Privacy Policy

1. Personal Data We Collect

① Account: email, nickname/name, social login (Kakao/Google/Apple) identifier and linkage info. ② Profile: gender, age, weight, nationality/region, affiliation (gym), bio, profile/banner image (optional). ③ Activity: workout records and verification-video links, feed/comments/reviews, map pins, achievements, following relationships. ④ Payments: verified transaction identifiers and purchase history provided by the store (sensitive payment data such as card numbers is not collected or stored by the Company). ⑤ Device/technical: device region setting (default nationality), app usage logs, etc. ⑥ Health & fitness data (optional): only if you turn on health sync, we read step count, heart rate, and workout (running) records with their routes (see 2-2). ⑦ Location (optional): precise and approximate location, collected with your permission (see 2-1). ⑧ Gym memberships: membership type/name at a physical gym, start/end dates, total and remaining visit counts, hold periods, membership enrollment/renewal/hold requests and their status. ⑨ Class bookings and attendance: account, gym, class, booking and attendance identifiers; class dates/times; booking/cancellation records and timestamps; per-class check-in timestamps; membership visit deductions and remaining counts.

2. Purpose of Use

Member identification/authentication; providing record, ranking, social, and map features; managing physical gym memberships, checking class eligibility, processing bookings, cancellations and attendance, and providing related notifications; processing payments, subscriptions, and coupons; responding to fraud and sanctions; handling customer inquiries; service improvement and statistics.

2-1. Collection and Use of Location Data

① Run tracking: location data is collected to record your running route, distance and pace. While a run is being recorded, location data is collected even when the screen is off or you are using other apps. This collection happens only after you start a run, stops as soon as you finish the run, and is not used for any purpose other than run tracking. The app does not request "Allow all the time" (background location) access. During a run, Android shows a notification that location is being collected, and iOS shows its location-in-use indicator. ② Nearby & map features: while you use the app, your current location is used to show nearby gyms and map pins, center the map, and find location-based game rooms. ③ Country and region detection: your current location is used to determine your country and supported region category for your profile and country rankings. Only the detected country and a region matching the supported list are saved to your profile. Flag achievements are unlocked based on your phone's region setting. ④ Storage: run route coordinates are stored on your device (a few recent runs). If you post a run to the feed, an image with the route drawn on it is stored as the post. Coordinates of map pins you register and location-based game rooms you create are stored on our servers. ⑤ Sharing: coordinates may be sent to Google Maps Platform to render run-route map images and for maps/geocoding. Location data is never used for advertising or marketing, and is never sold. ⑥ Opting out: location access is optional; you can use the service except location features without it. You can change or revoke the permission at any time in your device settings. ⑦ GPS check-in: when you request a gym check-in, your current coordinates and location accuracy are sent to the Supabase server to verify that you are within the allowed radius of the gym. Raw GPS coordinates are not stored in the attendance record. Account, gym and class identifiers, check-in date/time, distance from the gym (meters), and location accuracy (meters) are stored as attendance information.

2-2. Health & Fitness Data and Wearable (Watch) Integration

① How we connect: on iOS through Apple Health (HealthKit), and on Android through Health Connect. Data that wearables and their apps—such as Apple Watch, Galaxy Watch (Samsung Health) and Garmin (Garmin Connect)—write to Apple Health or Health Connect is read the same way. We do not connect directly to device makers’ server APIs (such as Garmin’s); we only read, on your device, data synced to Apple Health or Health Connect on your phone. On Android, workout routes recorded by other apps (such as Samsung Health or Garmin Connect) are read only after you approve route sharing for that workout in Health Connect. If we add another integration method, we will update this policy with the data collected and how it is handled before it takes effect. ② Data we read (read-only): step count, heart rate, and workout (running) records (start/end time, distance, duration, workout route). The app never writes or modifies health data. ③ Purpose: (a) showing today's step count and your cumulative steps since you connected on the home screen, (b) showing progress toward and unlocking step and maximum-heart-rate achievements, and (c) after you confirm, importing runs recorded on your watch without your phone into the app's run history and drawing them on the map along their workout route (GPS coordinates). ④ Processing & storage: step count and heart rate are tallied on your device only while the app is running, for display and achievement checks. These values are never stored on your device or sent to or stored on our servers; they are read again from the health app whenever needed. Our servers store only the achievements you have unlocked and the date you started health sync. Imported runs (start/end time, distance, duration, route coordinates) are stored in the run history on your device, and route coordinates may be sent to Google Maps Platform to render a map background image. Only if you post a run to the feed is the post content (image with the route drawn on it, route shape, distance, time) stored on our servers. ⑤ Limited use: health data is used only for the purposes above. It is never used for advertising or marketing, never sold or shared with third parties, and never used to determine eligibility for credit, insurance or employment. No person reads it except with your consent, for security purposes, or where required by law. Use of data received from Health Connect complies with the Health Connect Permissions policy, including the Limited Use requirements, and HealthKit data is never stored in iCloud. ⑥ Opting out: health sync is optional and can be turned off at any time in the app settings. You can revoke access in iOS Settings > Health > Data Access & Devices, or in the Android Health Connect app > App permissions.

2-3. Bluetooth Rowing Connection (Optional)

The app receives distance, elapsed time, pace, stroke rate and device identifiers from the Concept2 PM5 monitor you select to display your rowing record. The connection and active record are managed on your device; the record and result image are stored on our servers only when you submit them. Bluetooth access is not used to track your location. Android 11 and earlier may require location permission for Bluetooth discovery. So that recording continues with the screen off or another app open while connected to a PM5, the app uses a connected-device foreground service with a connection notification on Android and a Bluetooth background connection on iOS. This is used only for rowing you start and stops when the record ends, the connection is released or the app is closed. During this time only the data above is received over Bluetooth, and no location data is collected. You can revoke permissions in your device settings.

3. Retention & Destruction

Data is destroyed without delay once its purpose is achieved or upon account deletion. Only payment/subscription transaction evidence (transaction identifiers, product, store, purchase/expiry dates, price/currency and necessary transaction details) is retained separately for five years from the transaction. Profiles, workout records and photos are not retained as transaction evidence. Expired evidence is deleted by a daily cleanup task.

4. Third-Party Processing & Outsourcing

① Backend/authentication/storage: Supabase. ② In-app payments & receipt verification: Apple App Store / Google Play (and the payment-verification provider RevenueCat). ③ Social login: Kakao, Google, Apple. ④ Maps & geocoding: Google Maps Platform. The above providers process data under their own privacy policies, and the Company integrates only to the minimum extent necessary to provide the service. ⑤ Gym operations: gym owners and authorized managers can access and process their gym members’ membership, request, booking, cancellation and attendance information within their assigned management permissions. This information is used for that gym’s membership management, class operations, booking/attendance verification and related notifications. ⑥ Website performance measurement: the website (aboardfit.com) uses Cloudflare Web Analytics to measure page load speed. It uses no cookies, processes only the visited page, load timings, browser type and approximate country in aggregate form, and does not identify or track individual visitors. It does not apply to the app.

4-1. Official Website Rankings and Separate Partner Disclosure (Optional)

① Official website: if public rankings are offered on aboardfit.com, the data items, purpose, period and effect of refusal will be shown first, and publication requires separate optional consent limited to that scope. Rankings can be viewed without signing in. Publication and retention last until consent is withdrawn or the account is deleted. The purpose is to provide and compare rankings based on workout records. ② Separate recipient: the planned recipient is individual operator 조정일 (email: alibabar@naver.com), operating https://anatomy-booking.vercel.app. The purpose is to provide and compare members-only rankings on that site based on manually entered, submitted and manager-verified records, limited to the Million Meter (MMC) cumulative rowing items in the name display and cumulative rowing section; standard ranking scores are not provided. Partner sharing is an optional feature offered only to users verified as members of that operator's gym (Anatomy CrossFit); official website publication covers all rankings regardless of gym. The retention and use period lasts until the earliest of consent withdrawal, account deletion, the end of the partnership or achievement of the ranking provision purpose. No partner disclosure currently takes place. Disclosure will not occur before the recipient, contact details, site, data items, purpose, retention and use period, right to refuse and effect of refusal are finalized and shown, and optional consent for that recipient is obtained separately from official website publication. ③ Published/shared items: a public sharing identifier, nickname, and ranking scores derived from administrator-verified records (five-lift total; deadlift, squat, press, snatch and clean-and-jerk weights; 5 km run time; pull-up, toes-to-bar and muscle-up reps; 100 m/500 m row and 500 m ski times; Fran, Grace, Isabel, Murph, The 7, Hyrox, Minirox and Burpee King times). The sharing identifier is separate from the account ID. These basic ranking items exclude photos, registered names, gym affiliation, location and health or workout data imported from HealthKit, Health Connect or watches. Adding a name requires the separate consent described in the next section. Records on the recipient's site are restricted to that site's members; an ABoardFit account alone does not grant access. ④ Refusal and withdrawal: the two consents are independent. Refusing or withdrawing either does not penalize basic app use. When these features are offered, each consent can be withdrawn under [Profile] > [Social linking]. Withdrawal stops the corresponding external publication or disclosure and deletes the copies shared on the official website or the relevant recipient's site. Original workout records in the app are preserved. ⑤ Publishing or revising this policy, signing up or accepting general terms does not constitute consent to this publication or disclosure. This notice does not mean these features have already been deployed or disclosure has begun.

4-2. Name Display, Cumulative Rowing and Record Intake (Separate Optional Consent)

① Separate scope: name display and cumulative rowing rankings require separate optional consent. Adding a registered name to general-event rankings requires both the existing score consent and fresh name-display consent for the respective destination. Existing score consent alone never adds names. Cumulative Million Meter rowing differs from fixed-distance 100 m/500 m completion-time rankings; existing general ranking consent does not authorize cumulative records or evidence-photo collection or sharing. ② Record intake: the purpose is to register selected cumulative rowing records as original ABF records, have an authorized manager review them, and calculate cumulative distance. Intake items are the selected record identifier, distance in meters, elapsed time in deciseconds, date, submission timestamp, evidence photo, photo hash for duplicate checks and review status. The collection and use items, purpose, retention period, right to refuse and effect of refusal will be shown before intake. Website photo upload requires explicit agreement after reviewing the evidence collection notice. First intake from the partner requires the separate optional consent described in ③. Original intake materials are retained until the review and record-management purpose is achieved or the account is deleted, and destroyed when no longer needed. ③ First partner intake: materials held at anatomy-booking.vercel.app, operated by 조정일, are received by ABF only within the scope selected after the user completes ABF linking and intake consent. Photos and records remain on the partner site before first consent; ABF does not receive them. While that first consent remains valid, subsequent records within the same disclosed scope may be received without consent for each record; scope changes require renewed notice and consent. ABF registration or linking alone is not consent to intake or disclosure back to the partner. ④ Review and publication: photos are private evidence accessible only to the submitter and authorized reviewers. Public and partner ranking copies contain neither photos nor photo addresses. New website and partner intake records count toward cumulative rankings only after approval by a specific manager whose authority for the relevant affiliation is confirmed. Existing app records approved automatically are not all represented as manager-certified. Cumulative ranking items are a public sharing identifier, registered name, nickname, cumulative distance, recent distance, submission count and latest submission timestamp from approved records. Publication and partner disclosure each require fresh optional consent explicitly covering name disclosure for the respective audience. Existing general ranking consent is not converted into consent to publish names. ⑤ Choice and withdrawal: refusal or withdrawal does not penalize basic ABF use; only the relevant intake, publication or disclosure is restricted. Withdrawing the relevant publication or disclosure consent under [Profile] > [Social linking] deletes external copies while preserving workout records already registered as original ABF records. Partner copies are retained until the earliest of consent withdrawal, account deletion, the end of the partnership or achievement of the ranking provision purpose. Original materials on the partner site remain subject to that site's separate notice and rights procedures. Even without a partner-site account, you may ask the partner operator's contact or ABF (aboardfit@naver.com) for access to, correction or deletion of, or suspension of processing of your information the partner received from ABF, or to withdraw consent. Requests are handled after identity verification, subject to applicable legal requirements and exceptions; ABF forwards requests it receives to the partner operator and tells you the outcome. ⑥ This notice does not replace separate consent or mean these features are deployed or partner disclosure has begun. Changes to items, purposes, recipients or retention periods are disclosed before transmission and require renewed consent where applicable.

5. User Rights

Users may request access, correction, deletion, restriction of processing, or withdrawal of consent. Delete your account in the app under [Profile] or on the account deletion webpage (aboardfit.com/delete-account.html). The web flow verifies your registered email and requires final confirmation. Only the transaction evidence described above is retained.

6. Children & Minors

Payments by minors may require the consent of a legal guardian, and protective measures under applicable law are applied.

7. Security

Reasonable safeguards such as in-transit encryption and access control (RLS) are applied. However, absolute security of internet transmission cannot be guaranteed.

8. Inquiries & Data Protection Officer

Privacy inquiries and exercise of rights can be submitted through in-app inquiry or to the data protection officer below. - Data protection officer: Eunwoo Jo (조은우), CEO - Email: aboardfit@naver.com - Phone: +82 10-9703-3740