Private by default. Clear about the exceptions.

Android pre-release

The Android version of K-Picker is being prepared for release. This section describes its intended advertising, purchase and reporting configuration; it does not announce Android availability. These features operate only when enabled in the installed version. The iOS sections describe the existing Apple-specific configuration.

Android advertising and age treatment

When advertising is included in the installed Android build, K-Picker asks you to choose an age group before its ad services start: under 13, 13–17, or 18 and older. No group is preselected. The choice is saved only on the device and is not included in ad requests; you can change it in Settings. K-Picker does not ask for a birthdate or verify your age. All groups receive Google’s child treatment and under-age-of-consent setting, and ad content is limited to Google’s G rating. Android does not use Apple’s Declared Age Range service or Google Play Age Signals for advertising.

When advertising is enabled, K-Picker uses Google Mobile Ads and Google’s consent service. It requests non-personalized ads, disables publisher personalization and Google’s publisher first-party ID setting. Ads are requested only when Google’s consent service permits them; Privacy Choices appears when required. These settings do not mean that the SDK collects no data. Google describes its Android ads SDK as processing IP addresses, app and ad interactions, diagnostics, and device or account identifiers, subject to settings and platform restrictions. K-Picker does not include picker names, rosters, saved lists or game history in these ad requests. See Google’s Android ads data disclosure and Privacy Policy.

Android purchases and reports

When enabled, Buy the developer a coffee is a one-time, non-consumable Google Play purchase that removes sponsor breaks after verification. Google Play handles payment and shows the current localized price before confirmation. K-Picker does not receive payment-card details or your Google Account password.

A completed purchase found during purchase, restore or foreground ownership checks is verified over HTTPS. K-Picker sends the app package, product and purchase-option identifiers, purchase token, a fresh verification nonce and a Play Integrity proof to XYLOCOPA’s verification service. Play Integrity processes app, licensing and device-integrity information for purchase security, not advertising age treatment or device fingerprinting. Picker entries, rosters and game history are not included. The service checks the purchase with Google Play and returns a signed, short-lived entitlement, which the app validates before granting purchased ad removal. The app holds that entitlement temporarily in memory. Pending purchases do not grant purchased ad removal; sponsor breaks remain off while ownership is unknown.

Purchase-verification requests pass through Vercel, our hosting provider. Vercel processes connection and request metadata, including the source IP address and user-agent information, which may appear in platform logs. Our verification service uses the source IP address to limit requests and help prevent abuse. The ad-report expiry period below does not apply to these platform logs.

Android ad reports use the same optional reporting service and retention policy described in this notice: only the predefined reason, provider response identifier, original impression time, app version/build and locale are submitted. There is no free-text field, and the report excludes names, rosters, game history, advertising IDs and device fingerprints. Reports expire 28 days after acceptance, subject to the existing deletion and backup details below. This period applies to ad reports, not Google’s records or the separate purchase-verification service. Deleting local activity does not cancel a store purchase or delete a report already submitted.

Android 출시 준비 안내

K-Picker의 Android 버전은 출시를 준비 중입니다. 이 항목은 예정된 광고, 구매 및 신고 구성을 설명하며 Android 출시를 알리는 안내가 아닙니다. 각 기능은 설치된 버전에서 활성화된 경우에만 작동합니다. iOS 안내는 기존 Apple 관련 구성을 설명합니다.

Android의 광고 및 연령 처리

설치된 Android 빌드에 광고 기능이 포함되어 있으면 K-Picker는 광고 서비스를 시작하기 전에 13세 미만, 13~17세 또는 18세 이상 중 한 연령대를 선택하도록 안내합니다. 미리 선택된 항목은 없습니다. 선택한 연령대는 기기에만 저장되고 광고 요청에 포함되지 않으며 설정에서 변경할 수 있습니다. 생년월일을 묻거나 실제 나이를 확인하지는 않습니다. 모든 연령대에 Google의 아동용 처리와 동의 가능 연령 미만 설정을 적용하고 광고 콘텐츠를 Google G 등급으로 제한합니다. Android 광고에는 Apple의 Declared Age Range 또는 Google Play Age Signals를 사용하지 않습니다.

광고가 활성화된 경우 K-Picker는 Google Mobile Ads와 Google의 동의 서비스를 사용합니다. 비개인 맞춤 광고를 요청하고 게시자 개인화와 Google 게시자 퍼스트 파티 ID 설정은 끕니다. Google의 동의 서비스가 허용할 때만 광고를 요청하며 필요한 경우 개인정보 선택 항목을 표시합니다. 이러한 설정이 SDK가 정보를 수집하지 않는다는 뜻은 아닙니다. Google은 Android 광고 SDK가 설정과 플랫폼 제한에 따라 IP 주소, 앱·광고 상호작용, 진단 정보와 기기 또는 계정 식별자를 처리한다고 안내합니다. K-Picker는 광고 요청에 선택 항목의 이름, 명단, 저장 목록 또는 게임 기록을 포함하지 않습니다. 자세한 내용은 Google Android 광고 데이터 공개 안내와 Google 개인정보처리방침을 확인해 주세요.

Android의 구매 및 광고 신고

활성화된 경우 ‘개발자에게 커피 한 잔 사기’는 구매 확인 후 후원 메시지를 제거하는 일회성 비소모성 Google Play 상품입니다. Google Play가 결제를 처리하며 결제 확인 전에 현재 지역의 가격을 표시합니다. K-Picker는 결제 카드 정보나 Google 계정 비밀번호를 받지 않습니다.

구매, 구매 복원 또는 앱을 다시 열어 구매 여부를 조회할 때 발견한 완료된 구매는 HTTPS로 확인합니다. K-Picker는 앱 패키지명, 상품 및 구매 옵션 식별자, 구매 토큰, 일회용 확인 값과 Play Integrity 확인 토큰을 XYLOCOPA 구매 확인 서비스에 보냅니다. Play Integrity는 구매 보안을 위해 앱, 라이선스 및 기기 무결성 정보를 처리하며 광고용 연령 처리나 기기 지문 생성에는 사용하지 않습니다. 선택 항목, 명단과 게임 기록은 포함되지 않습니다. 서비스는 Google Play에서 구매를 확인한 후 전자서명된 단기 구매 권한을 반환하며 앱은 이를 검증한 뒤 구매에 따른 광고 제거를 적용합니다. 앱은 이 권한을 메모리에 잠시 유지합니다. 보류 중인 구매에는 구매에 따른 광고 제거가 적용되지 않으며, 구매 여부가 확인되지 않은 동안에는 후원 메시지를 꺼 둡니다.

구매 확인 요청은 호스팅 제공업체인 Vercel을 거칩니다. Vercel은 접속 IP 주소와 사용자 에이전트 정보 등 연결 및 요청 메타데이터를 처리하며, 이러한 정보가 플랫폼 로그에 포함될 수 있습니다. 구매 확인 서비스는 요청 횟수를 제한하고 악용을 방지하기 위해 접속 IP 주소를 사용합니다. 아래의 광고 신고 만료 기간은 이러한 플랫폼 로그에 적용되지 않습니다.

Android 광고 신고에는 이 안내에 설명된 동일한 선택적 신고 서비스와 보관 정책이 적용됩니다. 정해진 사유, 제공업체 응답 식별자, 원래 노출 시각, 앱 버전/빌드와 로케일만 제출합니다. 자유 입력란은 없으며 이름, 명단, 게임 기록, 광고 식별자와 기기 지문은 포함하지 않습니다. 신고는 접수 28일 후 만료되며 아래의 기존 삭제 및 백업 안내가 적용됩니다. 이 기간은 광고 신고에 관한 것으로 Google의 기록이나 별도의 구매 확인 서비스에는 적용되지 않습니다. 로컬 활동을 삭제해도 스토어 구매가 취소되거나 이미 제출한 신고가 삭제되지는 않습니다.

What stays on your device

Picker entries, saved lists, pending games, decision history, preferences, reward progress, banked ad passes, broad age treatment, sponsor cadence, and up to ten recent ad-response records are stored by K-Picker on the device. A recent ad-response record contains the provider response identifier, impression time, app version/build, and locale so you can choose to report it. K-Picker does not create an account or sync picker entries, names, rosters, results, saved lists, or game history to a XYLOCOPA server or advertising provider.

• The fixed Special Classmates unlock count is derived on the device from completed decision progress. One of ten bundled fictional classmates unlocks in a fixed order at each complete 1,000-decision threshold from 1,000 through 10,000.

Photos and School Album portraits

K-Picker iOS versions 1.0 and 1.1 do not select or upload photos, generate portraits, or contact OpenAI or a portrait-generation service. The ten Special Classmates use fixed fictional artwork bundled with the app. They unlock through local progress in a fixed order, without purchases, random draws or rarity tiers. In version 1.0 they are School Album collectibles only. In version 1.1, earned Special Classmates also appear first in the student chooser and can participate in Pen Spin, Chalkboard Ladder, Jebi Draw and Marble Run. Selecting one uses its existing bundled artwork and local identity; it does not upload a photo or send the character or roster to an advertising provider. Any future photo-based feature would require a separate app update, an explanation when used, explicit photo selection and an updated privacy notice before an image could leave the device.

Sponsor messages, consent, and age treatment

K-Picker uses Google Mobile Ads and Google User Messaging Platform. Every request includes Google's npa=1 signal, Google publisher personalization is disabled, and Google's publisher first-party ID remains enabled. These restrictions do not make the request anonymous, and Google may process that first-party identifier under its policies. An ad request is made only when Google's consent service says requests are allowed. Privacy Choices appears in Settings when Google says it is required.

On supported systems, K-Picker requests a broad age range from Apple's Declared Age Range service. It does not ask for a birthdate or receive any proof Apple may use. Every ad request is capped at Google's G rating, regardless of the returned age range. Child, declined, unavailable, and failed results also receive Google's most protective child treatment; teen ranges receive teen treatment. The range is used to configure advertising safeguards, not to personalize ads or unlock mature advertising.

Google states that its SDK may process information such as IP address or coarse location, ads viewed, product interactions, device identifiers, crashes, performance, and diagnostics for advertising, app functionality, and analytics. Some provider-declared data may be linked to a device, and Google's SDK privacy manifest declares a device-identifier use that Apple classifies as tracking. K-Picker does not request App Tracking Transparency permission, intentionally request IDFA access, or operate its own behavioral analytics service. See the Google Mobile Ads data disclosure and Google Privacy Policy.

Reporting an ad

Reporting is optional. Only after you open Report Last Ad, choose a predefined reason, and submit does K-Picker send the selected reason, provider response identifier, impression time, app version/build, and locale to XYLOCOPA's report service. There is no free-text field, and the app does not add a name, roster, game result, history entry, advertising identifier, IP-derived field, or device fingerprint.

The report service runs on Vercel and stores accepted records in a dedicated Neon database configured in Singapore. Vercel and other network infrastructure necessarily receive ordinary transport information such as source IP address, request time, and user agent. K-Picker does not write report bodies to application logs or store source IP addresses in the report table. Reports expire after 28 days and a monitored daily job deletes them. The database restore window is limited to 24 hours, keeping report records and recoverable copies within a 30-day maximum. Operational deletion evidence contains only aggregate counts and timestamps, not report content.

Coffee and ad-removal purchase

Buy the Developer a Coffee is a non-consumable in-app purchase that removes sponsor breaks after Apple returns a verified entitlement. Apple handles payment credentials and the Apple Account transaction. K-Picker requests product information and checks verified entitlement status; deleting local activity cannot revoke an Apple-managed purchase. The App Store shows the current localized price before confirmation.

Deleting local activity

Settings includes a Delete Local Activity control. It clears decision progress, history, unspent reward passes, unlocked Special Classmates, and other resettable local activity. An already claimed local lifetime ad-free reward is preserved by that control. It does not revoke an Apple purchase or delete information maintained by Google or Apple under their policies. Deleting the app removes K-Picker's app-controlled local records from that device.

Questions

For a privacy or support question, contact K-Picker support. Please do not email passwords, payment information, government identifiers, student rosters, or other sensitive personal information.