Privacy Policy

Last updated: May 30, 2026 · Effective date: May 30, 2026

KAIROSS ("we," "us," or "the Company") is committed to protecting the privacy of users of the GabpaWang mobile application (the "Service"). This Privacy Policy explains what information we collect, how we use and share it, and the rights you have over your data.

1. Information We Collect

GabpaWang does not require account creation or login. We do not collect names, email addresses, phone numbers, or other directly identifying personal information.

The following information is processed as part of normal app operation:

• Workout records: push-up counts, workout mode, duration, date, cumulative statistics, and character progression stage.
• App settings: dark mode, voice count, background music, and language preferences.
• Camera frames: used solely for pose detection. Camera frames are processed entirely on-device and are never transmitted to or stored on any server.
• Anonymous authentication identifier: an automatically generated anonymous user ID used for syncing workout records. This ID does not personally identify you.
• Advertising Identifier (Ad ID): automatically collected by Google AdMob to serve personalized ads and measure ad performance.
• Purchase token: issued by Google Play Billing solely to verify in-app purchases.
• Diagnostic data: device model, OS version, app version, and crash logs for stability and bug diagnosis.

2. Purposes of Processing

• Provide push-up counting and pose recognition functionality
• Save workout records and sync them across user devices
• Operate gamification features such as character progression and stage levels
• Deliver personalized ads and measure ad performance (via Google AdMob)
• Process in-app purchases such as ad removal (via Google Play Billing)
• Improve service stability and diagnose errors
• Comply with legal obligations

3. Advertising and the Advertising Identifier

GabpaWang serves advertisements through Google AdMob. For this purpose, your device's Advertising Identifier (Ad ID) is used in the following ways:

• Delivering personalized advertisements based on inferred interests
• Measuring ad impressions and clicks, and preventing ad fraud

You can reset your Ad ID or opt out of personalized advertising at any time through your device settings:

• Android: Settings → Google → Ads → Delete advertising ID

Purchasing the Remove Ads in-app product permanently disables all advertisements within the app.

4. Data Retention

We retain workout records and service data until you uninstall the app or request data deletion. You may delete your data at any time using the following methods:

• Uninstall the app to immediately delete all local data stored on the device
• Send a request to the email address below to delete server-synced data without undue delay

Where required by law, we retain certain records for the period specified by the applicable statute. For Korean users this includes:

• Consumer complaint and dispute records (Act on Consumer Protection in E-Commerce): 3 years
• Records of payment and supply of goods (Act on Consumer Protection in E-Commerce): 5 years

5. Service Providers and Data Processors

We do not sell your personal information. We rely on the following third-party service providers to operate the Service. Each provider acts under a data processing agreement and processes data only on our behalf.

Provider	Purpose	Data processed
Supabase Inc.	Workout record storage and sync	Workout records, anonymous ID
Google LLC (AdMob)	Ad serving and performance measurement	Ad ID, device information
Google LLC (Play Billing)	In-app purchase processing	Purchase token, billing data

We may disclose your information to third parties in the following limited circumstances:

• With your prior consent
• To comply with applicable law, legal process, or a lawful request from public authorities

6. International Data Transfers

Some of our processors (Supabase, Google) operate servers located outside your country, including in the United States. By using the Service, you acknowledge that your data (limited to the categories described in Section 1) may be transferred to and processed in jurisdictions where data protection laws may differ from those in your country. Each processor complies with applicable data transfer mechanisms (such as Standard Contractual Clauses for transfers from the European Economic Area).

7. Your Rights

Depending on the jurisdiction in which you reside, you may have the following rights regarding your personal data:

• The right to access the personal data we hold about you
• The right to rectify inaccurate or incomplete data
• The right to erase your data (the "right to be forgotten")
• The right to restrict or object to processing
• The right to data portability
• The right to withdraw consent at any time
• The right to lodge a complaint with a supervisory authority

To exercise these rights, please contact us at the email address below. We will respond without undue delay and at the latest within the period required by applicable law.

7.1 Notice for California Residents (CCPA / CPRA)

We do not sell or share personal information as defined by the California Consumer Privacy Act. California residents have the right to know what personal information we collect, the right to delete that information, the right to correct inaccuracies, and the right to non-discrimination for exercising any of these rights. Submit requests to the contact email below.

7.2 Notice for EEA/UK Residents (GDPR / UK GDPR)

Our legal bases for processing are: (a) performance of a contract for in-app purchases, (b) legitimate interests for app functionality, ad measurement, and security, and (c) consent for personalized advertising where required. You may withdraw consent for advertising at any time by purchasing Remove Ads or by resetting your Advertising Identifier.

8. Security Measures

• Transport-layer encryption (HTTPS/TLS) for all network traffic
• Row-Level Security (RLS) policies that isolate data between users
• Least-privilege access controls
• Camera frames processed exclusively on the device and never transmitted

9. Children's Privacy

The Service is not directed to children under the age of 13 (or 14 in jurisdictions where that is the applicable threshold, such as the Republic of Korea). We do not knowingly collect personal information from children below that age. If we become aware that we have collected such information without verified parental consent, we will delete it promptly.

10. Data Protection Officer / Contact

• Data Protection Officer: Sungmin Kim, CEO of KAIROSS
• Email: koti10105@gmail.com

11. Dispute Resolution

If you believe your privacy rights have been violated, you may file a complaint with the following authorities:

• Korea: Personal Information Dispute Mediation Committee — 1833-6972 (privacy.go.kr)
• Korea: KISA Privacy Infringement Report Center — 118 (privacy.kisa.or.kr)
• EEA: Your national Data Protection Authority
• UK: Information Commissioner's Office (ico.org.uk)

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will announce material changes at least 7 days before the effective date through an in-app notice or on this website. For significant changes, we will provide notice at least 30 days in advance.

← Back to GabpaWang