Privacy

Effective 2026-10-06.

The short version

Pongdang is an app that runs in your browser. Your academy's data (students, classes, passes, attendance, absences) is stored on your own device. We do not have accounts, we do not see your students' names, and we do not sell or share data.

What reaches our server

• The app files (served by Cloudflare Pages). Like any website, Cloudflare processes your IP address to deliver pages.
• QR self check-in (only if the academy uses it): the student's phone sends a message encrypted to the academy's key. Our server stores the encrypted message until the academy's device collects it (deleted then, or after 14 days at most), plus the time it arrived. We cannot read it: it contains the student's check-in code, and, only if the academy turned on the location check, the phone's location at that moment (compared on the academy's device and not stored). The academy's device answers with the student's remaining sessions, also encrypted so only that phone can read it (deleted when read or within 1 day).
• Aggregate visit counts: daily totals of page views, country and referring site, without IP addresses, cookies or identifiers.

No cookies. No third-party scripts, fonts, analytics or ads.

Children

Academies may record information about children. The academy is responsible for getting consent from parents/guardians (Korea: consent of a legal representative is required for children under 14; US: the app is used by the business, not directed at children). Pongdang includes a consent form template; it is not legal advice. Students' phones store only their own check-in code for that academy.

Backups

Backup files are encrypted on your device with a key derived from your recovery code. Where you keep them (Google Drive, iCloud, KakaoTalk, a PC) is your choice and subject to that service's terms. We cannot open them and cannot recover a lost code.

Overseas processing

Cloudflare (USA) serves the site and holds encrypted check-in messages briefly on servers that may be outside your country.

Your rights

Your data is on your device: you can export it (More → Export to Excel, or an encrypted backup) or delete it (Settings → Delete all data) at any time. We keep no account data. For the free trial, the check-in server counts how many QR check-ins each academy's (anonymous) inbox has relayed and whether it is activated; activating sends only the access code, which is checked and not stored, never academy data. For questions: qkqhqkqh112112@gmail.com.