Privacy Policy

Version: 1.0
Effective Date: August 17, 2026
Service: Meow Planet

Healing Village (Representative: Sunhye Kim) and Jinyoung Park (collectively, the “Joint Controllers”) comply with applicable privacy laws, including the Personal Information Protection Act of the Republic of Korea (“PIPA”), and publish this Privacy Policy to explain how personal information is processed in Meow Planet (the “Service”).

1. Joint Controllers and Privacy Officer

To the extent that the parties jointly determine the purposes and essential means of processing personal information, the following parties jointly process personal information.

2. Personal Information We Process and Purposes

The Joint Controllers process personal information as necessary to provide, secure, operate and improve the Service.

2.1 Service and Game Data

Country information is based on a country code available from device country/region settings or similar sources. We do not directly collect precise GPS coordinates.

2.2 Optional Account Linking

Account linking is optional and is provided to protect and restore game data after changing devices or reinstalling the app.

We use the provider UID to identify the linked account. We do not store the user’s email address as game-account information or in our own marketing database.

2.3 Referral and Sharing Rewards

When the referral feature is used, the following information may be processed:

• referral code;
• inviter and invitee Player IDs;
• device identifiers;
• timestamp and result of referral-code entry;
• referral relationship and reward history;
• IP address and other information used to assess abuse; and
• app/device integrity results.

This information is used to verify referral relationships and prevent duplicate rewards, self-referrals, repeated reinstall abuse, automation and other fraudulent use.

2.4 Analytics and Service Improvement

We use Google Analytics for Firebase to analyze events relating to app launches, sessions, screen usage, tutorials and gameplay, scores and play time, mochi unlocks, virtual-currency and item earning/spending, advertising, purchases and restoration, push notifications, review requests, sharing/referrals and retention.

Google Analytics for Firebase may collect an app-instance identifier, device and OS information, approximate location and app-usage information.

2.5 Advertising

The Service uses Google AdMob to provide banner, interstitial and rewarded advertising. Google or advertising partners may process the following information for ad delivery and measurement:

• advertising identifiers;
• IP address;
• device and app information;
• ad impressions, clicks, views and other interactions; and
• approximate location information.

Advertising identifiers may not be available depending on operating-system and user settings.

2.6 Push Notifications

When push notifications are used, the following information may be processed:

• FCM/APNs push tokens;
• OS notification permission status and in-game push settings; and
• push delivery, receipt and open records.

2.7 Purchases, Purchase Restoration and Refunds

In-app purchases are processed through Google Play or Apple App Store. The Joint Controllers do not directly store raw payment-card information.

The following information may be processed for payment verification, prevention of duplicate grants, product delivery, purchase restoration, refunds and dispute handling:

• store/platform;
• product ID;
• order/transaction identifier;
• purchase status and purchase time;
• purchase-restoration status;
• refund/cancellation status; and
• product or entitlement granting/revocation history.

2.8 Customer Support and Privacy Requests

If a user contacts customer support or submits a privacy-related request, the following information may be processed:

• reply email address;
• Player ID;
• inquiry or request contents;
• receipts or other evidence submitted by the user; and
• support and handling history.

3. Retention

The Joint Controllers delete personal information without undue delay when the processing purpose has been fulfilled, unless retention is required by applicable law.

Information directly processed by Google, Apple or other external providers may be retained according to their service settings and policies.

4. Disclosure to Third Parties

The Joint Controllers do not ordinarily disclose personal information to third parties beyond the purposes described in this Policy.

Exceptions may apply where the user has given prior consent or where disclosure is otherwise permitted or required by applicable law.

5. Service Providers and External Services

We use the following external services to operate the Service.

We will update this Policy if the Service configuration or material external providers change.

6. Processing Locations and International Processing

6.1 Cloud Firestore

The Cloud Firestore database used to store the Service’s core game data is configured in asia-northeast3 (Seoul, Republic of Korea).

6.2 Firebase Authentication

Firebase Authentication is operated from U.S. data centers, and authentication-related information is therefore processed in the United States.

6.3 Other Google and Apple Services

Google Analytics for Firebase, Crashlytics, Performance Monitoring, Cloud Messaging, App Check, Remote Config, AdMob and other Google services, as well as Apple authentication, push and payment services, may use global infrastructure.

Depending on the feature, Firebase data may be processed in the United States or in countries where Google or its subprocessors maintain facilities. Personal information collected by Apple is generally stored in the United States and may be processed in countries where Apple affiliates operate.

• Google Privacy Policy: https://policies.google.com/privacy
• Firebase Privacy and Security: https://firebase.google.com/support/privacy/
• Apple Privacy Policy: https://www.apple.com/legal/privacy/en-ww/

7. Deletion and Account/Game-Data Deletion

When personal information is no longer necessary, electronic information is deleted or permanently removed from storage in a manner designed to prevent restoration or reproduction. Paper records, if any, are shredded or destroyed.

Records that must be retained by law are kept separately from ordinary Service data and deleted after the applicable retention period.

When a user requests account and game-data deletion, the following information is generally deleted:

• Player ID and linked-account information;
• game progress, virtual currency, items and unlocks;
• collection and reward status;
• ranking score, in-game nickname and country information; and
• referral relationships and ordinary Service data.

The following may be retained for a limited period where necessary:

1. transaction, refund and dispute records required by law; and
2. minimal device/event identifiers required to prevent duplicate referral rewards, virtual-currency abuse or other fraud.

Purchase history independently retained by Google Play or Apple App Store is not deleted by the Joint Controllers as part of game-account deletion.

8. User Rights and How to Exercise Them

Subject to applicable law, users may request access to, correction or deletion of, or suspension of processing of personal information, and may withdraw consent where processing is based on consent.

Privacy requests and inquiries may be sent to contact@healingvillage.kr. The Joint Controllers may take the minimum steps necessary to verify the identity of the user or an authorized representative.

Users with linked accounts may use the account-deletion channel provided through the Service. Users, including guest users, may also request deletion of personal information through the email address above.

Users in Korea may seek assistance from the Personal Information Infringement Report Center (118), the Personal Information Dispute Mediation Committee or other competent authorities.

9. Children Under 14

The Service is not directed to children under 14.

If the Joint Controllers learn that personal information of a child under 14 has been processed without an appropriate legal basis, they will take appropriate steps, including deletion where necessary.

10. Security Measures

The Joint Controllers maintain technical and organizational safeguards, including:

• limiting access to personal information and servers;
• authentication and access controls;
• Firebase Security Rules and other database access controls;
• encryption in transit such as HTTPS/TLS;
• logging of access and important processing activities;
• app/device integrity verification and abnormal-request detection;
• limiting personnel who handle personal information; and
• review of access permissions and security settings.

11. Automatically Collected Information and Advertising Choices

The Service may automatically collect or process app-usage information, app-instance identifiers, advertising identifiers and device/app information through SDKs such as Google Analytics for Firebase and Google AdMob.

Users may limit or change advertising-identifier and tracking settings through the privacy and advertising settings provided by their device operating system. Restricting these settings does not prevent basic gameplay, but may limit ad personalization or certain advertising and usage-measurement functions.

12. Changes to This Policy

If this Policy changes, the Joint Controllers will notify users of the changes and effective date through the Service or an official webpage.

Where a change materially affects user rights or applicable law requires new consent, the required notice or consent procedure will be provided.

13. Language

This Privacy Policy is provided in Korean and English. In the event of any discrepancy between the Korean and English versions, the Korean version will prevail, unless otherwise required by applicable law.

Addendum

This Privacy Policy takes effect on August 17, 2026.