Effective Date: September 8, 2026
Last Updated: September 8, 2026
This Privacy Policy describes how DEVFLOOR (“DEVFLOOR,” “we,” “us,” or “our”) collects, uses, stores, shares, transfers, and protects information when you use our mobile applications, websites, and related services (collectively, the “Service”).
We value your privacy and process personal information only as necessary to provide, operate, improve, secure, and support the Service, in accordance with applicable laws.
Depending on how you use the Service, we may collect information directly from you, automatically from your device or use of the Service, or from app stores, sign-in providers, advertising partners, and other service providers.
When you sign in, connect, or create an account, we may receive or collect information such as:
Email address
Account or user ID
Display name or profile name
Profile image URL
Country, region, or language information
Encoded or platform-provided identifiers
If you use a third-party sign-in provider such as Apple or Google, the information we receive is limited to information made available by that provider and authorized by you.
When you purchase an in-app product or subscription, the transaction is processed by the applicable app marketplace, such as Apple App Store or Google Play.
We may receive and process information necessary to verify and manage your purchase or subscription, such as:
Product ID
Transaction, receipt, purchase token, or order identifier
Purchase date
Subscription status
Renewal, expiration, restoration, cancellation, or refund status
DEVFLOOR does not receive your full credit card number, bank account number, or other complete payment credentials from Apple or Google.
Depending on the platform, app version, permissions, region, and services enabled, we may collect or receive information such as:
Device model, operating system, and platform information
App version, language, country, region, and time zone
Device identifiers, app instance identifiers, or advertising identifiers, where permitted
App interactions, session information, and feature usage
Advertising impressions, clicks, conversions, and related advertising data
Crash reports, performance data, and diagnostic logs
IP address and network or server log information necessary to operate and secure the Service
Where required, we request permission before accessing an advertising identifier or tracking activity across apps and websites. You may change available advertising or tracking choices through the Application or your device settings.
To provide synchronization, statistics, settings, social, or other Service features, we may process records generated through your use of the Service, including activity records, settings, progress, virtual items, messages or text you choose to enter, friend or social feature records, and related timestamps.
If you contact us for support, we may collect the information you provide, including your email address, message contents, screenshots, attachments, device information, account identifiers, or purchase information necessary to investigate and resolve your request.
Our website may use cookies, web beacons, or similar technologies to maintain sessions, understand website usage, improve performance, and provide appropriate services.
You may control cookies through your browser settings. Disabling certain cookies may affect website functionality.
We may use collected information for the following purposes:
To provide, maintain, and operate the Service
To create, authenticate, and manage user accounts
To synchronize or restore user data, settings, progress, and entitlements
To verify purchases and subscriptions and provide Premium features
To process subscription restoration, renewal status, cancellation, refunds, and entitlement
To provide customer support and respond to requests
To detect, prevent, and investigate fraud, abuse, security incidents, and unauthorized use
To analyze app performance, usage, and reliability
To improve existing features and develop new features
To provide and measure advertising where applicable
To comply with legal, regulatory, accounting, tax, and dispute-resolution obligations
Depending on your country or region, our legal bases for processing may include performance of a contract with you, compliance with legal obligations, your consent, and our legitimate interests in operating, securing, supporting, and improving the Service. Where we rely on consent, you may withdraw that consent as described in Section 6. Where we rely on legitimate interests, we consider and balance those interests against your rights and expectations.
We will not use personal information for a materially different purpose without providing additional notice or obtaining consent where required by applicable law.
We may use third-party providers to operate and support the Service. Depending on the platform, region, and enabled features, these providers may include:
Apple — sign-in, App Store distribution, in-app purchases, subscriptions, restoration, and related platform services
Google — sign-in, Google Play distribution, in-app purchases, subscriptions, analytics, advertising, messaging, and related platform services
Amazon Web Services (AWS) — cloud hosting, storage, databases, networking, security, and related infrastructure
Firebase — analytics, crash reporting, messaging, authentication, or other app infrastructure services where enabled
Yandex — advertising and advertising measurement in supported regions where enabled
Unity and related platform services — application runtime, analytics, advertising, diagnostics, or related technical services where enabled
Depending on the provider and feature, information processed may include account identifiers, purchase and subscription identifiers, device or app identifiers, IP address, app interactions, advertising events, crash and diagnostic information, and information required to provide the applicable feature.
These providers may process information on our behalf or, in some cases, independently under their own privacy policies and platform terms. We require service providers that process personal information on our behalf to protect it appropriately and process it only for authorized purposes, subject to applicable law and contractual or platform requirements.
We may disclose information where reasonably necessary to comply with law, legal process, or a valid government request; protect the rights, safety, and security of users, DEVFLOOR, or others; investigate fraud or abuse; or complete a merger, acquisition, financing, reorganization, or transfer of all or part of our business, subject to applicable legal requirements.
We do not sell personal information for monetary consideration. If an advertising activity is considered a “sale,” “sharing,” or targeted advertising under applicable law, we will provide any notice and choice required in the relevant country or region.
The third-party services used by the Service may change as features, platforms, or regional availability change. We will update this Privacy Policy before or when a material change affects how personal information is processed, as required by law.
DEVFLOOR is based in the Republic of Korea. To provide the Service globally, personal information may be processed in the Republic of Korea and transferred to or processed in Singapore and North American regions, including the United States or Canada where applicable. A particular provider may also process information in other countries identified in that provider's privacy documentation.
Cloud infrastructure is primarily operated in the Republic of Korea. Singapore or North American infrastructure may be added or used for selected Service functions, regional availability, redundancy, support, analytics, messaging, advertising, purchase verification, security, or disaster recovery.
International transfers may occur continuously through encrypted network communications when you use the relevant feature or when systems synchronize, verify, back up, or process Service data. The categories of information transferred are limited to the information described in Section 1 that is necessary for the applicable purpose described in Sections 2 and 3.
Where required by applicable law, we rely on an authorized transfer basis and use appropriate safeguards, which may include contractual protections, adequacy decisions, certifications, or Standard Contractual Clauses. We also take reasonable technical and organizational measures designed to protect information during transfer and processing.
If applicable law gives you a right to refuse or withdraw consent to an international transfer, you may contact us using Section 10. Refusal may limit features that require overseas infrastructure or third-party processing, but we will explain the relevant consequence before acting on the request where required by law.
We retain personal information only for the periods stated below or for a longer period where required by applicable law. When more than one period applies, we use the longest period required for the relevant record.
Account, profile, synchronized Service records, settings, progress, and entitlements: while the account is active and for up to 30 days after a verified account-deletion request, unless a longer period is required for purchase entitlements, fraud prevention, dispute resolution, or legal compliance.
Records relating to contracts, withdrawal, payment, and supply of digital goods: 5 years from the relevant transaction where required under applicable Korean electronic-commerce law.
Customer complaints, support requests, and dispute-resolution records: 3 years after the matter is closed, unless a longer period is required by law or an ongoing dispute.
Security, fraud-prevention, authentication, and server access logs: up to 1 year after collection, unless a longer period is reasonably necessary to investigate an incident, enforce rights, or comply with law.
Usage and analytics data linked to an identifier: up to 14 months after collection.
Advertising event data linked to an advertising or device identifier: up to 12 months after collection.
Crash reports and diagnostic records: up to 90 days after collection.
Website cookie data: until the cookie expires or up to 12 months after collection, unless you delete it earlier through browser controls.
Backup copies: deleted or overwritten through the normal backup cycle within 30 days after deletion from active systems.
Third-party providers may apply shorter retention periods or retain independently controlled information according to their policies and legal obligations. We configure provider retention settings to align with the periods above where those settings are available and under our control.
When a retention period expires or information is no longer required, we delete or irreversibly anonymize it. Electronic records are deleted using methods designed to prevent ordinary recovery, and physical records, if any, are shredded or otherwise securely destroyed.
After account deletion, limited records may be retained separately where required for legal compliance, purchase and refund verification, security, fraud prevention, or dispute resolution. Such retained records will not be used for unrelated purposes and will be deleted or anonymized when the applicable retention period expires.
Subject to applicable law, you may have the right to:
Request access to personal information we hold about you
Request correction of inaccurate information
Request deletion of your personal information or account
Withdraw consent where processing is based on consent
Object to or request restriction of certain processing
Request portability of your information where applicable
Submit a complaint to a competent privacy or data-protection authority
You may exercise available account, advertising, tracking, notification, cookie, or privacy controls through the Application, device settings, browser settings, or the applicable app store. You may also contact us at devfloorcorp@gmail.com.
To request deletion of an account and associated data through the web, email us at the address above with the subject “Account Deletion Request” and identify the Service and account concerned. We may request limited information necessary to verify account ownership and protect the account from unauthorized deletion. Once verified, we will initiate deletion and complete deletion from active systems within 30 days, except for records retained as described in Section 5.
Where an in-app account-deletion control is available, users may also initiate deletion from the account or privacy settings in the Application. Deleting the Application from a device does not by itself delete an account or cancel an active subscription.
You may withdraw consent for optional analytics, advertising, personalized advertising, or other optional processing through available in-app controls, device privacy settings, or by contacting us. Withdrawal does not affect processing lawfully completed before consent was withdrawn. If certain processing is necessary to provide a requested feature, withdrawing consent may make that feature unavailable.
We may need to verify your identity before processing certain requests. We may deny or limit a request where permitted by applicable law, including where necessary to protect the rights and freedoms of others, prevent fraud or abuse, maintain purchase records, resolve disputes, or comply with legal obligations. We will provide an explanation where required by law.
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.
These measures may include encrypted communications, access controls, restricted administrative access, infrastructure security controls, monitoring, backup protections, and other measures appropriate to the nature of the information processed.
No electronic transmission or storage system can be guaranteed to be completely secure.
The Service is not specifically directed to children below the minimum age at which they may independently consent to the processing of personal information under applicable law.
We do not knowingly collect personal information from children below the applicable minimum age without any parental or guardian consent or authorization required by law. In the Republic of Korea, this generally includes children under 14 years of age.
If we learn that we have collected personal information from a child in circumstances requiring parental or guardian consent without obtaining that consent, we will take reasonable steps to delete or otherwise appropriately handle the information.
Parents or legal guardians may contact us using the information in Section 10 if they believe a child has provided personal information to us in violation of this section.
We may update this Privacy Policy from time to time to reflect changes to the Service, our data practices, third-party services, retention settings, processing locations, or applicable legal requirements.
If a change is material, we will provide notice through the Service, our website, email, or another appropriate method where required by law. Where consent is required for a new or materially changed processing activity, we will request consent before beginning that processing.
The effective date and latest update date will be shown at the top of this Privacy Policy.
For questions, requests, account deletion, consent withdrawal, or complaints regarding privacy or personal information, please contact:
DEVFLOOR
Privacy Protection and Customer Service
Email: devfloorcorp@gmail.com
Tel: +82-70-7008-6243