Privacy Policy

Zero to One Flow (021flow) · Salchung Memories

Zero to One Flow ("we", "us") respects your privacy and complies with applicable laws. This policy explains how we collect, use, store and share personal data.

1. Data Controller

• Trade NameZero to One Flow (021flow)
• RepresentativeSungtae Ryu
• Email[email protected]
• Data Protection OfficerSungtae Ryu (Representative) · [email protected] · +82 70-8676-0210

2. Personal Data We Collect

• Account data: email, name or nickname, login identifier
• Authentication data: social-login provider identifiers, token metadata
• Payment-related data: payment status, plan/subscription, payment date, receipt/order identifiers, Paddle customer ID or transaction ID (we do not directly store sensitive payment details such as card number or CVC)
• Service usage data: access logs, IP address, browser/device info, usage, error logs
• Support data: inquiry content, email, attachments, support records
• Cookies and similar technologies
• Game records: scores, reaction times, achievements, nickname and other content you create

3. Purposes of Use

• Sign-up and account management
• Providing the Service and syncing records
• Verifying paid plan / subscription status
• Payment, billing, refunds, tax and accounting
• Customer support and notices
• Security, fraud prevention, incident response
• Service improvement, statistics and analytics
• Compliance with legal obligations

4. Sharing and Processors

We may entrust personal-data processing to the following providers.

Scroll the table horizontally if it is wider than your screen.

We do not provide personal data to third parties except as required by law or with your consent.

Mobile analytics and ad choices

Share usage analytics is OFF by default. In Settings → Alerts & account → Privacy settings, enabling it sends gameplay statistics and your account identifier to our server, and app launches, screen usage and an installation identifier to Google Firebase to improve the game. We do not use this for advertising personalization. Turning it off stops future analytics transmissions and resets analytics state on the device. This does not mean previously sent data has been deleted; send deletion requests to the contact above. See Firebase privacy information for its processing and retention terms.

Ad data choices are separate from usage analytics. We request ads only when Google's regional consent process allows ad requests. When a choices form is available, you can reopen it with ‘Change ad choices’ in the same privacy settings. Non-personalized ads may still process IP-based approximate location, device identifiers, ad usage/interactions and performance/diagnostic information for ad delivery and measurement. For Google's processing and retention information, see AdMob data processing and Google's Privacy Policy.

Service data needed for sign-in, game progress sync, error diagnosis and fraud prevention is handled separately. OpenAI sharing uses the separate choice described below.

Optional AI commentary and titles

AI is OFF by default. In Settings → Alerts & account → AI commentary, you can read the disclosure and allow sharing with OpenAI for future gameplay. Requests include hits, misses, combos, boss results, game mode, accuracy, reaction speed, the game's calculated reflex age, achievement conditions and display language. These go through our server to the OpenAI API. We exclude your name, email and account ID from AI requests.

Play, progress, standard commentary and achievements work without consent. Turning AI off in the same settings stops new requests and cancels pending requests. This does not mean data already sent has been deleted. Contact [email protected] with data or deletion requests.

Our server's AI response cache expires after one hour. OpenAI generally retains abuse monitoring logs for its standard API for up to 30 days, with exceptions where longer retention is required by law or needed to protect services or third parties. See OpenAI data controls for details.

5. Overseas Transfers

Because we use some overseas providers (Paddle, cloud, AI API, analytics), your data may be transferred abroad. The recipient, country, items, purpose, timing/method and retention differ by provider, as set out in the processor table in Section 4. Most processors are located in the United States and other overseas locations, and data is transferred over the network in the course of using the Service. For details, contact [email protected]. You may decline overseas transfer, but some services (e.g. payment) may then be restricted.

6. Retention

On account deletion we erase personal data without undue delay, except payment/transaction/dispute records we must retain under applicable law for the statutory period. Backups are deleted within 30 days; minimal records may be kept as needed to prevent abuse.

Game files and database recovery backups are kept in our service storage. Scheduled backups are pruned daily under a 14-day retention rule based on their creation date.

7. Your Rights

You may request access, correction, deletion, restriction of processing, withdrawal of consent, and account deletion by emailing [email protected]. We handle requests promptly in accordance with applicable law.

8. Cookies

We may use cookies and similar technologies to keep you signed in, store preferences and analyze usage. Essential cookies are required to provide the Service; analytics/marketing cookies are optional. You can refuse cookies in your browser settings, though some features may then be limited.

9. Security Measures

• Least-privilege access and admin access controls
• Transport encryption (HTTPS) and protection of sensitive data
• Access logging and regular backups
• Security updates

10. Children's Privacy

The Service is not primarily directed to children under 14. If we learn we collected such data without guardian consent, we delete it without undue delay.

11. Changes

We may amend this policy as laws or the Service change, with prior notice in-app or on this page.

Effective Date: July 24, 2026