Privacy Policy

Current v4.0 · Effective 2026-08-28

This privacy policy covers how we handle data from Google, Naver, Apple, and the processors we use. For Google's own practices, see Google's Privacy Policy.

1. Purpose of Processing Personal Information

Baegugu (the "Company") collects personal information for the purposes below. Collected personal information is not used for any other purpose.

Member authentication and account management: authentication and account linking through social login (Google, Naver, Apple)
Service provision: volleyball community platform; club, association, academy, and shop management features
Identity confirmation: phone OTP verification for features that require it, such as club or association registration and tournament comments
Matching: forming teams from user profiles; recommending groups by age, gender, and skill
Tournament management: tournament registration, team formation, bracket generation, roster management, and electronic signatures
Athlete registration check: athlete verification through a Sports Support Portal lookup
Community operation: posts, comments, clips (videos), lost-and-found, messages, and other community features
Notifications: push notifications (chat, tournaments, join requests, signature requests, and similar)
Location-based services: searching and recommending nearby clubs, tournaments, and venues
Service improvement: analyzing usage, collecting user feedback, and optimizing the Service

2. Personal Information Collected

The Company collects the following personal information.

Basic member information

Item	Collection method	Required / Optional	Purpose
Name	Social login	Required	Member identification, community activity
Nickname	Sign-up, profile	Required	Community display name, preventing duplicates
Email	Social login	Required	Identity confirmation, delivering notices
Phone number	Identity verification (OTP)	Required for identity verification	Identity confirmation
Profile photo	Profile	Optional	Community profile
Bio	Profile	Optional	Community profile

Body information

The items below are ordinary personal information, not sensitive information under the law. The Company collects them optionally for team formation and tournament division assignment.

Item	Collection method	Required / Optional	Purpose
Date of birth	Profile	Optional	Age-group matching, tournament division assignment
Gender	Profile	Optional	Gender-based team formation, tournament division assignment
Height (cm)	Profile	Optional	Reference for team formation
Dominant hand (LEFT/RIGHT/BOTH)	Profile	Optional	Position analysis, team formation

Location information

Item	Collection method	Required / Optional	Purpose
Si/do and gu/gun codes	Profile	Optional	Nearby club/tournament recommendations
Auto location enabled	Personal settings	Optional	Storing whether location features are used

Social login information

During social login, the Company receives the information below from each provider. Apple may provide a name only at the first sign-in, and may provide a Hide My Email (relay) address.

Item	Collection method	Required / Optional	Purpose
Google ID / Naver ID / Apple ID	Social login	Required	Account linking, preventing duplicate sign-up
Name and email from the provider	Social login	Required	Member authentication, building the profile
Apple refresh token	Apple sign-in	When applicable	Keeping and disconnecting the Apple account link

Phone identity-verification information

The Company does not collect a phone number at sign-up. When a user completes identity verification to use features that require it—such as club or association registration or tournament comments—the Company collects the information below.

Item	Collection method	Required / Optional	Purpose
Phone number	Identity verification (OTP)	Required for identity verification	Identity confirmation
Verification code	SMS	Required for identity verification	Confirming number ownership (destroyed after about 5 minutes)

Athlete registration check information

If a user requests an athlete registration check, the Company looks up the Sports Support Portal of the Korean Sport & Olympic Committee using the name and birth year on the profile. If the user selects their own record, the Company stores the information below.

Item	Collection method	Required / Optional	Purpose
Athlete registration number	Athlete registration check	Optional	Showing whether the person is a registered athlete
Confirmation date and time	Athlete registration check	Optional	Managing the valid year

Electronic signature information

Item	Collection method	Required / Optional	Purpose
Signature image	Electronic signature submission	When applicable	Evidence of consent to tournament participation and personal information collection/use
Signer name, request title, submission time	Electronic signature submission	When applicable	Managing signature requests

Notification and device information

Item	Collection method	Required / Optional	Purpose
Push token (FCM)	App notification permission	Optional	Sending push notifications
Device information (OS, model, and similar)	Token registration, login	Automatic	Distinguishing session and notification devices
Notification preferences	Settings change	Optional	Chat/tournament/signature notification on/off

Position information

Volleyball position information entered by the user (for example, "6-player: Setter", "4-player: Libero")

Block information

IDs of members the user has blocked. Purpose: providing the block feature.

3. Information Collected Automatically

The information below may be generated and collected automatically while the Service is used.

Access and log information

Item	Collection method	Purpose
IP address	Login, post views, account deletion	Fraud prevention, view counts
User-Agent (browser/app information)	Login, feedback	Understanding the access environment, handling errors
Login time, logout time, device type	Login	Account security, active session management
Last login time, sign-up and deletion timestamps	Account use	Account management

Cookies and local storage

Apple sign-in state (apple_state): prevents login forgery; expires after about 5 minutes
Device identifier (bg-device-id): stored in the browser's localStorage; used to distinguish sessions
Most recently used login method: shown on the login screen

Usage statistics

App screen views and feature-use history (Firebase Analytics)
Website visit statistics (Vercel Analytics)
Number of clubs created

Refusing cookies

You can refuse cookies in your browser settings. Refusing essential cookies may limit some features, including social login.

4. Club Information

Basic club information

Item	Collection method	Required / Optional	Purpose
Club name (Korean/English)	Club creation	Required	Identifying and searching clubs
Club description, introduction	Club creation	Optional	Providing club information
Logo/profile image	Club settings	Optional	Club profile
Monthly membership fee	Club settings	Optional	Member management information

Club location information

This is the address and coordinates of the club's place, not a person's real-time location.

Item	Collection method	Required / Optional	Purpose
Si/do and gu/gun codes	Club creation	Required	Regional classification, search
Jibun (lot-number) address	Club settings	Optional	Precise location
Road-name address	Club settings	Optional	Precise location
Detailed address (floor, unit)	Club settings	Optional	Precise location
GPS coordinates (latitude/longitude)	Club settings	Optional	Map markers

Club operating information

Volleyball format (6-player, 4-player, and similar)
Target age group (20s, 30s, 40s, and similar)
Gender composition (men, women, mixed)
Number of members
Social links (YouTube ID, Instagram ID)
Private or public setting
Whether the club is recruiting members

Club member information

Item	Purpose	Default
Member name	Identifying members	N/A
Role (admin/member)	Permission management	Member
Join date and time	Member management	N/A
Height visibility	Reference for team formation	Private
Dominant-hand visibility	Position analysis	Private

Guest recruiting

When a club recruits guests, the Company collects the listing (date and time, place, fee, positions) and applicant information (name, position, application status).

Club visibility settings

Place visibility: a club administrator can choose whether to show GPS coordinates to other users
Invite token: create and manage club invite links (no expiration)

5. Tournament Information

Basic tournament information

Item	Purpose
Tournament name, category, year, edition	Identifying and searching tournaments
Description, thumbnail image	Providing tournament information
Public/draft status	Managing tournament visibility

Tournament schedule and venue

Start date, end date, registration period
Si/do and gu/gun codes (tournament region)
Venue information (opening ceremony location and time)
Place name, address, GPS coordinates

Tournament contacts

Contact email
Contact phone number

Participating team information

Item	Purpose
Team name, team gender	Tournament management, bracket generation
Division information (gender-based division, division name)	Operating divisions
Team participation status	Participation management
League and league-group information	Operating the tournament system

Player and staff roster

When a team applies, the Company collects personal information of teammates and staff. This may include information of third parties who are not account holders. The applicant must confirm that those persons consented to the provision of their information.

Item	Purpose
Name	Eligibility check, tournament operations
Date of birth	Age and division assignment, eligibility check
Phone number	Operational contact
Gender	Division assignment
Whether the person is a foreign national	Eligibility check

This information is provided to the tournament organizer (operator) for tournament operations. See "Provision of Personal Information to Third Parties" for details.

Tournament notices

Notice title, body, importance, and pin-to-top status — purpose: tournament announcements

6. Association, Academy, and Shop Information

Association

Item	Required / Optional	Purpose
Association name, description, logo	Required / Optional	Identifying the association, providing information
Contact email, phone number	Optional	Association inquiries, verification review
Si/do and gu/gun, address, GPS coordinates	Optional	Regional classification, map display
Website and other links	Optional	Providing association information

Academy

Academy name, branch name, phone number, address, GPS coordinates, introduction, images, and social links. Purpose: listing and searching volleyball academies.

Shop

Shop name, phone number, address, GPS coordinates, products carried, introduction, images, and social links. Purpose: listing and searching volleyball equipment shops. The Company does not process shop payments.

7. Community Information

Posts

Item	Purpose
Title, body, image URLs	Community activity
Category, created time	Post management
View count, likes, comment count	Popularity display
Link URL	Providing reference material

Comments and replies

Comment body
Author information (name, ID)
Created time, edited time
Private setting (visible only to the comment author and the post author)
Purpose: community discussion and information sharing

Private comment policy

A user may mark a comment as private. In that case, only the comment author and the post author can see it.

Clips (videos)

The Company collects short videos a user uploads (file, description, portrait or landscape) and like and save records. Purpose: providing the video feed.

Lost and found

The Company collects title, description, item, place and date lost or found, images, and inquiry messages. Purpose: operating the lost-and-found board.

Feedback

Body, category, rating, page of origin, and User-Agent. If the user is signed in, member ID, name, and email may be stored together. Purpose: improving the Service.

8. Messages and Conversations

Message information

Item	Purpose	Retention period
Sender and recipient IDs	Delivering messages	Until the conversation is deleted
Message body (text)	Communication between users	Until the conversation is deleted
Image URL	Delivering image messages	Until the conversation is deleted
Sent time	Displaying chronological order	Until the conversation is deleted
Read status, read time	Displaying message status	Until the conversation is deleted

Conversation information

Participants (one-to-one or club chat)
Last message body
Unread message count
Last message time

Message retention policy

If a user deletes a conversation, every message in that conversation is deleted from the Company's servers. The Company may retain messages for a period if there is a legal request.

9. Social Login (Collection from Third Parties)

OAuth 2.0 authentication

The Company provides social login through the OAuth 2.0 protocol. When a user clicks a login button, they are sent to that platform's authentication server. Only information in the scope the user expressly approves is provided to the Company.

Information received

At social login, the Company collects the information below from each provider. The Company does not send member personal information to those businesses.

Provider	Information received	Purpose of use	Retention period	Privacy policy
Naver	Name, email, profile information, Naver ID	Member authentication and account linking	Until account deletion	Privacy policy
Google	Name, email, profile information, Google ID	Member authentication and account linking	Until account deletion	Privacy policy
Apple	Apple ID, name (at first sign-in), email or Hide My Email address	Member authentication and account linking	Until account deletion	Privacy policy

Location display (Naver Maps)

The Company uses the Naver Maps API to display club, tournament, academy, and shop locations on a map. A person's real-time location is not sent to the Maps API.

Recipient	Information provided	Purpose of use	Retention period	Privacy policy
Naver (Maps API)	GPS coordinates of club and other places	Displaying map markers	Until the place information is deleted	Privacy policy

10. Retention and Use Period

Personal information is destroyed without delay after the purpose of collection and use is achieved. The Company may retain it for a set period when required by law or by the internal criteria below.

Member information retention

Item retained	Retention period	Legal basis
Member account information (basic/body/profile/nickname)	Until account deletion	Personal Information Protection Act
Social login linking information	Until account deletion	Personal Information Protection Act
Phone number, athlete registration number	Until account deletion or verification is withdrawn	Personal Information Protection Act
Push token	Until the token is deleted or the account is deleted	Sending notifications
Profile si/do and gu/gun codes	Until account deletion	Service provision
Login records (IP, device, time)	1 year	Account security, fraud prevention

Club, association, and similar information retention

Item retained	Retention period	Legal basis
Club basic information, member information	Until the club is deleted	Club operating policy
Club place information (address, GPS)	Until the club is deleted	Club operating policy
Association, academy, and shop information	Until that information is deleted	Service operation

Tournament information retention

Item retained	Retention period	Legal basis
Tournament information, team information	Until the tournament is deleted	Tournament operating policy
Player and staff roster	Until the tournament is deleted (may be shortened at the organizer's request)	Tournament operation
Electronic signature images and submission records	Until the relevant tournament or request is deleted	Evidence of consent

Community information retention

Item retained	Retention period	Legal basis
Posts, comments, clips, lost-and-found	Until the author deletes them	Community operating policy
Messages, conversations	Until the user deletes them	Community operating policy
OTP verification codes	About 5 minutes	Identity verification

Legal retention duties

The Company currently does not charge users. When retention is required by law, the Company follows the table below.

Item retained	Retention period	Legal basis
Service access logs	3 months	Protection of Communications Secrets Act
Consumer complaint or dispute records	3 years	Framework Act on Consumers

11. Processing of Sensitive Personal Information

Information the Company does not collect

The Company does not collect sensitive information under the Personal Information Protection Act (ideology or beliefs, labor union or political party membership, political opinions, health, sex life, genetic information, criminal records, and similar).

Items often confused with sensitive information

Date of birth, gender, height, dominant hand, social account IDs, and the contents of messages and comments are not sensitive information under the law. Users can control how widely body information is shown. The Company uses messages and comments only to provide the Service.

12. Processing of Location Information

Personal location information

The Company does not store a user's real-time GPS coordinates on its servers.

Profile si/do and gu/gun codes: region information the user enters
Auto location: only the setting (on/off) is stored
Map current location: used only in the browser or app; not sent to the server

Place location information

Addresses and GPS coordinates registered by club, tournament, academy, or shop administrators are information about those places. They may be shown as markers through the Naver Maps API.

Visibility: an administrator can control location sharing (clubs)
Private setting: if location sharing is off, no map marker is shown
Member visibility: club members can see the location regardless of the public sharing setting

Tournament venue information

Tournament venue information registered by the organizer is shown on the tournament page.

13. Provision of Personal Information to Third Parties

General principle

The Company does not provide personal information to third parties without the user's consent. When the Service requires it, the Company provides personal information as described below.

Provision to tournament organizers

When a team applies to a tournament, the Company provides the roster to the organizer (operator) to the extent needed to run that tournament.

Recipient	Items provided	Purpose	Retention period
The relevant tournament organizer/operator	Team name; player and staff name, date of birth, phone number, gender, whether the person is a foreign national	Eligibility check, tournament operations and contact	Until tournament operations end, or the organizer's retention period

The applicant must have obtained consent from any listed person other than themselves before this information is shared. If you do not want this information shared, you cannot apply to that tournament.

Provision on a legal request

The Company may provide personal information when there is a legal basis, such as a court order or a request from an investigative agency.

14. Consignment of Personal Information Processing

The Company consigns personal information processing as follows to operate the Service. The Company manages and supervises trustees so that they comply with the Personal Information Protection Act.

Current trustees

Trustee	Entrusted work	Retention period
Google Cloud (Cloud Storage)	Storing files such as profile, post, club, signature, and video files	Until the file is deleted or the account is deleted
Google (Firebase Cloud Messaging)	Sending push notifications	Until the token is deleted or the account is deleted
Google (Firebase Analytics)	Analyzing app usage statistics	Until the analytics purpose is achieved or the account is deleted
Amazon Web Services (SNS)	Sending identity-verification SMS	After sending, according to carrier and AWS policies
Vercel Inc.	Website hosting and visit statistics	Within the scope of hosting and analytics
Kakao	Link sharing (Share via KakaoTalk)	At the time of sharing

15. Overseas Transfer of Personal Information

Some trustees operate infrastructure outside Korea, so personal information may be transferred overseas to the extent needed to provide the Service. If you do not want a transfer, you may stop using the relevant features (social login, push notifications, phone identity verification, and the website) or delete your account.

Current transfers

Recipient	Country	Items	Purpose	Timing and method
Google LLC	United States and other countries	Account identifiers, files, analytics and push-related information	Sign-in, storage, analytics, notifications	Network transmission when the Service is used
Apple Inc.	United States and other countries	Apple ID, name and email (when provided)	Apple sign-in	Network transmission at sign-in
Amazon Web Services	Japan (ap-northeast-1)	Phone number, verification message	SMS identity verification	Network transmission when an OTP is requested
Vercel Inc.	United States and other countries	Access logs, visit statistics	Web hosting and analytics	Network transmission when the website is used

16. Procedure and Method of Destruction

Destruction procedure

Personal information whose retention period has ended or whose processing purpose has been achieved is destroyed without delay. Information retained under law is moved to a separate storage location and destroyed when that period ends.

Destruction method

Electronic files: deleted so they cannot be recovered
Printouts: shredded or incinerated when applicable

17. User Rights

Access and correction

Users may exercise the following rights:

Request to access and inspect their personal information
Request correction of errors or omissions
Request deletion of personal information
Request restriction of processing
Request data portability

Account deletion and data deletion

If a user deletes their account, personal information stored in the Company's database is deleted without delay. The following information may be retained for a period as required by law:

Access logs (3 months)
Consumer complaint records (3 years)

Visibility and opt-out

Users can control the following themselves:

Body information (height, dominant hand) visibility: Private / Club members only / Public
Private comments: visible only to the comment author and the post author
Push notification receipt: managed by type in settings
Auto location: on/off in settings

How to exercise rights

You may exercise these rights in Service settings or by emailing the contact below. The Company will act within 30 days of receiving a request.

18. Personal Information of Children Under 14

The Service is not directed to children under 14 years of age, and the Company does not knowingly collect their personal information. If the Company confirms that a user is under 14, it deletes the account and destroys the collected information. A legal representative may request deletion at baegugu@naver.com.

19. Personal Information Protection Measures

Technical measures

The Company takes the following technical measures to keep personal information secure:

Encryption of data in transit with HTTPS/TLS
Database access control and encrypted storage
Compliance with OAuth 2.0 and OpenID Connect
Access control and permission management
Regular security updates
Viewing active sessions and remotely signing out

Administrative measures

The Company protects personal information through the following administrative measures:

Least-privilege access
Managing and monitoring personal information processing records
Management and supervision of trustees

Response to a leak

If personal information is leaked or there is a risk of misuse, the Company will notify affected users without delay and take necessary measures.

20. Google Privacy Policy

Google's data processing

Google may process data in the course of social login, Cloud Storage, Firebase Analytics, and Firebase Cloud Messaging.

Google Privacy Policy: https://policies.google.com/privacy
Google Safety Center: https://safety.google/
Google account security settings: https://myaccount.google.com/security
Google Data & Privacy: https://myaccount.google.com/data-and-privacy

Disconnecting Google and deleting data

A user may revoke the Service's access in Google account settings at any time, and may manage and delete Google account data in Google Data & Privacy.

Deleting your account on the Company's Service may leave data in the Google account itself. You must manage and delete Google account data in Google account settings.

21. Naver Privacy Policy

Naver's data processing

Naver may process data in the course of social login and Maps API use.

Naver Privacy Policy: https://policy.naver.com/rules/privacy.html
Naver Security Center: https://www.naver.com/security
Naver account settings: https://nid.naver.com/user.naver

Disconnecting Naver

A user may revoke the Service's access in Naver account settings at any time.

22. Apple Privacy Policy

Apple's data processing

Apple processes data during Sign in with Apple. Apple may forward email through a Hide My Email address, and may provide a name only at the first sign-in.

Apple Privacy Policy: https://www.apple.com/legal/privacy/
Manage Apple ID: https://appleid.apple.com/

Disconnecting Apple

A user may stop using the Company's app in Apple ID settings. Deleting your account on the Service may leave data in the Apple ID itself under Apple's policy.

23. Personal Information Protection Officer and Contact

Personal Information Protection Officer

Baegugu has designated an officer who oversees personal information protection.

Category	Details
Name	Junyeong Ryu (류준영)
Title	Developer / Personal Information Protection Officer
Email	baegugu@naver.com
Response time	Within 3 business days

Personal information inquiries

For questions about personal information protection or exercising related rights, contact the officer above. The Company will act within 30 days of a request.

Personal Information Protection Commission

If you are not satisfied with the Company's handling, you may file a complaint with the Personal Information Protection Commission (https://www.pipc.go.kr/).

Reporting and counseling for personal information infringement

If you need to report or seek counseling about a personal information infringement, you may contact the institutions below.

Personal Information Dispute Mediation Committee: www.kopico.go.kr / 1833-6972
Personal Information Infringement Report Center: privacy.kisa.or.kr / 118
Supreme Prosecutors' Office: www.spo.go.kr / 1301
Korean National Police Agency: ecrm.police.go.kr / 182

Privacy officer

Name: Junyeong Ryu
Role: Developer
Email: baegugu@naver.com
Response time: Within 3 business days

Last updated: 2026-08-28