Privacy Policy

Effective date: 14 October 2026

This policy explains what information the mobile game My Football Hero (the "game") collects, why, how long we keep it, who we share it with, and what you can do about it. We have tried to write it in plain English. If anything is unclear, contact us (section 14).

1. Who we are

The game is run by Onullan (오늘란), a sole proprietorship in the Republic of Korea, owned by Hanna Kwon. Onullan is the "controller" of your personal information for the purposes of UK data protection law.

Business registration number: 826-94-02108
Address: Unit 203, Building B, 19 Daerim-ro 27na-gil, Yeongdeungpo-gu, Seoul, Republic of Korea (서울특별시 영등포구 대림로27나길 19 B동 203호)
Email: eggfortoday@gmail.com
UK representative (Article 27 UK GDPR): the app is not currently offered in UK app stores and we have not appointed a UK representative. If you are in the UK, you can contact us directly using the email above.

2. The short version

We don't ask for your name, phone number or address. The game creates an account for you automatically.
Your game save is kept on your device. We keep copies on our server for cloud save, backups and the online Competitive mode.
If you sign in with Google or Apple, we keep the account ID and email address that service gives us.
Ads only appear when you choose to watch one for a reward. Google shows them. In the UK you can change your ad choices at any time in Settings › My data › Privacy choices.
Some features use AI (Claude, made by Anthropic): your in-game wife, post-match interviews, and a first look at support requests. See section 5.
Competitive mode is one league for everyone: players from the US, Canada, Australia, Korea, Japan and other countries play together. What you post in public places (cheers, lounges, match chat) can be read by players in any of these countries.
We don't sell your information.
You can delete your account and server data yourself in Settings › My data › Delete account.

3. What we collect and why

What	When	Why we use it	Legal basis (UK GDPR)
Account: a Member ID and access code created by the app, your nickname, when you joined and when you last played	When you first open the game	To run your account, save your progress and run online features	Contract (providing the game)
Google sign-in (optional): your Google account ID and email address (also when you sign in through Google Play Games)	Only if you choose to sign in	To let you use the same account on other devices and restore your saves	Contract
Sign in with Apple (optional, iPhone): your Apple account ID and email address (or the relay address Apple creates if you choose "Hide My Email")	Only if you choose to sign in	Same as Google sign-in	Contract
Cloud saves and backups: your career save files (your player and the game world, including names you typed in)	When you are signed in, when you leave a career or finish a season, or when you back up or attach a save to a support request	Cloud save across devices, and restoring lost or broken saves	Contract
Competitive mode: the players you send in (name, position, attributes), your club, match records, titles, likes your players receive, Crowns earned and spent. When you open the game we also note when you were last online, so other players can see a rough "last seen" (now, today or this week — never the exact time)	When you use Competitive mode	To run the online league and show results to other players	Contract
Player photo (optional): a photo you upload for your player, reduced to 512×597 pixels	Only if you turn on "Show player photo" in Competitive mode	To show your player's photo to other players	Contract (you can turn it off at any time)
Chat: messages you write in club chat, in match chat during a live match, and in one-to-one transfer chats; reactions (👏 🔥 ⚽) and welcome greetings you send; the time sent and the player name shown as the writer; your block list; reports you make or receive	When you use chat	To show your messages to the people who can see that chat (section 6), and to handle reports of abuse	Contract; legitimate interests (keeping players safe)
Cheers: cheer messages you leave for a club, the time, the player name shown as the writer (or "Fan" if you have no Competitive player), likes you give; reports you make	When you post or like a cheer	To show cheers to all players, and to handle reports	Contract; legitimate interests (keeping players safe)
Lounges: lounges you create or join, lounge names, posts and "show-off" cards (a player's name, position, OVR, season and one record), the time, the player name shown as the writer (or "Fan"), likes, lounge activity points; reports you make	When you use lounges	To run lounges, which anyone can find by name and read, and to handle reports	Contract; legitimate interests (keeping players safe)
Post-match interviews: the answers you pick or type after a Competitive match, and the headline written from them	When you take part in an interview	To run the interview (section 5) and show the headline with the match record	Contract
Support requests: what you write and our replies, plus the app version, device type (operating system, browser, screen size, language), recent error logs, a summary of your game world and the screen you were on, your purchase records, and the save backup you attach (or your latest one). An AI model reads your request first (section 5); its notes (a summary, the type of request, a suggested reply) are kept with the request	When you contact us from the game	To answer you, fix the problem and, where our records show you lost something because of a fault, restore a backup or send compensation	Contract; legitimate interests (handling support quickly)
Notifications: your device's push notification token, the device type, which kinds of notifications you turned on or off, and your device's language and time zone so we can write notifications in your language and avoid night-time hours	When you allow notifications	To tell you about matches, your club and replies to your support requests	Contract; consent for the notification permission on your device
Purchases: product, transaction and order numbers, time, subscription period, store country and currency, and the receipt data the store gives us. We never receive your card or payment details. When you buy something in the app, the app also sends Google Firebase Analytics a "purchase" event (product, price, currency and transaction number) — see section 4	When you buy something	To check the purchase is genuine, deliver it, and handle refunds	Contract; legal obligation (keeping transaction records)
Gameplay activity: which screens you open and for how long, where you close the app, the times you open the app (counted by date and hour), your device's clock time when the data is sent, progress points (for example: tutorial steps, first week, first season finished) and your latest career progress (season, week, OVR, age), the app version, and results of the Hero Moment mini-game where it is available (stage, stars, time). In the first 15 minutes after you first install the game this is sent more often (about every 40 seconds). We don't send names, chat or saves with it	While you play	To see where players get stuck or leave, so we can improve the game	Legitimate interests (improving the game)
Install source (Android): one word describing how you found the game, such as "ad", "store search" or "invite". We don't keep ad click IDs or search terms	The first time you open the app	To see which channels bring players who keep playing	Legitimate interests
Error reports: the error message, app version and device type	Automatically when something goes wrong	To fix bugs	Legitimate interests
Abuse prevention: your IP address when you sign in or use a friend invite code, and a random ID the app creates on your device for invites	When you sign in or use invites	To stop people collecting invite rewards with fake or repeat accounts. IP addresses are also used briefly, without being stored, to limit how many accounts can be created at once	Legitimate interests (preventing fraud)
Rewarded ad checks: a coded ID made from your Member ID (not the Member ID itself), and the time and type of each completed ad	When you finish a rewarded ad	To check you really watched the ad before giving the reward	Legitimate interests (preventing fraud)
Cheat detection: progress values the server reads from save backups you upload and from players you send into Competitive mode (such as OVR, season, age and in-game money), plus patterns such as frequent restores, repeated refunds or Crowns building up unusually fast	When a backup is uploaded, when you use Competitive mode, and once a day	To flag possible cheating so a member of staff can look at it. Cheat detection never restricts an account automatically: a person reviews every flag	Legitimate interests (fair play)
Wife messages (a Pro Contract feature): see section 5	Only if you use it	To write your in-game wife's replies	Contract
Country, language and time zone: your app store country (from the store, or from the receipt of a purchase), the language the app is set to, your device's time zone, and the region in your device's language settings (this is a setting, not your location). We also note whether your account has ever been identified as a UK account, an account outside Korea or a Japanese account, and (for Japan) which kind of ranking rewards applies to you each week. These notes stay even if the device settings later change, so that the protections below can't be switched off by changing a setting; they are cleared if a store receipt shows a Korean account	When you open the app (at most once a day) and when you buy something	To show the game, legal documents and payment notices for your country and language, show times in your local time, and apply country rules: UK and under-18 safety settings (section 6), the Japanese purchase limits and reward rules, and the crisis lines shown in wife messages	Legal obligation (where a country's law requires these protections); legitimate interests (showing the right version of the game and keeping players safe)
Age signals: where your app store shares it (Google Play Age Signals, Apple Declared Age Range), an age range, which is kept on your device; in Japan, the age band you choose before your first purchase (under 16, 16–19, 20 or over), kept with your account; and a "may be under 18" note on our server, set if your device's age range says so (sent only while you use wife messages), if you tell your in-game wife your real age or school year, if the AI judges that you may be a minor, or if your Japanese age band is under 20. We never ask for your date of birth	When the store shares it, at your first purchase in Japan, or during wife messages	To stop children under 13 from using the game, show only non-personalised ads to under-18s, apply the safety settings in sections 5 and 6, and apply purchase limits and parental approval	Legal obligation; legitimate interests (protecting children)
Purchase consent record (accounts outside Korea): when you agree at checkout that the item is delivered straight away, we record which consent wording was shown (an ID and version of our text, not a copy of anything you typed), when it was shown, the product, the transaction number, your store country and the app language	When you buy something with that consent line on screen	To show that you gave this consent if there is a dispute about a refund	Legal obligation (consumer contract rules); legitimate interests (handling refund disputes)

We do not collect your precise location, contacts, photos you don't choose to upload, or health information.

4. Ads and analytics

Rewarded ads (Google AdMob)

The Android and iPhone apps show an ad only when you tap a button to watch one for a reward. Google AdMob provides these ads. To show ads, measure them and prevent fraud, Google receives your device's advertising ID, your IP address (used to estimate a rough location), device and app information, and how you interact with ads. Google's own use is explained in How Google uses information from sites or apps that use its services.

UK: the first time you open the app, Google's consent message asks whether ads can be personalised. If you say no, you still get the same rewards; you just see non-personalised ads. You can change your choice at any time in Settings › My data › Privacy choices. Our legal basis for personalised ads is your consent.
Canada: ads are non-personalised unless you turn on Settings › My data › Personalised ads. You get the same rewards either way, and you can turn it off again at any time.
United States: where Google's privacy message lets you opt out of the sale or sharing of personal information or targeted advertising, and you do, we only request non-personalised ads and tell Firebase not to use your data for ads. Google may use device identifiers to show personalised ads; some US state laws call this "sharing". You can also turn this off in your device settings (see below).
Players who may be under 18 (see "Age signals" in section 3): we only request non-personalised ads suitable for teenagers and tell Google the user may be under the age of consent.
iPhone: the app asks whether it may track you ("Allow Tracking"). Your advertising ID (IDFA) is used for personalised ads only if you allow it. You get the same rewards either way, and you can change this in iPhone Settings › Privacy & Security › Tracking.
Android: you can reset or delete your advertising ID in your device's Settings › Google › Ads (or Settings › Privacy › Ads).

Firebase Analytics (Android and iPhone apps)

The Android and iPhone apps use Google Firebase Analytics to measure which ads lead to installs and whether those players keep playing. It sends Google app events (app opens; progress points such as creating a player, finishing or skipping the tutorial, week 5, the first and fifth seasons; and a "purchase" event with the product, price, currency and transaction number when you buy something), an app instance ID, device and app information, and your advertising ID (on iPhone, only if you allowed tracking).

In the UK (and the EEA), on both Android and iPhone, Firebase Analytics follows the choice you make in Google's consent message. Until you choose, and if you say no, the app tells Firebase that consent is denied for analytics storage, ad storage, ad user data and ad personalisation (Google Consent Mode). If you agree, these are set to granted. Changing your choice in Settings › My data › Privacy choices updates Firebase too. In the UK our legal basis for this measurement is your consent. In Canada, and for players who may be under 18, Firebase is told that ad personalisation is denied unless you turn on personalised ads. Google explains how it handles data when consent is denied in its consent mode help.

Push notifications

If you allow notifications, Android notifications are delivered through Google Firebase Cloud Messaging and iPhone notifications through the Apple Push Notification service. They receive your device token and the text of the notification (which can include your club's name and the names of other players' players). We only send game notifications — match times, your club, cheers you received, invitations to fill a spot, replies to your support requests and game announcements. We don't send marketing notifications. You can turn kinds of notifications off in Settings › Notifications, or turn them all off in your device settings.

Web version

The browser version uses Vercel Web Analytics, which does not use cookies. It only counts page views and progress points (player created, week 1, week 5, season finished, retirement).

5. Features that use AI

Four things in the game are written by an AI model (Claude, made by Anthropic), not by a person: your in-game wife's messages, her congratulations after Competitive matches, the reporter's questions and headlines in post-match interviews, and the first reading of your support requests. Anthropic processes this information on our behalf. Under its commercial terms it may not train its models on it. Anthropic deletes it within 30 days, unless it needs to keep it longer to enforce its usage policy (content its safety systems flag can be kept for up to 2 years) or the law requires it (Anthropic's retention policy). Please don't type real personal information (yours or anyone else's) into these features. You can report any AI reply by tapping it.

5.1 Wife messages

If you have the Pro Contract and your player is married, you can message your in-game wife. The app asks for your permission before the first message is sent to Anthropic.
Each time you send a message, we send Anthropic: what you typed, the last few lines of the conversation, short notes the AI keeps about your earlier chats (things worth remembering and how you like to write), and game details (your player's and your wife's names, age, club, league, position, recent results and news from your game).
The conversation and the notes are stored in your save. Your save is on your device, and copies are on our server when you use cloud save or when the game makes a backup (section 8). Our server also counts how many messages you have used.
If you have sent the player into Competitive mode, his wife can also talk to you there. For this, our server keeps her notes, mood and the last few lines of your conversation with that player, so it continues on any device.
If your account is outside Korea or your app isn't set to Korean, our server also keeps, for each career, a copy of your wife's notes, mood and favourite phrase (so they can't be edited in the save to get around the safety rules), and a one-way fingerprint of each line she has said, so we can check that the conversation the app sends back is real. A fingerprint can't be turned back into text. We clear fingerprints older than 90 days while you keep using wife messages, and delete all of them, and the notes, when you delete your account.
Safety: for accounts outside Korea, each message is checked for words about suicide or self-harm (in English, Japanese and Korean) and the AI also judges the risk. If you may be in danger, the character stops and you see free crisis lines for your country. We record only the time, how it was detected, the level, your country and the app language — never what you wrote — and keep this for 400 days so we can report yearly totals where the law requires it (California). If you delete your account, these records are no longer linked to you. Players who may be under 18 get extra protection. How this works: AI chat safety.
If you report a reply, that reply and the message before it are saved as a support request.

5.2 Post-match interviews

After a Competitive match your player can answer a reporter's questions. If you have allowed AI in the game, we send Anthropic the match record (player and club names, including other players' players, the score, ratings, goals and league position) and the answers you pick or type, to write the questions, reactions and a headline. We don't send your account, nickname or device details. If you haven't allowed AI, prepared questions are used instead.
Other players in the match and spectators see your player's name and the headline. A headline is never built from answers you typed yourself.

5.3 Support requests

When you contact us, an AI model reads your request together with the information listed in section 3 (including your save backup), to sort it, find the cause and draft a reply. It can read the game's own source code and your save, but no other player's data.
Requests from accounts set to a language other than Korean, or from accounts outside Korea: the AI only prepares a draft, and a member of staff checks it before any reply is sent. If you choose to send your request to a person only, the AI doesn't read it at all.
Where our records clearly show you lost progress or a reward because of a fault in the game, the AI may restore a recent backup (you choose whether to apply it) or send a small compensation by in-game mail, within fixed limits. It never refunds, removes anything from your account, restricts accounts or deletes data. If you disagree with how your request was handled, reply to it and a person will look at it.
Requests about safety reports, account deletion or AI replies are always handled by a person.

6. Who we share information with

We don't sell your personal information and we don't share it with anyone except the service providers below, who handle it for us, and where the law requires it.

Provider	What they do for us	Where
Fly.io, Inc.	Runs our game server and database (accounts, saves, Competitive mode, chat, cheers, lounges, support, purchases, notifications)	Tokyo, Japan
Tigris Data, Inc. (through Fly.io)	Keeps a copy of every cloud save and save backup (so a save can be recovered if our server's disk fails), and a copy of the database for disaster recovery (kept for 7 days, then replaced)	Tigris global storage: data is first stored in the region nearest our server (Japan) and may be copied to other regions
Vercel Inc.	Hosts our website and the web version, and its cookie-free analytics	United States and global network
Google LLC	Google Play payments, Google sign-in, rewarded ads (AdMob), Firebase Analytics (Android and iPhone), Android notifications (Firebase Cloud Messaging)	United States and global
Apple Inc.	App Store payments, Sign in with Apple, iPhone notifications (Apple Push Notification service)	United States and global
Anthropic, PBC	The AI features in section 5: wife messages, Competitive wife congratulations, post-match interviews, and reading support requests	United States
Slack Technologies, LLC (Salesforce)	Our internal staff alerts: when a support request arrives (your nickname, Member ID, the AI's summary and draft reply), when a store refund happens (your nickname, Member ID, device type, product and order number), and new store reviews (the reviewer name, country and text the store shows publicly)	United States

What other players can see

Competitive mode is one league for players in every country where the game is available, including Korea and Japan. Other players never see your nickname or Member ID in Competitive mode. They see:

your Competitive players (name, position, attributes, record, titles, likes), your club, and a rough "last seen" (now, today or this week);
club chat — the members of your club; match chat — the players of both clubs, and anyone spectating that match can read it; one-to-one transfer chat — the other person;
cheers and lounges — every player, in every country (lounges can be searched by name and appear in lists of popular lounges);
post-match interview headlines — the players in the match and spectators;
your player photo, if you turn it on;
in Hall of Fame and records, your player's name.

Your messages are shown under the name of the Competitive player you write as (or "Fan" if you have no Competitive player).

Under-18s and UK accounts: lounges are switched off, "last seen" is hidden, and match chat only shows messages from your own club's side. A UK account is one whose app store country is the UK (or, if we can't read the store country, whose device region is the UK).

7. International transfers

We are based in Korea and our server is in Japan, so your information leaves the UK, Canada, Australia or the US when you use the game. What you post in shared places (section 6) can also be read by players in Korea, Japan and other countries.

The UK government has recognised both the Republic of Korea and Japan as providing adequate protection for personal information sent from the UK.
Fly.io, Inc., which runs our server in Japan, is a US company. For Fly.io and our other providers in the United States (Google, Apple, Vercel, Anthropic, Slack and Tigris), we rely on the safeguards in their data protection terms, such as the UK International Data Transfer Addendum to the EU standard contractual clauses or the UK Extension to the EU–US Data Privacy Framework where the provider is certified. You can ask us for details of the safeguard used for a provider.

8. How long we keep it

Account, cloud saves, Competitive records and block list: until you delete your account. If an account has no Google or Apple sign-in linked, no purchase records (including refunded purchases), no Crowns left, and the app hasn't been opened for 2 years, we delete the account and its server data. "Opened" means the app connected to our server; we record this once a day.
Chat messages, match chat, reactions, cheers, lounge posts and interview answers: 1 year after they were sent (or sooner if you delete your account or delete the post).
Competitive players: deleting a career doesn't remove the players you sent from it into Competitive mode. They stay until you take them out with Withdraw from Competitive or delete your account. The Competitive wife's notes and recent lines are deleted with the player.
Notification tokens: until you sign out, the token stops working, a year passes without the app renewing it, or you delete your account.
Country, language, time zone, age band and safety notes (section 3), and the wife's notes kept on our server (section 5.1): until you delete your account. Fingerprints of the wife's lines: cleared after 90 days as described in section 5.1.
Wife message safety records (time, how it was detected, level, country, language — no message text): 400 days. If you delete your account earlier, they are kept until then without any link to you.
Purchase consent records: kept with your purchase records (5 years), even after you delete your account.
Gameplay activity: 13 months.
Error reports: 180 days.
IP addresses and the invite device ID: 90 days.
Save backups and cloud saves: for each career we keep the latest 3 backups plus one a day for the last 7 days; older ones are deleted automatically. Backups attached to a support request are kept until the request is closed. When a cloud save or backup is deleted, its copy at Tigris is deleted too, within about an hour.
Player photo: deleted from our server as soon as you turn off "Show player photo" or take that player out of Competitive mode.
Purchase records: kept for 5 years, as Korean consumer law requires for electronic transactions, even after you delete your account.
Support requests (including the device details, error logs, game world summary, purchase records and the AI's notes) and rewarded ad checks: until you delete your account.
Copies held by providers: what was sent to Anthropic is deleted by Anthropic as described in section 5. Staff alerts in Slack are not removed when you delete your account; they are kept for up to one year and then deleted.
Cheat detection: progress values read from saves are deleted after 180 days; any item flagged for staff review is kept until you delete your account.
Disaster-recovery copy: deleted information can stay in our backup copy for up to 7 days before it is overwritten.
After deletion we keep only: purchase records and purchase consent records (above), wife message safety records with no link to you (above), a note that a Member ID was deleted and when, a record of which players already received OVR milestone rewards (no personal details — this stops the same reward being claimed twice), and our staff action log. Public records such as the Hall of Fame keep the player's name but your nickname is replaced with "Deleted user".

9. Your rights

Wherever you live, you can ask us to:

tell you what information we hold about you and give you a copy;
correct it;
delete it (you can also do this yourself in Settings › My data › Delete account — it takes effect immediately);
stop or limit using it, or object to uses based on our legitimate interests;
give you your save data in a portable form (you can also use "Export save" in the game);
withdraw consent you gave (ads: Settings › My data › Privacy choices or your device settings) — this doesn't affect anything done before you withdrew.

To make a request, use Settings › Support › Contact us in the game, or email us with your Member ID (shown in Settings). We will check the request comes from the account holder and reply within one month. We don't charge for requests.

United Kingdom

If you are unhappy with how we handle your information, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.

United States

We do not sell personal information, and we do not knowingly collect personal information from children under 13. Some US states (for example California, Virginia, Colorado and Texas) give residents rights to know, correct and delete their information and to opt out of targeted advertising. You can make any of these requests through the contact details above, whether or not your state's law applies to us, and we won't treat you differently for doing so. To opt out of personalised ads, use your device's ad settings (iPhone: don't allow tracking; Android: delete your advertising ID), or opt out in Google's privacy message where it is shown (section 4).

Canada

We handle your information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA). You can ask to see and correct your information as described above. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada: priv.gc.ca.

Québec: the person in charge of the protection of personal information is Hanna Kwon, owner of Onullan (eggfortoday@gmail.com). You can also contact the Commission d'accès à l'information du Québec: cai.gouv.qc.ca. This policy is also available in French: Politique de confidentialité. In Canada, personalised ads are off by default (section 4).

Australia

We handle your information in line with the Australian Privacy Principles. You can ask to see and correct your information as described above. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner: oaic.gov.au.

10. Children

The game is for players aged 13 and over. It is not aimed at children under 13, and we do not knowingly collect personal information from them. We don't ask for names or contact details when an account is created. If you believe a child under 13 has given us personal information (for example in chat, a photo or a support request), contact us and we will delete it.

Players under 18 should ask a parent or guardian before buying anything. Parents can control purchases with Apple's Family Sharing / Screen Time or Google Play's parental controls.

11. Security

All communication between the game and our server is encrypted (HTTPS). Our admin tools can only be used by staff with password-protected accounts, and staff actions are logged. No system is perfectly secure, so please don't share your account access code.

12. Information you type in

Names you give your player and other things you type are part of your save. They are stored on your device and, when backed up or synced, on our server. Files you create with "Export save" are under your own control.

13. Changes to this policy

If we change this policy, we will update the date at the top and tell you in the game before important changes take effect.

14. Contact

In the game: Settings › Support › Contact us.
Email: eggfortoday@gmail.com
Privacy contact: Hanna Kwon, Onullan

15. Names and crests

The clubs, players, competitions and crests in the English version of the game are fictional. Some club names are inspired by real places or clubs. The game has no connection with, and is not endorsed by, any real club, league, competition or person, and uses no real crests.