KONENINE ("Company") values the protection of users' personal information and complies with all applicable personal information protection laws. The Company hereby publishes this Privacy Policy to inform users how their personal information is used and protected, and to promptly and smoothly handle related grievances.
The Company collects and uses personal information with users' consent for the following purposes.
| Service | Purpose | Items collected | Type |
|---|---|---|---|
| Tetri Tower | Sign-up / Login (Apple) | Apple anonymous user identifier (sub) | Required |
| Sign-up / Login (Google) | Email address, Google user identifier (sub) | Required | |
| Guest (temporary) play | Anonymous UUID generated in-app | Required | |
| Game service provision | Nickname, avatar index | Required | |
| Customer support | Email address, app usage history | Required | |
| Game Center login (iOS) | gamePlayerID (anonymous Apple player identifier) | Optional |
* For stable service, account and item protection, legal compliance, and abuse prevention, the following information may be automatically generated and collected during service use:
* When payment processing is required (including refunds), the following may be collected as necessary: email address, purchase confirmation details, and materials for verifying unauthorized third-party payments.
The Company processes personal information for the following purposes. The information will not be used for purposes other than those stated below, and if the purpose changes, we will take necessary measures such as obtaining separate consent under Article 18 of the Personal Information Protection Act.
1) The Company processes users' personal information only within the scope stated in Section 2, and provides personal information to third parties only when the user consents or when required by law under Articles 17 and 18 of the Personal Information Protection Act.
2) The Company does not currently provide users' personal information to any third party.
1) The Company processes and retains personal information within the retention period consented to by the user at the time of collection, or within the period required by relevant laws.
(1) Payment and refund records
(2) Access and error logs
(3) Crash reports
(4) Customer support records
2) Retention required by relevant laws:
1) The Company destroys personal information without delay when the retention period expires, the purpose is achieved, or consent is withdrawn.
2) If continued retention is required by other laws despite the retention period expiring, the information is moved to a separate database or storage location.
3) Destruction procedures and methods:
1) The Company entrusts personal information processing to the following parties for service provision and improvement:
| Entrusted party | Entrusted work |
|---|---|
| Apple Inc. | App distribution, in-app payment processing, Sign in with Apple, Game Center leaderboards |
| Google LLC | Google Sign-In authentication, AdMob advertising service |
| Tencent Cloud Computing (Beijing) Co., Ltd. | Service infrastructure (server hosting, database operation) |
2) Under Article 26 of the Personal Information Protection Act, the entrustment contract specifies prohibitions on processing beyond the entrusted purpose, technical/administrative protection measures, re-entrustment restrictions, supervision, and liability. The Company supervises the entrusted party's safe handling.
3) Any change to the entrusted work or entrusted party will be disclosed in this Privacy Policy without delay.
The Company entrusts overseas processing of personal information as follows to provide smooth game services:
| Basis | Recipient | Purpose | Items | Country | Method | Retention |
|---|---|---|---|---|---|---|
| Personal Information Protection Act Art. 28-8(1)(3) (contract performance) | Tencent Cloud Computing (Beijing) Co., Ltd. | Service infrastructure (server hosting, database operation) | All user personal information (account, game data, payment history, access logs, etc.) | Singapore | Real-time transfer during service use | Until the retention period under relevant laws |
| Same | Apple Inc. | In-app payment verification, Apple sign-in, Game Center rankings | Anonymous Apple sub, gamePlayerID, transaction ID, game score | United States | Real-time transfer via API | Per Apple's policy |
| Same | Google LLC | Google Sign-In, AdMob advertising | Email, Google sub, IDFA (with consent) | United States | Real-time transfer via API | Per Google's policy |
Users may refuse overseas transfer by contacting the Personal Information Protection Officer. If refused, the Company will exclude the user's personal information from overseas transfer. However, this may substantially restrict use of the Company's service, as all Tetri Tower services operate on overseas servers.
1) Users may at any time request access, correction, deletion, processing suspension, or withdrawal of consent for their personal information.
* Users aged 14 or older may exercise these rights personally or through a legal representative.
2) Rights may be exercised by contacting the Personal Information Protection Officer via email. Upon receiving a request, the Company will take necessary action within 10 days and notify the user of the result.
3) Membership withdrawal and account deletion may be performed directly via "Settings > Delete Account" in the app. Upon account deletion, the Company will immediately: (i) permanently and without delay delete all personally identifying information and game data associated with the account, including the Game Center identifier (gamePlayerID), Apple and Google sign-in links, email address, game progress, items, diamonds, and rankings; (ii) if Sign in with Apple is linked, call Apple's authorization revocation API to revoke the linkage; (iii) deletion is immediate and cannot be undone; (iv) retain payment-related records in anonymized form for 5 years, separately stored, as required by the Act on Consumer Protection in Electronic Commerce.
4) Rights may also be exercised by a legal representative or authorized agent, in which case a power of attorney per Appendix Form No. 11 of the Notice on Personal Information Processing Methods must be submitted.
5) Rights of access and processing suspension and consent withdrawal may be restricted under Articles 35(4) and 37(2) of the Personal Information Protection Act.
6) If the user requests correction of an error, the Company will not use or provide the information until correction is complete.
7) Personal information terminated or deleted at the request of the user or legal representative is processed as stated in Section 4 and cannot be accessed or used for other purposes.
8) The Company verifies whether the requester is the user or an authorized representative.
1) This service is provided as a native iOS app and does not use web browser cookies.
2) The Company uses the following local storage and identifiers for service provision and user convenience:
(1) App local storage (localStorage): stores user environment info such as language, volume, free refresh count
(2) Server session token (Bearer Token): maintains login state
(3) Advertising identifier (IDFA): collected only when iOS App Tracking Transparency (ATT) is granted
1) The Company collects and uses minimal behavioral information without identifying individuals, as follows:
2) Behavioral information collected by third parties from the Company's app:
3) The Company does not process behavioral information of children under 14 or sensitive behavioral information such as beliefs, family or kinship, education, medical history, or other social activities that may clearly infringe on rights or privacy.
4) Users can allow or block personalized advertising by changing device settings:
iOS: Settings > Privacy & Security > Tracking > disable "Allow Apps to Request to Track"
1) The Company takes the following measures to prevent loss, theft, leakage, alteration, or damage of users' personal information under the Personal Information Protection Act:
2) In addition to legal requirements, the Company also:
The Company is not responsible for any leakage of account ID, password, nickname, email or other personal information caused by the user's negligence or general internet issues.
1) The Company designates the following Personal Information Protection Officer, who is responsible for overall personal information processing and handling user grievances and remedies:
2) Users may direct all personal information-related inquiries, complaints, grievance remedies, and access requests to the Officer, who will respond promptly and in good faith.
1) Users may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency's Personal Information Infringement Report Center, etc. Other inquiries may be directed to:
1) The Company may provide links to other websites or resources. The Company has no control over external sites and cannot guarantee the usefulness of services or materials obtained from them.
2) When following a link to another site, please review that site's privacy policy and terms.
3) Please keep the personal information provided accurate and up to date. The user is responsible for accidents caused by inaccurate information, and account use may be restricted or the account may be deleted for false or stolen information.
4) Users have a right to protection but also a duty to protect their own information and not infringe on others'. Please keep your password and other personal information safe.
5) Users are solely responsible for service disadvantages and material losses caused by entering inaccurate information.
1) This Privacy Policy is effective from August 19, 2026.
2) Any changes will be announced at least 7 days before taking effect via the Company's website or app.
Notice date: 2026-08-14
Effective date: 2026-08-21