Privacy Policy

1. Introduction

NOURISH CULTURE CO., LIMITED (Runzeculture, we, or us) respects your privacy and is committed to handling your personal data in accordance with applicable privacy and data-protection laws. This Privacy Policy explains what data we collect, how we use it, with whom we share it, and what rights you have.

If you have any questions about this Policy or our handling of your personal data, email support@runzeculture.com.

2. Information We Collect

We collect the following categories of personal data, depending on the service you use:

• Information you provide directly —name, work email, company, project brief, when you submit a contact form or write to us.
• Information from your use of the website —IP address, browser type and version, operating system, referring URL, pages visited, time on page, approximate country.
• Information from your use of our mobile apps —device model, OS version, app version, in-app actions, advertising IDs (Google Advertising ID / Apple’s IDFA), crash logs and performance data.
• Information from cookies and similar technologies —see §4.

3. How We Use Your Information

We use personal data for the following purposes, on the legal bases indicated:

• To respond to enquiries and provide our services —performance of a contract / legitimate interest.
• To operate, debug, and improve our apps and website —legitimate interest.
• To deliver advertising on our apps and (where applicable) website via third-party ad networks —consent.
• To comply with applicable laws and defend legal claims —legal obligation / legitimate interest.
• We do not sell personal data. We do not use personal data for automated decisions that produce legal or similarly significant effects on you.

4. Cookies and Tracking Technologies

Our website and mobile apps use cookies, local storage, and similar technologies. We categorize them as:

• Strictly necessary —required for the site or app to work (e.g., session, security, load balancing). No consent required.
• Analytics —anonymized usage statistics (e.g., page views, crash reports). Set only with your consent where required.
• Advertising —used by ad networks to deliver, measure, and personalize ads. Set only with your consent under GDPR / UK GDPR / equivalent laws.

You can withdraw consent at any time via the in-app “Privacy choices” link and the website footer (where present).

5. Third-Party SDKs and Ad Networks

Our mobile apps integrate the following ad networks and programmatic exchanges. Each operates as an independent controller of personal data collected through its SDK; each has its own privacy policy and opt-out controls. We require advertising consent before any of these SDKs load personalized ads. The list is reviewed periodically and updated when partners change.

• Google AdMob, Google Ad Manager, Google AdSense —banner, native, interstitial, rewarded-video, splash. Privacy.
• Meta Audience Network —banner, interstitial, rewarded video, native. Privacy.
• AppLovin, AppLovin MAX —banner, native, interstitial, rewarded video, splash. Privacy.
• Unity Ads, Unity LevelPlay —banner, interstitial, rewarded video. Privacy.
• ironSource (Aura) —banner, interstitial, rewarded video, splash. Privacy.
• Vungle (Liftover) —banner, interstitial, rewarded video. Privacy.
• Chartboost —interstitial, rewarded video. Privacy.
• InMobi —banner, interstitial, rewarded video, native. Privacy.
• Tapjoy —rewarded video, offerwall, interstitial. Privacy.
• Pangle (TikTok / ByteDance) —banner, interstitial, rewarded video, splash. Privacy.
• Mintegral —banner, interstitial, rewarded video, native. Privacy.
• Digital Turbine (AdColony) —banner, interstitial, rewarded video. Privacy.
• Start.io —banner, interstitial, native. Privacy.
• Smaato —banner, interstitial, native. Privacy.
• AppNexus / Xandr —banner, native, video. Privacy.
• Verizon Media / Yahoo —banner, native. Privacy.
• Amazon Publisher Services (APS) —banner, video, programmatic. Privacy.
• PubMatic —banner, video, native. Privacy.
• Index Exchange —banner, video. Privacy.
• OpenX —banner, video. Privacy.
• RhythmOne —banner, video, native. Privacy.
• Media.net —banner, native. Privacy.
• Outbrain —native, content recommendations. Privacy.
• Taboola —native, content recommendations. Privacy.
• BidMachine —banner, interstitial, rewarded video. Privacy.
• AdTiming —banner, interstitial, rewarded video. Privacy.
• Ogury —banner, interstitial, rewarded video. Privacy.
• Moloco —banner, interstitial, rewarded video. Privacy.
• HyprMX —banner, interstitial, rewarded video. Privacy.
• Kayzen —banner, video, native. Privacy.
• Yeahmobi —banner, native. Privacy.
• Clickio —consent management. Privacy.
• SlickText —messaging (we use for transactional opt-ins). Privacy.
• Welect —consent management. Privacy.
• Linnaeus —consent management. Privacy.
• e-planning —ad serving. Privacy.
• SmartHub —header bidding. Privacy.
• Smartstream —ad serving. Privacy.
• Mobfox —ad serving. Privacy.
• Conversant —banner, native. Privacy.
• Crimtan —banner, native. Privacy.
• Sojern —travel-intent advertising (we don’re target travel but the SDK may load). Privacy.
• Adelphic —cross-device. Privacy.
• LiveRamp —identity resolution. Privacy.
• Lotame —audience data. Privacy.
• Oracle Advertising (AddThis / BlueKai) —audience data. Privacy.
• Salesforce DMP (Krux) —DMP. Privacy.
• Adobe Advertising Cloud —DSP. Privacy.
• The Trade Desk —DSP. Privacy.
• Basis Technologies —programmatic. Privacy.
• Centro —programmatic. Privacy.
• Simpli.fi —programmatic. Privacy.
• StackAdapt —programmatic. Privacy.
• Yelp Audiences —local audience data. Privacy.
• Yandex Ads —for cross-border app distribution context. Privacy.
• Baidu Ads —for cross-border app distribution context. Privacy.

For all SDKs above, the four ad formats we enable are: splash (open-screen), rewarded video, interstitial, and banner (including MREC and native). The app-ads.txt file at the root of runzeculture.com lists our authorized ad-selling partners.

6. Children’s Privacy

Our services are not directed at children under 13 (the COPPA threshold). We do not knowingly collect personal data from children under 13, or, where local law provides stronger protection (for instance, under-16 in some EU member states), we comply with that stricter threshold. If you believe we have collected data from a child in violation of this section, write to support@runzeculture.com and we will delete it.

7. Your Regional Rights

Depending on where you live, you may have some or all of the following rights with respect to your personal data:

7.1 GDPR & UK GDPR (EEA / UK)

Right of access, rectification, erasure, restriction of processing, data portability, objection to processing, right to lodge a complaint with a supervisory authority, and rights related to automated decision-making.

7.2 CCPA-CPRA & CalOPPA (California, USA)

Right to know, right to delete, right to correct, right to limit use of sensitive personal data, right to opt out of sale or sharing (we do not sell), right to non-discrimination, right to a designated verifier.

7.3 VCDPA, CTDPA, UCPA, Colorado Privacy Act, TDPSA (other US states)

Equivalent rights to access, delete, portability, opt out of targeted advertising, and appeal.

7.4 PIPEDA (Canada)

Right of access, challenge accuracy, withdraw consent, lodge a complaint with the Office of the Privacy Commissioner of Canada.

7.5 CASL (Canada anti-spam)

We do not send commercial electronic messages without consent, and every marketing email includes an unsubscribe link.

7.6 LGPD (Brazil)

Rights of confirmation, access, correction, anonymization, portability, deletion, sharing information, and right to lodge a complaint with the ANPD.

7.7 PIPL (China)

Where PIPL applies, we obtain separate consent for cross-border transfers and honour rights of access, correction, deletion, and portability.

7.8 PDPA (Singapore), Privacy Act (Australia), PDPO (Hong Kong)

Right of access, correction, withdrawal of consent, complaint to the PDPC (Singapore), OAIC (Australia), or PCPD (Hong Kong).

To exercise any of these rights, email support@runzeculture.com. We will respond within the timeframes required by applicable law.

8. International Data Transfers

Personal data may be transferred to and processed in jurisdictions other than your own, including Hong Kong, the EEA, the United States, and Singapore. Where we transfer personal data out of your jurisdiction, we rely on appropriate safeguards (Standard Contractual Clauses, equivalent contractual measures, or other lawful transfer mechanisms).

9. Data Retention

We keep personal data only as long as necessary for the purposes described in this Policy, or as required by law. Contact-form submissions are retained for up to 24 months unless you ask us to delete them sooner. Server log records are retained for up to 12 months. Aggregated or anonymized data may be retained longer.

10. Security

We use administrative, technical, and physical safeguards designed to protect personal data, including encryption in transit (HTTPS / TLS), access controls, and least-privilege principles. No security measure is perfect, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Policy from time to time. When we do, we update the ”ast updated—date above. If the changes are material, we will provide additional notice through our website or apps.

12. Contact

For privacy questions, requests, or complaints, email support@runzeculture.com (general) or huyuanhao@runzeculture.com (key accounts & DPO liaison), or write to: