Privacy Policy

Effective date: July 8, 2026

한국어 버전

Summary — InkWater works without signing in. Information described below is sent to our servers only when you choose to share an artwork to the community gallery, or optionally sign in with Google to receive rewards. Audio captured by the music-reactive world is processed on your device only and is never stored or transmitted.

1. Overview

This policy explains what information the InkWater team (the "Operator") processes when providing the InkWater mobile application (the "App"), why it is processed, how long it is kept, and what rights you have. The Operator complies with applicable laws, including the Personal Information Protection Act of Korea and the EU GDPR where applicable.

2. Information we do NOT collect

3. Information you provide (optional features)

DataWhenPurpose
Artwork image, artist name (a signature you type) When you share an artwork to the community gallery Public display in the community gallery (stored on the Operator's server / AWS S3)
Google account identifier (UID) and email address When you sign in with Google (optional) Managing and restoring sign-in rewards (world unlock ticket) and friend-invite rewards (Firebase Authentication + Operator's server)
Friend invite code When you enter an invite code or install via an invite link Linking invite rewards

4. Automatically collected information

DataPurposeProcessor
Anonymous device identifier (a random UUID generated by the App, stored on your device) Distinguishing community authors, preventing duplicate likes/reports, preventing duplicate device rewards Operator's server
Invite code in the install referrer (once, right after install) Linking friend-invite rewards Google Play Install Referrer + Operator's server
Push notification token, app language (if you allow notifications) Sending notifications Firebase Cloud Messaging + Operator's server
Advertising identifier (Android Advertising ID / iOS IDFA), device info (model, OS version, language), IP address (may be used to estimate an approximate region), ad interaction records Serving and measuring ads (funds free use) Google AdMob
Purchase history (subscription product ID, purchase receipt token), a randomly generated anonymous user identifier Verifying and restoring subscription status RevenueCat

5. Community content

6. Third-party privacy policies

7. Retention and deletion

8. Account and data deletion

9. Your rights

10. International transfers

Automatically collected data may be processed on the servers of the processors (Google, RevenueCat), including in the United States. Each processor applies lawful safeguards such as standard contractual clauses under its own policy.

11. Children's privacy

The App is not directed at children under 14 (or the equivalent age under the laws of your jurisdiction) and does not knowingly collect children's personal information.

12. Security

All network communication is encrypted via HTTPS (TLS). Server-side data is stored in an access-controlled environment.

13. Changes to this policy

If this policy changes, the revised content and effective date will be posted on this page. Material changes will be announced separately, e.g., in the App.

14. Contact

Privacy inquiries: developerdoga@gmail.com