KPOP Star Hunters Privacy Policy
BrickStream (the “Company”) establishes and publishes this Privacy Policy to protect the personal information of users who use KPOP Star Hunters (the “Service”), a mobile application and related web service provided by the Company. The Company complies with applicable laws and regulations, including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection.
Article 1. Personal Information Collected
The Company may collect and use the following personal information to provide the Service.
1. Information collected when users sign up or log in
| Category | Items Collected |
|---|---|
| Google login | Google account identifier, email address, user identifier, profile information |
| Guest login | Nickname, device identifier, user identifier |
2. Information automatically collected while using the Service
| Category | Items Collected |
|---|---|
| Device and app information | Device model, operating system type and version, language settings, app version, access country, network status, error logs |
| Usage records | Access date and time, app launch and termination records, gameplay records, event participation records, service usage logs |
| Game data | User identifier, nickname, gameplay information, character and idol information, owned items, currency and P.P balance and transaction records |
| Payment records | Product name, payment amount, purchase date and time, payment platform, order number, payment status, refund, cancellation, and chargeback records |
| Advertising and analytics information | Advertising identifier, ad impression, click, and reward-related information, app usage analytics data, performance and diagnostic data |
| Customer support and report records | Inquiry details, processing results, reported target, report reason, sanction history, abnormal use detection records |
3. Information collected when using web services
| Category | Items Collected |
|---|---|
| Web access information | Browser type and version, operating system, access IP address, cookies, local storage, access and usage logs |
4. Optional permissions
The Service may request notification permission to provide event, reward, account, and service notices. Users may allow or deny notifications at any time through their device settings.
The Service currently does not request camera, photo, or storage permissions for the purpose of processing personal information.
Article 2. Purpose of Collection and Use of Personal Information
The Company uses personal information for the following purposes. Personal information collected by the Company will not be used for purposes other than those listed below. If the purpose of use changes, the Company will obtain separate consent or take other measures required by applicable laws.
- User identification, login, account management, and identity verification
- Provision of KPOP Star Hunters, and storage and restoration of gameplay information
- Management of game data such as items, currency, and P.P
- Paid product purchases, payment confirmation, refunds, chargebacks, and handling of unused paid currency
- Customer inquiries, account deletion requests, complaint handling, and delivery of notices
- Advertising, ad performance measurement, ad reward provision, and prevention of advertising-related abuse
- Report handling, prevention of abnormal use, service restriction, and dispute response
- Service stability, error analysis, quality improvement, and statistical analysis
- Compliance with legal obligations and responses to requests from relevant authorities
Article 3. Retention and Use Period of Personal Information
The Company processes and retains personal information within the retention and use period required by law or agreed to by users when the Company collects the personal information.
| Item | Retention Period |
|---|---|
| Member information | Until membership withdrawal or account deletion is completed |
| Gameplay and item data | Until membership withdrawal or account deletion is completed. However, data may be retained for the period necessary for restoration or dispute response |
| Abnormal use, sanction, and report records | 1 year for the prevention of abnormal use and dispute response, or for the period required by applicable laws |
| Logs and analytics data | In principle, 3 months. De-identified or anonymous data for statistical purposes may be retained separately |
| Records on contracts or withdrawal of subscription | 5 years under the Act on Consumer Protection in Electronic Commerce |
| Records on payment and supply of goods or services | 5 years under the Act on Consumer Protection in Electronic Commerce |
| Records on consumer complaints or dispute resolution | 3 years under the Act on Consumer Protection in Electronic Commerce |
| Records on display and advertising | 6 months under the Act on Consumer Protection in Electronic Commerce |
| Records on electronic financial transactions | 5 years under the Electronic Financial Transactions Act |
| Service access records | 3 months under the Protection of Communications Secrets Act |
Article 4. Provision of Personal Information to Third Parties
The Company processes personal information only within the scope specified in this Privacy Policy. The Company does not provide users’ personal information to third parties except where the user has given consent, where a special provision of law applies, or where permitted under the Personal Information Protection Act.
If the Company needs to provide personal information to a third party in the future, the Company will notify users in advance of the recipient, purpose of provision, items provided, and retention and use period, and will obtain required consent.
Article 5. Entrustment of Personal Information Processing
The Company may entrust personal information processing as follows to provide the Service smoothly. If the details of entrusted work or the entrusted company change, the Company will disclose such changes through this Privacy Policy.
| Entrusted Company | Entrusted Work | Retention and Use Period |
|---|---|---|
| Google LLC | Google login authentication, service analytics such as Firebase/Google Analytics, Google Play payment processing, Google AdMob advertising and ad performance measurement | Until membership withdrawal, termination of the entrustment agreement, or expiration of the legally required retention period |
If new functions or additional entrusted companies are introduced, such as Apple login or Apple payment, the Company will add the relevant entrusted company and entrusted work to this Article and disclose them.
Article 6. Overseas Transfer of Personal Information
The Company may transfer personal information to servers of entrusted companies located overseas for service provision, analytics, login, payment processing, and related purposes.
| Recipient | Country | Items Transferred | Purpose | Method | Retention Period |
|---|---|---|---|---|---|
| Google LLC | United States and others | Google account identifier, email address, device information, log information, payment-related information, advertising identifier, and advertising usage information | Login authentication, service analytics, Google Play payment processing, Google AdMob advertising and ad performance measurement | Network transmission when using the Service | Until membership withdrawal, termination of the entrustment agreement, or expiration of the legally required retention period |
Details regarding overseas transfers may be updated according to the actual operation structure of the Service and confirmed entrusted companies.
Article 7. Destruction of Personal Information
The Company destroys personal information without delay when the retention period expires, the purpose of processing is achieved, or the personal information becomes unnecessary due to membership withdrawal or account deletion request.
However, information that must be retained under applicable laws will be stored in a separate database or segregated storage and destroyed after the required retention period expires.
| Category | Destruction Method |
|---|---|
| Electronic files | Deleted using technical methods that make recovery or restoration impossible |
| Printed materials | Shredded or incinerated |
| Backup data | Overwritten after the backup cycle expires or deleted using a method that makes recovery impossible |
Article 8. Rights of Users and Legal Representatives and How to Exercise Them
Users may request access, correction, deletion, suspension of processing, or withdrawal of consent regarding their personal information at any time.
| Method | Details |
|---|---|
| Mobile app | Settings > Account Management > Account Deletion or privacy-related menu |
| Web page | https://kpopstar.asia/account/delete |
[email protected] |
The Company will verify whether the requester is the user or a duly authorized representative and will take action without delay in accordance with applicable laws. Some requests may be restricted if the Company is legally required to retain the information or if the request may infringe upon the rights or interests of another person.
Article 9. Processing of Personal Information of Children Under 14
The Service is not intended for children under the age of 14.
If the Company needs to collect personal information from a child under 14, the Company will comply with applicable legal procedures, including obtaining consent from the legal representative. The legal representative may request access, correction, deletion, or suspension of processing of the child’s personal information.
Article 10. Cookies, Advertising Identifiers, and Automatic Collection Technologies
The Company may use cookies, local storage, app instance IDs, advertising identifiers, and similar technologies for user authentication, session maintenance, preference settings, service usage analysis, quality improvement, advertising, and ad performance measurement.
Users may restrict cookie storage or advertising tracking through device or browser settings. However, some functions of the Service may be limited.
The Service may use advertising services such as Google AdMob. In this process, advertising identifiers, device information, ad impression, click, and reward-related information may be processed. Users may limit personalized advertising or advertising tracking through device settings.
Article 11. Google Play Data Safety Notice
When registering the app on Google Play, the Company submits the Service’s data collection, sharing, and security practices accurately in accordance with Google Play Data Safety policies.
If the Service supports account creation, the Company provides an account deletion request path in the app or through a web page. Account deletion requests may be submitted through https://kpopstar.asia/account/delete or the customer support email.
Article 12. Privacy Officer and Contact
Users may contact the following channels for opinions, complaints, requests for access, correction, deletion, or other inquiries regarding personal information protection while using the Service.
| Category | Details |
|---|---|
| Privacy Officer | Kim Dong-an |
| Position | CEO |
| Contact | [email protected] |
| Privacy Manager | Jung Hyun-wook |
| Department | Operations |
| Contact | [email protected] |
| Account and data deletion requests | [email protected] |
Article 13. Remedies for Infringement of Rights
Users may contact the following organizations for consultation or dispute resolution regarding personal information infringement.
| Organization | Contact |
|---|---|
| Personal Information Dispute Mediation Committee | 1833-6972 / www.kopico.go.kr |
| Personal Information Infringement Report Center | 118 / privacy.kisa.or.kr |
| Supreme Prosecutors’ Office | 1301 / www.spo.go.kr |
| Korean National Police Agency | 182 / ecrm.cyber.go.kr |
Article 14. Changes to this Privacy Policy
This Privacy Policy may be amended due to changes in laws, Service content, or personal information processing practices.
If this Privacy Policy is amended, the Company will notify users of the changes and effective date through reasonable methods such as in-service notices, website postings, email, or push notifications.
Article 15. Effective Date
This Privacy Policy is effective as of May 29, 2026.