SUPER FLEX ("we", "us", or "our") operates mobile applications and games (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use the Service, and the rights available to you.
This Policy applies to users worldwide, including in the United States, the European Economic Area (EEA), the United Kingdom, the Republic of Korea, Japan, and other countries in Asia and elsewhere.
For the purposes of applicable data-protection laws, we act as the controller (and, where those terms apply, the "personal information processor", "personal data manager", or "business operator") of the personal information processed through the Service. If you do not agree with this Policy, please do not use the Service.
This Policy covers personal information we process through the Service. It does not cover third-party services that have their own privacy policies — including app stores, advertising networks, analytics providers, and external links. We encourage you to review their policies.
We aim to collect only the information necessary to provide and improve the Service. Depending on how you use the Service, we may process:
(a) Information collected automatically
Device and technical data: device model, operating system and version, language, country or region, app version, and similar settings.
Identifiers: a mobile advertising identifier (such as the Google Advertising ID or Apple IDFA) and app-instance or analytics identifiers, where available and permitted.
Usage data: in-app actions, features used, session length, gameplay events, and preferences.
Diagnostic data: crash logs, performance data, and error reports.
Approximate location: inferred from IP address or region settings. We do not collect precise GPS location unless you grant permission and a feature requires it.
(b) Information related to purchases
When you make an in-app purchase, payment is processed by the relevant app store (Google Play or the Apple App Store). We receive confirmation of the transaction and limited details, such as the product purchased and a transaction identifier. We do not collect or store your full payment card number or financial account credentials.
(c) Information you provide
If the Service offers optional features such as a nickname, support requests, or feedback, we process the information you choose to provide, including the content of any email you send to our support address.
We do not require you to create an account to use the Service unless a specific feature requires it, and we do not intentionally collect more personal information than necessary.
We do not knowingly collect sensitive or special-category personal information — such as data revealing health, biometric or genetic data, precise geolocation, racial or ethnic origin, religious or philosophical beliefs, political opinions, or sexual orientation. Please do not provide such information through the Service.
We use personal information to:
provide, operate, and maintain the Service;
process and deliver in-app purchases and provide related support;
display advertising (see Section 6);
understand usage and improve and develop the Service, including analytics and crash diagnostics;
maintain security, prevent fraud and abuse, and enforce our Terms of Use; and
comply with legal obligations and respond to lawful requests.
Where the EU or UK GDPR applies, we rely on the following legal bases:
Performance of a contract — to provide the Service and process purchases you request;
Consent — for personalized advertising and for non-essential analytics and tracking technologies, where consent is required; you may withdraw consent at any time;
Legitimate interests — to secure, maintain, and improve the Service and prevent fraud, where these interests are not overridden by your rights; and
Legal obligation — to comply with applicable law.
The Service is supported by advertising, including ads served through Google AdMob, and uses analytics and crash-reporting tools to operate and improve the Service.
We use personalized (interest-based) advertising. To deliver personalized ads, we and our advertising partners process information such as a mobile advertising identifier (Google Advertising ID / Apple IDFA), IP address, device data, and information about your activity in the Service, and may combine it with information received from advertising partners, in order to show ads relevant to you, measure their performance, cap ad frequency, and detect invalid activity. We serve personalized ads only where you have given the consent or permission required in your jurisdiction (see "Your advertising controls" below); otherwise, we serve non-personalized (contextual) ads.
For some of this processing, our advertising and analytics partners act as independent controllers under their own privacy policies. They include Google (Google AdMob / Google Mobile Ads, and analytics such as Google Analytics for Firebase).
Your advertising controls. We serve personalized ads only where you have given the consent or permission required by the laws applicable to you, and you can withdraw that consent at any time. You can also reset or limit your advertising identifier and turn off ads personalization in your device settings. For your right to opt out of the "sale" or "sharing" of personal information (including for targeted advertising), see Sections 8 and 12.
We do not use your personal information for automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.
In-app purchases are sold and processed by the app store from which you obtained the Service. The app store's terms and privacy policy govern the payment, and the app store determines what payment information it collects. We receive only limited transaction information and do not store your payment card or financial account details. Refunds are handled primarily under the app store's policies, as described in our Terms of Use.
We share personal information with our advertising and analytics partners to provide personalized advertising and to measure its performance. Under certain US state privacy laws (such as the CCPA/CPRA), using advertising identifiers and related data for targeted advertising may be treated as a "sale" or "sharing" of personal information, even though we do not receive money in exchange. You have the right to opt out — see "Your opt-out rights" below and Section 12. We may also disclose personal information as follows:
Service providers / processors — companies that host, support, analyze, or help us operate the Service, such as cloud hosting, analytics, crash reporting, and advertising providers, acting on our instructions or as described in this Policy. Where required by law, details of such entrustment are disclosed here or made available on request.
App stores and platforms — to process purchases and distribute the Service.
Legal and safety — where required by law, regulation, legal process, or government request, or to protect the rights, safety, and property of us, our users, or others.
Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to the protections in this Policy.
Your opt-out rights (sale/sharing and targeted advertising). You can opt out of the sale or sharing of your personal information and of targeted advertising at any time by contacting us at support.superflex@gmail.com. Where required by law and technically supported, we also honor recognized opt-out preference signals such as the Global Privacy Control (GPC). We do not knowingly sell or share the personal information of consumers we know to be under 16 without opt-in consent (and, for those under 13, without the consent of a parent or legal guardian).
We operate globally and are based in the Republic of Korea. Your personal information may be transferred to, stored in, or processed in countries other than your own, including the Republic of Korea and the countries where our service providers operate. These countries may have data-protection laws that differ from those in your country.
Where we transfer personal information from the EEA, the UK, the Republic of Korea, Japan, or other regions that restrict transfers, we take the steps required by applicable law to protect it — such as relying on adequacy decisions, standard contractual clauses, or your consent where required. Where required by the Republic of Korea's Personal Information Protection Act, we will obtain consent or rely on another lawful basis for overseas transfers and will provide the information that law requires (such as the recipient, the items transferred, the purpose, and the retention period) through this Policy or a separate notice. Where required by Japan's Act on the Protection of Personal Information, we will provide information about, or obtain consent for, transfers to third parties in foreign countries.
We retain personal information only for as long as necessary for the purposes described in this Policy, after which we delete or anonymize it — unless a longer retention period is required or permitted by law (for example, for tax, accounting, dispute-resolution, or fraud-prevention purposes). Diagnostic and analytics data are generally retained in aggregated or de-identified form.
When personal information is no longer needed, we destroy it without undue delay using secure methods: personal information stored in electronic form is deleted by a method that renders it unrecoverable, and personal information recorded on paper is shredded or incinerated.
We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
If a security incident affecting your personal information occurs, we will notify affected users and the competent supervisory or regulatory authorities without undue delay, to the extent and in the manner required by applicable law.
Subject to applicable law, you may have rights regarding your personal information. To exercise any right, contact us at support.superflex@gmail.com. We will respond within the period required by applicable law and may need to verify your identity before acting. You will not be discriminated against for exercising your rights.
(a) EEA / UK (GDPR). The rights to access, rectify, erase, restrict or object to processing, and data portability, and to withdraw consent. You may also lodge a complaint with your local supervisory authority.
(b) United States — California (CCPA/CPRA) and other state laws. The rights to know/access, delete, and correct personal information; to opt out of the "sale" or "sharing" of personal information and of targeted advertising; and to limit the use of sensitive personal information. We use advertising identifiers and related data for targeted advertising, which may constitute a "sale" or "sharing" under these laws; you may opt out at any time by contacting us at support.superflex@gmail.com, and you may also use an authorized agent or, where technically supported, a recognized opt-out preference signal such as the Global Privacy Control. We do not knowingly sell or share the personal information of consumers we know to be under 16 without the required opt-in consent. Under California's "Shine the Light" law, California residents may request information about disclosures of personal information to third parties for those third parties' direct marketing; we do not disclose personal information to third parties for their own direct marketing. Residents of other US states with privacy laws (such as Virginia, Colorado, Connecticut, and others) have comparable rights, including, where provided by law, the right to opt out of targeted advertising and to appeal a refusal of a request.
(c) Republic of Korea (PIPA). The rights to access, correct, delete, and suspend the processing of your personal information, and to withdraw consent. You may also report concerns to the Personal Information Protection Commission (PIPC) or contact the KISA Privacy Call Center (118).
(d) Japan (APPI). The rights to request disclosure, correction, addition or deletion, and the cessation of use or third-party provision of your retained personal data, as provided by law. You may also contact Japan's Personal Information Protection Commission (PPC).
(e) Other regions in Asia and elsewhere. Where your jurisdiction grants privacy rights — including, for example, Singapore's Personal Data Protection Act and Thailand's Personal Data Protection Act — you may exercise them by contacting us as above.
The Service is intended for a general audience and is not directed to children. We do not knowingly collect personal information from children, and we do not knowingly serve personalized or interest-based advertising to children or use children's personal information for advertising.
If we obtain actual knowledge that a user is a child under the age applicable in their jurisdiction, we will treat that user accordingly — we will not serve them personalized advertising, we will limit our collection to what is reasonably necessary, and, where the law requires verifiable consent from a parent or legal guardian, we will seek that consent or delete the information.
The age at which a person is treated as a "child" depends on local law, including:
United States (COPPA): under 13;
EEA (GDPR): between 13 and 16, depending on the member state;
United Kingdom: under 13;
Republic of Korea (PIPA): under 14;
Japan and other regions: as defined by applicable law.
A parent or legal guardian who believes their child has provided us with personal information may contact us at support.superflex@gmail.com to review, correct, or delete it, or to refuse its further collection or use. If we learn that we have collected a child's personal information without the required consent, we will delete it.
The Service is provided primarily through a mobile app and uses software development kits (SDKs), device identifiers, and similar technologies rather than browser cookies. These technologies support core functionality, analytics, security, and advertising (including personalized advertising where permitted), as described above. You can manage device identifiers through your device settings.
Where required by law and technically supported, we honor recognized opt-out preference signals, such as the Global Privacy Control (GPC), and treat a valid signal as a request to opt out of the sale or sharing of personal information and of targeted advertising. Because such signals are primarily sent by web browsers and are not implemented uniformly, their availability may be limited within a mobile app.
The Service may interoperate with or link to third-party services, such as app stores and advertising or analytics providers. We are not responsible for the privacy practices of those third parties, and their processing is governed by their own privacy policies.
We may update this Policy from time to time. If we make a material change, we will provide notice within the Service and update the Effective Date below. Where required by law, we will obtain your consent. Your continued use of the Service after the Effective Date constitutes acceptance of the updated Policy, except where consent is required.
For any question or request regarding this Policy or your personal information, contact us at support.superflex@gmail.com.
Personal Information Protection Officer (Republic of Korea — PIPA)
Name: SUPER FLEX Privacy Officer
Email: support.superflex@gmail.com
Personal Information Complaints and Inquiries
Department: SUPER FLEX Support
Email: support.superflex@gmail.com
Where we are required under the GDPR to designate an EU/UK representative or a data protection officer, those contact details will be added here.
This Policy is effective from June 17, 2026