Privacy policy

Effective date: September 29, 2026

This policy describes how TrailService Co., Ltd. (주식회사 트레일서비스), the operator of Tippo, handles information in the mobile app listed as Tippo: Office Meltdown, its Apple Watch and Wear OS apps, the Tippo desktop apps, and this support website.

Information collected or sent by the app

Tippo does not require an account and does not send your text, photos or personal activity records to the operator. It contains no advertising or analytics SDK and no telemetry sent to an operator server. We do not sell personal data. Photos are read only after you choose them in the system picker, and the clipboard is read only when you request paste. The app does not access your address book or mailbox.

Information processed on your device

• Desktop text and file paths you drop are used to perform an action. Original text and paths are not written into the game save. Original files are not changed or deleted.
• Mobile drafts and selected photos are processed in memory for animations. Completed drafts are cleared; cancelling retains the current draft for editing. They are not saved to personal history or widget files.
• On mobile, phrases you explicitly teach and save are stored locally and can be edited or deleted from the phrases screen.
• Desktop pet names, preferences, activity counts, times and input intervals are stored locally.
• Widgets receive the selected pet and name, action identifiers and reaction records. Input text, photos and taught phrases are not shared with widgets.
• The watch receives only the selected species (hamster or orangutan) and a sync format version. Drafts, photos, taught phrases and personal activity records are not transferred. Sync uses Apple WatchConnectivity or Google Play services; Wear OS may route data through end-to-end encrypted Google servers as well as Bluetooth. The watch retains the last species and scene state locally to resume an animation. Scene state is not sent to the phone; resetting the phone sends the default hamster on the next sync.
• When phone motion reactions are enabled, the foreground app processes acceleration and gravity sensor values in memory to trigger a reaction. Raw sensor readings are not saved or transmitted, and sensing stops when the app enters the background. You can disable motion reactions in Settings.

Retention and deletion

Local preferences, phrases and records remain on your device to provide app features until you delete or reset them. On mobile, reset clears pet and personal records; saved phrases can be deleted from the phrases screen. Desktop records are in the local ANG save folder; contact support for removal instructions for your installation type. On Wear OS, clear Tippo app storage in the watch settings or uninstall the watch app to remove its species and scene state. Resetting the phone does not remotely erase all watch data. Some local files may remain after uninstalling, depending on the operating system and installation method. The operator cannot access or remotely delete data on your device.

Secure handling

Stored data is protected by the operating system’s app-specific storage and access controls. The Android phone and Wear OS apps are configured to exclude app data from automatic cloud backup and device-to-device transfer. Original input, photos and raw sensor readings are not written to app logs or saved records. Watch sync uses operating-system connectivity services; Wear OS data routed through Google servers is end-to-end encrypted. The public support website is served over HTTPS.

Payments and sharing

Apple App Store, Google Play or Microsoft Store processes your download payment. Tippo does not receive card details or store account passwords. There are no in-app purchases or subscriptions. Export or sharing actions you request are subject to the policies of the service you choose.

Support website and email

This website uses no cookies, visitor analytics, tracking pixels, advertising, external fonts or scripts, contact forms or newsletter signup. Hosting provider Vercel may process access logs, such as IP addresses, request times and URLs, and browser information, to deliver and secure the site under its own policy. These logs and support correspondence are separate from in-app pet activity records.

When you email us, we receive your email address and message to respond to your request. You do not need to send sensitive content or private files. We keep correspondence for as long as needed to answer and resolve your request, and delete it on request unless retention is required by law. The email service provider processes messages under its own policy.

Contact and changes

Tippo has no user accounts, so there is no separate account-deletion process. Use the controls and contact method above to delete device data or support correspondence.

Operator: TrailService Co., Ltd. (주식회사 트레일서비스)
Email: pyeondasupport@trailservice.net

Contact this address with privacy questions or requests to delete support correspondence. Changes to this policy will be published here with an updated effective date.

Public policy: https://tippo-landing-page.trailservice.net/privacy-en.html