Privacy Policy
This translation is provided for reference. The Korean version is the official text; if there is any difference, the Korean version prevails.
ZOOPITER Soft Corp. (“we”, “the Company”) provides the mobile app Flexfetti (Google Play package kr.flexfetti.app, the “App”) and processes your personal information in accordance with the laws of the Republic of Korea, including the Personal Information Protection Act and the Act on the Protection, Use, etc. of Location Information (the “Location Information Act”), and with the laws of the country where you live, such as the EU General Data Protection Regulation (GDPR). This policy explains what information we process, why and for how long, whom we entrust it to or share it with, and what rights you have.
At a glance
- The App has no accounts. We do not ask for your name, email, phone number or password.
- Your virtual money wallet, Lucky Cards, Magic Scrolls, watches, ‘Only me’ drops and photos are stored only on your device. If you delete the App, they cannot be restored.
- Location is used only when you use ‘Remember this spot’, the map, Share or Pick up, and only while you are using the App. Background location is not used.
- Our server stores only the coordinates of public drops and Flex Together rooms (rounded to the 5th decimal place, about 1 m) and, to prevent location spoofing, one most recent location (at about 11 m granularity, deleted after 1 hour). We do not store your movement history.
- You can delete your server data at any time with ‘Delete my data on the server’ in the App settings.
1. Information we process and why
| Category | Items | Purpose | When collected |
|---|---|---|---|
| Install information | Install ID (a random number created when the App first runs) and its authentication token, platform, app version, language setting, country (country code determined from the IP address), age band (whether 16 or older, and whether at or above the social-feature age), device integrity verdict (Google Play Integrity), restriction status, time of using ‘Move to a new phone’ | Providing server features, preventing abuse (location spoofing, duplicate rewards), country-specific settings | When a user aged 16 or older first uses a server feature |
| Location information | Latitude, longitude, accuracy, altitude and AR anchor data sent when you create a public drop, look for nearby drops or rooms, pick up, or create a room. To check for location spoofing (teleporting), one most recent location from when you create a public drop or request an exact location (coarsened to about 11 m, overwritten by the next request, deleted after 1 hour) | Showing, finding and picking up public drops, Flex Together rooms, applying safety rules (exclusion zones, speed lock) | When you use ‘Remember this spot’, the map, Share, Pick up or rooms (only while the App is in use) |
| Public drop information | Amount, currency and form, a temporary alias newly created for each drop, preset note number and emoji, creation and expiry time, view count | Providing public drops | When you scatter with Share |
| Pickup and reward records | Pickup reservation and confirmation records, reward verification transaction number from the ad company, daily usage counts, offerwall completion confirmations (Magic Scrolls awaiting delivery), friend invitation rewards | Granting rewards, preventing duplicate rewards, applying daily limits | When you use Pick up, rewarded ads, the offerwall or invitations |
| Notes and thanks | Install IDs of sender and recipient, preset note number, emoji, delivery time | Delivering notes and thanks | When you send them |
| Friend links | Invitation code, install IDs of the inviter and invitee | Friend list, inviting friends to Flex Together rooms | When you use an invitation link or code |
| Reports and blocks | Install ID of the reporter, reported item, reason, block list | Safe operation, applying blocks | When you report or block |
| Push token | Firebase Cloud Messaging token | Notifications such as ‘Someone picked up your money’, ‘Thanks arrived’ and room invitations from friends | When you allow notifications |
| Records of use and provision of location information | Install ID hashed with SHA-256, type of action (drop created, exact location provided, pickup, room created, nearby search), drop number, grid cell number (about 500 m), hashed ID of the person who received the location, date and time | Keeping records under Article 16(2) of the Location Information Act, notifying provision to third parties | Created automatically when location features are used |
| Advertising information | Advertising ID (Android advertising ID; on iOS, the IDFA only if you allow tracking), IP address and approximate location inferred from it, device and app information, ad impression and click information, consent status (collected directly by ad companies) | Showing and measuring ads, verifying rewarded-ad rewards, preventing invalid clicks, personalized ads (if you consent) | When ads are shown (users aged 16 or older) |
| Analytics and error information | Firebase Analytics app usage events (without coordinates or install ID), Crashlytics crash information (device model, OS version, error logs) | Improving the service, fixing errors | Users aged 16 or older (subject to consent in regions where consent is required) |
| Inquiries and removal requests | Email address, content of the inquiry, (for public drop removal requests) location, reason and contact details | Responding to inquiries, handling removal requests | When you send them |
We do not collect your name, phone number, contacts, photo files, camera footage or movement (location) history. We receive an email address only when you contact us. Your birth year is used only to check your age and is stored only on your device; only the age band is sent to the server. The install ID is not linked to the advertising ID or any hardware identifier. We do not process sensitive or pseudonymized information.
2. Information stored only on your device
- Virtual money wallet, Lucky Cards, Magic Scrolls, watches, ‘Only me’ drops and their locations (including approximate coordinates for map pins), your birth-year answer, App settings
- Photos taken with the App: saved only to your device’s photo library and never sent to our server. We do not request permission to read all your photos.
We do not receive this information. Because the App has no accounts, this information disappears and cannot be restored if you delete the App or clear its data. It is also excluded from cloud backup and device-to-device transfer.
3. Camera and augmented reality (ARCore)
The App uses the camera to show the AR view. Camera images are processed on your device and are not sent to our server.
The App uses Google Play Services for AR (ARCore), which is governed by the Google Privacy Policy. When you use outdoor ‘Pinned’ (Geospatial API), indoor ‘Remembered space’ (Cloud Anchors) or Flex Together rooms, visual data derived from camera images and sensor data such as location are sent to and processed on Google servers to recognize the location and store anchors.
To power this session, Google will process sensor data (e.g., camera and location). Learn more
According to Google, the raw visual data sent to create an anchor is discarded within 24 hours. ‘Remembered space’ anchors are stored in Google Cloud for up to 365 days, and anchors of public drops are requested to be deleted when the drop ends. If you tap ‘Delete my data on the server’ in the settings before deleting the App, we also request deletion of the ‘Remembered space’ anchors stored on your device. If you delete the App first, indoor space memory data expires automatically after up to 365 days.
When you tap ‘Scan QR’ to receive your wallet with ‘Move to a new phone’ (‘Receive move’ on the new phone) or to join a Flex Together room, the Google Play services code scanner screen opens. The camera image is processed on the device by Google Play services; the App does not get camera permission and receives only the text of the scanned code.
When you use ‘Try on’ in the Watch Shop (Android), Google’s MediaPipe hand-tracking technology processes camera images only on your device to place the watch on your wrist. Camera images and hand-position data are not stored and are not sent to our server or anywhere else. The hand-tracking model file (hand_landmarker.task) is downloaded once from Google storage (storage.googleapis.com) the first time you try on a watch, and Google receives your device’s IP address at that time. Try-on is optional: if you do not use it, the model file is not downloaded, and closing the try-on screen turns hand tracking off immediately.
4. Location information
- We do not ask for location permission on first launch. We explain why first and then ask when you first use ‘Remember this spot’, the map, Share or Pick up.
- Location is used only while you are using the App. We do not request background location permission.
- Even if you deny location, you can still use Lucky Cards, indoor ‘Only me’ scattering and photos.
- Users in Korea must agree to the Location-Based Service Terms and to the provision of personal location information to third parties right before their first location action; before consent, no coordinates are sent to our server or to Google.
- The coordinates stored on the server are those of public drops and Flex Together rooms, rounded to the 5th decimal place (about 1.1 m) before storage. In addition, to prevent location spoofing, we store only the single most recent request location, coarsened to about 11 m (overwritten by the next request), and delete it after 1 hour. Coordinates used for nearby searches are not stored, no movement (location) history is kept, and coordinates are not kept in server logs or analytics data.
- Other users see a public drop as an approximate circle about 100 m in size; the exact location (accuracy about 1 m) is provided only to users within 50 m. A public drop becomes visible 5 minutes after it is created, and its creator is shown only by a temporary alias newly created for each drop.
- When a public drop expires (after at most 72 hours) or is fully picked up, its original coordinates are destroyed immediately.
- For details, see the Location-Based Service Terms.
When you open the ‘Nearby map’, the App sends only a map tile number to OpenFreeMap (openfreemap.org) to fetch the map images (tiles). A tile number indicates an approximate area about 2 km wide around you; your exact coordinates are never sent. Received tiles are stored on the device (up to 60 MB) and reused. Map data © OpenMapTiles © OpenStreetMap contributors.
When you use ‘Flex nearby’, your device sends its location to our server while the AR screen is open, so that people who are together in the same place can connect without a room or code. The server uses this location only to check whether you are near each other (within about 50 m), keeps it briefly in memory (about 1 minute) and then discards it; it is not stored. Your location and distance are never shown or provided to other users. If, together with your location consent, you agree to the clause ‘Flex with people nearby’ (location is used only briefly to check proximity and is never stored or shared) and keep the setting on, you are connected automatically, without tapping anything, with people nearby who have done the same. People who are not your friends then see only a temporary nickname (a number) used for that connection alone, and you see each other’s money only after your floors are aligned (before that, only the number of people nearby is shown). If you do not agree or turn the setting off, you are never connected automatically with people who are not your friends (you connect only when both of you tap ‘Flex together’, and you then become friends), and you can block or report anyone you are connected with at any time. It is not available to users under 18 (19 in Korea). As required by law, the fact that location was used (date only, no location) is recorded for 6 months.
5. Retention and destruction
| Information | Retention period |
|---|---|
| Coordinates and anchors of public drops | Destroyed immediately on expiry (max. 72 hours) or when fully picked up. The drop record without coordinates is deleted after 7 days |
| Notes and thanks | 30 days |
| Pickup records | 30 days |
| Ad reward verification transaction numbers | 2 days |
| Daily usage counts | 7 days |
| Magic Scrolls and cards awaiting delivery | Deleted when the App collects them; 30 days after delivery |
| Install information (install ID, integrity verdict, push token, etc.) | 180 days after last use; the one most recent request location within it is deleted after 1 hour |
| Friend links | Until either person deletes their server data or the install information is deleted |
| Reports | 180 days |
| Block list | Until you delete your server data or the install information is deleted |
| Flex Together rooms | Immediately when the room ends |
| Public drop removal requests | 30 days after handling |
| Records of use and provision of location information | 6 months (Location Information Act, Article 16(2)); destroyed immediately if you withdraw consent |
| Google Cloud Anchors (‘Remembered space’) | Up to 365 days (deleted when deletion is requested) |
| Firebase Analytics and Crashlytics | Retention period set in Firebase (Analytics user-level data 2 months, Crashlytics 90 days) |
| Inquiry emails | Destroyed without delay once the inquiry has been handled |
Information whose retention period has ended is deleted automatically, and electronic files are destroyed in a way that cannot be recovered. Information that must be kept under other laws is stored separately for the required period.
6. Processors and sharing with third parties
To operate the service, we entrust the processing of personal information to the companies below, or those companies collect information directly under their own policies. We do not sell personal information for money.
| Recipient | Role | Information | Policy |
|---|---|---|---|
| Google LLC | Firebase (Analytics, Crashlytics, Cloud Messaging, Remote Config, Hosting), ARCore (Geospatial, Cloud Anchors), Google Maps SDK, Play Integrity API, Google consent tool (UMP), Google AdMob (an ad network mediated through Unity LevelPlay), Google code scanner (Play services — ‘Scan QR’), Google Play Install Referrer (invite code) | App usage and error information, push token, camera-derived visual data and sensor data such as location, map display requests, device integrity requests, advertising ID and consent information, camera images processed on the device by Play services when you scan a QR code (the App receives only the text of the scanned code), install referrer (invite code) | policies.google.com/privacy |
| OpenFreeMap (openfreemap.org) | Map tiles for the in-app ‘Nearby map’ | Map tile number (an area about 2 km wide — an approximate area), IP address, app and device information carried by the web request | openfreemap.org |
| Cloudflare, Inc. | Operating the server (API, database, real-time rooms), forwarding operations emails | Information stored on the server as listed in section 1, IP address in transit | cloudflare.com/privacypolicy |
| Unity Technologies (Unity Software Inc.) | Ad mediation platform (Unity LevelPlay — ironSource Mobile), main ad network (Unity Ads), ad measurement, fraud prevention, reward verification for rewarded ads, offerwall (Unity Offerwall/Tapjoy — Android, users aged 18 or older (19 in Korea)) | Advertising ID (Android advertising ID; on iOS, the IDFA only if you allow tracking), IP address and approximate location inferred from it, device and app information, ad usage information (impressions, clicks, etc.), consent information, offer usage information, offer completion confirmations | unity.com/legal |
The App uses Unity LevelPlay as its ad mediation platform and Unity Ads as its main ad network. LevelPlay mediates ads from multiple ad networks, including Google AdMob, and the ad network whose ad is shown may also receive the advertising information above. Unity publishes its list of mediation partners and its policies.
Information shown to other users: When you create a public drop, its location (accuracy about 1 m) is provided to other users who come within 50 m, and its temporary alias, amount and note are visible to nearby users. Thanks and notes are delivered to their recipient. This sharing is based on your consent (in Korea, consent to the provision of personal location information to third parties).
Otherwise, we do not provide personal information to third parties unless the law specifically provides for it or an investigative authority requests it through a procedure prescribed by law.
7. International transfers
The companies in section 6 process information outside the Republic of Korea. We disclose the following under Article 28-8 of the Personal Information Protection Act. These transfers are entrustment and storage necessary to perform the service contract, carried out by disclosure in this policy.
| Recipient (contact) | Country | Items transferred | Timing and method | Purpose | Retention and use period |
|---|---|---|---|---|---|
| Google LLC (contact form) | United States and other countries where Google data centers are located | Google items in the table in section 6 | Sent over the network from time to time while you use the App | Google’s tasks in the table in section 6 | Retention periods in section 5 or until the entrustment ends |
| OpenFreeMap (openfreemap.org) | Countries where the CDN serving the map tiles operates | Map tile number (approximate area), IP address | Sent when you open the ‘Nearby map’ | Showing the nearby map | According to that service’s policy; received tiles are cached on the device up to 60 MB |
| Cloudflare, Inc. (privacyquestions@cloudflare.com) | United States and other countries where Cloudflare data centers are located | Information stored on the server, IP address | Sent from time to time when the App communicates with the server | Operating the server | Retention periods in section 5 |
| Unity Technologies (Unity Software Inc., privacy@unity3d.com) | United States | Advertising information (advertising ID, IP address and approximate location, device and app information, ad usage information), offer usage information | Sent from time to time when ads or the offerwall are used | Ad mediation (LevelPlay), ad serving (Unity Ads), measurement, fraud prevention, reward verification, offerwall | According to that company’s policy |
How to refuse and consequences: If you do not want your information transferred abroad, you may choose not to use the App or the relevant features. Server features and AR location features cannot be provided without the transfer, so you will not be able to use them. For ads, you can delete your advertising ID in the device settings or, in regions where it is shown, refuse personalized ads under ‘Privacy options’ in the App settings.
8. Advertising and your choices
- The App is funded by ads. Rewarded ads are shown only when you choose them by tapping a button, and the reward is explained before the ad. There is no penalty for not watching.
- For users in the European Economic Area (EEA), the UK and Switzerland, we request ads only after obtaining consent through Google’s consent tool (UMP, IAB TCF). Users in certain US states are shown a choice screen required by their state’s law. You can change your choices under ‘Privacy options’ in the App settings.
- You can delete or reset your advertising ID in Android Settings under Privacy > Ads. On iOS, the App asks for App Tracking Transparency (ATT) permission before requesting ads. If you do not allow it, ad companies do not receive your IDFA, and you can change your choice at any time in iOS Settings > Privacy & Security > Tracking.
- Gambling and social casino ads are blocked.
- Ad SDKs are not turned on for users aged 14–15.
9. Children and age
- We ask for your birth year once, right before you first use advertising, social or location features. The answer is stored only on your device.
- Children under 14 may not use the App.
- Users aged 14–15 can use the App only in restricted mode, in which ad and offerwall SDKs, analytics collection, push notification registration and server registration are not used. No personal information is sent to our server.
- Users under 18 (under 19 in Korea) cannot use social and location features such as public drops, pickups, notes and thanks, nearby rooms, friends and the offerwall.
- The App is not directed at children under 13. If we learn that information was collected by bypassing the age restriction, we delete it without delay.
10. Your rights and how to exercise them
- Deletion: Tapping ‘Delete my data on the server’ in the App settings immediately deletes your public drops on the server (hidden, coordinates destroyed), notes and thanks, push token, items awaiting delivery, friend links, block list, Flex Together rooms you created, location consent records, most recent request location and your records of use and provision of location information, and requests Google to delete the ‘Remembered space’ anchors stored on your device. Only a minimal install record for preventing abuse remains, for up to 180 days after last use. This also withdraws your consent to the use of location information. Data deletion information
- Access, correction, restriction of processing, objection, withdrawal of consent: You can request these at yoonho@zoopiter.co.kr. You may also make a request through a legal representative or an authorized person.
- Because there are no accounts, we cannot find your data by name or email. To handle your request, you may need to use the in-app feature or give us information that identifies the data (for example, the approximate location and time of a public drop).
- We act on requests without delay, and no later than 10 days after receipt, and tell you the result (within one month for users covered by the GDPR).
- You can turn off notifications in your device settings and location use in your device’s app permission settings at any time.
- Deleting the App erases all information that exists only on your device.
11. Users in the EEA, the UK and Switzerland
| Processing | Legal basis (GDPR Article 6) |
|---|---|
| Public drops, pickups, notes and thanks, Flex Together rooms, install information | Performance of a contract (Art. 6(1)(b)) |
| Preventing abuse and security (device integrity verdicts, reports and blocks) | Legitimate interests (Art. 6(1)(f)) |
| Personalized ads, storing and accessing information on the device for ads, analytics | Consent (Art. 6(1)(a)) — can be withdrawn at any time under ‘Privacy options’ |
| Showing non-personalized ads and preventing ad fraud | Legitimate interests (Art. 6(1)(f)) |
| Records of use and provision of location information | Legal obligation (Korean Location Information Act) and legitimate interests (safety and dispute handling) |
- You have the rights of access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent, and you may lodge a complaint with the data protection supervisory authority of your country.
- The Republic of Korea is covered by an adequacy decision of the European Commission. Transfers to the United States rely on safeguards provided by each company, such as certification under the EU-U.S. Data Privacy Framework or standard contractual clauses.
- Our EU representative and UK representative under Article 27 GDPR will be appointed and published in this section before we offer the service in those regions.
- We do not make automated decisions that produce legal effects or similarly significant effects. If your device fails the integrity check, your public drop limit may be reduced; you can ask for an explanation or object at yoonho@zoopiter.co.kr.
12. Users in the United States
- We do not sell personal information for money. However, the laws of some states, such as California, may treat sharing the advertising ID with ad companies for personalized ads as ‘sharing’ or a ‘sale’. You can opt out under ‘Privacy options’ in the App settings.
- Depending on your state’s law, you may exercise rights to know, delete, correct and opt out, and you will not be discriminated against for exercising them.
13. Security measures
- All communication is encrypted with HTTPS, and requests are verified with a signed token (HMAC) for each install.
- Records of location information store the install ID as a hash (SHA-256); coordinates are rounded before storage and are not written to logs.
- Administrative functions are protected by access control (Cloudflare Access) and a separate admin token, and the number of people who handle personal information is kept to a minimum.
- We collect only necessary information and delete it automatically when the retention period ends. The server runs in the facilities of cloud providers with security certifications.
15. Privacy officer
- Chief Privacy Officer: Yoonho Myoung (CEO) · yoonho@zoopiter.co.kr · +82-2-333-3140
- Location Information Manager: Yoonho Myoung (CEO) · yoonho@zoopiter.co.kr · +82-2-333-3140
16. Remedies
If you need to report or get advice about an infringement of personal information, you can contact the following Korean agencies.
- Personal Information Dispute Mediation Committee: +82-1833-6972, www.kopico.go.kr
- Personal Information Infringement Report Center (Korea Internet & Security Agency): 118, privacy.kisa.or.kr
- Supreme Prosecutors’ Office: 1301, www.spo.go.kr
- Korean National Police Agency: 182, ecrm.police.go.kr
17. Changes to this policy
If we change this policy, we will announce it in the App and on this page at least 7 days before it takes effect (at least 30 days before for changes that materially affect your rights).
- 1.0 — effective December 8, 2026 (first version)