BlueX Privacy Policy

Effective date: July 1, 2025

BlueX, Inc. (the “Company”) complies with applicable laws, including the Personal Information Protection Act, while providing the BlueX service (the “Service”),and establishes and publishes this Privacy Policy to handle users’ personal information safely.This policy applies only to the BlueX service.

Article 1 (Purposes of personal information processing)

The Company processes personal information for the purposes listed below. If the purposes change, the Company will obtain separate consent or provide notice as required by law.

  1. Account registration and identity verification
    • Creating an account using an email address and phone number
    • Verifying identity, preventing duplicate accounts, and protecting accounts
  2. Providing and operating the service
    • Providing AI-based football video analysis services
    • Measuring athletes and managing physical-performance data
    • Analyzing match statistics and performance, and generating reports
    • Providing team, academy, and association management features
  3. Processing payments and refunds
    • Approving paid-service payments and managing payment records
    • Processing cancellations and refunds
    • Preventing overpayments and incorrect payments
  4. Providing AI video analysis features
    • Analyzing videos uploaded by members and providing the results
    • Improving AI models, operating the service, and enhancing quality
    • Internal research and statistics
    • Promoting the service and using information for marketing, including in de-identified or processed form

    ※ The AI analysis feature can be used only when you consent to this use.

  5. Operating customer support and resolving disputes
    • Responding to inquiries by email (contact@blue-x.ai)
    • Handling complaints and responding to disputes
    • Processing reports and checking for violations
  6. Improving the service and strengthening security
    • Analyzing access records, device information, and usage logs
    • Analyzing errors and improving quality
    • Detecting and blocking misuse, hacking, and spam
  7. Complying with applicable laws
    • Statutory retention of records related to electronic commerce
    • Providing information in response to lawful requests from investigative or supervisory authorities

Article 2 (Categories of personal information processed)

  1. Registration and required information
    • Email address, password, phone number, and nickname (or name)
    • Affiliated organization information (team name, role, and similar details)
  2. Service-use information
    • Player profile information (name, date of birth, position, jersey number, and similar details)
    • Physical measurement data (height, weight, sprint records, and similar data)
    • Match statistics data
  3. Payment and refund information
    • Payment approval information (provided by the payment gateway)
    • Payment method (card, bank account, virtual account, and similar methods)
    • Refund account information, when needed
  4. AI video analysis information
    • Football match videos uploaded by members
    • Analysis-result data and internally processed data
    • Identifiable video information, including faces, bodies, and movements shown in videos
    • Player-tracking data (location, speed, distance traveled, and similar data)
  5. Automatically collected information
    • Device information (OS, model, browser, app version)
    • Access logs (IP address, time of use)
    • Usage-behavior logs and error logs

Article 3 (Methods of collecting personal information)

  1. Entered directly during registration
  2. Generated automatically while using the service
  3. Collected through the payment gateway during payment
  4. Provided by members during customer-support inquiries
  5. Video uploaded directly by the member when using the AI analysis feature
  6. Player information registered by an organization administrator

Article 4 (Retention and use period of personal information)

  1. Member account information
    • Deleted without delay when the member withdraws
    • However, minimum information such as email address, phone number, and sanction history may be stored separately for a period as necessary to prevent misuse.
  2. Electronic-commerce records (statutory retention)
    • Contracts and subscription-withdrawal records: 5 years
    • Payment and goods-supply records: 5 years
    • Consumer-dispute records: 3 years
  3. Access logs (including IP addresses)
    • Retained for at least three months under the Protection of Communications Secrets Act
  4. AI video and analysis data
    • Retained to the extent necessary to provide and improve the service
    • Deleted immediately upon a member’s request when no statutory retention obligation applies

Article 5 (Providing personal information to third parties)

As a rule, the Company does not provide personal information to third parties. It may do so only in the following exceptional cases.

  1. Information sharing within an organization (required)
    • Recipient: the administrator of the team, academy, or association to which the member belongs
    • Purpose: player management, performance analysis, and training-plan development
    • Categories provided: player profiles, physical measurement data, match statistics, and analysis results
    • Retention period: until the member leaves the organization and related disputes are resolved
  2. Provision required by law
    • Upon a request from a court, investigative authority, or supervisory authority
    • Provided through lawful procedures

Article 6 (Entrusting personal information processing)

The Company entrusts the following providers with personal information processing to operate and provide the service.

  1. Amazon Web Services (AWS)
    • Cloud server operations, data storage, AI inference server operations, and log retention
    • Retention period: until the entrustment agreement ends
  2. Supabase (Korea region)
    • Entrusted work: database operation and storage, and authentication services
    • Retention period: until the entrustment agreement ends
  3. Vercel
    • Entrusted work: web-application hosting and deployment
    • Retention period: until the entrustment agreement ends
  4. Payment gateway
    • Entrusted work: payment processing and payment-history management

※ The Company manages and supervises entrusted providers to ensure that they handle information safely in accordance with the Personal Information Protection Act.

Article 7 (Users’ rights)

Users may exercise the following rights regarding their personal information at any time.

  • Request access, correction, or deletion
  • Request suspension of processing
  • Withdraw consent

The AI analysis feature requires consent for its use, so it cannot be used after consent is withdrawn. Requests are accepted by email (contact@blue-x.ai), and the Company will act without delay.

Article 8 (Destruction of personal information)

  1. Destroyed without delay when the retention period ends or the purpose is fulfilled
  2. Electronic files: permanently deleted in a non-recoverable manner
  3. Documents: shredded or incinerated

Article 9 (Measures to ensure personal information security)

  • Minimizing and managing access privileges
  • Encrypting important information
  • Retaining access records and preventing alteration or tampering
  • Installing security software and conducting regular inspections
  • Managing and supervising entrusted providers
  • Establishing response procedures for incidents

Article 10 (Processing of AI video analysis information)

  1. When a user uses the AI video analysis feature, uploaded videos and analysis data are necessarily used for the purposes below.
    • AI model improvement (V-JEPA, YOLO, ByteTrack, etc.)
    • Providing features and improving service quality
    • Internal research and statistics
    • Promoting the service and using information for marketing, including in de-identified or processed form
  2. Because the AI analysis feature is provided on the condition that you consent to the uses above, it cannot be used if consent is withdrawn.
  3. Members are solely responsible for uploads that infringe another person’s video, copyright, portrait, or other rights.

Article 11 (Provision upon an investigative-authority request)

When a court, investigative authority, or supervisory authority makes a request through lawful procedures, the Company may provide personal information within the requested scope as required by law. The Company assumes no separate liability for this provision.

Article 12 (Person responsible for personal information protection)

The Company appoints the person below to oversee personal information processing and handle inquiries, complaints, and remedies related to personal information.

  • Person responsible for personal information protection: Sooyong Park
  • Contact email: contact@blue-x.ai

Article 13 (Changes to this Privacy Policy)

If this Policy changes, the effective date and details of the changes will be announced in advance. Material changes will be announced at least 30 days in advance.

[Supplementary provisions]

This Privacy Policy takes effect on July 1, 2025.

Corporate name: BlueX, Inc.
Representative: Sooyong Park
Business registration number: 755-81-03668
Address: 133 Yeonhwa-ro, Baebang-eup, Asan-si, Chungcheongnam-do, Republic of Korea