Effective date: August 22, 2026
RabbitFlower (Korean business name: 래빗플라워, “RabbitFlower,” “we,” or “us”) complies with applicable privacy laws and app marketplace requirements and processes only the information reasonably needed to provide our services. This policy applies to RabbitFlower mobile games, our official website, and related customer support.
1. Information we process
Account and authentication information
- An anonymous Firebase user identifier automatically created by the app.
- A platform authentication identifier and connection status when you choose to link Google Play Games or Apple Game Center.
- RabbitFlower does not collect or store your platform account password.
Gameplay and progress information
- Game level, experience, difficulty, puzzle completion history, hints and items, daily play information, ad-removal or subscription status, and other service records.
- App version, language, access time, feature usage, button selections, and similar app interactions.
Purchase information
- Product ID, transaction ID, order or purchase token, receipt, purchase time, amount and status, and the app marketplace used.
- Payment card and bank account details are processed directly by Google Play or the Apple App Store and are not collected directly by RabbitFlower.
Content you choose to provide
- Images you select from your camera or photo library and import into a game.
- Only when you actively use the Share feature, a share image, thumbnail, and share identifier may be uploaded to our servers.
- If you only import an image and use it locally as a puzzle, the original image is not sent to RabbitFlower’s servers.
Device, advertising, and diagnostic information
- Device model, operating system and version, app version, country and language, IP address, network, and access information.
- An advertising identifier where permitted by the operating system and your choices, plus ad impressions, clicks, rewards, and revenue events.
- Crash and performance diagnostics such as the time of an error, stack trace, and device or app state.
Customer support and website information
- Email address, message, attachments, device and app version, order number, and other information you provide or that is needed to resolve an issue.
- When you visit our website, our hosting provider may automatically process IP address, browser and device information, access time, requested URL, and security logs.
2. How we collect information
- Automatically when you install or run an app, authenticate, play, make a purchase, view an ad, or encounter an error.
- Directly from you when you use sharing, camera or photo selection, or customer support features.
- From platforms and service providers such as Google, Apple, Firebase, and Unity.
3. Why we process information
- Authenticate users, link accounts, save progress in the cloud, and restore progress across devices.
- Provide game features, user-initiated image sharing, and related services.
- Verify purchases, restore purchases, prevent duplicate or fraudulent transactions, and handle refunds or disputes.
- Analyze service use, improve features, diagnose errors, and maintain stability and security.
- Serve ads, manage frequency and rewards, and provide personalized ads where you allow them.
- Respond to support requests, comply with legal obligations, and protect legal rights.
4. Retention
We retain information only for as long as reasonably needed for the purposes described above. We delete or de-identify it without undue delay when the purpose is complete or when we receive a valid deletion request. If applicable law requires retention, or limited retention is necessary to resolve disputes or prevent fraud, we isolate and retain only the minimum information needed for that purpose.
| Information | Retention standard |
|---|---|
| Account identifier and game progress | For the life of the account or service; deleted after account deletion or a valid deletion request. |
| Shared image and share identifier | While the sharing feature is provided; deleted on a valid user request or when the feature ends. |
| Analytics, advertising, and crash diagnostics | According to the relevant service console settings and retention policy, then deleted, aggregated, or de-identified. |
| Support and dispute records | Up to three years after resolution, or a shorter period where sufficient. |
| Contract, cancellation, payment, and supply records | Five years where required by Korean e-commerce law. |
| Advertising records | Six months where required by applicable law. |
| Service access logs | Three months where required by the Korean Protection of Communications Secrets Act. |
5. Service providers and international transfers
We use the providers listed below. Information may therefore be transferred to and processed outside South Korea over encrypted network connections. Providers protect information under their contracts and privacy policies, and we instruct them to process information only as needed to provide the relevant service.
| Provider and service | Purpose and information | Destination, timing, and retention |
|---|---|---|
| Google LLC Firebase, Google Analytics for Firebase, Crashlytics, Google Play Games and Billing |
Authentication, cloud data and shared-image storage, server features, analytics, crash diagnostics, Android platform sign-in, and purchase verification. Account identifiers, progress, purchase and shared content, device, usage, and diagnostic information. | United States and other Google processing locations based on service configuration; some server functions use a South Korea region. Transferred over the network when the app starts or the relevant feature is used. Retained for the account or service lifetime, or under Google policy and console settings. |
| Unity Technologies and Unity affiliates Unity Analytics, LevelPlay, Unity Ads |
Usage analytics, ad delivery and measurement, and fraud prevention. Advertising identifier, IP address, device and app information, and usage and ad events. | United States and other Unity processing locations. Transferred over the network when analytics or advertising features are used. Retained under Unity policy and console settings. |
| Apple Inc. Game Center, App Store |
iOS platform authentication, in-app purchases, and purchase restoration. Platform account identifier and transaction or receipt information. | United States and other Apple processing locations. Transferred when sign-in or purchase features are used. Retained under Apple policy. |
For more information, see the Google Privacy Policy, Firebase Privacy and Security documentation, Unity Privacy Policy, and Apple Privacy Policy.
If you decline processing that is necessary for cloud authentication or storage, some features, including server-side saving and progress recovery, will not be available. You may decline optional ad tracking in your operating system settings; non-personalized ads may still appear.
6. Disclosures to third parties
RabbitFlower does not sell personal information. Except for the service providers and external platforms described above, we do not disclose personal information to third parties unless you separately consent, disclosure is authorized or required by law or valid legal process, or it is necessary to protect someone from an urgent threat to life or physical safety.
7. Advertising and automatic collection choices
Our services may use an advertising identifier, device and app information, and ad interactions to serve and measure advertising. Where personalized advertising or cross-app tracking requires consent, we request it under applicable law and operating-system rules.
- iOS/iPadOS: Go to Settings > Privacy & Security > Tracking to change permission for each app.
- Android: Go to Settings > Privacy > Ads to delete or reset the advertising ID or change ad privacy settings. Menu names vary by device and Android version.
8. Device permissions and user content
We request camera and photo access only so that you can capture or select an image and import it as a puzzle. Declining a permission affects only that feature. If you use the Share feature, the selected image may be made available to anyone who has the link. Only share images containing another person’s personal information, likeness, or copyrighted work when you have the necessary rights and consent.
9. Your rights and requests
You, or an authorized parent or legal representative where applicable, may request access, correction, deletion, restriction or suspension of processing, withdrawal of consent, and deletion of an account or shared content. Email support@rabbitflower.com. We may request the minimum information needed to verify the request, such as a game user identifier, share link, or purchase details.
We will respond within the period required by applicable law. Purchase, dispute, or other records that must be retained by law will be isolated and deleted when the required period ends. Permissions and choices given through your operating system or Google or Apple account can also be changed in the relevant platform settings.
10. Children’s privacy
RabbitFlower does not knowingly collect personal information from children where verifiable parental consent is required. If we learn that a child provided personal information without the required consent, we will verify the circumstances and delete the information without undue delay. A parent or guardian may contact us using the email above.
11. Security and deletion
We use reasonable technical and organizational safeguards, including encryption in transit, least-privilege access, authentication and access controls, security updates, and access-log management. Electronic records are deleted using methods designed to make recovery impractical, and information retained by law is separated and access-restricted.
12. Privacy contact
Privacy team: RabbitFlower Customer Support
Email: support@rabbitflower.com
If you are in South Korea and need additional assistance, you may contact the Personal Information Infringement Report Center at 118 (privacy.kisa.or.kr) or the Personal Information Dispute Mediation Committee at 1833-6972 (kopico.go.kr).
13. Changes to this policy
We may update this policy when laws, services, or our data practices change. We will provide advance notice of material changes through our website or apps and obtain additional consent where required.