privacy-policy

Last updated: September 22, 2026

Effective: July 1, 2026

Yuni Studio ("we", "us") operates the mobile application TokTok Play (톡톡놀이) ("the App"). This policy explains what information the App collects, why, and what choices you have.

This App is designed for young children and is used under a parent's or guardian's supervision. We have built it so that a child never has to provide anything about themselves directly, and we do not show advertising of any kind.

1. The short version

• No advertising. No banner ads, no video ads, no advertising SDKs of any kind.

• No advertising identifiers. The App removes the Android advertising ID permission at build time and does not collect or use any advertising identifier, including for analytics.

• No selling or sharing data. We do not sell personal information, and we do not share it with third parties for advertising or marketing.

• A parent is always in control. Purchases, external links and parent settings are behind a parental gate (a 4-digit PIN, optionally with biometrics).

• You can delete everything. Parent mode has a "delete account" function that erases your account and all of its data from our systems.

2. Who we are

• Business name — Yuni Studio (유니스튜디오)

• Representative — Ryu Hyunjoo

• Business registration no. — 337-12-02771 (Republic of Korea)

• Mail-order business no. — 2026-Seoul Seodaemun-0598

• Address — 24 Bulgwangcheon-gil, Seodaemun-gu, Seoul, Republic of Korea

• Contact — yuni.studio.dev@gmail.com

3. Information we collect

3.1 Parent account information

Created when a parent signs in. What we store depends on the sign-in method:

• Google — Account ID, email address, display name, profile photo URL if Google provides one

• Email and password — Account ID, email address

• Kakao — Account ID, Kakao nickname, email address if your Kakao account provides one

• Guest (anonymous) — Account ID only — no email, no name

We store the email address so that our support team can find your account when you write to us about a purchase. We do not use it for marketing and we do not send promotional email.

For Kakao sign-in, the access token issued by Kakao is sent to our server, used once to read your Kakao ID, nickname and email, and then discarded. It is never stored on your device or in our database.

3.2 Child profile information

A parent creates a profile for each child. The parent enters:

• The child's name or nickname (any text the parent chooses — a nickname is fine)

• The child's year of birth (year only — not a full date of birth)

• The child's gender

• Optionally, a photo of the child, or a character avatar instead

This information exists so the App can greet the child and keep each child's progress separate. It is stored under the parent's account. It is never sent to analytics, never included in support emails, and never shared with anyone. A parent can edit or delete any profile at any time from Parent mode.

You are not required to use a real name or a real photo. A nickname and a character avatar work exactly the same way.

3.3 Learning progress

While a child plays, we store which words and Korean letters they have met, how many correct answers they gave per category, daily mission progress, decoration items, mini-game completions, saved coloring pictures (stored as colour data, not as an image of anything personal) and per-game play counts. This is what makes the learning record in Parent mode possible.

3.4 Purchases

When a parent buys content, we store the product purchased, the store transaction identifiers, the amount and currency, the time of purchase, and which content packs were unlocked.

We never receive or store your card number, bank details or any payment credentials.

Payment is handled entirely by Google Play. Purchase validation is handled by RevenueCat, Inc. (see §5).

3.5 Analytics

We use Google Analytics for Firebase to understand how the App is used — for example, how many people reach the mode selection screen, or which games are completed.

What we send is limited on purpose:

• Events are product events only, such as mode_select, game_start, game_complete, shop_view, login_success.

• We do not send any user identifier to analytics. The function that would set a user ID is not exposed anywhere in our code.

• We do not send a child's name, year of birth, gender, photo, or any parent's email.

• We do not send purchase amounts.

• Dynamic parts of screen names are stripped before they are recorded.

• Analytics is disabled entirely in development builds.

3.6 Push notifications

If a parent allows notifications, the App registers a device notification token so we can send service announcements. The token identifies a device, not a person, and is deleted when the account is deleted.

The App also schedules a local "time to play" reminder in the early evening. That reminder is created and shown on the device itself and sends nothing to us.

3.7 Device permissions

• Internet, network state — Download content packs, sign in, sync progress

• Biometrics — Optional unlock for the parental gate

• Notifications — Service announcements and the local play reminder

• Restart completed — Restore scheduled local reminders after the device reboots

• Camera, photo library — Only if a parent chooses to set a profile photo

• Billing — In-app purchases

The Android advertising ID permission and the Android AdServices permissions are explicitly removed from the App at build time.

3.8 Stored only on your device

Some things never leave the device: the parental gate PIN (stored as a salted hash — the PIN itself is never stored, and never sent to us), the biometric preference, sound and music settings, whether announcements have been seen, and the reminder's last-played date. Downloaded content packs are cached in the App's own storage.

4. How we use information

We use the information above to operate the App: to sign you in, to keep each child's progress separate, to unlock content you have purchased, to restore your purchases when you change devices, to answer your support requests, to send service announcements, and to understand which parts of the App are used so we can improve them.

We do not use any of it for advertising, profiling, or automated decision-making, and we do not sell it.

If you are in the European Economic Area or the United Kingdom, our legal bases are: performance of a contract (operating the App and delivering purchased content), legal obligation (keeping transaction records), and legitimate interests (security, fraud prevention, and basic product analytics). Where consent is required — notifications, and analytics where local law requires consent — we rely on consent and you may withdraw it at any time in your device or App settings.

5. Service providers

We do not sell or rent personal information. We use the following providers to run the service:

• Google LLC (Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Analytics, Cloud Messaging) — Accounts, data storage, server functions, analytics, notifications · Location: United States and Republic of Korea

• Google Play — Payment processing · Location: Varies

• RevenueCat, Inc. — Purchase validation and subscription status. Receives your account ID and purchase details · Location: United States

• Kakao Corp. — Kakao sign-in only, if you choose it · Location: Republic of Korea

6. Where your information is stored

Our server functions run in Seoul, Republic of Korea. Our database and file storage are located in the United States, and RevenueCat is located in the United States.

This means information is transferred outside your country, including outside the European Economic Area and the United Kingdom. Where required, such transfers are made under the European Commission's Standard Contractual Clauses or an equivalent approved mechanism operated by our providers.

7. Children's privacy

The App is directed to young children and is used with a parent.

A child is never asked to provide information about themselves. Everything in a child's profile is entered by a parent, from behind the parental gate, and can be changed or removed by that parent at any time.

For families in the United States (COPPA). We do not knowingly collect personal information from a child except the profile information a parent chooses to enter. We do not condition a child's participation on providing more information than is reasonably necessary. We do not disclose children's personal information to third parties for their own purposes, and we do not use it for behavioural advertising — the App contains no advertising at all. A parent may review the information associated with their child, refuse to permit its further collection, and request its deletion, at any time, from Parent mode or by writing to us.

For families in the European Economic Area and the United Kingdom. Where processing relies on consent and the user is below the applicable age of digital consent, that consent is given and can be withdrawn by the holder of parental responsibility.

If you believe a child has provided us information without a parent's involvement, contact us and we will delete it.

8. How long we keep information

We keep account and profile information for as long as the account exists. When you delete your account, we delete it as described in §9.

A small number of records are kept after deletion because they are required for integrity or legal reasons: purchase event logs used to prevent duplicate processing, coupon redemption records used to enforce one-use-per-account, and administrative audit logs that cannot be altered. Records held by Google Play and RevenueCat are governed by their own policies and retention periods.

9. Your choices and rights

The app is currently shown in Korean, so button names below are given in Korean with their meaning in parentheses.

Delete your account and data. In the app, open Parent mode (tap ☰, then 설정 Settings, and pass the parental gate) and go to 계정 (Account) → 회원탈퇴 (Delete account). If you no longer have the app, follow our Account and data deletion page. Deletion permanently removes your account, every child profile, all learning progress, saved pictures, notification tokens, purchase records held by us, entitlements, your Kakao link if any, your uploaded profile photos, and your sign-in account itself. This cannot be undone, and purchased content is not restored afterwards.

Delete one child's profile. On the home screen, tap ☰ → 아이 전환 (Switch child) → 수정 (Edit), then the X on that child's card. This removes that child's data without closing your account.

Access, correct, or export. Child profiles can be viewed and edited from ☰ → 아이 전환 (Switch child) → 수정 (Edit), and the learning record in Parent mode → 아이의 학습 (Child's learning). For anything else, write to us and we will respond.

Depending on where you live, you may also have the right to object to or restrict processing, to withdraw consent, and to lodge a complaint with your local data protection authority.

How to reach us about your data. Email yuni.studio.dev@gmail.com. To identify your account, include your account ID, which you can copy from Parent mode → 계정 (Account). Please do not send us your child's name or photo — we do not need them and we do not want them in email.

Notifications. Turn off the daily play reminder in Parent mode → 소리 (Sound) → 놀이 알림 (Play reminder). Service announcements can be turned off in your device's notification settings.

10. Security

Sign-in is handled by Firebase Authentication. Access to your data is restricted by server-side security rules so that an account can only read and write its own information. Purchase records, subscriptions and entitlements can only be written by our servers, never by the App. The parental gate PIN is stored only as a salted hash on your own device and is compared in constant time. Kakao access tokens are discarded immediately after use.

No method of transmission or storage is completely secure, but we work to protect your information and to limit what we collect in the first place.

11. Changes to this policy

If we make a material change, we will update this page and change the "Last updated" date. Where the change requires it, we will also notify you in the App.

12. Contact

Yuni Studio — yuni.studio.dev@gmail.com