Privacy Policy
Effective date: August 14, 2026
NawaPlay ("we," "us," or the "Company") respects the privacy of users of the NawaPlay mobile applications and related web services (collectively, the "Service"). This Privacy Policy explains what information we process and how we use, retain, and protect it.
1. Information We Process
You can record matches locally without signing in. Information that remains only on your device and is never sent to our servers is not collected by us.
When you connect an account, use cloud backup or live sharing, or subscribe to Pro, we may process the following information.
| Category | Information | Purpose |
|---|---|---|
| Connected account | Firebase user ID; account identifier, sign-in provider, display name, and email address supplied by Apple, Google, or Kakao when available; authentication tokens | Authentication and account management |
| Cloud match records | Match ID, date and time, match type and configuration, player names, scores and score changes, match status, title, notes, and sync status | Backup, restore, and synchronization across devices |
| Deletion synchronization | Deleted match ID, account ID, and deletion time | Prevent an older copy on another device from restoring a deleted match |
| Live sharing | Share code, account ID, match type and configuration, player names, score history, match status, and start/end times | Provide real-time match viewing through a shared link |
| Pro subscription | Store, product ID, active/expired/grace-period status and expiration time, Apple transaction and original transaction IDs and app account token, or a hash of the Google Play purchase token | Verify subscriptions, provide account-based Pro access, restore purchases, and prevent fraud |
| Analytics | App-instance or device-related identifiers, app sessions, device model, operating system, app version, approximate region inferred from network information, and feature events such as sign-in method, match start, and live-share creation | Measure usage and improve features and quality |
| Diagnostics | Crash logs, stack traces, relevant app state, device, operating system, app version, and error context | Diagnose errors and improve reliability |
Apple or Google processes your payment method, billing address, and payment directly. We do not collect or store your full card number or store-account password. A Google Play purchase token is sent to Google for verification; our database stores only a hash used to link the entitlement to an account and prevent duplicate use.
The Service does not collect contacts, photos, health data, voice recordings, or precise GPS location. Voice score guidance reads match state generated on the device; it does not record or upload your voice.
2. How We Collect and Use Information
Information may be processed when:
- your selected identity provider supplies account information during sign-in;
- the app sends records after you enable synchronization or live sharing;
- the applicable store and our verification server validate a purchase or restored subscription; or
- Firebase SDKs collect analytics and diagnostics while you use the app or when an error occurs.
We use this information only to authenticate users, manage accounts, synchronize matches, provide live sharing, verify and restore Pro access, prevent abuse, analyze and improve the Service, diagnose errors, maintain security, and respond to privacy requests.
3. Service Providers and International Processing
We use the following third-party services.
| Provider | Service and purpose | Information involved | Processing location |
|---|---|---|---|
| Google LLC | Firebase Authentication, Cloud Firestore, Analytics, Crashlytics, and Cloud Functions | Account IDs, match and live data, subscription entitlement, usage, and diagnostic information | Firestore and Functions use the Seoul region (asia-northeast3); authentication, analytics, and diagnostics may use Google's global infrastructure |
| Apple Inc. | Sign in with Apple, App Store billing, and subscription verification | Sign-in information, product and transaction identifiers, and subscription status | Under Apple's privacy policy and infrastructure |
| Google LLC | Google Sign-In, Google Play billing, and subscription verification | Sign-in information, product ID, purchase token, and subscription status | Under Google's privacy policy and infrastructure |
| Kakao Corp. | Kakao Sign-In | Account and authentication information | Under Kakao's privacy policy and infrastructure |
Information may be encrypted and transmitted over a network when you use the relevant feature or when an event occurs. Each provider processes information under its own terms and privacy policy. We disclose only what is necessary to provide the Service and require legally appropriate safeguards.
You may use local match recording without connecting an account. Cloud backup, live sharing, and Pro subscription features require the relevant network and third-party processing.
4. Retention and Deletion
- Local records: retained on your device until you delete them or remove the app.
- Cloud backup: retained until you delete the record or your account data.
- Deletion markers: retained without match content until account deletion to prevent an older device from restoring deleted records.
- Live data: accessible for up to 48 hours after a match ends and then scheduled for deletion.
- Authentication information: may be retained until account disconnection or deletion.
- Subscription entitlement: may be retained until subscription expiration or an account-deletion request to support access, restoration, and fraud prevention. Deleting your NawaPlay account removes our subscription linkage but does not alter legally required store transaction records.
- Analytics and diagnostics: retained, deleted, or aggregated according to the configured Firebase Analytics and Crashlytics retention policies.
When information is no longer needed, we delete it or render it impracticable to recover unless applicable law requires separate retention.
5. Live Sharing and Public Data
When you enable live sharing, anyone with the link or code can view the match type, player names, score, and match status without signing in. Recipients may forward the link, so do not enter information you do not have permission to make public.
Match notes, account email, and payment information are not included in public live data. Live data is managed separately from private cloud backup.
6. Analytics, Advertising, and Tracking
Firebase Analytics may measure app launches, sessions, and selected feature events. Approximate region may be inferred from network information rather than GPS. App-instance or device-related identifiers permitted by the operating system and SDK may be processed for analytics.
We do not currently display personalized ads, sell personal information, or disclose it to data brokers. Analytics is used to understand Service usage and improve quality, not to target advertising.
7. Your Choices and Rights
Account connection, cloud backup, and live sharing are optional. You can view, edit, and delete match records in the app and use the account-deletion feature to request deletion of account-related server data and subscription linkage.
You may request access, correction, deletion, restriction, or information about international processing by contacting us below. We may verify your identity and will respond as required by applicable law.
Deleting your NawaPlay account does not cancel an App Store or Google Play subscription. To stop future charges, you must separately cancel the subscription through the applicable store.
8. Children's Privacy
The Service does not verify age and is not intended to knowingly collect personal information from children under 14. A parent or legal guardian who believes a child's information has been processed may contact us to request deletion.
9. Security
We use safeguards including encryption in transit, Firebase Authentication and per-account security rules, server-side verification of subscription transactions, restrictions that prevent clients from writing entitlement data, separation of private backup and public live data, least-privilege operational access, and development rules that avoid attaching player names, notes, share codes, or email addresses to custom analytics and diagnostic events.
No system is completely secure, but we work to prevent unauthorized access, loss, alteration, or disclosure.
10. Changes to This Policy
We may update this Policy when the Service, data processing, or applicable law changes. We will update the effective date and provide notice in the app or on our website when a change is material.
11. Contact Us
- Operator: NawaPlay
- Privacy contact: 이강호
- Email: kenny@nawaplay.com
- Phone: 0507-1469-0797
- Address: Rm 713-E14, 7th Floor, Innermass Hangang, 190 Gimpohangang 9-ro 75beon-gil, Gimpo-si, Gyeonggi-do, Republic of Korea
- Website: https://www.nawaplay.com