AFTER6 Privacy Policy
Effective date: October 15, 2026
AFTER6 (the "Company") operates AFTER6, an amateur sports club and league management service (the website after6.io, each club's and league's address (e.g., โโ.after6.io), and the Android and iOS apps; the "Service"). Under Article 30 of the Personal Information Protection Act ("PIPA"), the Company publishes this Privacy Policy to explain how it processes and protects personal information, and it processes only the minimum personal information needed to provide the Service.
At a glance
- We do not store email addresses or phone numbers. You can sign up only with a social account (Google, Kakao, NAVER, Apple, LINE).
- We do not use advertising or tracking tools, and we do not sell personal information.
- Game records are kept without a time limit; your name and jersey number as of each game remain in those records even after you delete your account (Article 3).
- Data is stored on servers in Japan (Tokyo) and is transferred to businesses in the United States and United Kingdom for some features (Article 7).
Contents
- Purposes of processing, items processed and retention periods
- Personal information of children under 14
- Destruction procedures and methods
- Provision to third parties
- Criteria for additional use and provision
- Outsourcing of processing
- Overseas transfer of personal information
- Security measures
- Possible disclosure of sensitive information
- Processing of pseudonymized information
- Automatic collection devices: installation, operation and refusal
- Allowing third parties to collect behavioral information
- Rights and obligations of data subjects and legal representatives
- Automated decisions
- Chief Privacy Officer
- Domestic representative
- Remedies for infringement of rights
- Video information processing devices
- Use of generative AI (AI reports)
- Mobile app permissions
- Processing of location information
- Additional privacy protection efforts
- Changes to this Privacy Policy
Article 1 (Purposes of Processing, Items Processed and Retention Periods)
(1) The Company processes personal information only for the purposes below. If a purpose changes, the Company takes the necessary measures, such as obtaining separate consent under Article 18 of PIPA. References such as "Art. 15" in the table below are to PIPA.
(2) Personal information processed without the data subject's consent
| Purpose | Items | Legal basis | Retention |
|---|---|---|---|
| 1. Sign-up and account management โ confirming intent to sign up, identifying your account, keeping you signed in, preventing misuse, confirming agreement to the Terms | Name (nickname), member ID and sign-in tokens received from the social sign-in provider; internal member ID, public identifier (10 random characters), service language and sign-up time generated by the Company; records of agreement to the Terms and Privacy Policy. Being 14 or older is confirmed at the consent step and not stored separately | Art. 15(1)(4) | Anonymized 90 days after an account deletion request. Consent records are kept in a form that no longer identifies you |
| 2. Club and league activity โ joining clubs and leagues and managing rosters, assigning roles and permissions, squad assignment, schedules and attendance, guest participation, referee and scorer assignment, transfers and awards | Clubs and leagues you belong to, role (player, staff, coach, captain, etc.), jersey number (including secondary number), position, nickname within the club, per-club profile photo, sport-specific player attributes (dominant hand or foot, etc.), staff title and bio, join and leave dates, squad membership, attendance responses and notes, guest participation requests, join, invitation and participation requests and their outcomes | Art. 15(1)(4) | Anonymized 90 days after an account deletion request (membership history: Art. 3(4)). Handled invitations and declined league participation records: 90 days after handling |
| 3. Game records, statistics and standings โ recording game results and events, calculating player and club statistics and standings, preserving records | Game events with the name and jersey number as of that game (a copy at the time of recording), appearance and attendance records, per-game and per-season player statistics, standings | Art. 15(1)(4); retention after account deletion: Art. 15(1)(6) | No time limit. Deleted together if an operator deletes that game (Art. 3(4)) |
| 4. Posts and media โ club and league news, photo and video galleries, bylaws, history, sponsor display | Text, photos and videos written or uploaded by members (which may show identifiable people), video links, attachments, author | Art. 15(1)(4) | Until deleted. After account deletion the author is shown as "Withdrawn User" |
| 5. Notifications โ in-service notification inbox, device push | Notification content (title, body, linked screen), push token, device type, app build number, notification language, last used time | Art. 15(1)(4) (push only if you allow notifications on your device) | Notifications: 30 days (pending requests until handled; service notices such as amendments to the Terms or this Policy are kept while you are a member, then anonymized). Push tokens: deleted after 270 days without use or when invalidated, or immediately on an account deletion request |
| 6. Paid Service โ managing subscription status, reflecting payment results, handling refunds and payment failures | Paying member and target club/league, plan, subscription period and status, Paddle customer, subscription and transaction IDs, payment amount, currency and time. We do not receive or store card details | Art. 15(1)(4) | Subscription and payment records are kept while you are a member and then remain only in a form that no longer identifies you (original transaction records are kept by Paddle, the seller). Raw Paddle payment result notifications: 90 days |
| 7. Safe use of the Service โ handling reports, blocking, restricting use, blocking excessive requests | Reporter, reported party, reason and outcome; block lists; suspension time and reason; admin action records; IP addresses for rate limiting | Art. 15(1)(4) and (6) | Report and action records are kept while you are a member and then remain only in a form that no longer identifies you. IP addresses for rate limiting expire automatically after minutes to hours |
| 8. Customer support โ answering inquiries and feedback, handling complaints | Content of inquiries and feedback, information about the screen from which feedback was sent, information needed to reply | Art. 15(1)(4); Article 6(1)(4) of the Enforcement Decree of the Act on the Consumer Protection in Electronic Commerce | 3 years after handling (3 years after receipt if never handled) |
| 9. Service operation and error handling โ access management, security, outage and error analysis, feature usage metering | IP address, browser and device information, sign-in sessions, usage records (feature used, success/failure, time, internal member ID), error information (error details, page URL, browser information) | Art. 15(1)(4) and (6) | Sessions: 30 days after last activity (deleted immediately on sign-out or account deletion). Usage records remain only in a form that no longer identifies you after account deletion. Error information is deleted automatically after 30 days (Sentry); web request logs are deleted automatically after the processor's (Vercel's) retention period |
| 10. Location-based features โ finding nearby clubs and venues, setting your home area | Home area (city and district) and its coordinates, current location coordinates (reduced to roughly 1 km) | Home area (city and district you enter yourself or save after automatic detection): Art. 15(1)(4) / Device's current location: consent under the Act on the Protection, Use, etc. of Location Information | The home area is kept until you change or clear it (deleted with the anonymization after account deletion). Device location is not stored (Article 4 of the Location-Based Service Terms). Records confirming the use and provision of location information: 6 months |
| 11. AI reports โ generating draft game and season reports at the request of operators of paid clubs and leagues | Art. 19 | Art. 15(1)(4) | Not stored (Art. 19) |
(3) Personal information processed with the data subject's consent
| Processing | Legal basis | Details |
|---|---|---|
| "Near me" discovery and automatic home-area detection using the device's current location | Article 19 of the Act on the Protection, Use, etc. of Location Information (consent) | Location-Based Service Terms |
| Overseas provision to the payment processor (Paddle) | PIPA Art. 17(1)(1) and Art. 28-8(1)(1) (consent) | Art. 7(3) |
We do not ask for any other optional consent (no consent to marketing messages or to AI training).
(4) How we collect: entered directly by members; received from social sign-in providers; generated automatically while the Service is used; and payment result notifications sent server-to-server by the payment processor (Paddle).
(5) Email and phone numbers: The Company does not store email addresses or phone numbers. Even if a social sign-in provider sends an email address, we do not store it, and we do not store the provider's ID token (which may contain an email address). The Company does not send email to users; payment receipts and refund notices are sent by Paddle to the email address it collects directly at checkout.
(6) Photos you choose or take when making a "card" (a shareable game or player image) in the app are processed only on your device and are not sent to the Company's servers.
(7) Since May 1, 2026, the Company does not collect date of birth, height or weight; values entered before then are deleted at anonymization.
Article 2 (Personal Information of Children Under 14)
(1) The Company does not accept sign-ups from children under 14. Users confirm that they are 14 or older at the consent step when signing up (this is not stored separately), and if a user is found to be under 14, we refuse the sign-up or delete the account. Because we do not operate a legal guardian consent process, we do not collect legal guardians' personal information.
(2) When a member such as a parent or coach posts the name, photos, etc. of a child under 14 in posts or photos, that member warrants that they are the child's legal guardian or have obtained the legal guardian's consent (Terms of Service, Article 26). A legal guardian may request deletion of information posted without consent at support@after6.io, and the Company deletes it without delay.
Article 3 (Destruction Procedures and Methods)
(1) The Company destroys personal information without delay when its retention period ends or its purpose has been achieved. However, information is kept until an investigation or inquiry for violation of law ends, or until claims or debts arising from use of the Service are settled, and information that must be kept under other laws is stored separately.
(2) Immediately on an account deletion request, the account becomes unusable, all devices are signed out, push tokens and records confirming the use and provision of location information are deleted, and we ask the social sign-in providers to unlink the account. Within 90 days you can sign in again and restore the account at after6.io/recover, or request restoration at support@after6.io.
(3) After 90 days, an automatic daily process irreversibly anonymizes the account: the name is changed to "Withdrawn User," and the profile photo (including per-club profile photos), bio, home area and coordinates, nickname, sport-specific player attributes, staff title and bio within clubs, social sign-in links and tokens, and sign-in sessions are deleted.
(4) Information that remains after account deletion โ please review this before signing up and before deleting your account.
- Game records: each game record stores the name and jersey number as of that game, and these remain. After anonymization, "Withdrawn User" is shown, while jersey numbers and records remain visible. Game records are joint records of many members, including opposing clubs and leagues, and are kept so that one person's account deletion does not change standings, statistics or game results (Terms of Service, Article 24).
- Attendance records and club membership history (membership period, jersey number, position, role) remain linked to the anonymized account.
- Posts and photos remain with the author shown as "Withdrawn User." You may delete them yourself before deleting your account.
- Consent records, usage records, report and action records, subscription and payment records and service notices remain only in a form that no longer identifies you, as proof of consent and transactions and for handling disputes.
(5) Destruction procedure and method: information to be destroyed is selected and destroyed by automatic processing; electronic files are deleted or overwritten so that they cannot be reproduced. The Company does not keep personal information in paper documents. Database backups may contain pre-destruction values during the backup retention period and are deleted automatically after that period.
Article 4 (Provision to Third Parties)
(1) The Company provides personal information to third parties only where Articles 17 and 18 of PIPA apply, such as with the data subject's consent or under a special provision of law (for example, a request from investigative authorities through lawful procedures such as a warrant). The Company does not provide personal information to third parties in Korea; provision to an overseas third party (the payment processor, Paddle) is described in Article 7(3).
(2) Information made public within the Service โ The Service shows club and league activity to other people. Depending on the visibility the member's club or league has chosen, the following information can be seen by other members or by anyone, including visitors who are not signed in. This is not provision to a third party but disclosure through the Service features the member uses.
| Screen | Information shown | Visible to |
|---|---|---|
| Public club pages (clubs on paid Club Plus or above set to public) and league pages | Name, jersey number, position, role, profile photo (including per-club profile photos), game records, statistics and standings, schedules and results, posts, photos and videos | Public on the internet (may be indexed by search engines) |
| Player profiles | Name, profile photo, bio, affiliations, jersey number and position, game and season records | Public on the internet |
| Free clubs, and clubs and leagues set to private | Same as above | Members of that club or league |
(3) On member invitation, search and permission screens, your name and public identifier are visible to users of those features, such as operators. Your home area and coordinates are not shown to anyone else and are used only to calculate distances.
Article 5 (Criteria for Additional Use and Provision)
The Company does not, on an ongoing basis, additionally use or provide personal information without the data subject's consent. If this occurs, it will publish its criteria in this Article.
Article 6 (Outsourcing of Processing)
To provide the Service, the Company outsources the processing of personal information to the businesses in Article 7(2), all of which are overseas businesses. The Company's outsourcing contracts set out the matters in Article 26 of PIPA (no processing beyond the outsourced work, safeguards, restrictions on sub-processing, management and supervision, damages), and the Company supervises the processors. Sub-processors follow the lists published in each processor's privacy policy, and the Company announces any change of processor through this Privacy Policy without delay.
Article 7 (Overseas Transfer of Personal Information)
(1) The Company transfers personal information overseas as follows and provides this information under Article 28-8(2) of PIPA. All transfers are made by encrypted transmission over the internet.
(2) Overseas outsourcing and storage โ Basis: PIPA Article 26 and Article 28-8(1)(3)
| Recipient (contact) | Country | Items | When | Purpose | Retention |
|---|---|---|---|---|---|
| Supabase Pte. Ltd. (privacy@supabase.com) | Japan (Tokyo) | Member and Service data in Article 1, uploaded photos, videos and files, live game broadcast messages | Whenever the Service is used | Operating the database, file storage and real-time communication | Retention periods in Article 1, or until the outsourcing contract ends |
| Vercel Inc. (privacy@vercel.com) | Japan (Tokyo), United States, content delivery network locations around the world close to users | Web request information (IP address, browser and device information, request URL and content), cookieless visit statistics and performance measurements | Whenever the web or app makes a request to the server | Web and API hosting, content delivery, visit statistics | The processor's retention period |
| Upstash, Inc. (privacy@upstash.com) | Japan (Tokyo) | IP addresses and internal member IDs for rate limiting; temporary storage of screen data | On request | Rate limiting (security), faster screens (cache) | Expires automatically after minutes to hours |
| Functional Software, Inc. (Sentry) (compliance@sentry.io) | United States | Error details, page and request URL, browser and device information, IP address | When an error occurs | Diagnosing and fixing errors | 30 days |
| Google LLC โ Firebase Cloud Messaging (contact form at https://policies.google.com/privacy) | United States and elsewhere | Push tokens, notification titles and bodies (which may include names and club names) | When notifications are sent | Sending device push notifications | According to Google's policies after delivery |
| Google LLC โ Google Maps Platform (contact form at https://policies.google.com/privacy) | United States and elsewhere | City and place search terms, location coordinates (roughly 1 km) when "Set to current location" is used, map request information in the Android app | When searching for or setting a location, or showing a map | Converting between addresses and coordinates, place search, map display | According to Google's policies after processing |
| Google LLC โ Gemini API (contact form at https://policies.google.com/privacy) | United States and elsewhere | AI report input information in Article 19 | When an operator requests an AI report | Generating draft AI reports | Not stored by the Company; not used by Google for model training (Article 19) |
(3) Overseas provision to a third party โ payment processor (reseller)
| Item | Details |
|---|---|
| Legal basis | PIPA Art. 17(1)(1) and Art. 28-8(1)(1) (consent) โ collected separately each time you start a payment, with a checkbox in the payment confirmation window; payment does not start unless it is checked |
| Recipient | Paddle.com Market Limited (United Kingdom, privacy@paddle.com) |
| Country | United Kingdom (other processing locations follow Paddle's privacy policy) |
| Items provided | Internal member ID, internal ID of the club or league being paid for, Paddle customer and subscription IDs |
| When and how | Through server-to-server calls when a paid plan checkout starts and when a subscription is changed or cancelled, and through the Paddle.js script on the web checkout and on signed-in web screens of members with a payment history |
| Purpose | Subscription billing, tax calculation, receipts and refunds; notices about payment failures and card expiry |
| Retention | According to Paddle's privacy policy and applicable law |
| Note | As the seller (Merchant of Record), Paddle collects email, name, billing country and payment method directly on the checkout screen; the Company does not receive or store card details. |
(4) Social sign-in: When you sign in with the social account you choose (Google LLC and Apple Inc. (United States), LY Corporation (LINE, Japan), Kakao Corp. and NAVER Corp. (Korea)), you authenticate directly on that provider's screen and the Company receives the result (Art. 1, row 1). The only information the Company sends to providers is the sign-in request and, on account deletion, the sign-in token so that the link can be revoked.
(5) How to refuse overseas transfer and the effect of refusal
- Transfers to Supabase, Vercel, Upstash and Sentry are the foundation on which the Service runs, so if you refuse them you cannot use the Service. You can delete your account on the web (Profile โบ Settings โบ Delete account) or in the app (Settings โบ Delete account), or request deletion at support@after6.io.
- Push notifications (Firebase) are not transferred if you turn notifications off in your device or app settings; the in-service notification inbox remains available.
- Location search and maps (Google Maps) are not transferred if you do not enter a home area or do not grant location permission; only the "Near me" feature is limited.
- Requests to exclude your name from AI report input (Gemini) can be sent to support@after6.io and are reviewed case by case (Article 19).
- Provision to the payment processor (Paddle) does not occur unless you make a paid purchase; free services remain available.
Article 8 (Security Measures)
- Managerial measures: limiting personal information processing rights to the representative (Chief Privacy Officer) and the minimum number of operating accounts, keeping and reviewing operator action records and access logs, and supervising processors.
- Technical measures: encrypting all communication and sign-in tokens, checking access rights on the server according to each club's and league's roles, blocking excessive requests, blocking direct external access to the database, and not attaching member identities to error reports.
- Physical measures: data is stored in cloud providers' data centers and is subject to their physical security, such as access control; the Company does not keep personal information in paper documents or on removable storage media.
Article 9 (Possible Disclosure of Sensitive Information and How to Keep It Private)
The Company does not collect sensitive information or unique identifiers. Content that members post themselves is visible according to the visibility of that post, so please do not post information you do not want disclosed, or post it in a private Organization.
Article 10 (Processing of Pseudonymized Information)
The Company does not process pseudonymized information. If it begins to do so, it will add the purpose, items, period and safeguards to this Privacy Policy and give notice beforehand.
Article 11 (Automatic Collection Devices: Installation, Operation and Refusal)
(1) The Company uses cookies (small pieces of information a website stores in your browser) and device storage for the following purposes, and does not use cookies or advertising identifiers for advertising or tracking.
| Purpose | Retention | If refused |
|---|---|---|
| Keeping you signed in | 30 days after last activity, or until sign-out | Cannot sign in |
| Sign-in security checks; telling whether a screen was opened inside the app | 10 minutes to until the app screen is closed | App sign-in and screens limited |
| Current location for "Near me" | 1 hour | "Near me" limited |
| Home area, discovery settings, last club or league viewed, dismissed notices | Up to 1 year (dismissed notices: until browser data is cleared) | Settings are not remembered |
| Paddle customer ID used for payment failure notices | Until the browser tab is closed | โ |
| Temporary storage of app screen data | 1 day | โ |
(2) Web visit statistics and performance measurement (Vercel) do not use cookies and count visits in a way that does not identify specific individuals.
(3) You can refuse or delete cookies in your browser settings, and the app's device storage is erased when you delete the app. If you refuse the sign-in cookie, you cannot use services that require sign-in.
Article 12 (Allowing Third Parties to Collect Behavioral Information)
(1) The Company does not do targeted advertising and does not allow advertisers to collect behavioral information. However, the following external scripts and embeds run on web screens, and those businesses may use their own cookies.
- Paddle.js (Paddle.com Market Limited) โ checkout and signed-in web screens of members with a payment history; payment processing and notices about payment failures and card expiry
- Google Maps embeds (Google LLC) โ screens showing venue maps
- YouTube and Vimeo video embeds (Google LLC, Vimeo, Inc.) โ screens with videos. YouTube is loaded in privacy-enhanced mode and Vimeo with its do-not-track setting
(2) Cookies from these scripts and embeds can be blocked as described in Article 11(3); in that case, payment, maps and videos on those screens may be limited.
Article 13 (Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them)
(1) Data subjects may at any time request access to, correction, deletion or suspension of processing of their personal information, or withdraw consent. Minors aged 14 or older may exercise their rights themselves or through a legal representative.
| What you want to do | How |
|---|---|
| View or edit my information (name, photo, bio, home area, sports of interest) | Web: Profile โบ Settings; app: Settings โบ Profile |
| Edit my information within a club (jersey number, position, nickname) | Position and in-club nickname: yourself, in web Profile โบ Edit club profile or app Profile โบ Edit. Jersey number: the club's operator, or support@after6.io |
| Correct or delete game records about me | The club's or league's operator, or support@after6.io |
| Turn off push notifications | App settings or device settings |
| Withdraw consent to location information | Article 10 of the Location-Based Service Terms |
| Exclude my name from AI report input (reviewed case by case) | support@after6.io (Article 19) |
| Delete my account | Web: Profile โบ Settings โบ Delete account; app: Settings โบ Delete account; guide page after6.io/account-deletion |
| Get a copy of my information | support@after6.io |
(2) Rights may also be exercised through an agent, such as a legal representative or a person authorized by you; in that case, a power of attorney in the form of [Annex 11] of the Notice on Methods of Processing Personal Information must be submitted.
(3) The Company verifies that the requester is the data subject or a legitimate agent and replies within 10 days of receiving the request. Some rights may be restricted under applicable law.
Article 14 (Automated Decisions)
The Company does not make decisions that significantly affect data subjects' rights or obligations using fully automated systems. AI reports (Article 19) are drafts that operators review and publish and are not automated decisions.
Article 15 (Chief Privacy Officer)
As a sole proprietorship, the Company's Chief Privacy Officer handles privacy work and complaints personally. Please contact us below with any privacy inquiries, complaints or requests for remedies; we answer without delay.
- Chief Privacy Officer โ Name: Seyeon Park / Title: Representative / Email: support@after6.io/ Phone: 0502-1946-2243 / Address: 29 Yeonhyeon-ro, Manan-gu, Anyang-si, Gyeonggi-do, Republic of Korea
- Customer support โ support@after6.io / "Send feedback" in the Service
Article 16 (Domestic Representative)
Because the Company is a business with an address in Korea, it does not designate a domestic representative (not applicable).
Article 17 (Remedies for Infringement of Rights)
To resolve disputes or obtain counseling or other relief for infringement of personal information, data subjects may file reports or request counseling with the following bodies (in Korea).
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
- Public Prosecution Service: 1301 (www.spo.go.kr)
- Korean National Police Agency: 182 (ecrm.police.go.kr)
Article 18 (Video Information Processing Devices)
The Company does not operate fixed or mobile video information processing devices (not applicable). Game videos uploaded by members are handled as posts under Article 1.
Article 19 (Use of Generative AI (AI Reports))
(1) At the request of club and league operators on paid plans (Club Plus, League Pro), the Company uses generative AI to create drafts of reports and reviews based on the records of finished games and periods (weekly, monthly, season), and fills them into the news editor. A draft becomes a post only when the operator reviews, edits and publishes it, and published posts carry a "Written with AI assistance" label.
(2) The information sent to the AI is selected automatically by the Company from game records; there is no free-form input from users.
| Sent | Not sent |
|---|---|
| Names of clubs, leagues, squads, divisions and seasons; game times, scores and results; game events (goals, assists, etc.) with the players' names and jersey numbers; standings; names, affiliations and statistics of top players; style and perspective settings | Internal member IDs, public identifiers, profile photos, location, payment information, private posts |
(3) Generation is outsourced to Google LLC's Gemini API (paid API) (Article 7(2)), and Google does not use the inputs or outputs to train its models (Gemini API Additional Terms of Service โ Paid Services, https://ai.google.dev/gemini-api/terms). Google may log inputs and outputs for a limited period to monitor for prohibited use. The Company also does not use AI report inputs or outputs to train AI models.
(4) The Company does not store generated drafts; it returns them only to the requesting operator's screen. For cost management and incident response, it keeps usage records of requests: success or failure, the requester, the target club or league, and the volume processed (Art. 1, row 9).
(5) Players may ask, at support@after6.io, that their name not be used in AI report input; the Company reviews each request individually. If a published report contains untrue or inappropriate content, please tell us using the report feature or at support@after6.io (Terms of Service, Article 14). AI report input does not include sensitive information, and all players in game records are members aged 14 or older.
Article 20 (Mobile App Permissions)
All app permissions are optional and are requested the first time you use the related feature. If you do not grant them, you can still use the Service other than that feature, and you can change them at any time in your device settings. The app does not use the microphone or background location.
- Location (only while using the app): finding nearby clubs and venues, setting your home area automatically
- Notifications: push notifications such as join approvals, schedules and attendance requests
- Photos (library): uploading profile photos and post images, choosing photos for cards
- Camera: taking photos for cards (processed only on the device)
Article 21 (Processing of Location Information)
The Company has filed a report of its location-based service business under the Act on the Protection, Use, etc. of Location Information (filing No. 1661, filed September 30, 2026 with the Korea Media and Communications Commission). The device's current location is used only after you agree to the separate Location-Based Service Terms, once when you tap a location button, at a precision reduced to roughly 1 km; its collection, use, retention and your rights are governed by those terms. Location information is not shown to other users.
Article 22 (Additional Privacy Protection Efforts)
- We do not collect email, phone numbers or dates of birth; sign-up is by social account only, and location is handled only at roughly 1 km precision.
- We do not use advertising or tracking tools or advertising identifiers, and we do not sell personal information.
- All app permissions are optional, and the app does not use the microphone or background location.
Article 23 (Changes to This Privacy Policy)
(1) This Privacy Policy applies from October 15, 2026.
(2) When the Company changes this Privacy Policy, it announces the change in the Service 7 days before it takes effect. Changes that significantly affect data subjects' rightsโsuch as changes to the items or purposes of processing, or provision to third parties or overseas transfersโare announced 30 days before they take effect together with a before-and-after comparison table, and members are notified individually through in-service notifications and push notifications.
(3) Previous versions of this Privacy Policy (applied October 1โ14, 2026 and March 1 โ September 30, 2026) are available on request at support@after6.io.