Privacy Policy · Tier 2 — Account Apps
Contents
This policy describes how ORIOTI ("we," "us") handles personal data for apps that offer an account or login, so that your progress, purchases, or preferences can sync across devices. We collect only what is necessary to operate the account system and the app's core features — we do not verify your real-world identity in these apps.
| Category | Examples | Source |
|---|---|---|
| Account identifiers | Email address; or a stable user ID from Google/Apple Sign-In (we do not receive your Google/Apple password) | Provided by you at sign-up |
| App activity | In-app progress, preferences, purchase history within the app | Generated by app use |
| Device & diagnostic data | Device model, OS version, app version, push notification token, crash logs | Automatically collected |
| Support communications | Content of emails/messages you send to support | Provided by you |
We do not ask for your legal name, gender, date of birth, home address, or government ID in these apps.
We do not sell your personal data. We do not use your email to send marketing unless you opt in.
For users in the EEA/UK, we process account data under the legal basis of contract (to provide the account/service you signed up for) and legitimate interest (security, fraud prevention, product analytics). Where we send optional marketing communications, we rely on your consent, which you can withdraw at any time.
We share limited data with the following categories of service providers, each acting under contractual data-protection obligations:
| Provider | Purpose | Data shared |
|---|---|---|
| Google Firebase (Auth, Firestore/Realtime DB, Analytics, Crashlytics) | Authentication, cloud storage of account/app data, crash & usage analytics | Account identifier, app data, device/crash info |
| Apple Sign-In / Google Sign-In | Social login | Provider user ID, and email if you share it |
| Google AdMob (if the app shows ads) | Ad serving | Advertising ID, IP address, device info |
| App Store / Play Store | Distribution, in-app purchases | Purchase history, platform diagnostics |
We do not sell personal data to third parties, and we do not share it with anyone else except as required by law or with your consent.
Account creation in these apps is intended for users aged 13 and older (14 and older in Korea, or the applicable minimum age in your country). We do not knowingly create accounts for or collect personal data from younger children. If we learn an account belongs to a child under the applicable age, we will delete the account and associated data. Parents/ guardians who believe their child has created an account can contact support@orioti.com to request deletion.
We retain account data for as long as your account is active. You can request deletion of your account and associated data at any time by contacting support@orioti.com; we will delete or anonymize your data within 30 days except where retention is required by law (e.g. records related to a financial transaction). Diagnostic logs are retained by our infrastructure providers for a limited period (typically 90 days) for debugging and security purposes.
We use industry-standard measures to protect your data, including encryption in transit (TLS), access controls on our backend infrastructure, and reliance on reputable cloud providers (Google Firebase/Cloud) for storage. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
You have the right to access, rectify, erase, or restrict processing of your data, to data portability, to object to processing based on legitimate interest, to withdraw consent at any time, and to lodge a complaint with your local supervisory authority. Contact us to exercise these rights.
California residents have the right to know what personal information is collected and with whom it is shared, to request deletion or correction, and to opt out of the "sale" or "sharing" of personal information (including advertising identifiers, if the app shows ads). We do not sell personal data for money. To exercise these rights, contact support@orioti.com.
Under the Personal Information Protection Act, you have the right to request access, correction, deletion, or suspension of processing of your personal information, and to withdraw consent. Requests can be made to our Privacy Officer (see Section 12). You may also report concerns to the Personal Information Protection Commission (privacy.go.kr, ☎ 118).
Users in other jurisdictions (e.g. Canada's PIPEDA, Brazil's LGPD, Australia's Privacy Act) have broadly comparable rights to access, correct, and delete their data, and to lodge a complaint with the relevant local authority.
ORIOTI is based in the Republic of Korea. Our infrastructure provider (Google Firebase/Cloud) may process and store data in other countries, including the United States, under appropriate safeguards such as Standard Contractual Clauses for EEA/UK data.
We may update this policy periodically. Material changes will be reflected by updating the "Last updated" date above, and, where required by law, we will provide additional notice (e.g. in-app notification).
ORIOTI
Business Registration No. 424-46-01289
Representative & Privacy Officer: Yunju Jeong
Email: support@orioti.com