Privacy Policy

Rush50 · Effective 29 August 2026 · Version 2.1

Reference translation. This policy was written for Korean law, and the Korean version is the one that controls. Where the two differ, the Korean text governs. This translation is provided so that readers outside Korea can understand what is collected and why.

AKUMA DAIHYO ("the Company") processes personal information in the course of operating the mobile game Rush50 ("the Service"). The Company complies with the Personal Information Protection Act of Korea and related legislation, and uses this policy to explain what is collected, for what purpose, and for how long it is kept.

What is collected
Why it is processed
How long it is kept
Processors
Transfers abroad
Disclosure to third parties
How data is destroyed
Children under 14
Advertising identifiers
Your rights
Security measures
Data protection officer
Where to complain
Changes to this policy

1. What is collected

The Service collects only the minimum needed at each stage of use. If you play only practice mode without signing in, nothing that identifies you — name, email address, telephone number — is collected at all.

Category	Items	When	Required
Guest session	Anonymous identifier (randomly generated), nickname (if you entered one), country code	Reading a leaderboard without signing in	Required
Account	The unique identifier passed by the authentication provider (Apple or Google), email address, display name, nickname, country code	Signing in with an Apple or Google account	Required to post a score
Game records	Times per mode (in milliseconds), when each was set, daily / weekly / all-time bests, number of runs per day	On finishing a run	Required
Device and environment	Country code (from the device's region setting), device integrity token, advertising identifier (IDFA / AAID)	On launch and when requesting an ad	The advertising identifier is optional (only with consent)
Device distinguisher	The installed device's identifier (iOS: identifierForVendor, Android: ANDROID_ID) converted to a one-way hash. The original is never stored.	When submitting a ranked score	Required for ranked play
Groups	The code and name of each group joined, and the nickname shown in that group's member list	On creating or joining a group	Optional (only if you use groups)
Payments	Purchase receipt (Apple) or purchase token (Google), whether the remove-ads product is owned	On an in-app purchase	Required for payment

No financial information is collected. An earlier version collected bank account details for prize payouts. When cash payouts were removed from the Service, that collection stopped and the information already held was destroyed.

Location is not collected. The country code used to show a flag is read from the device's region setting (for example, KR) and not from GPS. The app does not access your address book, contacts, or call history.

Replay videos and your photo library. Only when you ask for it, the app turns the run you just played into a video and saves it to your device. It is not a screen recording: the app redraws the board from the play record it already holds — which cells were tapped and when — so no screen-recording permission is used and nothing from another app, and no notification, can appear in the clip.

Saving a video may require write access to your photo library. That permission is add-only: the app does not read existing photos or videos. Finished videos are never uploaded to the Company's servers, and where a video goes is entirely your decision. A video shows your nickname and your time.

What a group makes visible. Joining a group shows your nickname and ranked times to the other members of that group. Anyone who knows the group's code can join it, so do not use anything as a nickname that you would not want seen. Leaving a group removes your times from that group's board.

Service usage records, access timestamps, and records of abuse may be generated and collected automatically while you play.

2. Why it is processed

Purpose	Items used
Identifying a member, keeping a session, restoring records on a new device	Account identifier, email, nickname
Calculating and displaying rankings	Game records, nickname, country code
Detecting and acting on abuse (automation tools, multiple accounts)	Game records, device integrity token, access records
Serving ads and measuring their performance	Advertising identifier (with consent), whether remove-ads is owned
Confirming payments, refunds, and disputes	Purchase receipts and tokens
Answering enquiries	Email address, the content of the enquiry

The Company does not use personal information for any purpose beyond those above, and will obtain consent in advance if a purpose changes.

3. How long it is kept

As a rule, personal information is destroyed without delay once its purpose has been met. Information that legislation requires be retained is stored separately for the period stated.

Item	Retention	Basis
Account information, nickname, game records	Until the account is deleted	Your consent
Guest session information	One year from creation, or until you ask for it to be deleted	Your consent
Records of contracts and withdrawal of subscription	5 years	Act on Consumer Protection in Electronic Commerce (Korea)
Records of payment and supply of goods	5 years	Act on Consumer Protection in Electronic Commerce (Korea)
Records of consumer complaints and dispute handling	3 years	Act on Consumer Protection in Electronic Commerce (Korea)
Service access logs	3 months	Protection of Communications Secrets Act (Korea)
Identifiers of accounts restricted for abuse	1 year from the restriction	Preventing repeat abuse (legitimate interest)

4. Processors

The Company entrusts the processing of personal information to the parties below, to the extent needed to operate the Service, and supervises them to ensure it is handled safely.

Processor	Entrusted work
Google LLC (Firebase)	Member authentication, data storage, server functions, device integrity checks
Google LLC (AdMob)	Serving ads and measuring their performance
Google LLC (Google Play)	Android in-app purchases and payment verification
Apple Inc.	iOS in-app purchases and receipt verification, Sign in with Apple

Any change to these arrangements, or the addition of a processor, will be published in this policy.

5. Transfers abroad

The Service's database and server functions are located in the Republic of Korea (Seoul region). Personal information may nevertheless be transferred abroad in the course of the authentication, advertising, and payment processing carried out by the processors above.

Recipient	Country	Items	When and how	Purpose and retention
Google LLC	The United States and other countries where Google operates servers	Account identifier, email, advertising identifier, payment token	Transmitted over the network as the Service is used	Authentication, advertising, and payment processing; for the period set by that company's own policy
Apple Inc.	The United States and other countries where Apple operates servers	Account identifier, email (including Private Relay addresses), purchase receipt	Transmitted over the network as the Service is used	Sign-in and payment processing; for the period set by that company's own policy

If you would rather no transfer abroad took place, you can play practice mode without signing in — though ranked scores cannot then be posted.

6. Disclosure to third parties

The Company does not sell personal information and, as a rule, does not disclose it to third parties. The only exceptions are:

where you have given explicit consent in advance;
where legislation specifically provides for it, or an investigative authority requires it through the procedure and in the manner set by law.

7. How data is destroyed

Personal information whose retention period has ended, or whose purpose has been met, is destroyed without delay — within five days of the reason arising.

Procedure — the information in question is identified and destroyed with the approval of the data protection officer.
Electronic files — permanently deleted by a means that makes recovery or reconstruction impossible.
Printed material — shredded or incinerated.

Information that must be preserved under legislation is stored separately from other personal information and is not used for any purpose other than that preservation.

8. Children under 14

The Company does not collect the personal information of children under 14. If an account is found to belong to someone under 14, its personal information is destroyed without delay.

Payments by a minor also require the consent of a legal guardian, and a payment made without that consent may be cancelled.

9. Advertising identifiers and personalised ads

No ads of any kind appear in ranked play. Ads appear in practice mode only, and only once a run has ended. The banner space is reserved identically regardless of mode or of whether remove-ads has been purchased, so the playing board is the same size for everyone.

The device distinguisher in the table above has nothing to do with advertising. It is used solely to stop one device from taking several places on the board through multiple accounts, and it is never combined with an advertising identifier.

iOS — the App Tracking Transparency prompt lets you choose whether to allow tracking. If you decline, the advertising identifier (IDFA) is not collected and non-personalised ads are shown.
Android — you can delete your advertising ID or opt out of personalised ads under Settings > Google > Ads.
EEA and UK — an advertising consent form appears on first launch, and your choice can be changed at any time from "Ad privacy settings" on the Settings screen.

Declining ad tracking places no restriction whatsoever on playing the game, and has no effect on ranking.

10. Your rights

You may exercise the following rights at any time.

Request access to your personal information
Request correction of anything inaccurate
Request deletion
Request that processing be suspended
Withdraw consent (sign out and delete your account)

Requests can be made from the Settings screen in the app or by writing to the address below. The Company will act on a request and report back within 10 days of receiving it. A legal guardian or an authorised representative may also make a request on your behalf.

Information that legislation requires be retained (section 3) cannot be deleted before that period has run; where that applies, the reason will be explained to you.

11. Security measures

Access control — database security rules block all direct writes from clients; records and rankings can be written only by the server. You can read only your own information.
Minimal collection — no financial information, legal name, telephone number, or address is collected. The personal information the Service holds amounts to an account identifier, a nickname, and game records.
Encryption in transit — all traffic between the app and the server is encrypted (HTTPS/TLS).
Device integrity — Apple App Attest and Google Play Integrity confirm that a request came from a genuine build of the app, blocking tampered clients.
Least privilege — the number of people who handle personal information is kept to a minimum and their access is managed.

12. Data protection officer

The Company has designated an officer with overall responsibility for the processing of personal information and for handling complaints and remedies.

Role	Detail
Data protection officer	Representative, AKUMA DAIHYO
Contact	rush50.support@gmail.com

Enquiries, complaints, and requests for remedy relating to privacy can be sent to the address above and will be answered and acted on without delay.

13. Where to complain

To seek a remedy for a privacy violation, you may apply to the Korean bodies below for dispute resolution or advice.

Body	Contact
Personal Information Dispute Mediation Committee	+82 1833-6972 · privacy.go.kr
Privacy Infringement Report Centre (KISA)	118 (within Korea) · privacy.kisa.or.kr
Supreme Prosecutors' Office, Cybercrime Investigation	1301 (within Korea) · spo.go.kr
National Police Agency, Cyber Bureau	182 (within Korea) · ecrm.police.go.kr

14. Changes to this policy

This policy applies from its effective date. Where content is added or amended because of a change in legislation, policy, or the Service itself, notice will be given on this page and inside the app seven days before the change takes effect. A change that materially affects your rights will be announced 30 days in advance.

Amended 29 August 2026 — when ranked play and practice were separated again, a device distinguisher (a hash) was added to what is collected, to stop one device from taking several places on the board through multiple accounts. The original identifier is not stored, and it is not combined with an advertising identifier.

Amended 28 August 2026 — when cash prizes and withdrawals were removed from the Service, collection of the account holder's name, bank name, account number, and payout and withholding records was stopped and the related provisions were deleted. This is not a change adverse to users: it is a reduction in what is collected.