WorkLink Privacy Policy
Version 1.2 · Effective November 9, 2026 · Operated by Undongsukje
This policy applies to the WorkLink app (called 근무링크 in Korea). Undongsukje (운동숙제, “we”) also operates UnionLink (노조링크), a labor-union app, and the two apps share the same servers and the same sign-in account. WorkLink is not a labor-union app: using WorkLink does not create any record of labor-union membership, and no union rosters, notices, messages, votes, or member-event data are available in WorkLink.
In short: we handle your sign-in ID, the shifts you enter, and the requests and chats you exchange with coworkers, plus anonymous app usage statistics. No ads, no selling of data, and no tracking across other apps or websites. Your data is stored on servers in Seoul, Republic of Korea.
1. Information we collect
| What | When | Why | How long we keep it |
|---|---|---|---|
| Sign-in identifier — your Kakao member number, or the unique identifier from Apple, Google, or LINE, converted into an WorkLink account number (we do not receive your name, email address, photo, or phone number) | When you sign in (required) | Creating your account and signing you in | Until you delete your account |
| Display name — a name or nickname you type in yourself | When you join a group | So coworkers can recognize you | Until you delete your account or leave the group |
| Your shifts — shift codes by date (Day, Evening, Night, Off, etc.) and shift codes you create | When you enter them | Your calendar and finding shared days off | Until you delete your account. When you leave a group, your shifts are removed from that group |
| My settings — time of each shift code, total annual leave days and carried-over days (leave carried from last year), shift reminder times and on/off, app language, shift display style, weather area (the name of the city or district you pick; it is not location coordinates), repeating shifts (on/off, the shift system you chose, and a shift order you made yourself), shift patterns you named and saved (name and order, up to 8), and your shift chip row and chip colors. Only if you turn on the optional “pay estimate”: hourly wage, premium rates, fixed allowances, and overtime minutes per day | When you change a setting | So your settings carry over when you change phones, and to show weather for your commute. Only you can read them; our server functions do not read them | Until you delete your account |
| Shift groups — group name, members, invite code (link) | When you create or join a group | Viewing shifts alongside coworkers | Until the group is deleted or you delete your account |
| Swap requests — dates, shift codes, status (pending, accepted, declined, other day suggested, withdrawn), and the note you write. If you answer with the [Swap] or [Can’t] buttons in a notification, the same record is kept (“Can’t” goes straight to our server without opening the app, and you can reopen it with [Undo] within 10 minutes; “Swap” is confirmed only after you view a preview in the app and tap once more) | When you send or answer a request | Sending and answering requests | Until you delete your account |
| One-on-one chats and group chats — messages (up to 1,000 characters), read times, the name and members of a group chat, and your list of blocked people | When you chat | Talking things over with coworkers | Until you delete your account. A group chat and its messages are deleted when the last person leaves |
| Group memos and memo photos (optional) — memo text you attach to a date (up to 200 characters), and photos you pick yourself or take on the spot to attach to a memo (up to 3 per memo). Before uploading, a photo is shrunk on your phone (long side 1600 pixels, about 300 KB each) and extra information inside the photo such as location (EXIF) is removed. The original before shrinking is not uploaded | When you save a memo | So your memos and photos are still there when you change phones, and to share a memo you chose to “show to the group” with coworkers in the same group | Until you delete the memo or its photo, leave that group, or delete your account |
| Reports — reason, note (up to 200 characters), and a copy of the last 10 messages of the reported chat | When you report someone | Handling reports | As long as needed to handle the report (no longer than 1 year) |
| Notification token and device information — the push address that identifies your phone (including which app it belongs to), your app language (a single word: ko, en, or ja), whether your app supports notification buttons, the app version, the operating system type (Android or iOS), and the region in your phone’s language setting (for example KR). This is not location information | When you turn on notifications, and when you change the app language | Notifications for requests, replies, and chats, sending notifications in your language, retiring old app versions, and usage-ratio statistics by country and device (totals only) | The notification token: until you delete your account or turn off notifications. App version, operating system and region: until you delete your account |
| Notification settings and shared-day-off notification log (optional) — which kinds of notifications you turned on or off, and the dates and number of notifications sent when your shared days off changed (up to 3 per day) | When you change notification settings, and when saving your shifts changes your shared days off | To send only the notifications you want and not too often | Until you delete your account or turn off notifications |
| AI connection records (optional) — if you connect your own AI app (such as ChatGPT or Claude) to WorkLink: which app, the scope (shift schedule only), when you connected and last used it, which features were called and when, and whether they succeeded | Only when you connect | Managing connections and preventing abuse | Until the connection ends or you delete your account. We do not keep the questions your AI app sends or the content it returns |
| AI-app visibility consent (optional) — for each group, whether “show my masked shifts to the AI-app company of people in the same group who have connected an AI app” is on or off, and when you changed it | When you join a group, or when you turn it on or off in My Info (it is off at first) | So that only the shifts of people who agreed are visible to AI apps | Until you leave the group or delete your account |
| “Added to my calendar” record (optional) — shown on a swap request card: who added it, when, and whether it was added through an AI connection | When an accepted swap request is added to your calendar through an AI connection | To prevent the same request from being added twice (we use it for nothing else) | Until that request card is deleted. Deleted when you delete your account |
| Undo copy and add counts (optional) — when your calendar is filled in through an AI connection, a separate copy of that month’s shifts from before they were overwritten (only the most recent one per month), and the number of additions and undos | When shifts are added to your calendar through an AI connection, or undone | So you can undo within 7 days, and to prevent too many additions in a short time | After 7 days it is no longer used for undoing. It is replaced by a newer copy the next time shifts are added, or deleted when you delete your account |
| Requests sent by link (optional) — a web link for a coworker who does not have the app: the link code (stored only as a hash), the date, your shift and the recipient’s shift (letters such as Day, Evening, Night, Off), the display name you choose to show (up to 12 characters), a one-line note, and the answer the recipient gives on the web (swap or can’t), a one-line reply, and the time they answered | When you create a link, and when the recipient answers it | So a coworker without the app, or who is not signed in, can still answer a request | A link can be answered only once and closes after 7 days; it closes immediately if you withdraw it. The request card is kept until you delete your account, and your links are deleted when you delete your account |
| Calendar subscription link for my shifts (optional) — the secret token of the address your phone calendar refreshes by itself, and a pre-built calendar file (from last month for four months, without off days or leave, with shift letters masked) | When you create the subscription link under “My shifts in my phone calendar” in My Info | So Google, Apple, or Samsung Calendar can show your shifts automatically | If you turn the link off or create a new one, the old address closes and the file is deleted. Deleted when you delete your account |
| Usage statistics — when the app was first opened, which sign-in method you used, how many times you did a few actions (reading a schedule photo, saving shifts, creating, opening, or accepting an invite link — including which entry point an invite was sent from — viewing or sharing a share card), your app language, device type, operating system version and app version, the approximate country and region derived from your IP address (the IP address itself is not kept), and a random number assigned each time the app is installed (the app instance ID) | While you use the app (automatic) | To improve the app and see which steps users find difficult (not used for advertising, marketing, or profiling users) | Up to 14 months (may be shorter depending on Google Analytics settings). They are not linked to your account, so we cannot find and delete them separately when you delete your account; they are deleted when the period ends |
| Operations statistics — totals only, such as the number of sign-ups, the number of devices in use, and the number of notifications that succeeded or failed. We collect only numbers that cannot be traced to any person | When you use the service (automatic) | Running the service and checking for errors | Totals are kept, and cannot be traced back to an individual |
| Clicks on guide links in videos and posts — when a guide link in a video or post (unionlink.kr/go/…) is opened, we count only the number per day, link name, and device type (Android / iPhone / other). We do not store IP addresses, device identifiers or cookies. To reduce repeat counts from the same person, one piece of text, “the date this link was last counted,” is kept in your browser (not a cookie, and not sent to our servers) | When a guide link is opened (automatic) | To see which guides reach people | Totals are kept, and cannot be traced back to an individual |
| Server access logs — account number, IP address, time | When server functions are called (automatic) | Security and troubleshooting | 30 days |
| Diagnostic and performance data sent by components in the app (Firebase and the Kakao SDK) | While you use the app (automatic) | Checking that the app works properly | According to each component’s own practices |
What our servers do not receive: your location, contacts (address book), your whole photo library (we receive only the photos you pick one by one to attach to a memo), microphone, camera images (we receive only the single photo you take to attach to a memo), health information, payment information, government-issued ID numbers, or advertising identifiers. (Some of these are used only on your phone — see below.) We work out your country neither from location nor from your IP address, only from the region in your phone’s language setting. Shift codes (Day, Evening, Night, Off, etc.) are a work schedule, not health information. Usage statistics do not contain your name, shift contents, messages, account number, or advertising identifiers. Access tokens from Kakao, Apple, Google, and LINE are used only to confirm your sign-in and are not stored.
What happens only on your phone (not sent to our servers)
- Reading a schedule photo, screenshot, or Excel file — the photo, screenshot, or Excel file you pick is read into text on your phone (Google ML Kit on Android, Apple Vision on iPhone). The file is not uploaded to our servers or stored, and the temporary copy is deleted after reading. The camera is used only to take such a photo or a memo photo, and to scan an invite QR code.
- Shift reminders — your phone shows a notification at the time you set on a shift day. The time is scheduled on your phone and is not uploaded to our servers. The app uses the “boot completed” permission to schedule the reminders again after the phone restarts.
- Share cards — the app builds a single image (PNG) of this month’s shifts or shared days off on your phone. Hospital or ward names and notes are not put on the card, and coworkers appear only as a one-letter initial. The image goes only to the app you choose in the system share sheet and is not uploaded to WorkLink servers. The WorkLink address is printed in a corner of the card.
- Phone calendar (optional) — to show your phone calendar events as bars in the calendar, if you allow it the app only reads the events (title, date, time) on your phone. They are not sent to our servers or stored. Only if you turn on “Add directly to phone calendar”, the app creates an “WorkLink” calendar on this phone, adds, edits, and deletes your shifts in it, and deletes the whole calendar when you turn it off. You can withdraw the permission at any time in device settings.
- Home-screen widgets and watch — to show today’s shift on a widget (and on a watch), a copy is kept on your phone and is not sent to our servers. It is deleted when you sign out or delete your account. The weather widget downloads a public weather file that contains no personal information (section 4).
- Weather and air quality — the app reads one document from our server that contains values for the whole country and picks only your area on your phone. This reading does not tell the server which area you are in. The area name you pick is saved in “My settings” (section 1).
- Picking your weather area with your location (optional) — the app reads your device’s approximate location (not precise location) on the device itself to pick the nearest area for showing weather. It reads it only in these cases. (1) The first time weather is shown while no area is set, once — the app first shows a note that it checks your approximate location just once and neither saves nor sends it, and when you tap “Continue” your device’s location permission prompt appears. If you tap “Choose myself” or do not allow it, the location is not read and the area-picking screen opens. (2) If you have already allowed location in your device settings, once when no area is set, without the note. (3) When you tap “+ Weather”, or tap “Use my location” on the area-picking screen. The location value is never sent to a server, stored or logged, and is discarded as soon as the area is chosen (the same applies when the app uses an approximate location your device obtained within the last 30 minutes). You can turn off location permission in device settings at any time, and you can still choose your area manually without it.
- Store review prompt — after a swap request has been completed, the phone may ask the app store to show its standard rating prompt (up to three times in total, and at least 60 days after the last request). Only the number of the swap, the time we asked, and the result are kept on the phone. Reviews are written in the Apple or Google window, and WorkLink does not receive your star rating or text.
- Picking memo photos — you pick photos one at a time with your phone’s photo picker (Android Photo Picker, or the iPhone photo-selection window) or take them with your phone’s camera app. So the app does not ask for permission to access your photo library and cannot see photos you did not pick. It works regardless of settings such as “allow only selected photos.”
- Kept only on this phone and not sent to our servers — your hire date and the basis for calculating annual leave, the shifts you had before switching to a repeating schedule (the last 5, “Shifts before the change”), and the “changed for that day only” marks. They disappear when you sign out on this phone or uninstall the app.
- Information that exists only on your phone disappears when you uninstall the app.
2. How we use it
Only to provide the service and improve the app, as described in the “Why” column of the table above. Usage statistics are not linked to your account and are used only to improve the app. We do not use your information for advertising, marketing, or analyzing users (profiling), and we do not sell it.
3. Who can see it
- Your shifts are visible to coworkers in a group only when you add them to that group, and only as shift codes such as Day, Evening, Night, and Off. We do not collect your hospital or employer name.
- Swap requests and one-on-one chats are visible only to the two people involved. Our staff look at only the last few messages of a reported chat, and only when a report is made.
- Even if a coworker in your group connects their own AI app to WorkLink, your shifts are not visible to that AI app unless you have separately turned this on for the group. Only if you turned it on, your masked shift codes (Day, Evening, Night, Off, blank) and your in-group display name may be passed to the company of the AI app that coworker connected (section 5-2).
- A request sent by link shows the date, shift codes, the display name you chose to show, and the note to whoever opens that link. A link can be answered only once, closes after 7 days, and closes immediately if you withdraw it. We do not receive the recipient’s name, contact details, or device information; to prevent a link from being opened too many times from the same place, we mask the IP address by hashing it per time period and only count the number of opens.
- Anyone who knows the address of your calendar subscription link can see that calendar (without off days or leave, with shift letters masked). Do not share the address; if it becomes known, create a new one in My Info and the old address closes.
- Your settings (including pay settings) can be read only by you. They are not visible to coworkers in your group or through an AI connection, and they do not appear on our operator screens.
- Memos and memo photos are “only me” by default. A memo marked “only me” and its photos are not shown to coworkers in your group, through an AI connection, or on operator screens. If you change a memo to “show to the group,” the coworkers currently in that group (excluding people you blocked and people who blocked you) can see the memo text and photos, and if you change it back to “only me,” it is hidden again immediately. Memos and photos are never passed to an AI app.
- We do not sell personal information to anyone or pass it on for advertising.
4. Service providers and international transfers
| Recipient | What | Why | Where |
|---|---|---|---|
| Google (Firebase) | Storing and processing the data in the table above (including usage statistics through Firebase Analytics) | Servers, sign-in, delivering notifications, usage statistics | Server functions run in Seoul, Republic of Korea (asia-northeast3). Some components may be processed in the United States and other countries |
| Google Cloud (public weather file) | The weather widget downloads a public weather file that contains no personal information. By the nature of downloading, our server can see your phone’s IP address | Weather widget | Stored in a Google Cloud storage bucket in Seoul (asia-northeast3) |
| Kakao | Confirming Kakao Login | Sign-in | Republic of Korea |
| Google (sign-in) · LINE | Confirming Google and LINE sign-in (we use only the unique ID and do not extract your email address, name, or photo) | Sign-in | Google may process data in the United States and other countries, and LINE in Japan and other countries |
| Apple | Confirming Sign in with Apple; delivering iPhone notifications | Sign-in, notifications | United States and other countries |
| The company that runs the AI app you connect, or the AI app connected by someone in your group (only if you separately turned this on) — for example OpenAI or Anthropic | Each time the AI app asks after a connection, only what is within the scope allowed at connection (shift schedule only): the connected person’s shifts; the names and number of people of the groups that person belongs to, and the in-group display names of the people in those groups (for the group list, names only, regardless of consent); the shifts the connected person wants to add to their calendar and the existing shifts that would be overwritten (preview); the masked shift codes (Day, Evening, Night, Off, blank) and in-group display names of those in the same group who agreed; the reply note to a request sent by the connected person (first 120 characters); and, in a one-on-one chat the connected person opened, the other person’s messages (first 200 characters, only if “send messages” is on) | To answer what the connected person asked in that AI app | Decided by that company. There is no processing or data-sharing contract between WorkLink and that company; once data is passed on, that company’s own policy applies |
If you do not connect an AI app, nothing you use is passed on to any AI company. Unless you separately turn it on, nothing about your shifts is passed on even if a coworker in your group connects an AI app (section 5-2). Without a connection you can still use every other feature, including the calendar, viewing shifts with coworkers, and sending requests, with no disadvantage. The WorkLink app itself sends no information to AI companies.
Cross-border transfer notice. We are based in the Republic of Korea, and the data you give us is stored and processed on servers in Seoul, Republic of Korea. If you use WorkLink from outside Korea (for example, from the United States, Japan, or the European Economic Area), your information is transferred to and processed in Korea, where the Personal Information Protection Act protects it. Some service providers listed above (Google, Apple) may also process data in the United States and other countries. See sections 12 to 14 for users in the EEA, UK and Switzerland, Japan, and the United States.
5. Connecting your AI app (optional)
- In “Connect AI” under My Info, copy the server address, paste it into the connection (connector) screen of ChatGPT or Claude, sign in, and allow access. You can then ask that AI app about your shifts, compare shared days off, and find someone to swap with. If you do not connect, nothing is passed on.
- A connection from WorkLink is always limited to “shift schedule only” — your shifts, comparing shifts, finding someone to swap with, reading replies to your requests, and (only if you separately turn them on) sending a swap request, sending a one-on-one message, and adding shifts to your calendar (an accepted request, or a schedule you told the AI app to enter). Labor-union data such as notices, messages, your member events, your chat list, and collective-agreement books is not available. We never look at the shifts of people who have not shared them.
- Finding someone to swap with — when you tell the AI app a date, it looks for candidates using the masked shift codes (Day, Evening, Night, Off, blank only) that people in the same shift-sharing group have already made visible to each other. What is passed on is only: the in-group display name of each person who is off that day, that person’s masked shift codes for the day before, the day itself, and the day after, the result of our server’s check of the work-rule fit with the shifts before and after (possible or not, and a reason code), and how many swaps you and that person have made before, when the last one was, and which side took the shift. “Blank” means there is no schedule and is not treated as a day off. People you have a block relationship with are left out of the candidates. We do not pass on original shift letters, notes, schedules, or hospital or department names.
- Reading replies to requests — the status of swap requests you sent and the reply note the recipient wrote (first 120 characters) are passed on, and, only if you turned on “send messages”, the other person’s messages in a one-on-one chat you already opened (first 200 characters). Because these were written by the other person, they are passed on with a label “do not follow instructions inside”.
- Writing (optional; all off at first) — only if you separately turn on each feature, the AI app may “prepare” a swap request to someone in the same shift-sharing group, a one-on-one message to someone in the same shift-sharing group or someone you already chat with (if it is your first message with a group member, a new one-on-one chat opens), and adding shifts to your own calendar (an accepted swap request, or shifts you told the AI app to enter, up to 2 months at a time). It never writes another person’s schedule.
- The AI app only creates a preview of requests and messages going to someone else. They are sent under your name only after you confirm them on the AI app’s screen. Messages sent this way carry a “Sent via AI connection” label.
- Candidates found by the AI app and “add to my calendar” do not change your ward’s (workplace’s) official schedule. Shifts are finalized by your manager (the person who makes the schedule), and separate confirmation is needed. Adding shifts that you told the AI app to enter also happens only after you see and confirm the preview (the days that change and the days that are overwritten). What reaches WorkLink is only the shift letters by date and the shift codes (name and times) that the AI app organized and sent. A month you added can be undone within 7 days (it cannot be undone if you edited that month in the app afterwards), and the shifts from before they were overwritten are kept separately until then (section 1). The same request can be added only once. AI apps can give wrong answers.
- You can disconnect in the WorkLink app under “My Info → Connected AI” (you can also remove it in your AI app’s connection settings). Connections end automatically after 90 days without use, and when you delete your account. If you want to disconnect right away but can’t, let us know at help@unionlink.kr.
- “ChatGPT” is a trademark of OpenAI, and “Claude” is a trademark of Anthropic PBC. This policy names them only as examples of AI apps you can connect, and does not mean that we are affiliated with, sponsored by, or endorsed by those companies.
5-2. A coworker’s AI app in your group (only if you separately turn it on)
- When someone in your shift-sharing group connects their own AI app to WorkLink, the only information about other people that is passed on to that AI app is their masked shift codes (Day, Evening, Night, Off, blank) and their in-group display name. Original shift letters and notes are not passed on. However, when the connected person looks at the group list in the AI app, the in-group display names of people who have not turned this on also appear in the list (their shifts do not).
- This is passed on only if you separately turned on “show my shifts, masked, to the AI-app company of people in the same group who connected an AI app” when you joined the group (or in My Info). It is off at first, and the shifts of anyone who has not turned it on, or has turned it off, are not passed on. You can still use all other group features without turning it on.
- You can turn it off at any time in My Info; after that, it is left out of AI app requests that follow (what has already been passed on to the AI-app company may be kept under that company’s policy).
6. Deletion and your rights
- You can delete your account yourself at any time in the app under “My Info → Delete Account.” When you do, the information kept “until you delete your account” in the table above is deleted, and you are removed from your shift groups. Usage statistics are not linked to your account, so they cannot be found and deleted separately; they are deleted when their retention period ends. See how to delete your account for details.
- You can edit or delete your shifts yourself in the app. When you leave a group, your shifts are removed from that group.
- A memo photo is deleted from our servers when you delete that photo (after confirming “this is what will change” by long-pressing the photo), delete the memo, leave that group (including when you are removed from it), or delete your account. The photos one person can keep uploaded add up to at most 20 MB.
- To request access to, correction of, deletion of, or suspension of processing of your information, contact help@unionlink.kr. We will handle it without undue delay after confirming your identity.
- Connecting an AI app is optional, and you can disconnect at any time (section 5). Letting a coworker’s AI app see your shifts is also optional, and you can turn it off at any time (section 5-2).
7. Users under 18
WorkLink is only for people aged 18 or older. We do not knowingly collect information from anyone under 18. If we learn that we have collected information from someone under 18, we will delete it.
8. Keeping your data safe
- All communication between the app and our servers is encrypted (TLS). Stored data is protected by the encryption provided by our cloud provider.
- Server rules allow you to read only what you and members of your groups are allowed to see. The app cannot change the database directly; every change goes through server functions.
- If a data breach occurs that affects you, we will notify the supervisory authority and affected users as required by the laws that apply.
9. Privacy officer
| Item | Details |
|---|---|
| Data controller (personal information handler) | Undongsukje (운동숙제), Republic of Korea (business registration no. 347-38-01712) |
| Privacy officer | Hanul Jo (조한울), Representative of Undongsukje |
| Contact | help@unionlink.kr |
Please send any questions, complaints, or requests for remedy about how we handle your information to the contact above. We will reply without undue delay.
10. Remedies in Korea
Under Korean law, you can also contact the following bodies (services mainly in Korean):
- Personal Information Dispute Mediation Committee — 1833-6972 (+82-1833-6972 from abroad) · kopico.go.kr
- Personal Information Infringement Report Center (KISA) — 118 (within Korea, no area code) · privacy.kisa.or.kr
- Supreme Prosecutors’ Office, Cyber Investigation Division — 1301 (within Korea, no area code) · spo.go.kr
- Korean National Police Agency, Cyber Bureau — 182 (within Korea, no area code) · ecrm.police.go.kr
11. Changes to this policy
When we change this policy, we will announce it in the app and on this page starting 7 days before the change takes effect. Changes that are unfavorable to you or otherwise significant will be announced starting 30 days in advance, and we will ask for your consent again where required.
12. Users in the EEA, UK, and Switzerland (GDPR)
Controller: Undongsukje (contact details in section 9).
Legal bases: performance of our contract with you (Art. 6(1)(b)) for your account, shifts, groups, swap requests, chats, notifications, settings (including the weather area), memos and memo photos, and calendar link; our legitimate interests (Art. 6(1)(f)) in keeping the service secure, handling reports and abuse, server logs, diagnostics and anonymous usage statistics; your consent (Art. 6(1)(a)) for connecting an AI app, for letting a coworker’s AI app see your masked shifts, for push notifications, and for location, phone calendar, camera and photo access on your device, which you can withdraw at any time without affecting processing before withdrawal.
Providing your sign-in identifier is necessary to create an account; without it you cannot use the service. Other items are provided only when you choose to use the related feature.
Retention: as shown in the table in section 1.
Recipients and international transfers: see section 4. Your data is stored in the Republic of Korea, which the European Commission has recognized as providing an adequate level of protection (adequacy decision of 17 December 2021) and which the United Kingdom has also recognized (UK adequacy regulations in force since 19 December 2022). Transfers to service providers in other countries rely on the safeguards those providers offer (such as Standard Contractual Clauses). When you connect an AI app, or turn on the setting that lets a coworker’s AI app see your masked shifts, data is passed on to the AI-app company at the request of the person who connected it.
Your rights: access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. You can exercise them in the app (editing or deleting shifts, deleting your account) or by emailing help@unionlink.kr.
Complaints: you have the right to lodge a complaint with the data protection supervisory authority in your country of residence or work, or where the alleged infringement took place.
We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.
13. Users in Japan (Act on the Protection of Personal Information)
For users in Japan, the Japanese version of this policy (/worklink/ja/privacy) sets out the information required under the Act on the Protection of Personal Information (APPI): the purposes of use, provision to third parties, entrustment, information about the Korean personal information protection system, our security control measures, and how to request disclosure. In summary: we use your information only for the purposes in section 1; we do not provide it to third parties without your consent except as permitted by law; your data is handled in the Republic of Korea, where it is protected under the Personal Information Protection Act (PIPA) and supervised by the Personal Information Protection Commission (PIPC); you can request disclosure, correction, suspension of use, or deletion at help@unionlink.kr; and our business address is provided without delay upon request at the contact in section 9.
14. Users in the United States
This section is written for California residents (California Online Privacy Protection Act and the California Consumer Privacy Act) and is offered, as far as the law allows, to residents of other U.S. states.
- What we collect and why: the categories in the table in section 1 — identifiers (sign-in ID, display name, notification token, IP address in server logs), information you enter (shifts, requests, chats, settings including any pay-estimate figures you choose to enter), and internet or app activity (anonymous usage statistics) — only for the purposes stated there. We do not collect precise location, and the approximate location read for weather stays on your device. We do not collect Social Security numbers, financial account information, or health information.
- No sale or sharing: we do not sell personal information, and we do not “share” it for cross-context behavioral advertising. We use no advertising identifiers and show no ads.
- Retention: as shown in the table in section 1.
- Your rights: to know what we collect and how we use it, to access a copy, to correct, and to delete your personal information, and not to be treated differently for using these rights. Use the app (edit or delete your data, delete your account) or email help@unionlink.kr. We will verify your identity (for example through your signed-in account) and respond within the period the applicable law requires. You may use an authorized agent.
- Do Not Track: the app does not track you across other apps or websites, so it does not respond differently to “Do Not Track” signals.
- Children: the service is for people aged 18 or older (section 7).
Revision history
- November 9, 2026 — Version 1.2 (described in more detail when the app reads your location to pick a weather area, to match app version 1.0.4: the note shown once when weather is first displayed with no area set and your device’s location permission prompt, the case where you have already allowed location, and when you tap “+ Weather” or “Use my location”. The location is still used only on your device and is not sent to a server or stored. This change does not reduce your rights, and the location is read only if you allow it in your device’s permission prompt, so this version takes effect from the day it is published.)
- November 7, 2026 — Version 1.1 (added a guide to using an AI app to find someone to swap with, read replies to requests, and add shifts to your own calendar and undo it; reorganized so that your masked shifts are shown to a coworker’s AI app only if you separately turn it on. Updated for app version 1.0.1: added or corrected the descriptions of Google and LINE sign-in, group chats, notification buttons and notification language, requests sent by link, the calendar subscription link for your shifts, usage statistics, the storage of your settings on our server (weather area, annual leave, reminder times, etc.), location used only on your phone, the public weather file for the weather widget, and what happens only on your phone (reading photos and Excel files, shift reminders, share cards, reading the phone calendar, weather, review prompts). Added group memos and memo photos (up to 3 per memo, shrunk on your phone, location data removed, no photo-library permission needed); in My settings, repeating shifts, saved shift patterns, your shift chip row and colors, and the annual-leave carry-over; the app version, operating system and phone-language region received together with the notification token, and operations statistics (totals only); and clicks on guide links in videos and posts. Except for usage statistics and totals that cannot be traced back to a person (operations statistics, guide-link clicks), all newly described information arises only when users enter it, separately turn on a feature, or connect an AI app in the app, so this version takes effect from the day it is published.)
- November 4, 2026 — Version 1.0 (first version of WorkLink)