Privacy Policy

Last updated: 14 September 2026
시행일 및 최종 업데이트: 2026년 9월 14일

1. Scope

This policy describes how 주식회사 SAIR (SAIR Co., Ltd.) (“we”), operator of the Tido Kang website, collects and handles personal data. We collect the minimum we need to run the Service. Data controller: 주식회사 SAIR, 대표자 강희도, 사업자등록번호 368-88-03139, 경기도 안산시 단원구 고잔로 76, 705·706·707호 내 706-33호 (고잔동, 영풍빌딩), Republic of Korea.

2. Data we collect

  • Account data — email address, display name, the Tido user ID we assign to your account, and optional profile details you provide.
  • Authentication data — a securely hashed password (never the password itself), or your account identifier from a social sign-in provider (such as Apple, Google, Kakao, or Naver) when you choose to sign in that way, together with the verified email address the provider shares with us. Apple and Google sign-in are also offered inside the Airy Neon app; signing in there creates or uses the same Tido account.
  • Airy Neon app account data — when you sign in inside the Airy Neon app and use its online features: your in-game nickname (a public display name shown on leaderboards; reserved names are refused, and an administrator may hide a record or clear a nickname that breaks the rules), your gameplay scores and ranking records (best scores per song, stage, and difficulty, shown on leaderboards under your nickname), a minimal set of gameplay statistics used to tune difficulty (for example the point at which a stage was failed, linked to a one-way hashed key rather than to your account), and app sign-in session tokens (see section 9). Game progress such as notes, unlocked songs, energy, missions, and settings stays on your device in the current app version and is not sent to our servers.
  • Purchase, order, and subscription data — once checkout opens: what you bought, order amounts and currency, subscription status and billing dates, and refund records. We never store your full card number or card security details — payment credentials are handled by the payment provider.
  • Access and usage records — which content your account is entitled to, viewer/print/download activity, and course progress, used to deliver and protect the content you paid for.
  • Device, browser, and security logs — IP address, browser or app and device type, and request logs kept for security, abuse prevention (including sign-in attempt and rate-limit counters), and troubleshooting.

Children.Direct sign-up is not offered to children under 14, and the sign-up process does not directly collect a child’s name, email address, date of birth, school, or phone number to create a child account. Users under 14 may use the Service through an account created and managed by a parent or legal guardian. Access and usage records that arise while the Service is used are processed within the scope and purposes described in this policy.

만 14세 미만 아동의 직접 회원가입은 제공하지 않으며, 가입 과정에서 아동 계정 생성을 위한 아동의 이름, 이메일, 생년월일, 학교, 전화번호 등의 개인정보를 직접 수집하지 않습니다. 만 14세 미만 이용자는 부모 또는 법정대리인이 생성·관리하는 계정을 통해 서비스를 이용할 수 있습니다. 서비스 이용 과정에서 발생하는 접속 기록과 이용 기록은 본 개인정보처리방침의 범위와 목적에 따라 처리될 수 있습니다.

3. Cookies

We use cookies that are necessary for the Service to work — above all the session cookie that keeps you signed in. We do not currently use advertising cookies. If analytics or marketing cookies are added later, this policy will be updated first and consent obtained where required.

4. How we use data

To provide the Service: authenticate you, deliver purchased or subscribed content, process and record orders, run the Airy Neon online features (nickname, leaderboards, and rankings), provide support, secure the platform, meet legal obligations, and — only with your separate consent — send marketing messages, which you can withdraw at any time.

5. Service providers

We use a small set of processors to run the Service: website hosting and content delivery, a managed database, and file storage. These providers process data on our instructions. When you sign in with Apple or Google, the provider processes your sign-in under its own privacy policy and shares with us only your account identifier and verified email address. The optional ads shown in the Airy Neon app are described in the Airy Neon app privacy policy.

Payment processing:online checkout is not yet available, and no payment data is currently shared with any payment provider. When Paddle checkout is made available, payments would be processed by Paddle as Merchant of Record — Paddle would then receive the data needed to process your payment (such as your email, country, and payment details you enter on the checkout page) under Paddle’s own privacy policy. If additional payment providers are offered later (for example a Korean payment provider), the same principle applies and this policy will be updated.

6. Retention

Account data is kept while your account exists. Security logs are kept for a limited period. Airy Neon nickname and ranking records are kept while your account exists (an administrator may hide a record from the leaderboards; the record itself is kept until you delete your account); score-submission ledgers are kept for 180 days and gameplay statistics for 30 days; app sign-in sessions expire after 90 days and end earlier when you sign out. Purchase, order, subscription, and refund records are kept for the retention periods required by applicable law — in the Republic of Korea, e-commerce records of contracts, payments, and supply must generally be retained for five years — even after account deletion.

7. Account deletion

You can delete your account yourself: sign in and open tidokang.com/account/delete/. The “Delete account” entry in the Airy Neon app’s account panel opens the same page. You can also request deletion by emailing contact@tidokang.com. Deletion removes or anonymizes personal data that we are not legally required to keep — including your Airy Neon nickname, ranking records, gameplay statistics, and app sessions; financial records are retained for their statutory period.

8. International processing

Our hosting and storage providers may process data in data centers outside your country, including outside the Republic of Korea. Where that happens we rely on the providers’ contractual data protection commitments and applicable transfer safeguards.

9. Security

We protect data with industry-standard measures: encrypted connections (HTTPS), hashed passwords, access-controlled infrastructure, audit logging of sensitive administrative actions (including changes to app nicknames and ranking records), and the principle of storing only what we need. App sign-in sessions use short-lived access tokens and rotating refresh tokens that the app keeps in the device’s secure storage (Keychain or Keystore); our servers store refresh tokens only as one-way hashes, signing out revokes them, and a revoked token that is presented again ends every session of that account in the app. No full card data is ever stored on our systems.

10. Your rights

You may request access to, correction of, or deletion of your personal data, restrict or object to certain processing, and withdraw consent (such as marketing consent) at any time. Contact contact@tidokang.com or 070-7954-6469; we respond within the period required by applicable law. You also have the right to complain to your data-protection authority.

11. Changes

We will update this policy as the Service evolves — for example when checkout launches — and announce material changes on the Service before they take effect.

12. Contact

Privacy questions and requests: email contact@tidokang.com or call 070-7954-6469 (주식회사 SAIR customer support, Republic of Korea).