WODMate Privacy Policy

Effective Date: February 11, 2025 | Last Updated: February 11, 2025

Heewon Noh (hereinafter "Developer") values the personal information of WODMate (hereinafter "App") users and complies with the Personal Information Protection Act and other relevant laws. This Privacy Policy explains how personal information provided by users is used and what measures are taken to protect it.

1. Personal Information Collected and Collection Methods

1-1. Information Collected During Registration

Collection method: Directly entered by the user within the app

Item	Required/Optional	Purpose
Email address	Required	Account creation, login, identity verification
Password	Required	Account security
Nickname (display name)	Required	User identification in the community
Fitness level	Required	Personalized workout recommendations
Fitness goals	Required	Personalized workout recommendations

1-2. Information Collected During Service Use

Item	Required/Optional	Purpose
Profile photo	Optional	Profile display
Bio	Optional	Profile display
Workout records (WOD results)	Optional	Workout tracking and leaderboard
Personal records (PR)	Optional	Personal record tracking and progress analysis
Posts, comments, likes	Optional	Social feed features
Post attachments (photos)	Optional	Social feed features
Box (gym) information	Optional	Box community features
Payment records (transaction ID)	Optional	Premium subscription management

1-3. Automatically Collected Information

Service usage logs (e.g., number of AI workout generation requests)
Advertising identifier (IDFA/GAID) - for personalized ads (collected only with user consent)
Push notification token - for sending notifications

 Information We Do Not Collect: WODMate does not collect sensitive device information such as location data, contacts, or call logs.

2. Purpose of Personal Information Use

Collected personal information is used solely for the following purposes:

Account management: Registration, identity verification, account management
Service provision: Workout tracking, personal record management, leaderboard, badge system
Social features: Feed posts, comments, likes, community activities
AI workout generation: Personalized WOD creation (no personally identifiable information is sent to AI)
Box management: Gym community creation and management
Payment processing: Premium subscription management and receipt verification
Service improvement: Quality enhancement and issue resolution

3. Outsourcing of Personal Information Processing

WODMate outsources personal information processing for service provision as follows:

Service Provider	Outsourced Tasks	Retention Period
Supabase Inc. (USA)	Database operation, user authentication, file storage	Until contract termination or account deletion
Google LLC (USA)	AI workout generation via Gemini API (no personally identifiable information included)	Temporarily processed during API calls
Resend Inc. (USA)	Email delivery (OTP verification emails)	Destroyed upon delivery
Expo (37signals LLC, USA)	Push notification delivery (push tokens)	Destroyed upon delivery

4. Provision of Personal Information to Third Parties

WODMate does not provide personal information to third parties as a rule. However, information may be provided in the following cases:

Recipient	Information Provided	Purpose
Apple Inc.	Apple ID auth token, name (optional), email (optional or private relay address)	Sign in with Apple authentication
Apple Inc.	Payment information, transaction ID	In-app purchase processing and receipt verification
Google LLC	Google account auth token, name, email	Google Sign-In authentication
Google LLC	Payment information, transaction ID	In-app purchase processing and receipt verification
Google LLC (AdMob)	Advertising identifier (IDFA/GAID), device information	Ad serving and personalized advertising

 Social Login Notice: When using Sign in with Apple, users can choose to share a private email relay address instead of their real email. When using Google Sign-In, the name and email registered with the Google account are shared. In both cases, passwords are never transmitted to WODMate.

 Privacy Protection for AI Workout Generation: When generating workouts through AI, only workout parameters such as type, duration, and difficulty are transmitted. No personally identifiable information such as email or name is ever sent.

5. International Transfer of Personal Information

WODMate transfers user personal information overseas for service operation:

Recipient	Country	Information Transferred	Method
Supabase Inc.	USA	User information, workout records, posts, images	Network transmission
Google LLC	USA	Workout parameters (de-identified)	Network transmission
Resend Inc.	USA	Email address (OTP verification)	Network transmission
Expo (37signals LLC)	USA	Push tokens, notification content	Network transmission

6. Retention and Use Period of Personal Information

User personal information is retained during the service usage period and promptly destroyed upon account deletion. However, information required by law may be retained for the legally mandated period.

Item	Retention Period	Legal Basis
Payment and subscription records	5 years	Act on Consumer Protection in Electronic Commerce
All other personal information	Destroyed promptly upon account deletion	Personal Information Protection Act

7. Procedures and Methods for Destroying Personal Information

Upon account deletion, the following data is immediately destroyed, except for information required to be retained by law:

Account information (email, nickname, profile photo)
Workout records (WOD results, personal records)
Social data (posts, comments, likes)
Badge and achievement data
All uploaded images (profile photos, post images)
Box membership information

8. Measures to Ensure Security of Personal Information

WODMate takes the following measures to securely protect user personal information:

Password encryption: Passwords are stored using one-way bcrypt hashing
Transmission encryption: All data transmissions use HTTPS (TLS) protocol
Storage encryption: Data stored on servers and devices is encrypted
Access control: Row Level Security (RLS) policies ensure users can only access their own data
Email privacy: Email addresses are protected from exposure to other users
Input validation: Security validation including text length limits and file type/size restrictions

9. User Rights and How to Exercise Them

Users may exercise the following rights at any time:

View personal information: Check your information on the in-app profile page
Modify personal information: Edit nickname, profile photo, bio, etc. through the profile edit feature
Delete account: Delete your account in app settings (all data is immediately deleted)
Request processing suspension: Contact us using the information below

10. Device Access Permissions

WODMate may request the following device access permissions for service provision:

Permission	Purpose	Required
Photo Library	Upload profile photos and post images	Optional
Storage (Android)	Access image files	Optional
Notifications	Workout reminders and community notifications	Optional
Vibration	Haptic feedback for timer alerts	Optional

All permissions are optional. The service functions normally without granting these permissions, except for features that specifically require them.

11. Protection of Children's Personal Information

WODMate does not collect personal information from children under the age of 14. If we become aware that a child under 14 has registered for the service, we will immediately delete the account and all associated information.

12. Changes to the Privacy Policy

If this Privacy Policy is changed, we will notify users through in-app announcements or this page. The revised policy takes effect 7 days after posting.

13. Privacy Officer and Contact Information

Category	Details
Privacy Officer	Heewon Noh
Email	dirndhkd97@gmail.com

For inquiries, complaints, or remedies related to personal information, please contact us using the information above. We will respond to inquiries as promptly as possible.