AIRCAP Co., Ltd. ("AIRCAP", "we", "us" or "our") respects your privacy. This Privacy Policy explains what personal data we collect when you use the mobile game Agatha: Idle and the related services we provide (together, the "Service"), how we use and share it, how long we keep it, and the rights and choices you have.
AIRCAP is a company established under the laws of the Republic of Korea. Your personal data is processed in the Republic of Korea in accordance with the Korean Personal Information Protection Act and other applicable laws. Where the laws of the country in which you live give you additional rights, we honor those rights as described in Sections 9 and 10.
This Privacy Policy covers the following topics:
1. Personal data we collect and how we collect it
We collect only the personal data needed to provide the Service, and we tell you what we collect and why.
1) Data you give us
We process the following personal data with your consent or because it is necessary to provide the Service you request. Items marked "Required" are needed for the purpose shown; items marked "Optional" are collected only if you choose to provide them, and you can use the core Service without providing them.
| Purpose | Personal data |
|---|---|
| Refund processing | [Required] Payment and order information (order ID, product, date, store receipt). We do not receive your full card number. |
| Event and promotional notices | [Optional] Name, mobile phone number, email address |
| Prize and merchandise delivery | [Required] Name, phone number, delivery address |
| Participation in events | [Optional] Name, mobile phone number, gender, date of birth, email address |
| Personalized advertising | [Optional] User identifier, advertising identifier (iOS IDFA, Android Advertising ID), behavioral information (service usage records, purchase and payment records), device information (OS, device model) |
| Customer support | [Required] Nickname; email address (required only for inquiries submitted without an account) [Optional] Account ID, name, email address, date of birth, gender, address, phone number, payment information (Depending on the type of inquiry, we may collect additional personal data or images you choose to send us.) |
| Tax reporting on prizes | [Required only where applicable tax law requires us to withhold or report tax on a prize you win] Name, address, phone number, and the taxpayer identification number required by that law |
2) Data we receive from third parties
- Sign-in with an external account (Google, Apple): [Required] user identifier, email address. We process this data because it is necessary to create and operate your account (performance of a contract).
3) Data collected automatically
While you use the Service, the following information may be generated and collected automatically to keep the Service stable, prevent fraud and abuse, protect accounts and items, analyze how the Service is used, and deliver and measure advertising: IP address, access logs, service usage records, records of fraudulent or abusive use, download records, payment records, OS and device information, and advertising identifiers (iOS IDFA, Android Advertising ID).
4) Account identifier and device identifier
To tell accounts and devices apart, we generate and use the two identifiers below. On their own, and unless combined with other information such as your name or phone number, they do not reveal who you are. We process them because they are necessary to provide the Service (performance of a contract).
| Identifier | When it is created | What we use it for | Retention |
|---|---|---|---|
| Account identifier (Firebase UID) | A unique value issued by Google Firebase Authentication when you create an account or sign in with an external account (Google, Apple) | Identifying your account and linking your game data (progress, in-game currency, purchase history) to it; restoring your account on a new device; detecting duplicate accounts; preventing fraud and abuse; handling customer inquiries; Service usage analytics and statistics | Until you delete your account (except for records we must keep under Section 3) |
| Device identifier (Device UID) | A unique value generated for your device when the app is first launched after installation | Keeping play records created before an account is set up and linking them to the account; detecting multiple accounts created on the same device; preventing fraud and abuse; keeping the Service stable and diagnosing errors | Until you uninstall the app or delete your account (except for records we must keep under Section 3) |
These identifiers are separate from the advertising identifiers (iOS IDFA, Android Advertising ID) described in Section 11.
2. Why we use your personal data (purposes and legal bases)
We use personal data for the following purposes. Where the law of your country requires a legal basis, we rely on: performance of our contract with you (Service delivery, billing, support); your consent (optional data, marketing messages, personalized advertising); compliance with a legal obligation (tax and record-keeping); and our legitimate interests (security, fraud prevention, analytics and improvement of the Service), balanced against your interests and rights.
1) Account management
Identifying you so we can deliver content, checking for duplicate accounts, verifying age, handling complaints and inquiries, delivering notices, keeping records needed to resolve disputes, and preventing fraudulent or unauthorized use.
2) Providing the Service and settling payments
Delivering content, providing paid services and notifying you of payment details, shipping prizes or sending invoices, verifying financial transactions, handling complaints and providing other customer services.
3) Developing new services, marketing and advertising
Developing new services, informing you about new services, products, events or promotions (with your consent where required), providing personalized advertising and measuring advertising performance, producing statistics and analyses based on demographic characteristics, analyzing how users use the Service, and confirming delivery details for prizes.
3. How long we keep your personal data
1) General rule and exceptions
As a rule, we delete personal data without delay once the purpose for which it was collected has been fulfilled. The following data is retained for the period shown, for the reason shown:
a. Administering events and selecting winners
- Data retained: name, address, phone number, mobile phone number, email address, date of birth, account ID
- Retention period: 3 months after the event ends
b. Handling complaints and disputes after account deletion
- Data retained: access records, access date and time, access location, records of fraudulent or abusive use, mobile device information, download records, payment records, game usage records
- Retention period: 30 days
c. Dormant accounts
- If you do not use the Service for 1 year, we may delete your account and personal data after giving 30 days' notice (see Terms of Service, Article 22).
2) Retention required by law
As a company established in the Republic of Korea, we are required by Korean law to keep certain records for the periods below. We use records kept under this paragraph only for the purpose of that retention. Where the laws of your country require a different period, we comply with that requirement.
a. Records of contracts and withdrawals
- Legal basis: Act on Consumer Protection in Electronic Commerce (Korea)
- Retention period: 5 years
b. Records of payments and supply of goods or services
- Legal basis: Act on Consumer Protection in Electronic Commerce (Korea)
- Retention period: 5 years
c. Records of consumer complaints and dispute resolution
- Legal basis: Act on Consumer Protection in Electronic Commerce (Korea)
- Retention period: 3 years
d. Service access logs
- Legal basis: Protection of Communications Secrets Act (Korea)
- Retention period: 3 months
e. Books and supporting documents for transactions subject to tax law
- Legal basis: Framework Act on National Taxes (Korea)
- Retention period: 5 years
4. Children and age requirements
You must meet the minimum age shown in the content rating of the app store listing for your country (16 or older in most regions) to use the Service. If you are under the age of majority in the country where you live, you must have the consent of a parent or legal guardian before using the Service or making a purchase. We do not knowingly collect personal data from children below the age at which parental consent is required under the law of their country (for example, under 13 in the United States, under 14 in the Republic of Korea, and under 16 in many countries of the European Economic Area).
If we learn that we have collected personal data from a child without the required consent, we will delete it without delay. If you believe a child has provided us with personal data, please contact us using the details in Section 13.
Where a User is under the age of majority and parental consent is required under this Section or the law of the User's country, we obtain that consent from the parent or legal guardian. We may ask the User for the minimum information needed to contact the guardian (such as the guardian's name and contact details), and we verify the guardian's consent through a method appropriate to the country, such as a verified email, mobile phone verification, credit card verification, or a third-party identity service.
5. How we delete personal data
1) Personal data is deleted without delay once the purpose of collection has been fulfilled, subject to the retention periods in Section 3. The procedure and method are as follows.
a. Procedure
Data you entered when creating your account, and data we received from partners, are stored for the retention period set by our internal policy and applicable law after the purpose has been fulfilled, and are then deleted.
b. Method
- Personal data stored as electronic files is deleted using technical methods that make the records unrecoverable.
- Personal data printed on paper is shredded or incinerated.
2) You can ask us to correct inaccurate or incomplete personal data, or to delete personal data you have provided to us, by emailing us at the address in Section 13. You can also delete your account from within the Service (see Section 9).
6. Sharing and disclosure
We use your personal data only within the purposes stated when it was collected, and we do not disclose it to third parties except in the following cases:
1) You have given your prior consent.
2) Disclosure is necessary to settle payments for the Service (for example, to the app store through which you made a purchase).
3) Disclosure is required by applicable law, or is requested by a court, law enforcement agency or other public authority in accordance with lawful procedures.
4) Disclosure is necessary to protect the rights, property or safety of AIRCAP, our users or others, including to investigate fraud or abuse.
We do not sell your personal data for money.
Links and third-party services
The Service may contain advertisements, banners or links that take you to websites or services operated by third parties, and you may sign in through a third-party account (Google, Apple) or make purchases through an app store (Google Play, App Store). Those third parties collect and use your personal data under their own privacy policies, which we do not control. We encourage you to read them before using those services. This Privacy Policy does not apply to third-party websites or services.
7. Service providers acting on our behalf
To operate the Service, improve your experience and run the Service efficiently, we use the following service providers (processors), who process personal data on our behalf. When we do so, we enter into a contract that requires the provider to process personal data safely and only on our instructions, and we supervise the provider's handling of your data. Our current providers are:
| Provider | Processing performed on our behalf |
|---|---|
| Google LLC (AdMob, UMP, Firebase, Google Analytics) | Account authentication (Firebase Authentication) and management of account identifiers; Delivering and managing advertising, managing user consent, analyzing and compiling statistics on Service usage |
| AB180 Inc. (Airbridge) | Measuring advertising performance, attributing app installs and analyzing acquisition channels |
8. International transfers
Because AIRCAP is located in the Republic of Korea, personal data we collect from you is transferred to and stored in the Republic of Korea. In addition, to provide the Service, deliver personalized advertising, measure advertising performance and analyze Service usage, we transfer personal data to the providers below in the countries shown. When we transfer personal data internationally, we take the protective measures required by applicable law.
| Recipient | Country | Purpose | Data transferred | When and how | Retention |
|---|---|---|---|---|---|
| Google LLC (AdMob, UMP, Firebase, Google Analytics) | United States | Personalized advertising and ad measurement, consent management, Service usage analytics and statistics | Account identifier (Firebase UID), device identifier (Device UID), Advertising identifier (iOS IDFA, Android Advertising ID), device information, Service usage information | Transmitted over the network while you use the Service | Until you delete your account or our contract with the provider ends |
| AB180 Inc. (Airbridge) | Republic of Korea | Ad performance measurement, install attribution and channel analysis | Advertising identifier, device information, app install and usage information | Transmitted over the network while you use the Service | Until you delete your account or our contract with the provider ends |
For users in the European Economic Area, the United Kingdom and Switzerland: transfers to the Republic of Korea are covered by the European Commission's adequacy decision for the Republic of Korea (and the corresponding UK adequacy regulations); for users in Switzerland we rely on the Swiss Standard Contractual Clauses. Transfers to Google LLC in the United States rely on the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) and, where applicable, the European Commission's Standard Contractual Clauses.
9. Your rights and how to exercise them
You (and, where applicable, your legal guardian) may withdraw consent to optional processing (marketing messages, personalized advertising) at any time in the Service settings or by contacting us, and may withdraw consent entirely by deleting your account. To delete your account, select "Delete Account" (or "Withdraw Membership") in the Service. You may also view or correct your registered personal data in the Service or by contacting us.
If you ask us to correct an error in your personal data, we will not use or share that data until the correction is complete. If we have already shared the incorrect data with a third party, we will notify the third party of the correction without delay.
Personal data for which you have withdrawn consent, or that is deleted at your request, is handled as described in Section 3 and cannot be viewed or used for any other purpose.
Depending on where you live, you may also have the right to: access the personal data we hold about you and receive a copy; have inaccurate data corrected; have your data deleted; restrict or object to certain processing; receive your data in a portable format; opt out of the sale or sharing of your data for targeted advertising; and not be discriminated against for exercising your rights. To exercise any of these rights, contact us using the details in Section 13. We may need to verify your identity before acting on a request. We respond within the time required by applicable law, and we do not charge a fee unless the law allows it. If we refuse a request, we will tell you why and how you can complain.
10. Region-specific notices
1) European Economic Area, United Kingdom and Switzerland
AIRCAP Co., Ltd. is the controller of your personal data. The legal bases for our processing are described in Section 2. You have the rights of access, rectification, erasure, restriction, data portability and objection described in Section 9, and the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Where we rely on legitimate interests, you may object on grounds relating to your particular situation. We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you. You have the right to lodge a complaint with the supervisory authority of the country where you live or work. We have not appointed a representative in the EU or the UK; please contact us directly using the details in Section 13.
2) United States (including California)
Residents of several US states have the right to confirm whether we process their personal information, to access and delete it, to correct inaccuracies, to receive it in a portable format, and to opt out of its processing for targeted advertising, sale, or profiling that produces legal or similarly significant effects. To exercise these rights, email us at the address in Section 13; we will verify your request and respond within 45 days, which we may extend once by a further 45 days with notice. If we deny your request, you may appeal by replying to our decision.
California residents: in the preceding 12 months we have collected the following categories of personal information, in each case directly from you or automatically when you use the Service, and disclosed them to the service providers listed in Section 7 for the business purposes described in Section 2:
- Identifiers (user identifier, external account identifier, email address, nickname, advertising identifier, IP address)
- Commercial information (purchase and payment records, order IDs)
- Internet or other electronic network activity (service usage records, access logs, device and OS information)
- Geolocation information at country or city level inferred from IP address
- Characteristics of protected classifications (date of birth and gender, only if you choose to provide them for an event)
- Inferences drawn from the above for personalized advertising
We retain each category for the periods described in Section 3. We have not sold personal information for money in the preceding 12 months. Our disclosure of advertising identifiers and usage information to advertising partners for cross-context behavioral advertising may be considered "sharing" under the California Consumer Privacy Act; you can opt out through your device's advertising settings (see Section 11), through the consent screen shown in the Service, or by emailing us with the subject "Do Not Sell or Share My Personal Information". We do not knowingly sell or share the personal information of consumers under 16. We do not use or disclose sensitive personal information for purposes other than those permitted by law. You have the rights to know, delete, correct, opt out and not be discriminated against, and you may designate an authorized agent to make a request on your behalf (we may ask for proof of the agent's authority and verify your identity directly). Under California's "Shine the Light" law, you may request information about any personal information we have disclosed to third parties for their direct marketing purposes; we do not make such disclosures. We do not respond to browser "Do Not Track" signals, but we honor Global Privacy Control signals where required by law.
3) Canada
We collect, use and disclose personal information with your consent or as permitted by the Personal Information Protection and Electronic Documents Act and applicable provincial laws. Your personal information may be stored and processed outside Canada (in the Republic of Korea and the United States) and may be subject to the laws of those countries. You may withdraw consent subject to legal and contractual restrictions, and you may complain to the Office of the Privacy Commissioner of Canada.
4) Brazil
We process personal data in accordance with the Lei Geral de Proteção de Dados (LGPD). In addition to the rights described in Section 9, you have the right to confirmation of the existence of processing, to information about the public and private entities with which we have shared your data, and to information about the possibility of refusing consent and its consequences. You may file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD). Our contact for data protection matters is given in Section 13.
5) Singapore, Thailand, the Philippines and other countries
We process personal data in accordance with the data protection laws of the country where you live, including the Personal Data Protection Act of Singapore, the Personal Data Protection Act of Thailand and the Data Privacy Act of the Philippines. You have the rights described in Section 9 to the extent provided by that law, and you may complain to your national data protection authority. Where consent is the applicable legal basis, you may withdraw it at any time by contacting us or deleting your account.
11. Advertising identifiers, analytics and your choices
To analyze Service usage, provide personalized advertising and measure advertising performance, we may automatically collect and use your behavioral information and advertising identifier while you use the Service.
1) Information collected automatically and its purpose
| Tool | Information collected | Purpose |
|---|---|---|
| Google AdMob | Advertising identifier (iOS IDFA, Android Advertising ID), device information, Service usage information | Personalized advertising and ad measurement |
| Google Firebase, Google Analytics | Account identifier (Firebase UID), device identifier (Device UID), Device information, Service usage information | Service usage analysis and statistics |
| Airbridge (AB180) | Advertising identifier (iOS IDFA, Android Advertising ID), device information, app install and usage information | Acquisition channel and install attribution analysis, ad measurement |
2) Consent management
In the European Economic Area, the United Kingdom, Switzerland and other regions where applicable law requires consent, we use the Google User Messaging Platform (UMP) to ask for and manage your consent to personalized advertising and related data processing. You can change your choice at any time in the Service settings.
3) Use of behavioral information
We may use behavioral information such as your Service usage records and app install and usage information to analyze Service usage, provide personalized advertising and measure advertising performance. Behavioral information may be used to analyze your interests, preferences and usage patterns. We do not use sensitive personal data (such as health, religion or sexual orientation) for advertising.
4) Limiting the collection and use of advertising identifiers
You can limit the collection and use of your advertising identifier in your device settings:
- iOS: Settings > Privacy & Security > Tracking, where you can choose whether to allow apps to request to track you.
- Android: Settings > Privacy (or Google > Ads), where you can delete or reset your advertising ID or opt out of ads personalization.
Menu names and steps may differ depending on your OS version and device manufacturer. If you limit the use of your advertising identifier, personalized advertising and some related features may be limited.
12. Security
We take the following technical, organizational and physical measures to keep personal data secure and to prevent loss, theft, leakage, alteration or damage:
1) Technical measures: access controls for systems that process personal data, encryption of unique identifiers and other sensitive data, up-to-date anti-malware and security software, and data backups.
2) Organizational measures: an internal management plan, regular staff training, and contractual obligations for providers that process data on our behalf.
3) Physical measures: access control for server rooms and data storage areas.
Please protect your device and account credentials; we cannot secure data on a device that you have lost or shared with others.
13. Contact and complaints
We have appointed a Privacy Officer who is responsible for protecting your personal data and handling related inquiries and complaints.
Privacy Officer
- Name
- Jimin Hyun
- Title
- CEO, AIRCAP Co., Ltd.
- Phone
- +82-70-7758-6660
- privacy@aircapseoul.com
- Address
- H Square FastFive B1 101, 81 Yanghwa-ro, Mapo-gu, Seoul, Republic of Korea
You may report any privacy-related complaint arising from your use of the Service to the Privacy Officer. We will respond within the time required by applicable law. If you are not satisfied with our response, you may contact the data protection authority in your country. AIRCAP is supervised by the Personal Information Protection Commission of the Republic of Korea (www.pipc.go.kr). Users in the EEA, UK, Switzerland, Canada, Brazil and other countries may complain to the authorities named in Section 10.
14. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in law, guidance or our internal policies. If we add, delete or change anything, we will announce the change in the Service or on this page at least 7 days before it takes effect. If the change materially affects your rights, we will give at least 30 days' notice and, where required, ask for your consent again.
Addendum
This Privacy Policy takes effect on October 22, 2026.
This Privacy Policy is provided in English for users outside the Republic of Korea. The Korean version applies to users in the Republic of Korea.