This document is provided in English and Korean.

Swing Level Up Privacy Policy

Effective date: October 11, 2026

1. Overview

1.1 INXIGHT ("we") operates the tennis app "Swing Level Up" for iOS, Android and Apple Watch (the "App") and the website swinglevel.inxight.co.kr (the "Website").

1.2 In the App, tennis players post and join games, lessons, guest spots and events, get partner and dating introductions, chat, buy and sell gear in the Market, and use the scoreboard, records and clubs.

1.3 We comply with the Personal Information Protection Act of Korea, the Act on the Protection and Use of Location Information, and other applicable laws.

1.4 The App is for adults only (section 9).

2. Information we process

2.1 Account

• Sign in with Apple: the user identifier Apple provides and an Apple token used to revoke the link when you delete your account. Your email address if Apple provides it.
• Sign in with Google: the user identifier Google provides, your verified email address, and your Google account name (used only as your first display name).
• Email sign-in: your email address. Sign-in codes are stored only as hashes and expire after 10 minutes.
• Sign-in tokens: stored only as hashes. They expire after 180 days.
• Display name and friend invite code.

2.2 Profile

• Required: nickname, birth year (to confirm you are an adult), and home area.
• Home area: an area name (for example "Geumjeong-gu, Busan"), a radius, and, if you choose to use your current location, its coordinates (latitude and longitude).
• Optional: gender, self-rated level (such as NTRP), years playing, available times, preferred formats (singles, doubles, lessons and so on), playing style, a short bio, a profile photo, language, time zone and country.
• Introduction settings (optional): whether partner introductions are on, whether dating introductions are on, and dating preferences (gender and age range).

2.3 Identity verification (only to turn on dating introductions)

• From the result the identity verification provider sends us, we store your date of birth, gender and the time of verification.
• We do not store your name or connecting information (CI) in plain text. We store only irreversible hashes, used only to stop one person from verifying several accounts.
• We do not receive your phone number.
• We will name the identity verification provider in this policy when it is connected. Until then, dating introductions cannot be turned on.

2.4 Activity

• Posts: type (game, lesson, guest, event or Market), title, text, date and time, venue name and coordinates, level conditions, cost note, and for the Market, price, item condition and photos.
• Joining: requests, waitlist, approvals, cancellations and their times, and day-before confirmations.
• Check-in: when you tap check-in, your device location is sent to see whether you are within the court radius. We do not store the coordinates, only whether you were within the radius and the time.
• Attendance marks, match results (set scores and teams), scoreboard records, head-to-head records and level history.
• Reviews: manner and level ratings others give you and that you give others.
• Reliability: attendance rate, late cancellations and no-shows, disputes and sanctions.
• Introductions: daily cards, likes and passes, greeting messages and matches.
• Clubs: clubs you join, meeting attendance votes, pairings, and dues marks (amount and note; no money moves through the App).
• Courts: courts you suggest, court reviews and booking-open alerts.
• Coach or venue verification (if you apply): your application and the proof photos you upload.
• Reports and blocks: reason, note, target, and for a reported message, a copy of that message. Your block list.

2.5 Chat

• Messages in one-to-one and group chats, photos you send, send times and read marks.
• We automatically filter banned words and attempts to move contact outside the App. Filtered messages are not delivered.

2.6 Photos

• Photos you add to your profile, posts, Market listings, chats and verification applications.
• Our server re-encodes each photo, removing all metadata including EXIF and GPS location, and resizes it to 1024 pixels on the long side.

2.7 Apple Watch swing records

• Swing sensor data, swing times, speed estimates, and workout data such as heart rate and calories stay on your Apple Watch and iPhone. They are not sent to our server.
• Only when you tap "Share to friends & clubs" do we receive a summary: sport, start and end time, swing count, and swing counts by type (forehand, backhand, serve, volley, other).
• Health data (HealthKit) is never sent to our server, never used for advertising or marketing, and never shared with third parties.

2.8 Purchases

• From the transaction information the App Store or Google Play provides: transaction ID, original transaction ID, product, expiry, refund or revocation time, and environment.
• Your Ball (consumable) balance history.
• We never receive card numbers or other payment details. Apple and Google process payments.

2.9 Notifications

• Push token, device platform (iOS or Android) and notification language.
• Type and date of notifications we sent (to cap daily notifications).

2.10 Information created automatically

• Your IP address is used briefly in server memory to limit excessive requests. It is not stored with your account data.
• Our web server may keep access logs (IP address, time and requested path).
• Last active time.
• The App contains no advertising identifier, advertising SDK or analytics SDK.

3. Purposes

• Sign-up and sign-in, adult confirmation and preventing fraudulent accounts.
• Listing posts and calculating distance to nearby posts, recommending posts and players, and sending alerts.
• Joining, waitlist promotion, day-before confirmation, check-in and attendance.
• Calculating levels (self-rating, results confirmed by both sides, peer reviews and verified coach assessments).
• Showing attendance and manners, and applying no-show sanctions.
• Partner and dating introductions and matches, and identity checks for dating.
• Providing chat, handling reports, and preventing fraud, sexual harassment, harassment and other abuse.
• Club meetings, pairings and dues records, and court information.
• Providing paid features, checking subscription status and applying refunds.
• Answering inquiries and meeting legal obligations.

4. What other members can see

• Profile: nickname, age range (not your birth year), level, attendance and manners, badges, playing style, area name and photo.
• Your home area coordinates and radius are never shown to others. They are used only to calculate distance.
• Posts: the post and its venue, and participants' public profiles.
• Your dating settings and preferences, and the date of birth and gender from identity verification, are never shown to others. Only a "Verified" badge is shown.
• Shared swing summaries: only your friends and members of your clubs.
• Chats: only members of that chat.
• Members who block each other cannot see each other's profiles, posts or messages.

5. Retention and deletion

5.1 Account and activity information is kept until you delete your account.

5.2 Chat messages are kept for 365 days from sending and then deleted automatically every day. Reported messages are kept until the report is resolved.

5.3 Group chats are archived 7 days after the game ends. Archived messages are still deleted after the period in 5.2.

5.4 When you delete your account:

• Your profile, identity verification result, posts, joining, attendance, review, reliability and sanction records, introductions and matches, club records, shared swing summaries, reports and blocks, push tokens and Ball history are deleted right away.
• Photo files you uploaded are deleted right away.
• Messages you sent are replaced with "Deleted message" and their photos are removed. Only that placeholder remains on other members' screens.
• Clubs you own are deleted.
• If you used Sign in with Apple, the Apple link is revoked.
• Purchase records (5.5) are unlinked from your account and kept.

5.5 Purchase records (transaction ID, product, period and refunds) are kept for 5 years as required by the Korean Act on Consumer Protection in Electronic Commerce. They are used only to prevent double grants and to handle refunds and disputes.

5.6 Web server access logs are kept for 3 months as required by the Korean Protection of Communications Secrets Act.

5.7 Check-in coordinates and the current location used for listing posts are never stored, so there is nothing to delete.

5.8 Deleted electronic files are erased in a way that cannot be recovered.

6. Sharing with third parties

6.1 We do not sell your personal information or provide it to other companies.

6.2 We may provide information to the extent required by law or when law enforcement requests it through legal procedures.

6.3 Information visible to other members (section 4) is shown as part of the service and is not a provision to third parties.

7. Service providers and international transfers

7.1 We run our own servers. Accounts, profiles, posts, chats and photos are stored on our servers in the Republic of Korea. Sign-in code emails are sent from a mail server we run ourselves.

7.2 The following companies process information to the extent needed to provide the service.

| Recipient | Information | Purpose | Country and method |
|---|---|---|---|
| Apple Inc. | Sign in with Apple identifier, purchase transactions, push token and notification content | Sign in with Apple, App Store payments, iPhone push notifications | United States and others. Sent over the network at sign-in, purchase and notification |
| Google LLC | Google sign-in identifier, purchase transactions, push token and notification content | Google sign-in, Google Play payments, Android push notifications (FCM) | United States and others. Sent over the network at sign-in, purchase and notification |
| Cloudflare, Inc. | IP address and request information | Delivering the App and Website, security (blocking attacks) | United States and other Cloudflare data centers. Passed through on each connection |
| Identity verification provider | Information needed for verification (entered by you on the provider's screen) | Adult and identity confirmation | Announced when connected |

7.3 Retention follows each company's policy. In its relationship with us, information is deleted without delay once the purpose is fulfilled.

7.4 If you do not want these transfers, you can avoid the related feature (that sign-in method, push notifications or paid features). The App cannot be used without Cloudflare. You can turn off push notifications in your device settings.

8. Location

8.1 The App asks for location only while you are using it. It does not use background location.

8.2 Features that use location:

• Nearby posts and courts: your current location is sent to calculate distance. It is not stored.
• Check-in: checks whether you are within the court radius (200 m by default). Only the result is stored, not the coordinates.
• Home area: if you tap "Use my current location", those coordinates are saved to your profile. They are used for recommendations and distance only; others see only the area name. You can type an area name instead.
• Post venue: the court coordinates the host sets are shown with the post.

8.3 You can use the App without location permission. Lists then use your home area, and check-in is not available.

8.4 You can turn off location permission in device settings at any time, and remove stored coordinates by changing your home area or deleting your account.

8.5 We use location information only to provide location-based features and do not provide it to third parties.

9. Adults only — children and minors

9.1 Only adults can sign up: 19 or older in Korea and 18 or older elsewhere.

9.2 We check your age from your birth year at sign-up and refuse sign-up below the limit. Dating introductions require a further check through identity verification.

9.3 We do not knowingly collect information from minors. If we learn a minor has signed up, we suspend the account and delete the information.

10. App permissions

| Permission | Used for | Required |
|---|---|---|
| Location (while using the App) | Nearby posts and courts, check-in, home area | Optional |
| Photo library (read) | Adding photos to profile, posts, Market listings and chats | Optional |
| Photo library (add) | Saving match result cards | Optional |
| Camera | Taking profile and Market photos | Optional |
| Notifications | Alerts for requests, confirmations, chats and introductions | Optional |
| Health (Apple Watch) | Workouts, heart rate and calories | Optional |

You can turn permissions off in device settings at any time. Only the related feature stops working.

11. Your rights

11.1 You can access, correct or delete your personal information and ask us to stop processing it at any time.

11.2 In the App you can:

• Edit your profile: profile button (top right) > Edit profile.
• Delete your account: profile button (top right) > Settings > Delete account. Deletion is immediate (5.4).
• Turn dating or partner introductions off, and block or report members.
• Delete a shared swing summary: deleting the record in Records also deletes its summary on our server.

11.3 For anything you cannot do in the App, email us (section 14). We will respond within 10 days after confirming your identity.

11.4 Information we must keep by law (5.5 and 5.6) may be kept for that period even if you ask for deletion. We will tell you why.

12. Security

• Traffic between the App and our servers is encrypted (HTTPS and WSS).
• Sign-in tokens, sign-in codes, and the name and CI from identity verification are stored only as hashes.
• Administrator access requires a password and a one-time code, and every administrator request is logged.
• Reading chats to handle a report is limited to the reported message and the messages around it.
• Location and other metadata are removed from photos.
• We keep the number of people who can access personal information to a minimum.

13. Website

• The Website does not use cookies or analytics.
• The Website is served through Cloudflare, which may process technical information such as IP addresses for security and delivery.

14. Privacy officer and contact

• Company: INXIGHT (business registration 545-12-01107)
• Address: 4F, 225 Geumjeong-ro, Geumjeong-gu, Busan, Republic of Korea
• Privacy officer and location information officer: Changmin Lee (Owner)
• Email: inxight@naver.com

15. Changes

15.1 We will announce changes in the App and on the Website 7 days before they take effect, or 30 days before for changes that materially affect your rights, such as the information collected, purposes or sharing.

15.2 Previous versions are available on the Website.

This policy takes effect on October 11, 2026.