MARIMO

AIPOCKET · MARIMO

Privacy Policy

AIPocket processes only the personal information needed to provide the MARIMO app and website and takes appropriate measures to protect it.

Effective date: September 13, 2026

1. Scope and controller

This policy applies to the MARIMO mobile app and the marimo.aipocket.ai website (collectively, the “Service”) provided by AIPocket (the “Operator”). The Operator complies with the Personal Information Protection Act of the Republic of Korea and other applicable privacy laws.

2. Information we process

Current iOS app — 1.2637.0 (build 263700)

This version does not serve automatic or rewarded ads and does not include Google Mobile Ads, User Messaging Platform, or Firebase analytics/crash collection SDKs. Neither the Operator nor third-party SDKs included in this version collect user data off the device.

This version does not use the advertising identifier (IDFA) or track users across other companies’ apps or websites. It therefore does not request App Tracking Transparency (ATT) permission.

  • Your Marimo’s name, creation time, growth and care state, settings, Care Guide reading status, and cosmetic access are processed on your device. The Operator cannot remotely access this content.
  • When you request a photo, the generated image is added to your device’s photo library. It is not uploaded to the Operator’s servers.
  • In-app purchases and restoration are handled through Apple StoreKit, and purchase entitlements are checked on the device. The Operator does not receive payment card information or transmit transaction information to its own servers. Apple processes payments under its own privacy policy.

Android app — Google Play Billing versions

From Android version 1.2637.2 (build 263702), optional cosmetic purchases use Google Play Billing. The app has no ads and does not use the advertising ID (AAID), Firebase Analytics or Crashlytics. Core care and growth are free, and no game account is required.

  • Your marimo name, care and growth progress, settings and cosmetic ownership are stored on your device, not uploaded to the Operator’s servers.
  • Google Play processes purchases and restoration. The app receives product details, purchase tokens and signed purchase status, verifies them on the device and acknowledges completed purchases to Google Play. The Operator does not receive payment card details or send receipts or tokens to its own server.
  • The Google Play Billing library may send purchase-service requests, responses and error diagnostics, along with technical information such as app version, device model, operating system, language and country settings, and network type, to Google to operate and improve billing reliability. This includes connecting to billing at app startup and can occur without making a purchase. Google’s privacy, retention and deletion policies apply.
  • Google billing communications used by the app are encrypted. Use Google Account and Google Play controls or support for questions about Google’s transaction records and related data. The Operator cannot directly delete Google’s records.

Children and parents

MARIMO is a virtual plant-care game for children and adults. Core gameplay does not require account registration details such as a name, email address or birth date; game names and progress remain on the device. Optional cosmetic purchases are subject to Google Play payment and parental approval settings. Parents may contact the email below with privacy questions or requests. Website membership and ordering features are separate from the game.

Older app versions

In older ad-supported versions, Google Mobile Ads and User Messaging Platform could process device and app information, IP addresses, ad interactions, and consent status when serving ads. The advertising and analytics descriptions below apply only to older versions containing those features, not to the iOS build described above.

Information processed on the website

  • Social sign-in: name, email address, profile image, sign-in provider, and provider account identifier
  • Account details: phone number and marketing communication preference
  • Shipping and orders: recipient name, email address, phone number, postal code, address, ordered items, amount, and order status
  • Payment and delivery: payment key, order number, payment amount, shipping carrier, and tracking number
  • Session cookies, access logs, IP address, and browser and device information generated while you use the Service

The Operator does not directly store your full payment card number.

3. How we use information

  • To provide Marimo growth and care features, save settings, and let you save photos
  • To authenticate users, manage accounts, prevent misuse, and respond to inquiries
  • To process product orders, confirm payment, arrange delivery, handle cancellations or refunds, and provide customer support
  • For older app versions containing these features only: to improve app stability, analyze errors, and understand use of core features
  • For older ad-supported app versions only: to provide and measure advertising based on your consent and the legal requirements that apply in your region

4. Retention and deletion

  • Local app data: until you reset the data in the app or delete the app
  • Images in your photo library: until you delete them in the Photos app
  • Account information: until your account closure or deletion request is completed
  • Contract, order cancellation, payment, and supply records: 5 years under applicable e-commerce laws
  • Consumer complaint and dispute-resolution records: 3 years under applicable e-commerce laws
  • Advertising display records: 6 months under applicable e-commerce laws

Information that must be retained by law is kept separately and protected for the required period, then deleted without undue delay. You may request account deletion using the email address below.

5. External services and international processing

We use the following providers to operate the Service. Each provider processes information under its own terms and privacy policy.

  • Google, Kakao, and Naver: social sign-in and account authentication
  • Toss Payments: payment authorization and payment-related customer support
  • Vercel and database infrastructure providers: website hosting and data storage
  • Google Mobile Ads and the User Messaging Platform (older ad-supported versions only): advertising and privacy choice management
  • Google Firebase, only in older app versions where it is enabled: usage analytics and error or crash analysis

These providers may operate servers outside the Republic of Korea. Where international processing is necessary, information is transferred to provide the Service, perform a contract, or based on your consent. It is processed for the period required to provide the Service or under the provider’s retention policy. For details about Google’s data practices, see the Google Privacy Policy.

6. Cookies and advertising choices

The website uses essential session cookies to maintain sign-in status and protect the Service. You can block cookies in your browser settings, but sign-in and ordering features may not work properly. In older ad-supported app versions, in regions where advertising consent is required, you can manage advertising-related privacy choices through the Google UMP message shown in the app.

7. Your rights

You may request access to, correction or deletion of, or restriction of processing of your personal information, and you may withdraw consent. Requests that require identity verification can be submitted using the email address below and will be handled within the period required by applicable law. For children, the Android app and children/parents sections above describe processing. Parents may exercise applicable privacy rights on behalf of their children.

8. Security measures

The Operator applies reasonable safeguards, including limiting access privileges, encrypting information in transit, securely managing authentication information, and reviewing access records. However, absolute security cannot be guaranteed on the internet or in mobile environments.

9. Contact and exercise of rights

For privacy questions, account deletion, or requests to exercise your rights, email aipocket.now@gmail.com.

10. Changes to this policy

We may revise this policy when the Service or applicable laws change. We will notify you of material changes through the Service or on this page before they take effect. The latest version of this policy is always available at this URL.