> This English version is provided for convenience. If it conflicts with the Korean version, the Korean version prevails.
1. Overview
Synub Inc. ("Synub") complies with the Personal Information Protection Act and other applicable laws, and establishes this policy to process personal data safely. This policy applies to Synub Center and the apps, web, and game services operated by Synub (the "Services").
2. Information We Collect
Synub collects only the minimum information needed to provide the Services:
- Information you provide directly: email address, nickname, inquiry content, submitted ideas - Information collected automatically during use: IP address, cookies, service usage records, device and browser information, error and technical logs - Information collected in app services to serve and measure ads: advertising identifier (Android Advertising ID (AAID), iOS Identifier for Advertisers (IDFA)), device information (model, operating system, language), approximate location (country or region level), and ad interaction records such as impressions and clicks - Information collected when you use game features (leaderboards, achievements) in app services: Google Play Games Services account identifier, game progress and record data
You can reset the advertising identifier or opt out of personalized ads at any time in your device settings; see Section 9.
Synub does not, in principle, collect sensitive data (e.g., beliefs, health, sex life) or unique identifiers under the Personal Information Protection Act.
3. Purpose of Processing
Collected personal data is used only for the following purposes. If the purpose changes, we obtain prior consent or give notice as required by law.
- Providing and operating the Services, and identifying users - Handling inquiries and complaints and responding to them - Reviewing submitted ideas and providing reward-related notices - Preventing misuse and responding to security incidents - Serving ads in app services, measuring ad performance, and preventing invalid ad traffic - Providing game features such as leaderboards and achievements in app services - Fulfilling legal obligations and handling disputes
4. Retention and Use Period
Synub destroys personal data without delay once the purpose of collection and use is achieved, unless a longer retention period is required by law (e.g., the Act on Consumer Protection in Electronic Commerce, the Protection of Communications Secrets Act).
Synub does not separately store advertising identifiers or other ad-related data. The retention period of data provided to advertising providers follows that provider's privacy policy.
5. Provision to Third Parties
Synub does not provide personal data to third parties beyond the scope disclosed in this policy, except where you have consented in advance, or where required by law or legal process such as investigation or trial.
To serve ads and to provide game features (leaderboards, achievements) in app services, personal data is provided to third parties as follows. Provision for advertising purposes takes place only where you have consented; you can use the Services without consenting (Section 6).
- Recipient: Google LLC (Google AdMob) / Purpose: serving ads, measuring ad performance, preventing invalid ad traffic / Items provided: advertising identifier (AAID, IDFA), device information, approximate location, ad interaction records / Retention: as set out in Google's privacy policy - Recipient: Google LLC (Google Play Games Services) / Purpose: providing game leaderboards and achievements / Items provided: Play Games Services account identifier, game progress and record data / Retention: as set out in Google's privacy policy
Google's processing is described in the Google Privacy Policy (policies.google.com/privacy) and Google Advertising Policies (policies.google.com/technologies/ads).
You may reset your advertising identifier or opt out of personalized ads in your device settings (Section 9). Non-personalized ads, unrelated to your interests, may still be served.
6. Cross-Border Transfer of Personal Data
Where personal data is transferred outside the Republic of Korea, the legal basis differs by transfer type under Article 28-8 of the Personal Information Protection Act.
A. Transfer by way of third-party provision — separate consent is obtained (Art. 28-8(1)1)
Providing personal data to Google LLC to serve ads and to provide game features is a third-party provision, not outsourcing or storage. It therefore cannot be satisfied by disclosure in this policy alone. We inform you of the following on first launch of the app and obtain your separate consent.
- Recipient: Google LLC (contact: as published in the Google Privacy Policy, policies.google.com/privacy) - Country of transfer: the United States and other countries where Google operates data centers - Time and method of transfer: transmitted over the network at app launch and when an ad is requested - Items transferred: advertising identifier (AAID, IDFA), device information, approximate location, ad interaction records; and, if you use game features, the Play Games Services account identifier and game progress and record data - Recipient's purpose of use: serving ads, measuring ad performance, preventing invalid ad traffic, and providing game leaderboards and achievements - Recipient's retention and use period: as set out in Google's privacy policy - How to refuse: decline on the consent screen, or withdraw consent at any time in the app settings or through the contact channel in Section 13 - Effect of refusal: personalized ads are not served; non-personalized ads unrelated to your interests are served instead. Use of the Services themselves is not restricted. In apps that have game leaderboards and achievements, those features are unavailable; in apps without them, there is no restriction at all.
B. Transfer by way of outsourcing and storage — satisfied by disclosure in this policy (Art. 28-8(1)3)
These transfers are outsourcing and storage necessary to conclude and perform the contract with you, and are therefore disclosed in this policy as follows.
- Recipient: Amazon Web Services, Inc. (AWS) / Country: the United States and other AWS region countries / Time and method: network transmission during service use / Items: the items in Section 2 that are stored on servers / Purpose: hosting of servers, database, and file storage / Retention: until termination of the outsourcing agreement - Recipient: Vercel Inc. / Country: the United States / Time and method: network transmission during service use / Items: access logs and other web service usage data / Purpose: hosting of the web (frontend) service / Retention: until termination of the outsourcing agreement
You may refuse these outsourcing and storage transfers, in which case use of the relevant services may be limited. You may express such refusal through the contact channel in Section 13.
7. Outsourcing of Processing
Synub may entrust part of its personal data processing to external providers for stable operation, and discloses the entrusted party and tasks in this policy. Current entrustment is as follows:
- Amazon Web Services, Inc. (AWS): hosting and storage of servers, database, and file storage - Vercel Inc.: hosting of the web (frontend) service
The infrastructure of these providers may be located outside the Republic of Korea; the resulting cross-border transfer is described in Section 6. Any change will be disclosed through this policy.
8. Destruction Procedure and Method
Personal data whose retention period has expired or whose purpose has been achieved is destroyed in accordance with internal policy and law. Electronic files are deleted using technical methods that prevent recovery, and printed materials are shredded or incinerated.
9. Cookies, Advertising Identifiers, and Automatic Collection
Synub may use cookies and similar tools for usage analysis and convenience. You may refuse or delete cookies through your browser settings, in which case some features may be limited.
App services use an advertising identifier to serve ads. You may reset it or opt out of personalized ads as follows.
- Android: Settings > Google > Ads > "Reset advertising ID" or "Delete advertising ID" - iOS: Settings > Privacy & Security > Tracking > turn off "Allow Apps to Request to Track". You may also decline the App Tracking Transparency prompt shown on first launch.
Opting out of personalized ads does not remove ads entirely; non-personalized ads unrelated to your interests may still be served.
In regions where separate consent is required, such as the European Economic Area (EEA) and the United Kingdom, a consent flow for ad-related processing is presented on first launch of the app.
10. Your Rights and How to Exercise Them
You may at any time request access to, correction or deletion of, or suspension of processing of your personal data, withdraw consent, refuse the cross-border transfer of your personal data, and withdraw your consent to the cross-border transfer for advertising purposes (Section 6). Requests may be submitted through the Privacy Request Center or the contact channel below, and Synub will act without delay. Verification of identity or authority may be required.
11. Children Under 14
The Services are not primarily directed at children under 14, and Synub does not, in principle, collect their personal data. Where legal guardian consent is required, it is handled in accordance with law.
Apps primarily directed at children do not serve personalized ads and are operated in accordance with the app stores' families and children policies.
12. Security Measures
Synub applies administrative and technical safeguards including access rights management, access control, encryption in transit and at rest, and retention and review of access logs.
13. Privacy Officer
- Privacy Officer: Synub Co-Representatives - Contact (email): haru@synub.io, sky@synub.io
You may contact the address above for privacy inquiries, complaints, and remedies related to your use of the Services.
14. Remedies for Rights Infringement
You may contact the following bodies for dispute resolution or counseling:
- Privacy Infringement Report Center (KISA): 118 / privacy.kisa.or.kr - Personal Information Dispute Mediation Committee: 1833-6972 / www.kopico.go.kr - Supreme Prosecutors' Office Cyber Investigation Division: 1301 / www.spo.go.kr - National Police Agency Cyber Bureau: 182 / ecrm.police.go.kr
15. Changes to This Policy
This policy may be revised in line with legal or service changes. We disclose the effective date and changes on this page, and give separate advance notice before the effective date for material changes that are disadvantageous to users.
- Effective date: 2026-07-14 - Previous version: 1.1.0 (effective 2026-06-20) - Key change: disclosure of advertising identifier collection in app services, third-party provision to Google LLC (AdMob and Play Games Services), and cross-border transfer of personal data, which is now a dedicated section (Section 6). Cross-border transfers are now split into third-party provision (separate consent) and outsourcing/storage (disclosure in this policy), each with its stated legal basis.