Meow Café Privacy Policy
[Operator] ("we") runs Meow Café (the "Service"). We never ask for your name or phone number and process only what the Service needs.
1. What we process
| Category | Data | When |
|---|---|---|
| Anonymous account | A random user ID, a system-generated placeholder email (not yours), sign-in token and expiry, browser or device info (User-Agent) | Created automatically on first use |
| Wallet | Gem balance, gem history (purchases, spending, refunds, spend reason, time, store transaction ID), starter pack status | When you buy or spend gems |
| Ad events | Ad impressions (ad format and reported revenue) and your ad consent mode; never your advertising identifier | When an ad is shown |
| Usage records | app events (opens, screens, feature use, paywall views, errors); app version, platform, country (estimated from the IP, which is not stored); random install and session IDs | While you use the service |
| Abuse prevention | A daily value that represents your network (a keyed one-way transform of the IP, never the IP) and that day's counts of new accounts, free uses, reports and sign-in links | On sign-up, free use, reports and sign-in links |
| Purchases | Product ID, subscription status (trial, active, expired…), trial and expiry dates, store transaction ID. Purchase notices we cannot match to an account are kept as received for up to 90 days. Apple and Google handle your card; we never receive it. | From the payment provider when you buy, renew, cancel or get a refund |
2. Why
- To create and keep your anonymous account and restore purchases
- To provide an idle cat café game with gems (in-game currency), the Meow Club membership, Remove Ads and a starter pack
- To enforce free, trial and paid limits and prevent abuse
- To improve the Service and fix errors (statistics)
3. Data that stays on your device
Game progress, settings and scheduled notifications are stored on the device. It is not sent to our server and is removed when you clear the app's or browser's data.
4. AI
The Service does not use AI features.
5. Retention
- Account, purchase status, usage records and this Service's server data: deleted immediately when you use "Delete my data". Sign-in sessions expire after one year without use.
- Wallet and gem history: deleted immediately when you delete your account, including any remaining gems.
- Abuse-prevention values: deleted automatically after at most 2 days.
- Usage events: kept up to 1 year.
- Transaction records the law requires us to keep are kept for the legal period.
- How data is destroyed: when the retention period ends or you ask for deletion, we delete it without delay from our database and file storage so it cannot be restored. We keep no paper records.
6. Processors and international transfers
We use the processors below. Their servers are outside Korea, so data is transferred abroad over encrypted connections (HTTPS) when you use the Service.
| Recipient (contact) | Country | Data | Purpose | Retention |
|---|---|---|---|---|
| Cloudflare, Inc. (contact: dpo@cloudflare.com) | USA and data centers worldwide | Account, purchase/subscription state, usage records, this app's server-side data, requests in transit | Servers, database, file storage | Until account deletion or end of contract |
| Nest 22, Inc. (Superwall) (contact: compliance@superwall.com) | USA | User ID, purchased products and status, paywall views, device/app info | Paywalls and purchase status | Until end of contract |
| Apple Inc. (for the Korean App Store, Apple Services Pte. Ltd.) / Google LLC (contact: Apple privacyoffice_korea@apple.com · Google googlekrsupport@google.com) | USA, Singapore | Payment information | In-app purchases | Per each company's policy |
| Tinybird, Inc. (contact: legal@tinybird.co) | USA (data stored in the operator account's region: USA or EU) | Usage events | Usage statistics and error analysis | Up to 1 year from collection |
Legal basis: Article 28-8(1)(iii) of Korea's Personal Information Protection Act (outsourcing and storage needed to perform our contract with you, disclosed in this policy). When and how: each time you use the Service, over encrypted connections (HTTPS).
Our ad partner Google LLC (USA) receives the advertising data described in section 10 directly from the app and processes it under its own policy (it does not pass through us).
7. Your rights
- You can ask to access, correct, delete or stop the processing of your data at any time.
- "Delete account & progress" in Settings deletes your account and server data immediately. Store subscriptions are not cancelled automatically: cancel them in your Apple or Google subscription settings.
- To ask for deletion without the app, email support@yhisoft.com with the "Support code" shown in Settings. We delete the account within 7 days of receiving your email (account and data deletion).
- For anything else, contact [Contact].
8. Children
The Service is not directed at children under 14 (under 13 in the US). They may use it only with a parent's consent.
9. Security
- HTTPS everywhere
- Sign-in tokens are kept in the iOS Keychain / Android Keystore
- Least-privilege server access and separately stored secrets
- Daily limits and rate limits per feature
10. Cookies, tracking and ads
- The iOS and Android app shows ads from Google AdMob: optional rewarded "2× boost" ads that you choose to watch (at most 8 a day) and a limited number of interstitial ads (never in your first session, never right after you open the app, at least 3 minutes apart). Meow Club members see no ads. Remove Ads turns off interstitial ads; the optional rewarded ads stay available if you want the boost.
- Google may use your device's advertising identifier (on iOS the IDFA, only if you allow tracking; on Android the Advertising ID), your IP address and device information (such as model, operating system and language) to serve, limit and measure ads and to prevent fraud. Our server and usage events never contain your advertising identifier.
- In the EEA, the UK and Switzerland, ads are personalised only with your consent: Google's consent form (UMP) asks for your choice before any ad loads, and you can change it any time in Settings → "Ad privacy choices". On iOS the app asks for tracking permission only after that, and ads are personalised only if you allow it; otherwise you see non-personalised ads. On Android outside those regions, Google may personalise ads using your Advertising ID; you can stop this by deleting or resetting your advertising ID (or opting out of ads personalisation) in the system settings.
- Meow Café is a general-audience game for ages 13+ and is not directed at children under 13. Ad requests are limited to content rated PG or lower.
How Google uses this data: https://policies.google.com/technologies/ads
11. Contact
Privacy contact: [Operator] · [Contact]
12. Changes
We announce changes in the Service or on this page at least 7 days before they apply (30 days for important changes).