Mallangi Privacy Policy

Effective date: October 31, 2026

RADIANS Co., Ltd. (주식회사 래디언스, “we”, “us” or the “Company”) explains below how personal data is handled in the Mallangi app, its official information and support pages, and email support.

1. Controller and privacy contact

Controller: RADIANS Co., Ltd. / 주식회사 래디언스

Address: B-1607, 323 Incheon tower-daero, Yeonsu-gu, Incheon, Republic of Korea

Privacy and complaints contact: CS Team · cs@radians.kr

Support and privacy inquiries are handled by email; telephone support is not provided.

2. Information stored on your device

The initial release has no account registration, advertising SDKs, user-behaviour analytics SDKs or feature that sends game information to our servers. It does not request access to location, contacts, camera or microphone.

Stage progress, stars, high scores, cosmetic selections, language, music, sound effects, vibration, reduced-motion settings and intro history are stored on your device to run the game and retain your preferences. We do not collect or remotely inspect this saved data through the app.

The app does not provide cross-device synchronisation. Operating-system backups, store payments and purchase records, and diagnostic processing may occur separately under your settings and the policies of the relevant providers, such as Apple or Google.

3. Email support: information and purposes

When you email us, we process your sender address, display name if included, message, correspondence dates and files you choose to attach. This may include the device model, operating-system and app versions, reproduction steps or purchase-verification information you provide. We do not request material beyond what is necessary.

We use this information to answer questions, investigate faults, handle or route purchase inquiries, and address disputes. Messages are received and stored using Google Workspace. We do not use support correspondence for advertising targeting or marketing messages.

Processing relies on the grounds available under applicable law, such as providing requested support or performing contractual duties and meeting legal obligations. Where separate consent is necessary, we explain the processing and obtain it first. You can play offline without contacting us, although we may be unable to resolve an inquiry without the information needed to answer it.

4. Visits to the official website

Mallangi’s information and support pages use Framer. Information processing needed to deliver and secure the website is separate from local game storage.

Support is provided only through an email link to cs@radians.kr; the website has no inquiry form. We do not use Framer to collect or store inquiry messages or attachments sent through your own email service. Email support data is handled under sections 3, 5 and 6.

Actual website access data, analytics tools and cookies: We have not added external analytics scripts, advertising pixels or inquiry forms to the website. The Mallangi information and support pages do not embed third-party videos. RADIANS portfolio pages embed Vimeo and YouTube (privacy-enhanced mode) videos; opening those pages connects your browser to those services, whose own policies apply. Framer may process access data to deliver the web pages. The website’s fonts are served by Google Fonts, so when you open a page your browser connects to Google’s font servers, and connection information such as your IP address may reach Google. Google’s policies apply to that processing. Framer built-in analytics: The website uses Framer’s built-in analytics to view statistics such as visitor counts, page views and traffic sources. According to Framer, this feature does not use cookies, produces aggregate counts by hashing IP addresses and browser information with a value that changes daily, and does not store information that identifies a person. Your language choice is stored only in your browser and is not sent to us.

Website operational-data retention: information processed to operate the website is processed for the duration of our agreement with Framer and is deleted under Framer’s data processing agreement when that agreement ends. The maximum six-month period for ordinary inquiries in section 5 applies to email support records, not to website operational data.

You can delete or block cookies in your browser. If non-essential tracking technologies are used, we provide the information, choices and consent mechanisms required by applicable law. This policy does not claim that the website processes no personal data.

5. Retention and legally required records

Ordinary support inquiries are retained for up to six months after resolution, only to the extent necessary to respond to repeat inquiries about the same issue and provide follow-up support. Once those purposes have been fulfilled and retention is no longer necessary, we delete the records without delay, even if six months have not elapsed. Open inquiries are retained for the period needed to resolve them. Records subject to the statutory retention duties described below are retained separately for the applicable periods.

Where the Company is legally responsible for keeping the relevant records under Korean electronic-commerce law and Article 6 of its Enforcement Decree, consumer complaint and dispute records are retained for three years, and contract/withdrawal records and payment/supply records for five years each. This applies only to relevant records we actually process and hold. Legally retained records are separated from ordinary inquiries and used for the required purpose.

If another law or lawful preservation order applies, we distinguish its basis, the affected records and the required period. We do not keep all correspondence indefinitely merely because it may be useful later.

6. Deletion and local game data

When the retention period expires or the processing purposes have been fulfilled and the records are no longer necessary, electronic correspondence and attachments are deleted without delay from Company-managed mailboxes and separate working copies, except for records subject to statutory retention. Paper copies, if any, are shredded or otherwise securely destroyed. Provider backup and recovery copies are removed according to their applicable deletion schedules.

We do not currently apply separate Google Vault retention to the support mailbox. Under the ordinary Google Workspace deletion process, messages remain in Trash for 30 days; after that period, administrators have a further 25 days to restore them. These are recovery windows for the ordinary deletion path, not a claim that every system copy is erased immediately.

If we create separate working copies of support messages or attachments, the purposes and retention limits in section 5 also apply to those copies, and records due for deletion are deleted from them as well.

Local game records can be removed using your operating system’s app-data deletion function or by deleting the app. Offloading an app may differ from deleting it completely. Manage operating-system backup copies separately in your backup settings. We cannot directly delete data held only on your device.

7. Service providers and other disclosures

Google Workspace handles email delivery, storage and related security for support. Contracting processor entity: Google Asia Pacific Pte. Ltd.. The data consists of support emails and attachments, processed for the purposes in section 3.

Framer B.V. provides hosting, content delivery and related website operations. Data categories and retention are described in sections 4 and 8. We manage the scope of outsourced processing and protection duties under the applicable contracts.

We do not sell personal data or share it for advertising. Disclosures to third parties acting for their own purposes, rather than as our service providers, require an applicable legal basis and any legally required notice or consent. Disclosures responding to lawful requests are limited to what is necessary.

8. International processing and choices

Google Workspace and Framer may store or process personal data outside the Republic of Korea. Using these services does not guarantee domestic storage. Details reflecting our actual agreements and settings are set out below.

Google Workspace: The recipients are Google Asia Pacific Pte. Ltd. and its subprocessors; contact: https://support.google.com/a/contact/googlecloud_dpr. We have not designated a storage region, so data may be processed in countries where Google or its subprocessors maintain facilities. Support emails and attachments are transferred over the network when sent or received, and the retention periods in sections 5 and 6 apply. This transfer is outsourced processing and storage for providing customer support, and the safeguards in Google’s data processing addendum apply.

Framer: The recipients are Framer B.V. (Netherlands) and its subprocessors; contact: legal@framer.com. The processing countries published by Framer include the United States, the Netherlands, the United Kingdom and Spain, and the full list is available in the Framer Trust Center. Data is transferred over the network when you access the website, and the retention period in section 4 applies. This transfer is outsourced processing and storage for providing the website, and safeguards under Framer’s data processing agreement apply, such as the EU-US Data Privacy Framework or standard contractual clauses.

Contact the CS Team with questions or to exercise applicable rights, including withdrawal of consent or a request to stop processing. Stopping the relevant processing may limit email support or website delivery. Offline play in the installed app does not require an account or a support email.

9. Your rights and representatives

Depending on applicable law, you may request access or a copy, correction, deletion, restriction, withdrawal of consent, and where applicable portability or objection to processing. You or an authorised representative may contact the CS Team by email. We respond within the applicable legal time limits and may request only the additional information necessary to verify authority.

If we cannot fully comply, for example because of a legal retention duty, we explain the reason and available steps. We cannot provide a copy of game data stored only on your device and never received by us. You may also seek help from the competent data-protection authority or dispute-resolution body, including the Korean Personal Information Protection Commission.

10. Children’s privacy

The app can be played offline without an account or date-of-birth entry. Game features do not collect children’s personal data into our servers. A parent or guardian should preferably contact us about a child’s support issue.

Where applicable law requires parental or guardian consent, including relevant processing of data from children under 14 in Korea, we apply the necessary consent and verification procedures. If we learn that data was collected without required consent, we take steps such as deletion in accordance with law. Guardians may contact the CS Team to exercise rights.

11. Security measures

We limit access to support information to personnel who need it for their work and operate safeguards proportionate to the risks, including account authentication and access management, protection during transmission, retention and deletion procedures, and staff guidance. We also review provider security and contractual safeguards. We address personal-data incidents and make notifications or reports required by applicable law.

12. Policy changes

When material details such as purposes, data categories, retention or providers change, we update this page’s effective date and change information and give any required advance notice. We obtain separate consent where new processing requires it. Future optional theme purchases or other data-processing features will be reflected in this policy and store privacy disclosures according to their actual implementation.