goyo

GardenFuse Privacy Policy

Effective 2026-10-17

Revision notice: posted 2026-10-10, effective 2026-10-17. This revision covers the paid Google Play and App Store editions (version 1.1.0 and later) and marks what applies only to earlier free versions.

GardenFuse Terms of Service

ServiceGardenFuse
OperatorGoyo
PlatformsGoogle Play · ONE store · App Store
How you are identifiedNone in the paid Google Play and App Store editions; earlier free editions used an installation identifier or optional Apple sign-in
AdvertisingPaid Google Play and App Store editions and ONE store: no ads / Earlier free editions: Google Mobile Ads
In-app purchasethe Unlimited Pass and gems, in earlier free editions only
Developer serverKeeps records of earlier free editions only; not used by the paid editions
Device storageUses local app data storage

1. Information we process

The paid Google Play and App Store editions of GardenFuse (App Store version 1.1.0 and later) have no sign-in, no ads, no in-app purchases, and no server sync, and send no personal information off your device. Your game records are stored only on your device. The ONE store edition likewise does not use a developer server account. Earlier free editions (the free Google Play app and App Store versions before 1.1.0) linked progress and gems on our server using a random installation identifier on Google Play, or Apple sign-in if you chose it in Settings on App Store. Those earlier free editions also include ads, whose processing is described below.

Platform identity information (earlier free editions)The earlier free Google Play edition used a random installation identifier included in Android backup, and App Store versions before 1.1.0 used Apple's stable user identifier if you chose Apple sign-in. Only HMAC-transformed values were stored on the server. The paid editions use no identifier.
Game progress recordsFor earlier free editions that used the server, we keep the completed gardens, stars, best scores, discovered flowers, and unlock records already stored. The board of a game in progress was never stored, and the paid editions send nothing to the server.
Virtual goods recordsGem balances and gem credits and debits stored for earlier free-edition Google Play installations and App Store accounts connected through Apple sign-in.
Payment processing recordsFor purchases made in earlier free editions we store the platform transaction identifier, product, purchase time, and the verification, grant, or cancellation status. We do not store payment method details.
Session informationFor earlier free editions, a hash of a random session value and its expiry time, and on App Store the Apple refresh token, stored encrypted on the server.

2. Information stored on your device

Your board in progress, garden progress, star records, best scores, seeds, gems, settings, and recent play events are stored in the app's storage on your device. In the paid Google Play and App Store editions and the ONE store edition, all game records are processed only on your device and are never sent to our server, so they can be lost if you delete the app, reset its data, or change devices, unless your device's own backup restores them. Records that earlier free editions stored on our server are kept until you ask us to delete them. To delete an earlier Android or iOS account and its server data, email support@sleite.com. We then delete the linked records except payment records we must keep by law.

3. Outbound transfers and device permissions

The paid Google Play and App Store editions do not communicate with our server or with any advertising, analytics, or error-reporting service; the only exception is a web page you open yourself, such as this policy. Our game server is used only to link records of earlier free editions, verify their purchases, prevent duplicate grants, and delete accounts. We use no separate analytics SDK and no error-reporting SDK.

We do not request permissions that access sensitive information such as contacts, photos, camera, or microphone. On supported devices the app may use vibration for touch feedback when flowers merge; this does not read or transmit personal information.

4. Platform notes

App StoreGardenFuse runs as an iOS app. Information Apple processes while distributing, updating, backing up, and securing the app is governed by Apple's own policies.
Google PlayGardenFuse runs as an Android app. Information Google processes while distributing, updating, backing up, and securing the app is governed by Google's own policies.

5. Advertising

The paid Google Play and App Store editions (App Store version 1.1.0 and later) and the ONE store edition include no ad SDK or ad features. Earlier free editions (the free Google Play app and App Store versions before 1.1.0) use banner, rewarded, and interstitial ads from Google Mobile Ads. In those editions, to serve ads, control frequency, measure performance, diagnose errors, and prevent abuse, an approximate location estimated from your IP address, device and app environment information, device identifiers, ad request, impression, and interaction data, and crash, diagnostic, and performance data may be processed by Google and its advertising partners. Where required, Google's privacy options screen is provided. Those editions do not request personalised ads, and the App Store code does not request App Tracking Transparency permission or read the IDFA directly.

6. In-app purchases

The paid Google Play and App Store editions are bought once from the store and sell nothing inside the app, and the ONE store edition has no in-app purchases. In earlier free editions, the Unlimited Pass and gems were bought through Google Play or App Store payments, which are governed by those platforms' policies. For those purchases we store the platform transaction identifier (on Google Play, a one-way hash of the purchase token verified with the Google Play Developer API), product, purchase time, and grant result on our server to prevent duplicate grants.

7. How long we keep information

Platform identity informationUntil you stop using the service and ask us to delete it
Payment history5 years (Korean Act on Consumer Protection in Electronic Commerce)
Consumer complaint and dispute records3 years (the same Act)
Access logs3 months (Korean Protection of Communications Secrets Act)

We are a business registered in the Republic of Korea, so Korean law sets these retention periods. Information that a law requires us to keep is stored separately for that period and then deleted beyond recovery.

8. Sharing and processors

We share personal information with a third party only with your consent or where the law provides a basis. If an investigative authority makes a lawful request under Korean law, we may provide information within the scope of that request.

Amazon Web Services, Inc.Server and database infrastructure for records of earlier free editions
Google LLCAdvertising delivery and measurement in earlier free editions

9. Your rights and deletion

You can ask to see, correct, or delete your information, or to stop us processing it. Send your request to the contact address below and we will act on it and reply within 10 days.

You can also delete the server account yourself from the app's Settings screen at any time. Information that a law requires us to keep is stored separately for that period and then deleted.

10. Security measures

Traffic to our server is protected with HTTPS. Database credentials and signing keys are kept only in the server's secret store, never in source code. Access to information is limited to the minimum needed to operate the service.

11. Where your information is processed

The advertising and platform providers named in this policy operate in multiple countries. When ads are served, the ad-related information described above is processed by Google LLC in the United States and in other countries where Google operates. Information processed by Apple or Google for app distribution and payment is handled under their own policies.

Our own server, which stores the records described above, is hosted by Amazon Web Services in Seoul, Republic of Korea.

Where the law of your country requires notice, consent, or safeguards for this kind of cross-border processing, we follow it.

12. For users in the EEA, the UK, and Switzerland

Where the GDPR or equivalent law applies, we process personal information on these legal bases: your consent (for ad-related storage or identifiers where consent is required — Google's privacy options screen collects it); performance of a contract (providing the Service you request); our legitimate interests (keeping the Service secure, preventing fraud and abuse, and keeping it stable); and compliance with a legal obligation.

In addition to the rights above, you can ask us to restrict processing, object to processing based on legitimate interests, and receive a copy of information you provided in a portable format. Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before the withdrawal.

You can also lodge a complaint with the data protection supervisory authority of your country.

13. For users in Japan

Where the Act on the Protection of Personal Information (APPI) applies, we use personal information within the purposes stated in this policy. You can ask us to disclose, correct, stop using, or delete the personal information we hold about you through the contact below. Where personal information is provided to a third party or handled outside Japan, we follow the notice, consent, and safeguard requirements of the APPI.

14. Contact

Send questions about how we handle personal information, and any request to exercise your rights, to support@sleite.com.

15. Changes to this policy

If what we process changes, we revise this policy and show its effective date before releasing that update. We give notice from 7 days before the date it applies, and from 30 days before for an important change that is unfavourable to you.

16. Operator

OperatorGoyo
Business registration number297-29-01996
Contactsupport@sleite.com
GardenFuse · Effective 2026-10-17