not collect your name or any direct identifier, we may not be able to link records to you. Write to us and we will do what we can. We reply within one month.

10. California residents (CCPA/CPRA)

Categories collected in the last 12 months:
identifiers (a hashed random device ID and random problem IDs)
commercial information (purchase records from Apple)
user content (line pictures and math text, passed to our provider to give you the check, and not stored by us)
diagnostic information (error reports with the app and iPadOS versions and the iPad model, not linked to a device ID)
Sensitive personal information: we collect none.
Sale and sharing: we do not sell or share personal information, including for cross-context behavioral advertising, including that of consumers under 16.
Your rights: to know, delete and correct, and not to be discriminated against for using them. Email contact@yslabs.dev; an authorized agent may act for you with your written permission.

11. Changes

If this policy changes, we post the new version here with a new effective date. Material changes will be noted in the app's release notes.

12. Contact

YS Labs · contact@yslabs.dev · Support

한국어 요약 · 개인정보 보호법 고지

shoWork · 운영: YS Labs · 시행일 2026년 11월 3일

처리 목적·항목 - 손글씨 읽기: 방금 쓴 줄의 그림(PNG), 같은 페이지에서 이미 읽은 줄(수식 텍스트), 기기의 숫자 형식(소수점·자릿수 구분 기호) - 풀이 확인·힌트·히스토리 분류: 문제와 풀이 줄(수식 텍스트), 설명 언어(영어·한국어), 학년대 설정 - 요금제·문제 수 관리: 앱이 만든 무작위 기기 ID의 단방향 해시, 문제마다 만든 무작위 문제 ID, Apple 구매 정보(상품·구매/만료 일자·거래 식별자·환불 여부), Family 가족 코드와 연결 기기 해시 - 주간 무료 문제: 마지막 무료 문제를 시작한 시각과 그 문제 ID - 서비스 운영: 요청 기록(기기 ID 해시·기능·언어·모델·토큰 수·비용·시간·판정 표시, 문제가 끝날 때 다시 쓴 줄·읽지 못한 줄의 수). 그림·풀이·설명은 들어가지 않습니다. - 오류 수정: 오류 보고(오류 종류·코드·응답 상태·소요 시간·앱/iPadOS 버전·iPad 모델). 손글씨·수식·설명·기기 ID와 해시·거래 식별자·IP·기기 이름·화면 캡처는 들어가지 않습니다. - 히스토리(문제·줄·판정·힌트를 텍스트로)와 설정은 기기 안에만 저장됩니다.
보유 기간 - 줄 그림·수식 텍스트: 서버에 저장하지 않습니다. Anthropic은 30일 이내에 삭제합니다(이용 정책 위반으로 표시되면 입력·출력 최대 2년, 안전 분류 점수 최대 7년). - 판정 결과: 앱이 가져가면 바로 삭제합니다. 앱은 10분 안에 가져갈 수 있고, 끝내 가져가지 않은 결과는 매시간 정리 때(최대 약 70분) 삭제합니다. - 구독 기록·가족 코드: 구독 기간과 종료·취소 후 최대 24개월(구매 복원·환불·분쟁 대응) 뒤 삭제. - 기기 기록(요금제 연결·이번 달과 지난달 문제 수·문제 ID): 마지막 사용 후 최대 24개월 뒤 삭제. - 문제 팩 잔량: 남은 문제가 있는 동안 보관, 다 쓴 뒤 마지막 사용 후 24개월 뒤 삭제. 팩 결제 기록(중복 적용 방지): 구매 후 24개월. - 기기별 일일 요청 수: 해당 날짜 후 2일. 문제별 판정·힌트·분류 호출 수: 최대 31일. - 주간 무료 문제 기록: 마지막 무료 문제 시작 후 최대 38일(7일 + 31일) 뒤 삭제. - 오류 보고: Sentry에서 최대 90일. - 요청 기록(로그): 호스팅 업체에서 최대 7일. - 기기 안 데이터: 이용자가 삭제할 때까지 보관합니다.
제3자 제공: 하지 않습니다. 판매·광고 목적으로 제공하지 않습니다.
처리 위탁 및 국외 이전

수탁자	위탁 업무	이전 국가	이전 항목	이전 시기·방법	보유·이용 기간	연락처
Netlify, Inc.	서버 호스팅	미국	요청 내용(전송 중), 4절 기록, 요청 기록	줄을 확인할 때·구매할 때 암호화된 네트워크(HTTPS)로 전송	판정 결과는 가져가면 즉시(가져가지 않으면 최대 약 70분), 그 밖의 기록은 위 「보유 기간」	privacy@netlify.com
Anthropic, PBC	손글씨 읽기·풀이 확인(Claude)	미국	줄 그림·수식 텍스트·설명 언어·학년대 설정(기기 ID·IP 미전송)	줄을 확인할 때 암호화된 네트워크(HTTPS)로 전송	학습에 쓰지 않고 30일 이내 삭제(이용 정책 위반 표시 시 최대 2년)	privacy@anthropic.com
Functional Software, Inc.(Sentry)	오류 수집	미국	오류 보고(1항, 기기 ID·IP 미포함)	오류가 날 때 암호화된 네트워크(HTTPS)로 전송	최대 90일	compliance@sentry.io

결제는 Apple이 자체 방침에 따라 처리합니다.
국외 이전의 법적 근거: 정보주체와의 계약 이행을 위한 처리위탁으로서 이 처리방침에 공개(개인정보 보호법 제28조의8 제1항 제3호 가목).
국외 이전을 원하지 않으시면 줄 확인을 쓰지 않으면 됩니다(이 경우 확인 기능을 쓸 수 없고, 히스토리는 그대로 볼 수 있습니다). 5. 파기: 보유 기간이 끝나거나 요청을 받으면 지체 없이 삭제합니다(전자 파일은 복구할 수 없는 방법으로 삭제). 6. 정보주체의 권리: 열람·정정·삭제·처리정지를 contact@yslabs.dev로 요청하실 수 있습니다. 법정대리인도 요청할 수 있습니다. 7. 만 14세 미만 아동
이름·연락처·사진·위치를 요청하거나 수집하지 않습니다.
처음 실행할 때 종이에 이름 등 개인 정보를 쓰지 말라고 안내합니다.
서비스 제공(계약 이행, 제15조 제1항 제4호)에 필요한 범위에서만 처리하며 동의에 근거한 처리를 하지 않으므로 법정대리인 동의를 받지 않습니다. 만 14세 미만 아동의 구독 계약은 법정대리인이 체결합니다(이용약관 2조).
법정대리인은 위 메일로 기록 삭제를 요청할 수 있습니다. 8. 자동 수집 장치: 쿠키·광고 식별자를 쓰지 않습니다. 기기 ID는 앱이 만든 무작위 값으로, 문제 수·요금제·주간 무료 문제 관리에만 씁니다. 오류가 나면 식별자 없는 오류 보고를 Sentry로 보냅니다. 9. 안전성 확보 조치: 전송 구간 암호화(HTTPS), 기기 ID는 해시로만 보관, 손글씨 미보관, 관리 화면 접근 제한. 10. 개인정보 보호책임자: YS Labs 개인정보 보호 담당 · contact@yslabs.dev 11. 권익침해 구제
- 개인정보분쟁조정위원회 1833-6972 (www.kopico.go.kr)
- 개인정보침해신고센터 118 (privacy.kisa.or.kr)
- 대검찰청 1301
- 경찰청 182 12. 변경: 방침이 바뀌면 시행 전에 이 페이지와 시행일을 갱신합니다.