Privacy Policy
K-POP Word Puzzle | Effective and last updated: July 15, 2026
com.hangulmatch) is an offline-friendly Korean word puzzle developed by the K-POP Word Puzzle developer ("we," "us," or "our"). The app does not require an account, does not sell personal information, and does not collect names, email addresses, phone numbers, contacts, precise location, camera data, or microphone recordings.
1. Information handled by the app
| Information | How and why it is used | Where it goes |
|---|---|---|
| Game and study data | Tour progress, settings, difficulty, learned words, collection cards, boosters, fan points, and purchase entitlements are used to provide the game. | Stored locally on the device. |
| Limited product analytics | Event name, event time, app version, game mode, experiment variant, a short non-personal challenge ID, platform, and a numeric gameplay value such as clear time are used to understand challenge and sharing features. | Sent over HTTPS to our Cloudflare-hosted service and stored for up to 90 days. No account ID, advertising ID, name, or email is included in these events. |
| Advertising data | When advertising is enabled, ad providers may process IP-derived approximate location, personal or device identifiers, advertising ID, device and app information, ad views and taps, app activity, diagnostics, fraud-prevention signals, and purchase history for advertising, measurement, analytics, app functionality, security, fraud prevention, and legal compliance. | Processed by Unity LevelPlay, ironSource Ads, Unity Ads, and Meta Audience Network as described below. |
| Purchase data | Product identifiers, entitlement status, and a limited set of purchase tokens are used to deliver purchases and prevent duplicate rewards. | Google Play processes the payment. The app stores entitlement records locally and does not receive payment-card details. |
2. Advertising and privacy choices
The app may show user-initiated rewarded ads and occasional interstitial ads at natural breaks after gameplay. Unity LevelPlay mediates ads from ironSource Ads, Unity Ads, and Meta Audience Network.
The advertising SDK is not initialized until the user makes an in-app advertising privacy choice. Users can choose personalized ads, limited ads, or Not now. Choosing Not now keeps advertising disabled. The choice can be reviewed from the app's Settings screen. Limited ads may still require basic device, network, security, and contextual information to deliver and measure an ad.
Provider details: Unity Privacy Policy and Meta Privacy Policy.
3. Product analytics and hosting
Our first-party analytics service records only the limited event fields listed above. The app keeps at most 100 undelivered events in a local retry queue. Successfully received events are deleted from our analytics database after no more than 90 days.
Cloudflare hosts the privacy site, challenge landing pages, and analytics endpoint. Like other internet infrastructure providers, Cloudflare may automatically process IP addresses and request metadata to transmit traffic, maintain security, and prevent abuse. See the Cloudflare Privacy Policy.
4. Google Play purchases
Optional digital purchases are processed by Google Play Billing. Google processes payment and transaction information under its own terms. We do not receive or store credit card, debit card, or bank account numbers. Purchase entitlements remain on the device unless Google Play restores them.
5. Screen recording and sharing
Screen recording starts only after the user taps REC and approves Android's MediaProjection system prompt. A visible foreground-service notification is shown while recording. Recordings are stored in the app-specific Movies directory, contain no microphone audio, and are not uploaded by us.
When the user chooses Share, the app creates a challenge link, result image, or encouragement card and opens the Android share sheet. The user chooses the destination. Data sent to the selected third-party app is then governed by that service's privacy policy.
6. Permissions
- Internet and network state: advertising, Google Play Billing, challenge links, install attribution, and limited analytics.
- Advertising ID and attribution APIs: advertising, measurement, and fraud prevention when ads are enabled.
- Foreground service and MediaProjection: user-initiated screen recording only.
- Notifications: the recording-in-progress foreground-service notification on supported Android versions.
- Vibration: optional gameplay haptics.
The app does not request precise location, contacts, camera, microphone, broad photo or file access, phone, or SMS permission.
7. Legal bases and international processing
Where applicable, we rely on consent for personalized advertising; performance of the requested service for gameplay, purchases, recording, and sharing; and legitimate interests for limited product analytics, security, debugging, and fraud prevention. Users may withdraw an advertising choice in Settings. Service providers may process information in countries other than the user's country and use safeguards required by applicable law.
8. Retention, deletion, and privacy rights
Local game data and recordings can be removed by clearing app storage, deleting the recording, or uninstalling the app. First-party analytics events are retained for up to 90 days. Because these events do not contain an account or persistent user identifier, we may be unable to identify a particular event unless the requester supplies a challenge ID and approximate date.
Users may ask to access, correct, delete, restrict, or object to applicable processing by emailing us. Advertising providers handle requests concerning information they control through their privacy tools. Instructions are also available on our Data Deletion page.
9. Children
The app is intended for users aged 13 and older and is not directed to children under 13. We do not knowingly collect names, contact details, or account profiles from children. If you believe a child has provided personal information through an external contact or sharing service, contact us so we can investigate.
10. Security
We use HTTPS in transit, minimize analytics fields, limit local queues, and apply retention controls. No method of transmission or storage is completely secure, but we use reasonable safeguards appropriate to the information handled.
11. Changes and contact
We may update this policy when features, providers, or legal requirements change. The effective date above will be revised when changes are published.
Privacy contact: K-POP Word Puzzle developer
commuten@gmail.com