개인정보처리방침

Privacy Policy (English)

PADRUN ("the Service") is a reward app where you collect Meme Points by solving word quizzes and completing light daily missions.

Controller. Arena Technologies Inc. (주식회사 아레나테크놀로지스), representative Junho Lee, business registration number 373-86-03350, 서울특별시 강남구 논현로79길 48-1, 2층 1108호(역삼동), Republic of Korea. Contact: contact@padrun.lol.

What we collect. Account identifiers (email, or Google/Apple account via our login provider Privy), the public address of your embedded Solana wallet, quiz activity (attempts, results, response times), point shop order history (items ordered, order status, coupon numbers, and use, cancellation and expiry re-credit records), device identifiers used for fraud prevention, and access logs including IP addresses. Step / activity data (optional feature): if you use the walk reward feature, and only after you explicitly grant permission on your device, we read your daily step count from your device's motion / activity sensors. Your daily step count is sent to our server and stored to confirm goal completion and to record reward delivery. Step data is used solely for those purposes; it is never sold, shared, or used for advertising, and the rest of the Service works normally if you do not grant this permission. Push notification token (optional feature): only after you explicitly allow notifications on your device, we collect your device's push token and app language to send new word-quiz round and reward-delivery notifications. It is never sold, shared, or used for advertising; you can turn notifications off in the Settings screen at any time, and the token is deleted immediately on logout or account deletion. Advertising identifier and ad activity (optional feature): we use Google AdMob to serve rewarded ads and in-app ads (interstitial and native ads). The AdMob SDK may collect your device's advertising identifier (IDFA on iOS, Advertising ID on Android) together with ad impression and view information. To verify a completed view on our server, we pass Google your account identifier issued by our login provider together with a one-time verification value. For interstitial and native ads, which carry no reward, we do not send Google your account identifier or any verification value. On iOS the advertising identifier is used only if you allow tracking in the prompt the app shows; if you decline, ads and the rest of the Service still work normally and ads are simply less tailored. Our own server stores only the ad view record (ad unit, a one-time verification value, and the reward record) and never the advertising identifier itself. To fund the Service, the following ad networks may bid for ad requests through Google AdMob mediation: Pangle (Bytedance Pte. Ltd., Singapore), Liftoff Monetize (Liftoff Mobile, Inc., US), Mintegral (Mintegral International Ltd., Singapore) and Unity Ads (Unity Technologies, US). Their SDKs may directly collect your advertising identifier, device and network information (OS, device model, and approximate location inferred from your IP address), and ad impression and click information to serve and measure ads. PADRUN never sends your email, wallet address or login account identifier to these networks. See the Pangle, Liftoff, Mintegral and Unity privacy policies for how each processes data. To opt out you can turn off tracking for this app under Tracking in iOS Privacy and Security settings, or delete or reset your Advertising ID in the Ads section of Android settings (this also stops it being passed for the Coupang Partners ad); changing this does not affect standard reward delivery, but certain ad missions (offerwall) that rely on advertising identifiers to verify completion may be restricted or fail to credit rewards. Ad missions (offerwall) (optional feature): when you choose to participate in ad missions (offerwall), we pass a random participant identifier (USN, UUIDv4) generated by PADRUN to AdPopcorn Inc. to verify mission entry and completion. PADRUN never transmits your email address, wallet address, or Privy login identifier to AdPopcorn. The AdPopcorn SDK may directly collect your device's advertising identifier (IDFA on iOS, Advertising ID / ADID on Android), device and network information (OS, device model), and mission participation and completion data to deliver missions, verify completion, and settle rewards. For details on how AdPopcorn processes data, please refer to the AdPopcorn Privacy Policy. The rest of the Service works normally if you choose not to participate in ad missions. Coupang Partners product ads (optional feature): to show tailored products in the Coupang Partners ad on the home screen (which carries no reward), if you have allowed tracking on iOS or have not deleted your Advertising ID on Android, we pass your device's advertising identifier (IDFA on iOS, Advertising ID on Android) through our server to Coupang Corp. (Korea). The app does not show a separate tracking prompt for this. Our server does not store or log the advertising identifier and never sends it to the analytics tool. If no advertising identifier is passed, general (non-tailored) products are shown. Tapping the ad opens the Coupang app or website, after which Coupang's privacy policy applies. PADRUN gives no points or other reward for this ad. Receipt photos (optional feature): if you use the receipt-verification reward, and only after you explicitly grant camera permission and take the photo yourself, we collect the receipt photo. Photos are used solely for pre-payment review (confirming a genuine receipt and detecting duplicate submissions), are never sold, shared, or used for advertising, are automatically deleted 30 days after submission, and are deleted immediately upon account deletion. The rest of the Service works normally if you do not grant camera permission. Weekly leaderboard: the weekly leaderboard shows your rank, weekly score, prize points and payout status next to a 12-character pseudonymous participant code, and this is visible to other signed-in users. The code is derived from your login account identifier with a secret key only we hold, so the code alone cannot be traced back to your account. Your email, wallet address and login account identifier are never shown on the leaderboard. If you turn on "Hide my code on the leaderboard" in the app's Settings screen, other users see "Private participant" instead of your code; your rank and prize eligibility stay the same. Error diagnostics: when the app or our server hits an error, we collect the app and OS version, device model, the error message and where it occurred, and a random per-installation identifier. This is used only to keep the Service stable and fix bugs; it is not linked to your email, wallet address or other account details and is never used for advertising. Acquisition and usage analytics: a random identifier created when the app first runs, the install time, the install source (on Android, the campaign information Google Play passes to the app: source and campaign name), and whether and when you saw the login screen, signed up, earned and redeemed Meme Points, and whether in-app ads were shown or clicked (ad format and screen position only). We use this only to understand which install sources lead to sign-ups and use of the Service. Your email, wallet address and login account identifier are never sent to the analytics tool; accounts are distinguished only by an irreversibly transformed value. No advertising identifier is used, and this data is not used for advertising.

Why we collect it. To link your account and wallet, to review and deliver rewards (including confirming daily step goals for the walk reward), to serve rewarded, interstitial and native ads (including through AdMob mediation networks) and verify rewarded views, to deliver ad missions (offerwall) and verify completion to credit Meme Points, to show tailored products in the home-screen Coupang Partners ad, to process point shop orders and issue, cancel and re-credit coupons, to send new-round and reward-delivery notifications if you allow them, to prevent abuse such as multi-accounting or automation, to measure installs, sign-ups and use by acquisition source, and to operate and improve the Service.

Retention. Personal data is deleted without undue delay upon account deletion request, except where retention is required by law. On deletion, quiz records, the reward and Meme Point ledger, and point shop orders are stripped of IP addresses and device identifiers and kept with your login-provider account identifier, without a fixed period, for fraud prevention and settlement checks. Records subject to the Act on the Consumer Protection in Electronic Commerce are kept for the periods set by that Act (payment and supply records 5 years; complaint and dispute records 3 years). Receipt photos are additionally auto-deleted 30 days after submission, independently of account deletion. Wallet addresses and reward transactions are recorded on the public Solana blockchain and cannot be altered or deleted due to the nature of blockchains. No account information such as email is written to the blockchain.

Destruction. Personal data is destroyed without delay once its retention period ends, using technical methods that prevent recovery. Data that must be kept by law is stored separately. We do not keep personal data on paper.

Processors. Privy Inc. (US, login and wallet infrastructure), Vercel Inc. (US company, service regions United States and Seoul, Korea; padrun.lol website hosting and access logs), Supabase (US company, database region Seoul, Korea; database and receipt photo storage), Railway (US company, server region Singapore; server hosting), Helius (US; Solana network access and reward transactions), Expo (Expo Application Services, US; push notification delivery via Apple and Google push services, and app updates), Google (US; AdMob rewarded, interstitial and native ad serving and ad measurement), Bytedance Pte. Ltd. (Pangle, Singapore), Liftoff Mobile, Inc. (Liftoff Monetize, US), Mintegral International Ltd. (Mintegral, Singapore) and Unity Technologies (Unity Ads, US) (ad serving and measurement through AdMob mediation: advertising identifier, device and network information, ad impression and click information), Functional Software, Inc. (Sentry, US; error and crash diagnostics), PostHog, Inc. (US; usage analytics of installs, sign-ups and point activity by acquisition source). We do not sell personal data. When you participate in ad missions (offerwall), mission-related data (random participant identifier USN, advertising identifier, device and network info, and completion data) is provided to AdPopcorn Inc. (Korea) for mission delivery, completion verification, reward settlement, and tailored advertising as outlined above. For the home-screen Coupang Partners ad, your advertising identifier (only if you allowed tracking on iOS or kept your Advertising ID on Android) is provided to Coupang Corp. (Korea) for tailored product recommendations; we do not keep it, and Coupang's own privacy policy governs its retention. Except for these purposes and the processors listed above, we do not provide personal data to any third party without your consent. Mobile coupon issuance and cancellation in the point shop are processed through KT Alpha (Giftishow Biz, Korea); no personal data such as your phone number is sent to the supplier; only an order identifier and the company's approved fixed recipient number are used.

International transfers. The processors above receive the listed data over the network while you use the Service: Privy, Vercel, Helius, Expo, Google, Sentry, PostHog, Liftoff Mobile and Unity Technologies in the United States, and Railway, Bytedance (Pangle) and Mintegral in Singapore. The AdMob mediation networks receive data from the app's ad SDKs when an ad is requested and keep it under their own policies; if you do not watch ads, nothing is transferred to them. Supabase stores data in Korea (Seoul region). Data is kept until you delete your account, the processing contract ends, or the processor's own retention period ends. You can refuse by deleting your account, turning off notifications, not watching ads, or turning off ad tracking as described above; refusing some transfers means the related feature, or the Service, is unavailable.

Your rights. You may request access, correction, deletion, or restriction of processing at any time via the contact below, directly or through a legal representative or an authorized agent.

Children. The Service is not directed at children under 14 and does not knowingly collect their data.

Privacy officer. Name: Junho Lee (CEO). Contact: contact@padrun.lol.

Remedies. You may apply for dispute mediation or consultation with the Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr), the Personal Information Infringement Report Center of KISA (118, privacy.kisa.or.kr), the Supreme Prosecutors' Office (1301, www.spo.go.kr), or the Korean National Police Agency (182, ecrm.police.go.kr).

Contact. contact@padrun.lol