Novaryx: Aero Runner Privacy Policy
Company: byulzari
Effective Date: May 19, 2026
Last Updated: July 28, 2026
Contact: cjjoung@byulzari.co.kr
This Privacy Policy explains how byulzari (the “Company,” “we,” “us,” or “our”) processes personal information in connection with the mobile game Novaryx: Aero Runner (the “App”). The App currently uses Google AdMob for advertising. This English version is presented first for international users. A Korean version is available by selecting the Korean button above.
Table of Contents
1. Scope and Controller2. Applicable Law3. Information We Collect4. Purposes and Legal Bases5. Google Play Games, Ads, Analytics, Billing, and Future SDKs6. Cookies, Advertising Identifiers, and Behavioral Data7. Sharing, Service Providers, and Third Parties8. International Transfers9. Retention and Deletion10. Security11. Children and Teens12. Your Privacy Rights13. U.S. State Privacy Notice, including CCPA/CPRA14. GDPR/EEA/UK Privacy Notice15. Korea Privacy Notice16. Automated Decision-Making17. Contact18. Changes to this Policy1. Scope and Controller
This Policy applies to the App, its Google Play listing, and user support communications related to the App. The controller or responsible operator is:
| App | Novaryx: Aero Runner |
|---|---|
| Company / Controller | byulzari |
| cjjoung@byulzari.co.kr | |
| Address | Room 919, 33, Gukjegeumyung-ro 6-gil, Yeongdeungpo-gu, Seoul, Republic of Korea (Yeouido-dong) |
| Target Age | 13 years and older |
We do not currently operate our own user account server, database, cloud save server, or independent ranking server for the App.
2. Applicable Law
We aim to operate the App in a manner consistent with applicable privacy and data protection laws, including where applicable:
- Republic of Korea: Personal Information Protection Act (“PIPA”) and related guidance.
- United States: applicable federal and state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”) for California residents, and other U.S. state privacy laws where they apply.
- European Economic Area / United Kingdom: the General Data Protection Regulation (“GDPR”), UK GDPR, and related local data protection laws where they apply.
Some laws apply only when statutory thresholds, user location, business size, revenue, or data-processing activities meet legal requirements. Nothing in this Policy limits rights that users may have under applicable law.
3. Information We Collect
We collect or process only information reasonably necessary to provide, maintain, secure, and improve the App. Certain items below apply only if the relevant feature or SDK is actually enabled.
| Category | Examples | Current Status | Source |
|---|---|---|---|
| App usage and device information | App launch data, gameplay records, level, score, progress state, app version, device model, operating system, approximate technical diagnostics, crash or error logs | May be processed as needed for app operation and stability | Generated when using the App |
| Google Play Games information | Player identifier, display/profile name, achievements, leaderboard information, gameplay synchronization data provided through Google Play Games | Planned | Google Play Games, when the user enables or uses the feature |
| Support information | Email address, support message, screenshots or device/app version information voluntarily provided by the user | Used when the user contacts us | User-provided by email or support channel |
| Advertising data | Advertising ID, ad impressions, ad clicks, app interaction data, approximate location inferred by ad networks where applicable | Currently in use through Google AdMob | Processed through the Google AdMob SDK currently used in the App |
| Analytics / crash diagnostics | App events, crash logs, diagnostics, device information | Firebase Analytics / Crashlytics not currently used | Analytics or crash SDKs if introduced |
| In-app purchase information | Order ID, item purchased, purchase time, purchase status, refund information. We do not directly store raw payment card numbers. | Not currently used; may be introduced later through Google Play Billing | Google Play Billing if introduced |
We do not intentionally collect government identification numbers, precise financial account credentials, health information, biometric information, political opinions, religious beliefs, or other sensitive information unless expressly stated in a future update and permitted by applicable law.
4. Purposes and Legal Bases
| Purpose | Examples | Legal Basis Where Applicable |
|---|---|---|
| Provide and operate the App | Run gameplay, save progress locally or through supported services, operate achievements and leaderboards | Performance of a contract; legitimate interests; consent where required |
| Maintain security and prevent misuse | Detect errors, abuse, unauthorized activity, or policy violations | Legitimate interests; legal obligation where applicable |
| Respond to support requests | Answer emails and resolve user problems | Performance of a contract; legitimate interests; consent where required |
| Advertising through Google AdMob | Show ads, measure ad performance, limit fraud, manage ad preferences | Consent where required; legitimate interests for non-personalized or security-related processing where permitted |
| Payments, if introduced | Process purchases, refunds, and purchase verification through Google Play Billing | Performance of a contract; legal obligation |
| Comply with laws | Respond to lawful requests, keep legally required records, enforce rights | Legal obligation; legitimate interests |
5. Google Play Games, Ads, Analytics, Billing, and Future SDKs
The App uses the Google services and SDKs listed below. We are responsible for ensuring that the App’s Google Play Data Safety form and this Policy remain consistent with the App’s actual behavior.
| Service / SDK | Function | Status |
|---|---|---|
| Google Play Games Services | Sign-in, achievements, leaderboards, gameplay-related features | Planned |
| Google AdMob | Ad delivery, ad measurement, fraud prevention, and related advertising operations | Currently in use |
| Firebase Analytics / Firebase Crashlytics | Usage analytics and crash diagnostics | Not currently used |
| Google Play Billing | In-app purchases, refunds, purchase verification | Not currently used; may be introduced later |
| Own server / database / cloud storage | Account storage, ranking server, cloud save | Not currently operated by us |
If we add or remove SDKs or features, we will update this Policy and the Google Play Data Safety section as required.
6. Cookies, Advertising Identifiers, and Behavioral Data
The App is a mobile app and may process app identifiers, advertising identifiers, device information, and app interaction data instead of traditional web cookies. Because Google AdMob is currently used in the App, Google and its service providers or advertising partners may process advertising identifiers, ad impressions, ad clicks, approximate location, device or app information, and related usage signals to provide, measure, secure, and improve advertising, subject to applicable law and platform settings.
You can reset or delete your Android advertising ID through device settings. Menu names may vary by Android version. Common path: Settings > Security and privacy > Privacy > Other privacy settings > Ads > Reset advertising ID or Delete advertising ID.
We do not knowingly provide targeted advertising to children under 13, and we do not knowingly collect children’s behavioral data for targeted advertising.
7. Sharing, Service Providers, and Third Parties
We do not sell user personal information for money. We may share or make information available in the following limited circumstances:
| Recipient | Purpose | Information | Status / Retention |
|---|---|---|---|
| Google LLC and Google affiliates | Google Play Games, Google AdMob, Google Play Billing, Google Play Console operations, ads, analytics, crash diagnostics, security, fraud prevention, and policy compliance where enabled | Player identifier, app usage information, advertising ID, ad interaction data, approximate location, purchase-related information, diagnostics, and other information processed by enabled Google services | Handled according to Google’s applicable policies and user settings |
| Law enforcement, courts, regulators, or legally authorized bodies | Legal compliance, dispute resolution, protection of rights and safety | Information within the lawful request or necessary scope | As required by law |
| Successors or transferees | Business transfer, merger, or asset transfer involving the App | Information reasonably necessary for the transfer | Subject to this Policy or a successor notice |
We do not currently provide personal information to independent third-party advertisers through our own server. Because AdMob is currently used, Google may process advertising data through its SDKs according to applicable settings, disclosures, and user choices.
8. International Transfers
We are based in South Korea. Google and other service providers may process information in the United States and other countries where they or their infrastructure operate. Data protection laws in those countries may differ from the laws of your country or region.
Where required, we rely on appropriate legal mechanisms for international transfers, such as consent, performance of a contract, adequacy decisions, standard contractual clauses, or other mechanisms permitted by applicable law.
9. Retention and Deletion
We keep personal information only for as long as reasonably necessary for the purposes described in this Policy, unless a longer period is required or permitted by law.
| Category | Retention |
|---|---|
| Gameplay data | During App use or until deletion/reset is requested or available through the relevant service settings |
| Support communications | Up to 3 years after completion of the request, unless a dispute or legal obligation requires longer retention |
| Google Play Games data | Until account unlinking, deletion, service termination, or as managed through Google settings |
| Purchase records if in-app purchases are introduced | As required by applicable commerce, tax, accounting, and consumer protection laws |
| Diagnostics and security logs | For the period necessary for troubleshooting, security, fraud prevention, or legal compliance |
When information is no longer needed, we delete it, de-identify it, or rely on the relevant service provider’s deletion mechanisms.
10. Security
We use reasonable administrative, technical, and organizational safeguards appropriate to the nature of the App. These may include limiting access to accounts and development systems, using platform security features, avoiding direct storage of raw payment card data, maintaining software updates, and using secure transmission provided by platform services. No method of transmission or storage is completely secure.
11. Children and Teens
The App is intended for users aged 13 and older. The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, contact us at cjjoung@byulzari.co.kr and we will take appropriate steps.
For users under the age of majority in their jurisdiction, a parent or legal guardian may contact us to exercise privacy rights on their behalf where permitted by law.
12. Your Privacy Rights
Depending on your location and applicable law, you may have the right to:
- Access or know the personal information we process about you.
- Request correction of inaccurate information.
- Request deletion of personal information.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
- Request portability or a copy of information in a portable format.
- Opt out of certain targeted advertising, sale, or sharing where applicable.
- Appeal a decision if applicable state or regional law provides an appeal right.
To exercise rights, contact us at cjjoung@byulzari.co.kr. We may need to verify your identity or authority before responding. You may also manage some data directly through Google account, Google Play Games, Android advertising ID, or Google Play settings.
13. U.S. State Privacy Notice, including CCPA/CPRA
This section applies to residents of U.S. states with applicable consumer privacy laws, including California residents where the CCPA/CPRA applies. We provide this notice to explain categories of information, purposes, and rights.
Categories of personal information
| Category | Examples in the App | Purpose | Disclosed to |
|---|---|---|---|
| Identifiers | Email address for support, player identifiers, advertising ID used for ads | Support, gameplay services, advertising | Google where enabled; legal recipients where required |
| Internet or electronic network activity | App usage, gameplay events, diagnostics, ad interactions | App operation, security, analytics, or advertising | Google or other SDK providers if enabled |
| Commercial information | Purchase records if in-app purchases are introduced | Purchase processing, refunds, compliance | Google Play Billing if enabled |
| Geolocation | Approximate location inferred by AdMob or platform services where enabled | Advertising, fraud prevention, compliance where applicable | Ad or platform providers if enabled |
| Inferences | Ad interest segments may be generated by AdMob or other ad providers if personalized ads are enabled | Personalized advertising if enabled and permitted | Ad providers if enabled |
CCPA/CPRA rights
California residents may have the right to know/access, delete, correct, opt out of sale or sharing, limit use of sensitive personal information, and not be discriminated against for exercising CCPA rights. We do not knowingly sell personal information for money. If current or future ad SDK behavior, including AdMob, is considered “sharing” for cross-context behavioral advertising under California law, users may opt out through device advertising settings and by contacting us.
We do not knowingly collect, sell, or share personal information of consumers under 16 years of age. We do not use or disclose sensitive personal information for purposes that would require a “Limit the Use of My Sensitive Personal Information” mechanism unless stated in a future update.
To submit a California or other U.S. state privacy request, email cjjoung@byulzari.co.kr with the subject line “Privacy Request.” Authorized agents may submit requests if they provide proof of authorization and we can verify the consumer’s identity as required by law.
14. GDPR/EEA/UK Privacy Notice
If you are in the EEA, UK, or another jurisdiction with similar rights, you may have the rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and the right to lodge a complaint with a supervisory authority.
| Processing | Legal basis |
|---|---|
| Providing gameplay features and user-requested services | Performance of a contract |
| Security, diagnostics, fraud prevention, and service improvement | Legitimate interests, balanced against user rights |
| Personalized ads or analytics where consent is required | Consent |
| Payment records, legal requests, and compliance | Legal obligation |
You may contact us at cjjoung@byulzari.co.kr to exercise GDPR rights. You may also contact your local data protection authority.
15. Korea Privacy Notice
For users in Korea, this Policy is intended to provide notice under the Personal Information Protection Act, including purposes of processing, processed items, retention periods, destruction procedures, third-party provision, outsourcing, international transfer, safety measures, data subject rights, contact information, and dispute resolution channels.
Korean users may contact us at cjjoung@byulzari.co.kr to request access, correction, deletion, suspension of processing, or withdrawal of consent.
| Institution | Contact |
|---|---|
| Personal Information Dispute Mediation Committee | 1833-6972 / www.kopico.go.kr |
| Privacy Infringement Report Center | 118 / privacy.kisa.or.kr |
| Korean National Police Agency Cybercrime Reporting System | 182 / ecrm.police.go.kr |
16. Automated Decision-Making
We do not currently make decisions solely by automated processing that produce legal or similarly significant effects for users. If we introduce such processing, we will update this Policy with the purposes, logic, categories of personal information used, and rights to request review or explanation where required by law.
17. Contact
| Privacy Contact / Responsible Department | byulzari Privacy Office |
|---|---|
| Company / Controller | byulzari |
| cjjoung@byulzari.co.kr | |
| Address | Room 919, 33, Gukjegeumyung-ro 6-gil, Yeongdeungpo-gu, Seoul, Republic of Korea (Yeouido-dong) |
18. Changes to this Policy
We may update this Policy when the App, SDKs, laws, or data practices change. If we make material changes, we will make the updated Policy available through the App, the Google Play listing, or another reasonably accessible method. The effective date at the top indicates when this Policy applies.
© byulzari. Privacy Policy for Novaryx: Aero Runner.