Ramen Tycoon ("the game") is operated by JoCoding, Inc. ("we", "us"), the data controller for the data described here. Contact: bill@jocoding.net. Privacy officer (Korea, Personal Information Protection Act): Privacy team, JoCoding, Inc., bill@jocoding.net.
| Data | Where it is kept | Why | Kept for |
|---|---|---|---|
| Game progress (your save file) | On your phone. If backup runs: our server (Supabase) | To run the game; to let you restore or move your shop | On the phone until you uninstall. On the server until you delete it in the app, or 400 days after the last backup. Only the latest 2 versions are kept. |
| Backup identifiers: random save ID, the hash of a secret key held by your phone, the hash of your restore code, backup time and size | Our server (Supabase) | To find and protect your backup. We store only hashes of the secret and the code, never the secret or code themselves. | Same as the backup |
| Purchase records: store transaction ID, product, time, store, test/real environment, the save ID used as app user ID, and for consumables the gems or coupons granted and any refund flag | RevenueCat; our server (ledger) | To deliver and restore what you bought, to handle refunds, to keep accounts | For the period the law requires: 5 years (Korean Act on Consumer Protection in Electronic Commerce, records of payment and supply) |
| Anonymous usage and crash events: random install ID, event names with game counters, app version, device and OS type, language, error messages and stack traces for crashes. No IP address is stored, no advertising ID, no person profile. | PostHog, US cloud | To fix crashes and balance the game | Up to 1 year, then deleted |
| Advertising data (only after the age question, for players over the age limit): device and ad interaction information handled by Google AdMob | To show optional rewarded ads and pay for the game | As set out in Google's policies | |
| Birth year and region | Only on your phone | To switch off ads, analytics and unlimited spending for younger players | Until you uninstall |
| Abuse-protection counters: a hashed network address combined with the current hour (never the raw address) | Our server | To limit repeated wrong restore-code attempts | Short-lived counters |
| Emails you send us, including save ID and app version if you use the in-app Support link | Our mailbox | To answer you | Up to 3 years after the inquiry is closed (same Act, consumer complaint records) |
Our backend hosting provider may also keep standard technical request logs (which can include network addresses) for a limited time under its own policy.
Notifications are scheduled on your phone. They do not use a push token and nothing about them is sent to a server.
Before you answer the age question the game already sends anonymous usage events under the random install ID, because the question is asked only before the first ad or first purchase. Once you answer and are under the age limit of your region, analytics and crash reporting stop for good.
| Recipient | Role | Data | Location |
|---|---|---|---|
| Apple (App Store) | Takes payment, issues receipts | Purchase data under Apple's policy | United States |
| Google (Google Play, Google AdMob) | Takes payment; serves ads | Purchase data; advertising data | United States and other countries where Google operates |
| RevenueCat, Inc. | Purchase and entitlement service | Receipts, product, time, app user ID (the save ID) | United States |
| PostHog (US cloud) | Anonymous analytics and crash reports | Random install ID, events, crash data | United States (us.i.posthog.com) |
| Supabase | Hosts our backup database and backend functions | Backup, ledger | Republic of Korea (Seoul) |
We do not sell personal data. We do not use your data for advertising profiles or share it with data brokers.
Some recipients are in other countries, including the United States. Where the law requires it, transfers rely on safeguards such as standard contractual clauses or an equivalent mechanism: for Korean users, the overseas transfer is necessary to perform the contract and is disclosed in this policy (PIPA Art. 28-8(1)); for EEA/UK users, the providers' Standard Contractual Clauses or adequacy decisions. For Korean users this section also serves as notice of overseas transfer: the recipients, countries, items, purposes and retention periods are those in the tables above.
The game asks your birth year once, before your first ad or first purchase, and stores the answer on your phone only. The age limits are 14 in Korea, 16 in the EEA, the UK and Switzerland, and 13 everywhere else. The game assumes the lowest possible age that fits your birth year. For players under the limit:
Players under 18 also get the monthly spending limit on by default. The age question is not identity verification. We do not knowingly ask children for names, emails or contact details. A parent or guardian who believes a child's data should be deleted can use the steps in section 9.
Data travels over HTTPS. Backup secrets and restore codes are stored only as hashes. Access to the backup database is limited to our backend functions. No system is perfectly secure; keep your restore code private.
These pages use no cookies, no trackers and no external fonts.
If we change this policy we will update this page and the effective date, and for material changes we will say so in the app. Change log: 1.0, 2026-10-24, first version.