Fastutle Pop Punch

Pop Punch Privacy Policy

Effective date Previous version

Pop Punch (the “App”) values its users’ personal information and complies with applicable laws, including the Korean Personal Information Protection Act. This policy explains what information the App processes and how. The App is available on iOS and Android; where the platforms differ, both are described side by side.

1. Information processed only on your device (not collected)

The following information is processed and kept only on your device and is never sent to the App developer’s servers or to third-party servers.

  • Photos: photos you pick with the system photo picker. The App does not request access to your whole photo library. A photo saved as a character is kept only in the App’s private storage. You can create up to 20 photo characters.
  • Character names: the names you give your photo characters. They are stored on the device and never sent to a server.
  • Face position information: coordinates calculated on the device to find the face and the positions of the eyes, nose and mouth in a photo. On iOS they are calculated with Apple’s Vision framework, and on Android with Google ML Kit face detection running on the device. They are not saved but recalculated every time a character is loaded, and they are never sent or used for advertising, marketing or analytics.
  • Speech-bubble lines: text you enter or edit. It is stored on the device separately for each character and never sent to a server.
  • Game records and tickets: your best records and the number of tickets left.

Storage locations and backups differ by platform.

  • iOS: a photo character’s photo is kept in the App’s private storage (Application Support), excluded from iCloud and device backups, and protected so that it cannot be opened before the device is unlocked for the first time. Only the photo files are excluded from backups; character names and speech-bubble lines may be included in device backups. Ticket information is kept in the device’s keychain to prevent abuse.
  • Android: photos, character names, speech-bubble lines, game records and ticket information are all kept in the App’s private storage and are all excluded from cloud backups and device-to-device transfers.

Deleting a photo character also deletes that character’s photo, name and speech-bubble lines. Deleting the App deletes all photos, character names, speech-bubble lines and game records. Ticket information stays in the keychain on iOS and is deleted when the device is reset; on Android it is deleted together with the App.

2. Information collected and why

Information Purpose Processor
Device identifiers (app instance ID; advertising identifier — on iOS the IDFA if you allow tracking, on Android the device’s advertising ID) Serving and measuring ads, usage statistics Google (AdMob, Firebase Analytics)
App usage records (challenge start and end, grade, whether an ad was watched, and the like, in number and code form) Usage statistics to improve the service Google (Firebase Analytics)
Ad interaction information Serving and measuring ads, preventing invalid clicks Google (AdMob)
Error and performance information (crash records, device model, OS version) Improving app stability Google (Firebase Crashlytics)
Installation identifier (Firebase installation ID) Fetching app settings such as ticket amounts from the server Google (Firebase Remote Config)
Face detection usage information (Android only): device information (manufacturer, model, OS version, ML hardware accelerators), app information (package name and version), performance and usage metrics (processing time, settings such as image format and resolution, input and output size, feature version, event type, error codes), and a per-installation identifier that does not identify you or your device Measuring performance, fixing errors and improving the face detection feature, and detecting misuse Google (ML Kit)

Photos and face position information never leave the device, including when ML Kit is used. ML Kit may contact Google servers to receive improvements or model updates, and the metrics are sent over an encrypted connection (HTTPS).

Game Center and Play Games (optional): for rankings and achievements the App uses Apple’s Game Center on iOS and Google’s Play Games on Android. If you sign in to Game Center and use rankings, friend challenges or achievements, or sign in to Play Games and use rankings or achievements, your nickname, challenge scores and achievement progress are processed by that service under Apple’s or Google’s privacy policy. The App developer does not receive or store this information, and the App sends only scores and achievement progress to Game Center or Play Games. You can use all other features of the App without signing in, and whether you are signed in and how often you use Game Center or Play Games are counted only as usage statistics in number and code form.

Sharing: on Android, a friend challenge is a message sent through the system share screen, and it contains only the challenge length, the score and a store link. When you share a result image, an image made by the App goes out through the system share screen; it contains only preset character art and challenge results such as the challenge length, score and grade, never your photos, character names or speech-bubble lines.

Usage statistics and error information never include photos, face position information, character names or speech-bubble lines you entered. Which character you chose is recorded only as a preset character code (such as preset_default) or as photo for a photo character, and only the number of photo characters is sent.

3. Disclosure to third parties and processing on our behalf

The App uses the following services of Google LLC for ads, statistics and related purposes. Each service processes information under Google’s privacy policy.

Information may be processed on Google’s servers outside Korea (such as in the United States).

  • App Tracking Transparency (ATT, iOS): the App asks for iOS “App Tracking Transparency” permission for personalized ads. If you do not allow it, every feature works the same and ticket rewards are the same. You can change this at any time in iOS Settings > Privacy & Security > Tracking.
  • Advertising ID (Android): the Android app does not show a tracking permission prompt, and it may use the device’s advertising ID to serve and measure ads. You can reset or delete the advertising ID in your Android device settings.
  • Users in the EEA, the UK and Switzerland: on both iOS and Android, consent is collected with Google’s consent management tool (UMP), and you can change or withdraw it at any time in the App under Settings > Ad Consent Settings. On Android, if you do not consent, non-personalized ads are shown instead; every feature works the same and ticket rewards are the same.

5. Retention

  • Information on the device: until you delete the App (ticket information on iOS: until the device is reset).
  • Information processed by Google: Firebase Analytics keeps event data for 2 months and user data for 14 months; other information is retained under Google’s policies.

6. Children’s privacy

The App is intended for users aged 13 and over and does not knowingly collect personal information from children under 13.

7. Your rights

You can request access to, correction, deletion or suspension of processing of your personal information. Because the App developer does not keep information that identifies you, you can manage information processed by Google with the methods in section 4 or by following Google’s guidance.

8. Contact

9. Changes

If this policy changes, we will post it on this page together with the effective date.