Effective date: October 9, 2026

BlueMax Studio ("we") respects the privacy of everyone who uses the StampPact app ("the Service", 도장쾅 in Korean) and complies with applicable data protection laws, including Korea's Personal Information Protection Act. This policy explains what we process, why, and for how long.

1. Information we process and why

• Account — a user identifier for the Service, and your Sign in with Apple identifier if you sign in with Apple · Purpose: identify you, keep you signed in, link accounts
• Profile — nickname, profile emoji and color or profile photo, the stamp you draw · Purpose: show you to your friends, show your stamps
• Pacts and proof — pact details (title, dates, rules, penalty), check-in records (time, result, note, numbers), proof photos, cheers / doubts / pokes, reports · Purpose: run challenges, let friends verify check-ins, handle reports
• Device — push notification token · Purpose: send notifications
• Screen Time (optional) — not collected. Usage time and the apps you pick never leave your device. Your device only uses them to lock the next morning's "kept it" stamp on a day you went over your limit. We only store whether Screen Time is linked · Purpose: help verify Limit pacts

We do not collect your email address, phone number, location, contacts, or payment card details. Subscriptions are processed by Apple; we never receive payment information.

2. How long we keep it

• When you delete your account (app > Me > Delete account), we delete your account, profile, pact participation, proof photos and stamp images without delay.
• Pacts you shared with other friends continue for the remaining members after your records are removed.
• Where the law requires us to keep something, we keep it only for the required period.

3. Sharing with third parties

We do not provide your personal information to third parties. Within the Service, members of the same pact can see each other's nickname, profile, stamps, check-ins and proof photos.

4. Service providers and international transfer

• Supabase, Inc. — database and file storage, sign-in, notification server · Servers in Seoul, South Korea (AWS ap-northeast-2), operated by a US company; transferred over the network while you use the Service
• Apple Inc. — Sign in with Apple, push notifications (APNs), in-app subscriptions · United States; transferred over the network while you use the Service

5. Deletion

When the retention period ends or the purpose is fulfilled, we delete the information without delay. Electronic files are deleted in a way that cannot be recovered.