Privacy Policy
Cheevis (“we”) operates the game Alpidia: Legendary Eggs (the “Service”) and complies with the Personal Information Protection Act of the Republic of Korea and other applicable laws. This policy explains what information the Service processes, why, and how it is protected. If this English version and the Korean version differ, the Korean version prevails.
In short
- We don't ask for your name, contact details or birthday. There is no sign-up screen; the app creates a nameless anonymous account (a random number) the first time it opens.
- Your progress is saved on your device, with a copy on our server, so you can get your adventure back after losing a device or reinstalling.
- Linking an Apple or Google account is optional. Once linked, the same adventure loads on your other devices.
- Payments are handled by the App Store and Google Play. We never receive card numbers or other payment details, only a record that a purchase was delivered.
- Rewarded ads come from Google AdMob. AdMob processes advertising IDs; we never receive them.
- You can delete your account in the app at any time: Settings › Keep your adventure › Delete account (section 8).
- The web version uses no server. Progress on the web stays in that browser.
1.Why we process information
- Saving and restoring progress — to recover your adventure on a new device or after reinstalling, and to compare saves from several devices so one does not silently overwrite another.
- Account linking — to load an adventure kept with Apple or Google on another device.
- Confirming and delivering in-app purchases — to check a payment really happened, never deliver the same purchase twice, and handle refunds and payment questions.
- Rewarded ads — to show ads, give rewards, check daily limits and prevent abuse.
- Accurate time — timers such as lives and hatching use server time so changing the device clock doesn't skip them (no extra personal data is stored for this).
- Running the Service — checking it works, fixing errors and keeping it secure.
2.What we process
Every app player
| Item | Details | Purpose |
|---|---|---|
| Account number | A random number created when the app first opens (anonymous account) | Tell whose save a copy is |
| Save copy | Stages played, spirits and eggs, currencies, home decoration, game settings, a summary (village, stages cleared, spirits, tokens), app version, save time | Restore on a new device or reinstall; compare devices |
| Device marker | A random string the app makes on the device (not a hardware ID) | Tell which device uploaded a save |
| Access logs | IP address, time, requests | Security, error handling, abuse prevention |
If you link an Apple or Google account (optional)
- Account identifier issued by that account.
- Email address, only if the account shares it (Apple's “Hide My Email” gives a relay address). Used only to identify the account, never for marketing. We don't receive your name.
If you make an in-app purchase
- Delivery record — store transaction ID, product, tokens or items delivered, environment (live or test), purchase and refund times, account number.
- Payment confirmation — RevenueCat confirms the payment with the store receipt and processes your account number and transaction details (product, price and currency, country).
- We never receive or keep card numbers, payment methods or names. Payments are handled by the App Store and Google Play.
If you watch a rewarded ad
- Advertising ID and device information (IDFA / Android advertising ID, OS and version, approximate region from the IP address) — processed directly by Google AdMob.
- Reward confirmation record — ad transaction ID, account number, where the ad was watched, time. Our server keeps it after verifying Google's signed confirmation.
Web version (alpidia.pages.dev/play)
The web version uses no server, ads or payments; your progress stays in your browser's storage. Our hosting provider (Cloudflare) processes access logs such as IP addresses when the site loads.
3.How long we keep it
| Information | Retention |
|---|---|
| Account number, save copy, device marker | Until you delete the account; deleted immediately when you do. Anonymous accounts not linked to Apple or Google are deleted automatically after 180 days with no sign-in or save and no purchase record. |
| Linked account identifier and email | Until you delete the account |
| Delivery records and account move records | 5 years (the retention period for payment and delivery records under Korea's Act on Consumer Protection in Electronic Commerce). When you delete your account, the account number is removed from them. |
| Ad reward confirmation records | Deleted automatically after 30 days |
| Access logs | For our server provider's (Supabase) log retention period |
| Progress on your device | Until you use “Start over” in the app or delete the app |
An “account move record” is kept when you move from an anonymous account to an Apple or Google account that already exists: it holds both account numbers and the time, so purchases made on the anonymous account move with you and late payment or refund notices reach the right account.
4.Sharing with third parties
We don't share your information with third parties, except where required by law.
5.Service providers
| Provider | Work |
|---|---|
| Supabase, Inc. | Server hosting, sign-in, storing save copies, delivery records and ad reward records |
| RevenueCat, Inc. | Confirming in-app purchases and notifying us |
| Google LLC (AdMob) | Serving and measuring rewarded ads, managing ad consent |
| Apple Inc., Google LLC | Sign-in when you choose to link an account |
| Cloudflare, Inc. | Hosting this website and the web version |
6.International transfers
While you use the Service, information may be transferred abroad or processed abroad over encrypted connections, as follows.
| Recipient (country) | Supabase, Inc. (USA) — data is stored in Seoul, Korea, and may be accessed from abroad for operations and incident response |
|---|---|
| Information | Account number, save copy, device marker, linked account identifier and email, delivery and move records, ad reward records, access logs |
| Purpose | Hosting and storage |
| Retention | As in section 3 |
| Recipient (country) | RevenueCat, Inc. (USA) |
|---|---|
| Information | Account number, store transaction details, device information |
| Purpose | Payment confirmation |
| Retention | Per RevenueCat's policy |
| Recipient (country) | Google LLC (USA and elsewhere) |
|---|---|
| Information | Advertising ID, device information, IP address, account number used for reward confirmation |
| Purpose | Serving and measuring ads, reward confirmation |
| Retention | Per Google's policy |
See how Google uses information from partner sites and the Google Privacy Policy. You can refuse personalized ads as described in section 7; rewards and gameplay stay the same.
7.Your rights
- Access, correction, deletion, suspension — contact us below and we will act without delay. You can delete your account directly in the app (section 8).
- Personalized ads — iOS: decline the tracking request, or turn it off in Settings › Privacy & Security › Tracking. Android: delete or reset your advertising ID in Settings › Google › Ads.
- EEA and UK — choose in the consent form the app shows, and change your choice any time in Settings › Ads › Privacy settings.
8.Deletion
- Settings › Keep your adventure › Delete account — deletes your account and the save copy on our server immediately, and starts this device over. If you linked Apple, the tokens Apple issued to us are revoked too.
- Settings › Start over — erases the adventure on this device. The server copy is replaced by the new adventure at the next save.
- Deleting the app — erases what is on the device. The server copy stays until you delete the account or the automatic deletion in section 3.
- If you can't use the app — if you linked Apple or Google, email us from or with that account's address to ask for deletion. See Delete account.
- Delivery records kept by law are deleted after the period in section 3. Electronic files are deleted so they cannot be recovered.
9.Security
All connections are encrypted (TLS), and row-level security lets only the account owner read its records on the server. Server admin access and secret keys are kept by us only and are never put in the app. Payment and ad reward confirmations are accepted only after their signatures and credentials are verified.
10.Children
The Service does not collect names, contact details or other information that identifies a child. We don't knowingly collect personal information from children under 14 (or the age set by local law); if we learn we have, we take the necessary steps without delay. Parents or guardians may contact us to access or delete it.
11.Contact
| Operator | Cheevis (치비스) |
|---|---|
| Privacy officer | Chunghyup Oh |
| cheevis.oh@gmail.com |
12.Changes
If this policy changes, we post the changes and their effective date on this page, and announce changes that significantly affect your rights in the app as well.