→ Privacy Policy

Privacy Policy

Effective Date: June 9, 2026 · ARICO Group (G.G KINGDOM)

ARICO Group (G.G KINGDOM, "we", "us", "our") operates the ARICO Platform and mobile applications ("Service"). This Privacy Policy explains how we collect, use, and protect your personal information in compliance with the Personal Information Protection Act of Korea (PIPA) and the Act on the Protection of Personal Information of Japan (APPI).

1. Information We Collect

• Required — email, password (one-way hashed), name, nickname
• Optional — phone, gender, date of birth, organization, bow type (recurve/compound/barebow), profile photo, address
• Social login — email, name, and unique identifier from Google, Kakao, LINE, or Apple
• Generated through use — practice records, competition entries, scores, target photos, team chat messages
• Payment — transaction ID, PG token, receipt URL (we never store raw card numbers)
• Automatic — OS/app version, device model, IP address, advertising ID, FCM push token, cookies, access logs

2. Purpose of Collection and Use

• Identify and authenticate users, manage account creation and termination
• Provide practice tracking, competition entry, team matching, chat, and notifications
• Provide AI coaching, score analytics, and statistics
• Process Premium subscription payments and issue receipts
• Send FCM push notifications (announcements, deadlines, team alerts)
• Respond to inquiries and handle disputes
• Prevent fraud and respond to security incidents
• Comply with legal obligations

3. Data Retention

• Account information — until you delete your account
• E-commerce transaction records — 5 years (Korean E-commerce Act, Japanese 特定商取引法)
• Payment records — 5 years (Korean Electronic Financial Transactions Act)
• Customer support records — 3 years
• Access logs and fraud records — 3 months (Korean Communications Act)
• Hashed email after deletion (fraud prevention) — 90 days

4. Sharing With Third Parties

We do not share your personal information with third parties without your consent, except:

• When you have given prior consent
• When required by law or lawful request from authorities

5. Third-Party Processors

Processor	Purpose	Region
Microsoft Azure	Cloud infrastructure and database hosting	Korea / Japan
Google (Firebase)	Push notifications (FCM), analytics	United States
SmugMug	Target / gallery photo hosting	United States
OpenAI	AI coaching (text generation for posture analysis)	United States
Square / PayPal / Toss Payments	Subscription payment processing	US / Korea
Google / Kakao / LINE / Apple	Social login authentication	US / Korea / Japan
SendGrid / Resend	Email delivery (verification, notices)	United States

6. Your Rights

• Access and edit your data (Web "My Page" or app "Edit Profile")
• Request suspension, deletion, or objection
• Delete your account and all personal data (My Page → Delete Account, or email us)
• Opt out of marketing communications

7. Security Measures

• Passwords stored using PBKDF2 + Salt one-way hashing
• TLS 1.2 or higher encryption in transit
• Access controls and audit logging
• Physical security — 24/7 monitored cloud data centers

8. Children Under 14

We do not knowingly collect personal information from children under 14. If we learn that a child under 14 has registered, we will delete the account immediately.

9. Cookies

We use cookies for login persistence, language preferences, and usage analytics. You may disable cookies in your browser settings, but some features may not work properly.

10. Data Protection Officer

• Officer — Kim Deuk-rim (G.G KINGDOM)
• Email — del@ggkingdom.com
• Contact page — /contact

11. Changes to This Policy

• 2026-05-26 — Initial draft
• 2026-06-09 — Official release (added Apple Sign-In, FCM, OpenAI, Children Under 14, and Dispute Resolution sections)

This policy is provided in Korean, Japanese, and English. In the event of any inconsistency, the Korean version shall prevail.