Privacy Policy
Effective Date: 2026-06-01 Service: Puff (the "Service") Operator: Routinery Inc. (주식회사 루티너리) (the "Company")
The Company is committed to protecting your privacy. This Privacy Policy explains what data we process, how we use it, and the rights you have with respect to your information.
1. Information We Process
Puff does not require an account and does not collect personally identifying information (such as your name, email, or phone number) by default.
However, the following data is stored on your device or collected automatically through analytics SDKs to operate, analyze, and market the Service:
| Category | Items | How It Is Handled |
|---|---|---|
| Usage data (local) | Game progress, streaks, session history, preferences | Stored only on your device (via MMKV). Not transmitted to Company servers. |
| Notification settings (local) | Reminder times, consent state | Stored only on your device. Notifications are scheduled locally. |
| Analytics data (automatic) | In-app events, screen usage, device identifiers, OS/app version, aggregate usage statistics | Collected and analyzed in pseudonymized form via Amplitude. |
| Advertising & attribution data (automatic) | Advertising identifiers (iOS IDFA/IDFV, Android Advertising ID), install source and campaign data, marketing events | Collected via Airbridge and Meta (Facebook) SDKs. On iOS, the advertising identifier (IDFA) is processed only if you consent through App Tracking Transparency (ATT). |
| Subscription & revenue analytics (automatic) | Subscription state, transaction identifiers, revenue events | Collected for analytics purposes only via Adapty (observer mode). Payment itself is handled by Apple/Google. |
| Payment data | In-app purchase receipts and subscription state | Handled directly by Apple App Store / Google Play. The Company does not store your payment card details. |
| Device info | OS version, app version | Only processed if you voluntarily include it when contacting support. |
The Company does not combine the automatically collected data with directly identifying information (such as your name or email); it is analyzed only in pseudonymized or aggregate form.
2. Purposes of Processing
We process information only for the following purposes:
- Providing the Service and maintaining your in-app progress
- Delivering notifications you have opted into
- Analyzing usage behavior and improving features (Amplitude)
- Measuring marketing performance, attributing installs, and optimizing ads (Airbridge, Meta)
- Analyzing subscriptions/revenue and improving retention (Adapty)
- Processing in-app purchases and refunds
- Responding to your support requests
3. Retention Periods
- On-device data: Retained until you delete the app or use Settings → "Withdraw consent · Delete data." Deletion is immediate and permanent.
- Automatically collected analytics & attribution data: Retained until the processing purpose is fulfilled or per each processor's retention policy, then deleted.
- Payment receipts: Retained by Apple/Google under their policies. The Company retains only transaction identifiers for the minimum period required by tax and refund obligations.
- Support inquiries: Retained for 3 years pursuant to applicable consumer protection law.
4. Sharing With Third Parties
We do not separately sell or share your personal information with third parties. Entrustment of processing to the analytics and marketing tools needed to operate the Service is governed by Section 5.
We may disclose information in the following exceptional cases:
- With your prior explicit consent
- When required by law or in response to valid legal process
5. Outsourcing and Cross-Border Transfer
To analyze, market, and manage subscriptions for the Service, we entrust the processing of personal data to the processors below; some are located outside the Republic of Korea.
| Processor | Outsourced Work | Items Transferred | Country |
|---|---|---|---|
| Amplitude, Inc. | Usage analytics | App event logs, device identifiers | United States |
| AB180 Inc. (Airbridge) | Marketing attribution | Advertising identifiers, install/event data | Republic of Korea |
| Meta Platforms, Inc. (Facebook) | Ad performance measurement | Advertising identifiers, app events | United States |
| Adapty Tech Inc. | Subscription/revenue analytics | Subscription state, transaction identifiers | United States |
- When and how transferred: In real time over the network while you use the Service.
- Retention: Until the purpose of the entrustment is fulfilled or the contract ends.
- You may refuse cross-border transfer by declining App Tracking Transparency (ATT) on iOS, resetting your device's advertising identifier, or uninstalling the app to stop automatic collection.
6. Your Rights
You may at any time:
- Access your on-device data through the app's stats and history screens
- Delete your data via Settings → "Withdraw consent · Delete data" or by uninstalling the app
- Withdraw consent instantly via Settings
- Opt out of notifications via your device's system settings
- Opt out of tracking / advertising identifiers via iOS Settings > Privacy & Security > Tracking, or Android Settings > Privacy > Ads (delete advertising ID)
Additional requests can be sent to the contact below. We will act on them without undue delay.
7. Security Measures
- On-device data is stored locally on your device.
- Automatically collected analytics and attribution data is pseudonymized and transmitted over encrypted (HTTPS) connections.
- Payment transactions rely on Apple/Google's secured infrastructure.
- We periodically review our processors and this Policy.
8. Children's Privacy
The Service is not directed to children under 14. Where local law requires guardian consent for minors, that consent is the user's or guardian's responsibility. The Company does not knowingly collect identifying information from any user.
9. Cookies and Automatic Collection
Puff collects usage records and device/advertising identifiers automatically through the analytics and attribution SDKs listed in Section 1 (Amplitude, Airbridge, Meta, Adapty). On iOS, the app requests App Tracking Transparency (ATT) consent on first launch; if you decline, the advertising identifier (IDFA) is not collected. You can opt out of tracking at any time via your device settings (see Section 6).
Our website (routinery.app) uses only the minimum cookies necessary for essential functions.
10. Contact
| Data Protection Officer | Inseok Seo |
| Data Access Request Contact | Hyeonju Park |
| hello@routinery.app |
11. Dispute Resolution (Korea-specific)
If you reside in the Republic of Korea, you may also contact:
- Personal Information Dispute Mediation Committee — 1833-6972 / kopico.go.kr
- Personal Information Infringement Report Center — 118 / privacy.kisa.or.kr
12. Changes to This Policy
Material changes will be announced in the app or on the Service at least 7 days before they take effect (30 days for significant changes).
- Posted: 2026-06-01
- Effective: 2026-06-01