Privacy Policy

1. Information we process

We process only the information the friends features need. If you do not use them (that is, if you do not sign in), we process none of the information in this section.

Information processed on the server

When you sign in, we ask Google or Apple only for an account identifier. We neither request nor store your email address, name, or profile photo, and the password you enter on the sign-in page never reaches us.

Information we relay but do not store

• Online status: whether the app is running, its mode (Play, Normal, or Work), and your visit settings. Kept only in server memory while we notify your friends.
• Visit information: the visiting pet's name and species, the sender's nickname, the message (up to 80 characters), and the visit result (whether the message was read, how many times the ball was thrown, which prank ran). Deleted once delivered.
• IP address: used briefly in server memory only to block excessive requests. Never stored or logged.

2. Information stored only on your computer

The following information stays on your computer and is never sent to our server. We cannot see it.

• Settings: mode, display layer, shortcuts, prank settings and the list of apps pranks may target, and visit settings
• Pet information: name, species, fullness, mood, energy, adoption date, and position on screen
• Traces left by friends' pets: the friend's nickname, the pet's name and species, and the visit time. Up to 5 traces, each deleted after 7 days.
• Sign-in token: encrypted with the encryption feature your operating system provides. If that feature is unavailable, the token is not saved and is discarded when you quit the app.
• App log: results and error codes, and identifiers of the apps pranks target. It never records window titles, screen contents, pet names, or setting values, and the oldest entries are deleted once it exceeds about 2 MB.

How your pet notices the screen

So that your pet can move naturally, the app reads the following on your computer only. It neither stores this information nor sends it off the device.

• Mouse cursor position and button state
• Time since you last used the keyboard or mouse (not what you pressed)
• The app identifier and window position and size of the frontmost window (used to hide in full-screen apps and for pranks). Window titles and screen contents are not read.

When pranks are on, your pet can minimize or close windows of apps you choose and briefly move the mouse cursor. On macOS this requires the Accessibility permission, which you can turn off in System Settings at any time.

3. Why we process information

• Signing you in and identifying your account
• Letting friends find you by username, and providing friend requests and friend lists
• Telling friends your online status, and delivering pet visits, messages, ball play, and pranks
• Blocking excessive requests and abnormal access, and responding to security incidents
• Handling account deletion requests and cancellations
• Confirming that you agreed to the Terms of Service and Privacy Policy, and handling disputes

We use personal information for no other purpose, and never for advertising or marketing. If a purpose changes, we will tell you in advance and ask for your consent again where the law requires it.

4. Retention and deletion

When you request deletion, you are signed out right away and become invisible to your friends. If you sign in again with the same sign-in account within 14 days, the deletion is canceled. After 14 days, we erase your account, friend, and sign-in information.

When a retention period ends or the purpose has been achieved, we delete the information without delay. Electronic records are deleted from the database so that they cannot be recovered, and we do not process personal information on paper. Information left in server backups is deleted when the backup retention period ends and is not used for anything other than restoring the Service in the meantime.

Information on your computer is removed when you delete the app data. Deleting your account does not remove the pets and settings on your computer.

5. What other users can see, and disclosure to third parties

Because the Service is about exchanging pets with friends, other users can see the following.

• Anyone signed up who searches for your exact username: your username and nickname
• People you exchange friend requests with, and your friends: your username, nickname, and online status (whether the app is running, its mode, and your visit settings)
• Friends your pet visits: your pet's name and species, your nickname, messages you send, and what your pet does during the visit (including pranks)

Otherwise, we do not disclose personal information to third parties, except where you have consented, where a law specifically requires it, or where it is unavoidable to meet a legal obligation (for example, a request made by an investigative authority under legally prescribed procedures), and then only to the extent the law permits.

We do not sell personal information and do not share it for targeted advertising.

6. Service providers and external services

To run the Service, we entrust work to, or use, the following companies.

Our server is located in the Republic of Korea (AWS Seoul Region). Your information may be processed in a country other than the one you live in, and that country's privacy laws may differ from yours. Wherever it is processed, we protect it as described in this policy.

Google, Apple, and GitHub do not process information on our behalf; they process it under their own privacy policies. The sign-in page opens in your default browser, not inside the app. You can turn off automatic updates in Settings > General.

When we entrust processing, we require by contract that personal information be kept secure, and we supervise compliance. If the providers or the work entrusted change, we will update this policy.

7. Your rights and how to exercise them

You may exercise the following rights at any time.

• Access: you can see your username, nickname, friend list, and friend requests directly in Settings > Friends. For other information, such as the activity log, email us.
• Correction: you can change your nickname in the app. Usernames cannot be changed; to get a new one, delete your account and sign up again with a new username.
• Deletion and withdrawal of consent: you can delete your account and withdraw your consent at any time in Settings > Friends > Delete account.
• Restriction of processing: you can request this by email. The friends features need this information to work, so if processing stops you cannot use them.
• Managing friends and visits: you can remove friends, decline friend requests, or block all visits.

If you email us at support.picks@momick.com, we will act on your request without delay and within 10 days at the latest, and tell you the result. Because we hold neither your email address nor your name, we may verify that you own the account by asking you to do something only possible while signed in to the app (for example, briefly changing your nickname to a phrase we give you). You may also make a request through a legal guardian or an authorized agent, in which case we will confirm their authority.

Users who live outside Korea and the United States are also protected by this policy, and if the law where you live gives you more rights, we follow that law.

8. Children's information

Only people aged 14 or older may create an account. We ask you to confirm that you are at least 14 when you sign up, and we do not knowingly process personal information of children under 14. If we learn that a child under 14 has signed up, we will delete the account. Parents and guardians can tell us at support.picks@momick.com.

Features you use without signing in, such as raising your pet, involve no personal information, so anyone can use them regardless of age.

9. How we keep information safe

• Data minimization: we do not collect email addresses, passwords, or real names.
• Encryption in transit: the app talks to our server only over encrypted connections (HTTPS and WSS).
• Token protection: the server stores only a hash of each sign-in token and replaces the token every time it is used. If a used token is presented again, we end all sessions of that sign-in. On your computer, the token is encrypted with your operating system's encryption feature.
• Minimal logging: server logs never contain IP addresses, message contents, nicknames, or usernames.
• Access control: we keep the number of people who handle personal information to a minimum, and manage server access and secrets separately from the code.
• Abuse prevention: sign-in, friend requests, visits, and messages are rate limited.

10. Cookies and tracking

Neither the app nor the server uses cookies, advertising identifiers, analytics, crash reporting, or any other tracking technology. The Google and Apple pages that open in your browser when you sign in follow those companies' cookie policies.

11. Information for users in Korea

Chief Privacy Officer

Chief Privacy Officer: 송준석 (contact: support.picks@momick.com). You may direct questions, complaints, and requests for remedies about personal information to the Chief Privacy Officer, who will respond without delay.

International transfers

As required by Article 28-8 of the Personal Information Protection Act, we disclose that personal information is transferred abroad as follows in the course of providing the Service.

GitHub, Inc. (update distribution)

Automated decisions

We make no decisions based solely on automated processing that significantly affect your rights or obligations (Article 37-2 of the Personal Information Protection Act). The temporary block on excessive requests lifts by itself after a set time.

Pseudonymized and behavioral information

We do not process pseudonymized information or collect behavioral information for targeted advertising.

Remedies for infringement

If you need a remedy or advice about an infringement of your personal information, you may contact the following organizations.

• Personal Information Dispute Mediation Committee: 1833-6972 (no area code), www.kopico.go.kr
• Personal Information Infringement Report Center (Korea Internet & Security Agency): 118 (no area code), privacy.kisa.or.kr
• Supreme Prosecutors' Office: 1301 (no area code), www.spo.go.kr
• Korean National Police Agency: 182 (no area code), ecrm.police.go.kr

12. Information for U.S. residents

Categories of personal information we collect

In the past 12 months we have collected the following categories of personal information, from the sources and for the purposes shown. Retention periods are listed in Section 4.

We do not collect sensitive personal information, precise geolocation, biometric information, or financial information. We do not sell personal information or share it for cross-context behavioral advertising, and have not done so in the past 12 months. We do not sell or share the personal information of anyone under 16, and we do not engage in targeted advertising or in profiling that produces legal or similarly significant effects.

Your rights and how to make a request

Depending on the state where you live, you may have the right to know the categories and specific pieces of personal information we process and to obtain a copy; to delete it; to correct it; to opt out of sale, sharing, targeted advertising, and profiling (we do none of these); to limit the use of sensitive personal information (we collect none); and not to be discriminated against for exercising these rights.

You can make a request as described in Section 7 or by emailing support.picks@momick.com, and you may use an authorized agent. We will confirm receipt within 10 business days and respond within 45 days. If we need more time, we may extend this once by another 45 days and will tell you why. We verify your identity as described in Section 7.

If we deny your request, you may appeal the decision. Email support.picks@momick.com with "Appeal" in the subject line, and we will tell you the outcome and our reasons within 45 days. If you disagree with the outcome, you may contact your state attorney general.

Do Not Track and Global Privacy Control

Because we do not track you across websites or apps, nothing we do changes in response to a Do Not Track signal. We honor Global Privacy Control signals as requests to opt out of sale and sharing, which we do not do in any case.

Children under 13 (COPPA)

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Only people aged 14 or older may create an account, as described in Section 8.

California "Shine the Light"

We do not disclose personal information to third parties for their direct marketing purposes.

Complaints

• Federal Trade Commission (FTC): reportfraud.ftc.gov
• California Privacy Protection Agency (CPPA): cppa.ca.gov
• Your state attorney general

13. Changes to this policy

If we change this policy, we will announce the changes and their effective date in the app or on the app's download page at least 7 days in advance. For changes that significantly affect your rights, such as collecting new information, adding purposes, or starting to disclose information to third parties, we will give at least 30 days' notice and ask for your consent again where the law requires it.

You can read the current policy at any time in Settings > General > About, and we will send you earlier versions if you ask at support.picks@momick.com.

14. Contact