Privacy Policy

DELU BRAND MANAGEMENT CO.,LIMITED, operating the Mag World brand, is responsible for the MagWorld Account service and the personal data described in this policy. MagWorld products include parent-facing mobile apps, the Creator Workbench, community features, and connected commerce and fulfillment services.

This policy explains our current data practices. It should be read with the Children's Privacy Notice and the product-specific notices shown when an optional feature requests additional data.

We collect account and authentication information such as an adult's email address, display name, controlled avatar reference, sign-in provider, account status, and security timestamps. We keep Magic Points ledger entries, owned-product records, order summaries, and support or B2B requests associated with the account.

If you use community or Creator features, we process the content and metadata you choose to submit, moderation state, reactions, and limited engagement events. We may receive device, application-version, diagnostics, security, and network information needed to operate and protect the services. Shopify and other payment providers process payment credentials; MagWorld Account does not include payment credentials in a data export.

MagWorld is designed for families, but the login account belongs to a parent or guardian. A parent may create a minimized child profile containing only a nickname and age band. We do not create a child login or ask a child to provide an email address.

Real-environment photos used for guided matching or creative play stay on the device by default. Any optional cloud synchronization must be deliberately enabled and selected by the parent. More detail appears in the Children's Privacy Notice.

We use data to authenticate adults, provide account and product features, calculate append-only rewards and ownership records, adapt age-appropriate experiences, process support requests, moderate shared content, prevent fraud and abuse, maintain security, and meet legal or accounting obligations.

We do not use child profiles or identifiable account data as unrestricted AI training input. Where an AI-assisted feature is offered, its specific notice and parent controls govern what is sent.

We share only what is necessary with providers that host infrastructure, deliver email, authenticate users, distribute apps, support commerce and payment, fulfill orders, monitor security, or provide customer support. These providers process data under their own terms and our service arrangements.

Creator data and module-library or fulfillment data remain in their owning MagWorld services. We may disclose information when required by law, to protect people or the services, or as part of a corporate transaction subject to appropriate safeguards. We do not sell children's personal information.

We keep account data only as long as needed for the purposes described here. A parent can request an Account-owned JSON export and self-service account deletion through Privacy Choices. Acceptance disables ordinary account access and starts an asynchronous deletion process across registered MagWorld data owners.

Deletion status remains processing until every registered processor has acknowledged its work. Transaction, accounting, fraud-prevention, fulfillment, and deletion-audit records may be retained in minimized form where law or a legitimate obligation requires it; retained categories are disclosed separately from deletion status.

We use access controls, encryption in transit, server-mediated APIs, scoped storage, audit evidence, and destructive-action re-verification to protect data. No method is perfectly secure, so please contact Support if you suspect unauthorized access.

Our providers and users may be in different countries. When data is transferred internationally, we use the safeguards required for the relevant service and jurisdiction.

Depending on your location, you may have rights to access, correct, export, delete, restrict, or object to certain processing. Privacy Choices provides Account export and deletion. Parents can also manage child profiles, local media, optional synchronization, and community visibility in the relevant app.

For a request not available in the product, contact support@magworld.io. We may verify identity before acting and may explain when a legal exception applies.

Contact support@magworld.io with privacy questions or requests. The responsible operator is DELU BRAND MANAGEMENT CO.,LIMITED; its postal address is RM C01 UNIT 9 ON 14/F LEADER INDUSTRIAL CENTRE NOS.57-59 AU PUI WAN STREET SHATIN NT., Hong Kong.

We update the version and effective date when this policy changes materially. We will provide additional notice in the service when required.