Privacy Policy
Last updated: October 16, 2026
This policy explains what Driplox: Skins & Clothes ("Driplox") and Fitpacks (together, "the apps") collect, why, how long we keep it, and what you can ask us to do. The apps are made by FireX Co., Ltd.
1. Who we are
| Operator | FireX Co., Ltd. |
| Representative | Jinwoo Cheon |
| Business registration no. | 484-88-02183 |
| Address | 302-46, 7 Yonggudae-ro 2790beon-gil, Suji-gu, Yongin-si, Gyeonggi-do, Republic of Korea |
| Contact for privacy questions and requests | support@driplox.com |
| Person in charge of personal information | Jinwoo Cheon |
The apps are not affiliated with Roblox Corporation.
2. The short version
- There are no accounts. You do not give us a name, an email address or a phone number.
- Your designs stay on your phone. We never upload them.
- We do not track you across other companies' apps and websites, and the apps do not show the App Tracking Transparency prompt.
- If you tell us you are under 13, the app turns off every third-party tool, photo upload and personalized ads.
- You can ask us to delete what we hold about your install at any time.
3. What we collect
The apps give each install a random ID that is kept in the iPhone Keychain. It is not your Apple ID and it says nothing about who you are. Everything in the first group below is stored under that ID.
| What | Why | How long we keep it |
|---|---|---|
| Install ID, app name and version, phone platform, language, time zone | To run the app, restore your plan on a new session and show the right language | Until 400 days after you last open the app, then deleted (installs with an active subscription are kept while it is active) |
| Age group (under 13, 13 to 17, 18 or older). We ask for your birth year once and keep only the group | To turn off features that are not allowed for children | Same as the install ID |
| Plan, credit balance, number of free AI tries used | To give you what you bought | Same as the install ID |
| Purchase information from the App Store (which plan, when it renews or ends, receipts). Apple handles the payment and we never see your card | To unlock Pro and credits and to handle restore and refunds | While you have a plan, then as long as accounting law requires |
| Notification token, only if you allow notifications | To send the notifications you chose | Until you turn notifications off or the install is deleted |
| Event counts such as "design opened" or "tool used", with app version, a random number for that launch and the test group you are in. No install ID is attached | To see which parts of the app work and which do not | 90 days |
| Install attribution (adults only, Driplox only): a random ID from our attribution partner and one event, the first design you finish. The advertising ID is switched off | To learn which of our own ads bring people to the app | Held by the partner under our contract with them |
| AI text ideas: the words you type for an AI design are used to make the result and then discarded. We keep only a one-way hash that cannot be turned back into words | To catch abuse and repeated requests | 90 days |
| AI photos (13 and older only): a photo of a piece of clothing or a pattern you choose to send | To make the result you asked for | Deleted when the job ends |
| AI results | So you can look at them and apply them to your design | 7 days, then deleted |
| Messages you send to support, and the details the support email fills in (install ID, app version, plan, phone model, system version, language) | To answer you | Up to 3 years (Korean consumer law requires us to keep complaint records for that long) |
| Ad data (Fitpacks only): see section 6 | To show ads that pay for the free app | See section 6 |
What stays on your phone only: your designs, your layers and brushstrokes, and the pictures you pick from your photo library to put on a design. The apps ask for photo access only when you pick a picture or save a finished design to Photos.
4. What we do not collect
Your name, email address, phone number, contacts, precise location, microphone or camera data, or photos of people. We do not read your photo library beyond the pictures you pick. We do not create a profile of you and we do not sell personal information.
5. Tracking and advertising identifiers
The apps do not track you. They do not use the advertising identifier in Driplox. Install attribution in Driplox runs only for people who said they are 13 or older, with advertising identifiers switched off. Apple Search Ads attribution uses a token from Apple that needs no permission.
6. Ads in Fitpacks
Fitpacks is supported by ads. The ads come from Google AdMob and follow Google's rules for apps used by children. For people under 13 every ad request is marked as child-directed, limited to the family-safe content rating (G) and not personalized. For everyone else, personalized ads are shown only where the consent form says you agreed. AdMob and its partners may process an advertising identifier, your approximate location from your IP address and basic device information to show and measure ads. You can change your ad choices in the consent form from Settings, or in your phone's privacy settings.
7. Who handles data for us
| Company | What they do | Where |
|---|---|---|
| Cloudflare, Inc. | Runs our servers and storage, protects them from abuse, and runs the AI features | Worldwide |
| RevenueCat, Inc. | Checks subscriptions and credits (Driplox) | United States |
| Apple Inc. | Takes payments, delivers notifications, provides App Store crash and usage reports to us | Worldwide |
| AppsFlyer Ltd. | Install attribution for adults (Driplox only) | Israel, United States |
| Google LLC | Shows ads (Fitpacks only), takes payments and publishes the Android app | Worldwide |
They may only use the data to provide their service to us. Because we are based in Korea and these companies run services in other countries, your data may be sent and stored outside Korea. We rely on contracts with each company for this.
We do not sell personal information. We disclose it if the law requires us to.
8. Children
We built the apps for people who make clothes for games, and many of them are children. The first time you open the app we ask your birth year, in a neutral way that does not say which answer unlocks what.
In South Korea the line for children is 14, not 13: if your phone's region is Korea or its language is Korean, the rules below apply to everyone under 14.
If you are under 13:
- No third-party analytics or attribution tool is started.
- Photo upload for AI is off.
- Ads are never personalized. In Fitpacks every ad request is marked child-directed and limited to the G content rating.
- Before any purchase screen in Driplox, a simple question for a grown-up has to be answered. Apple's own purchase approval for children still applies.
- We collect only what is needed to run the app: the install ID, app and phone basics, the age group and the first-party event counts described above.
Parents and guardians can ask us to see or delete what we hold for a child's install, by writing to support@driplox.com with the install ID. In the app, open Settings and press and hold the Contact row to copy it.
9. Your choices and rights
You can ask us to access, correct or delete the data tied to your install, to stop using it, or to explain how we use it. Write to support@driplox.com from the app's Contact row so the install ID is included. We reply within 10 days. Deleting the server record removes your plan and credits from our side, so do this only if you mean it. Apple and RevenueCat keep their own purchase records under their own policies.
Deleting the app removes your designs from your phone. The install ID stays in the Keychain on iPhone, so it can come back if you reinstall, until you ask us to delete the server record.
If you live in the European Economic Area, the United Kingdom, Korea, California or another place with privacy rights by law, you have the rights that law gives you. You can also complain to your local data protection authority.
10. Security
Everything the apps send travels over encrypted connections. Access to our servers is limited to the people who need it. No system is perfectly safe. If a problem affects your data, we tell you and the authorities as the law requires.
11. This website
driplox.com does not use analytics or advertising cookies. Cloudflare, Inc. delivers the website and processes technical request data such as your IP address and browser type for that purpose and for security. The statements about "no third-party analytics" in this policy apply to the apps.
12. EU and UK representative
[decision] A representative in the European Union and the United Kingdom has not been appointed yet. This section stays until that decision is made.
13. Changes
If we change this policy in a way that matters, we show a notice in the app before it applies. The date at the top always shows the latest version.
14. Contact
support@driplox.com FireX Co., Ltd., 302-46, 7 Yonggudae-ro 2790beon-gil, Suji-gu, Yongin-si, Gyeonggi-do, Republic of Korea