Key points: Before your first AI interrogation question, we ask for your consent. Questions go through our servers to the Anthropic API, and successful questions and answers are saved until you delete your account. Please don’t include information that could identify you in your questions.
This version applies from October 21, 2026. Until then, the Korean version revised on September 15, 2026 applies.
01Who we are and what this policy covers
OLA Project (Representative Eunbi Ko) operates Pixel Detective: Case Files and is responsible for the personal information processed in this service. This policy applies to the iOS and Android apps and to the customer support and account deletion requests linked from the app.
- Service: Pixel Detective: Case Files
- Operator: OLA Project (Representative Eunbi Ko)
- Privacy officer: Eunbi Ko
- Contact: pixeldetective.app@gmail.com
- Based in: Republic of Korea
The service is for people aged 14 and older. See “Users under 14” below for details.
02Information we process
We process the following information only as needed to run the service.
| Category | What we process | Why |
|---|---|---|
| Account and sign-in | User ID, sign-in type, session information, social provider ID, and, if the provider shares them, your email address and name or profile name | Guest, Google, and Apple sign-in, keeping you signed in, account linking, and security |
| Apple authorization | An AES-GCM-encrypted copy of the refresh token issued by Apple for revoking access | Revoking Apple authorization when you delete your account |
| Profile | Nickname, public detective ID, and account creation time | Showing your profile in the game and identifying your account for support |
| Game progress | Case progress, places visited, clues and belongings collected, deduction submissions, whether a case is solved and its grade, XP, inventory, mini-game progress, and save times | Saving and restoring your progress, unlocking cases, preventing duplicate rewards and abuse, and aggregate statistics for balancing and improving features |
| AI interrogation | Successful questions and answers, case, suspect, and request IDs, number of questions used, and the model, token counts, processing time, cost, and success status | Generating answers, checking question limits, quality and safety reviews, and cost control |
| AI interrogation consent | The version of the notice you agreed to, the app language at the time, and when you agreed | Confirming we asked for your consent before sending questions to an outside AI (Anthropic) |
| AI answer reports | Report type and description, a copy of the reported question and answer, case and suspect IDs, and handling status | Investigating inappropriate or incorrect answers and improving safety |
| Purchase records | Product ID, store transaction ID, purchase and refund status and times, and the payment platform (App Store or Google Play) | Granting, restoring, and revoking purchased access, applying refunds, and answering support requests |
| Security and operations | Request times and app request information, error codes, a value derived from your IP address that can’t be turned back into it, and usage and budget records | Rate limiting, detecting abnormal use, and handling outages |
| Age check | In places where the law requires it (such as Texas in the United States), whether the law applies and your age range (for example, under 13 or 13–15), as provided by the app store (Apple) | Checking the minimum age. Used only for the check and not stored |
| Customer support | Your reply email address, the content of your request and any attachments, and how it was handled | Handling questions, disputes, and account deletion requests, and confirming your identity |
Sound, music, haptics, and app language settings are kept only on your device, separate from your account. Sound, music, and haptics settings are never sent to our servers. Your language setting is sent with requests only to choose case content in the right language, and it isn’t stored with your account. The only exception is your AI interrogation consent record, which notes the app language when you agreed so we know which version of the notice you saw.
Google or Apple handles social sign-in passwords; we never collect or see them. In-app purchases are processed by the app stores, so we don’t collect card numbers or other payment details. Please don’t enter sensitive information such as government ID numbers, financial or health information, passwords, or verification codes in AI questions or support requests.
Information we receive from others
- Google or Apple: sign-in IDs, and your email address and name if you choose to share them
- App Store, Google Play, and RevenueCat: purchase, restore, and refund status
- Apple: your age range, only in places where the law requires an age check
03How we collect information and our legal basis
We collect information when you:
- Create a guest account or sign in with Google or Apple
- Set a nickname, investigate and solve cases, or use AI interrogation
- Agree in the consent window before sending your first AI question
- Open the app in a place where the law requires an age check and the app store provides your age range
- Buy or restore a paid product, or when a refund is applied
- Report an AI answer or email us for support or deletion
- Use the service and our servers log requests for security, cost control, and error handling
We process information to provide the service you signed up for, based on consent you give (such as AI interrogation consent), to meet our legal obligations, and to keep the service safe. Statistics for balancing and improving features are produced only in aggregate form that doesn’t identify individuals.
04Cookies, advertising IDs, and tracking
The app doesn’t use cookies and doesn’t collect or use advertising identifiers (Android Advertising ID or Apple’s IDFA). We haven’t added ad networks, standalone analytics tools, or third-party trackers to the app, and we don’t track your activity in other apps or on other websites.
The Google sign-in process and the Google Sign-In SDK included in the app may, according to Google’s published privacy manifest, process your name, email address, phone number, other data types, approximate location, user and device identifiers, and other usage data for sign-in and service analytics. This isn’t used for ad tracking, and the app doesn’t ask for location permission or advertising identifiers.
We don’t process personal information for targeted advertising. If we ever add advertising or analytics tools, we’ll update this policy and let you know in the app or on this site before we do, and we’ll ask for consent where the law requires it.
05How AI interrogation works
When you ask a suspect a question, your question and the conversation context needed for the answer go through our servers to the Anthropic API, and the answer comes back the same way. Before sending, our servers check your access to the case and how many questions you have left.
Before you send your first question, the app explains this and asks for your consent. Your question is sent only after you tap [Agree and Send Question]. If you don’t agree, you can’t use AI interrogation, but everything else works as usual. We keep a record of the version of the notice you agreed to and when, and we’ll ask again if the notice changes significantly.
We send the Anthropic API only your question, the case setup, and the conversation context it needs. We don’t send your email or nickname because they aren’t needed to create answers, but anything you type into a question is sent along with it.
We save successful questions and answers separately from usage records so you can pick up the conversation on the same account, and so we can check for spoiler leaks or inappropriate answers. We don’t store the text of failed requests. Only your account and the minimum number of people needed to run the service can access saved conversations.
AI answers are generated automatically and may be inaccurate or out of context. Please report problematic answers with the in-app report button, and don’t include information that could identify you in your questions.
06How long we keep information
We keep your account, profile, game progress, XP, operations records, and report data while your account exists, and delete them when your account is deleted, except where the law requires us to keep something or we need it to handle a dispute. Guest accounts follow the same rules.
- Account and game data, saved AI questions and answers, and report records: until your account is deleted
- Encrypted Apple refresh token: until your account is deleted. It’s used to revoke Apple authorization when you delete your account and is then deleted with your account
- AI usage records: until your account is deleted. They don’t include the text of questions or answers
- AI interrogation consent records: until your account is deleted
- Age check information: not stored. It’s discarded right after the check
- Server logs: the platform’s default retention period. They don’t contain question or answer text or case prompts
- Purchase and refund records: even after account deletion, we keep records of payments and delivery of goods, and of contracts and order cancellations, for 5 years, and records of consumer complaints and disputes for 3 years, separately from other data, as required by Korea’s Act on the Consumer Protection in Electronic Commerce, and then delete them
- Support emails: until your request has been handled or you ask us to delete them. Records of purchase-related complaints and disputes are kept separately for 3 years as described above
- Device settings: until you delete the app or clear its storage
Under Anthropic’s standard API policy, API inputs and outputs are deleted from Anthropic’s systems within 30 days of being received or generated. If they’re flagged for a usage policy violation, inputs and outputs may be kept for up to 2 years, and the period may also differ where the law requires. Anthropic doesn’t use customer content received through its commercial API to train its models. For the latest details, see Anthropic’s API retention article.
We delete electronic files so they’re hard to recover, along with the records linked to your account ID. Any copies left in backups are removed on the backup rotation schedule while access to them is restricted.
07Service providers
We use the following outside providers to run the service.
| Provider | What they do | Information involved |
|---|---|---|
| Supabase, Inc. | Authentication, database, file storage, and running server functions | Account, profile, game progress, saved AI conversations, reports, and operations data |
| Anthropic, PBC | Generating AI interrogation answers | Questions, the conversation and case context needed, and the generated answers |
| Google LLC | Google sign-in, customer support through Gmail, and Google Play in-app payments | Sign-in identifiers, the email you provide, the content of your request, and payment processing information (we don’t receive payment details) |
| Apple Inc. | Sign in with Apple and authorization management, App Store in-app payments, and age range information in places where the law requires it | Apple user ID, your email if provided, the refresh token used to revoke access, payment processing information (we don’t receive payment details), and age range information (not stored by the app) |
| RevenueCat, Inc. | Verifying in-app purchases and managing purchase status | App user ID (your Pixel Detective account UUID), product ID, store transaction information, and purchase and refund status |
| Plus Five Five, Inc. (Resend) | Sending operator alert emails | Operator email, report and request IDs, case and suspect IDs, report categories, and AI budget information (no question or answer text, and no user emails) |
Each provider processes information under its own privacy policy and our agreement with it. We’ll update this policy if our setup changes.
08Where your information is processed
Your account, profile, game progress, and saved AI conversations are stored in a database in the Seoul region of the Republic of Korea (ap-northeast-2). However, the providers above have headquarters and some processing facilities outside Korea and may access information from abroad for operations and technical support, and some information, such as AI interrogation questions, is actually sent abroad. Authorities in those countries may be able to access information there under their laws.
| Recipient and country | Information and purpose | When, how, and how long | Privacy contact |
|---|---|---|---|
| Supabase, Inc. · stored in Korea (Seoul), accessed from the United States (headquarters) and countries of its published subprocessors | Authentication, storage, and processing of accounts, game progress, saved AI conversations, and reports | Sent over encrypted connections while you use the service, kept until your account is deleted | privacy@supabase.com |
| Anthropic, PBC · United States and countries of its published subprocessors | AI processing of questions, conversation and case context, and generated answers | Sent over encrypted connections when you ask a question, deleted within 30 days under the standard API policy | Anthropic Privacy Center |
| Google LLC · United States and other regions where it processes data | Google sign-in identifiers and support requests, and payment processing of Google Play product IDs, transactions, restores, refund status, and a hashed app user ID (obfuscatedExternalAccountId) | Sent over encrypted connections when you sign in, contact us, buy, restore, or get a refund, kept as required for each purpose, by law, and by Google’s policies | Google Privacy Policy contact options |
| Apple Inc. · United States and other regions where it processes data | Apple sign-in identifiers, authorization and revocation information, and payment processing of App Store product IDs, transactions, restores, refund status, and your app user UUID (appAccountToken) | Sent over encrypted connections when you sign in, link accounts, delete your account, buy, restore, or get a refund, kept as required for each purpose, by law, and by Apple’s policies | Apple privacy contact |
| RevenueCat, Inc. · United States | App user ID and store transaction information for verifying purchases and managing access | Sent over encrypted connections when you buy, restore, or get a refund, kept while our RevenueCat agreement is in effect | compliance@revenuecat.com |
| Plus Five Five, Inc. (Resend) · United States | Operator alert emails containing the operator email, report and request IDs, case and suspect IDs, report categories, and AI budget information | Sent over encrypted connections when an alert is triggered, processed while our Resend agreement is in effect and deleted within 90 days after the Resend account is closed (legal exceptions may apply) | support@resend.com |
How to refuse optional transfers, and what happens if you do
If you sign in as a guest, no sign-in information goes to Google or Apple. If you don’t use AI interrogation or submit AI answer reports, no question or alert information goes to Anthropic or Resend. If you don’t buy paid products, no transaction information goes to RevenueCat. So you can refuse these optional transfers by not using social sign-in, AI interrogation, AI reports, or paid purchases. You just won’t be able to use those features; everything else works as usual.
Storing your account and game records is necessary to provide the service, so it can’t be refused while you use the service. If you don’t want this processing, you can stop using the service and delete your account as described in Delete Your Account and Data.
Our database is in the Seoul region of the Republic of Korea (ap-northeast-2), and subprocessors published by Supabase may take part in security, support, and network services. See the latest list in Supabase’s subprocessor list.
09How we protect information
We apply the following measures according to the risks of the information we handle.
- Encryption in transit and session-token-based authentication
- Database access control (Row Level Security) and the principle of least privilege
- XP, case solving, and access to the next case decided on our servers
- Keeping admin secret keys and AI API keys out of the app
- Question limits per account, case, and suspect, hourly limits, and cost limits
- Admin-only access to report records and operations data
- Identity checks for deletion requests, deletion of accounts and linked data, and clearing the app’s sign-in state
10Your rights and how to use them
You can ask to access, correct, or delete your personal information, ask us to stop processing it, and withdraw consent. You can change your nickname or delete your account in the app’s Profile tab, or email us if you can’t sign in.
- Email your request to pixeldetective.app@gmail.com.
- We’ll confirm your identity as needed so no one else’s account is deleted.
- We’ll handle your request within the time required by law and tell you the result or any reason we can’t.
To withdraw your AI interrogation consent, simply stop using AI interrogation. No more questions will be sent after that, and you can have your saved questions, answers, and consent record deleted by deleting your account or emailing us.
You can find the in-app deletion steps and how to request deletion by email in Delete Your Account and Data.
Requests to access your information
Send requests to access your information to the contact below, and the operator will handle them directly. Users in Korea can also make requests through the Korean government’s privacy portal.
- Handled by: Privacy officer Eunbi Ko
- Email: pixeldetective.app@gmail.com
Help from Korean authorities
If you need advice or help with a privacy issue, you can contact the following Korean bodies. If you disagree with how we handled your request, you can also file an administrative appeal in Korea.
- Personal Information Dispute Mediation Committee: +82 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 in Korea (privacy.kisa.or.kr)
- Korean National Police Agency cybercrime reporting: 182 in Korea (ecrm.cyber.go.kr)
- Supreme Prosecutors’ Office Cyber Investigation Division: 1301 in Korea (www.spo.go.kr)
If you live outside Korea, see Additional information for users outside Korea below.
11Users under 14
Korea’s Personal Information Protection Act requires consent from a legal guardian to process the personal information of children under 14. Instead of a guardian consent process, this service is for people aged 14 and older. We don’t offer the service to children under 14 or knowingly collect their information.
We don’t ask your age when you sign up. However, in places where the law requires it (such as Texas in the United States), we check the minimum age using the age range the app store (Apple) provides when you open the app, and we restrict use if you’re under 13. This information is used only for the check and isn’t stored.
If we learn that we’ve processed a child under 14’s information without a legal guardian’s consent, we’ll delete the account and information without delay. A parent or guardian can email us to check or request deletion.
12Users outside Korea
If you live outside the Republic of Korea, see Additional information for users outside Korea below. Apart from that section, the Korean and English versions of this policy have the same content.
13Changes to this policy
If we make important changes to what we process, why, which providers we use, or your rights, we’ll let you know in the app or on this site before the changes take effect. We may fix typos or update contact details right away.
Revision history
- October 21, 2026: Added the consent step before your first AI question and consent records, age checks in places where the law requires them, app language settings, Anthropic’s retention details, and information for users outside Korea, and published this English version.
- September 15, 2026: Added purchase records, RevenueCat as a provider and overseas recipient, the legal retention periods for purchase and refund records, and privacy contacts for overseas recipients.
- August 22, 2026: Added details on social sign-in data, the Google Sign-In SDK, Resend as a provider and overseas processor, and account deletion.
- August 3, 2026: This privacy policy first took effect.
14Additional information for users outside Korea
United States (including California)
- We don’t sell your personal information or share it for targeted advertising, and we don’t track you across other companies’ apps or websites. Because of this, we don’t handle your information differently when your browser or device sends a “Do Not Track” signal.
- The categories of personal information we collect and the types of third parties we share it with are listed in “Information we process” and “Service providers.” You can review or ask us to correct your information as described in “Your rights and how to use them,” and we’ll tell you about material changes as described in “Changes to this policy.”
- The service isn’t directed to children under 13. If we learn that we’ve collected personal information from a child under 13, we’ll delete it.
- In states that require it (such as Texas), we use the age range provided by the app store only to apply age restrictions and comply with the law, and we don’t keep it or share it with anyone.
- Depending on your state, you may have additional privacy rights. Contact us to use them.
Australia
You can contact us at pixeldetective.app@gmail.com with any privacy question or complaint, and we’ll respond as soon as we can. You may also contact the privacy regulator where you live.
All other countries
Wherever you live, you can contact us to use your rights, and you may also contact the data protection authority in your country.