1. Purpose of collecting personal information
NEWJI INC. (operator of the NEWDIH football brand and this NEWDIH APP service; "we") collects personal information to provide the service, verify identity, monitor usage, prevent abuse, improve the service, and respond to inquiries.
2. Information we collect
- Name / email / date of birth - Affiliated club / coach or player ID - Videos / training records / tactical drawings - Sign-in history / IP address (hashed) / User-Agent - Approximate location at sign-up (country and subdivision code). We store only the country/region code derived from your IP address by our hosting provider; the IP address itself is not stored. Used solely to understand where our members join from. - Inquiry contents
3. Encryption and protection
- Email is stored as HMAC-SHA256 (lookup hash) and AES-256-GCM (reversible encryption); never as plaintext. - Videos are stored on Cloudflare Stream and accessible only via signed URLs. Processed frames and thumbnail images generated for AI analysis are stored on Cloudflare R2. - All traffic is encrypted with TLS 1.2+.
4. Third-party transfers
We don't share personal data without consent, except with these service providers: - Clerk (authentication) - Cloudflare (video / image delivery / Stream & R2 storage) - Stripe (payments / future) - Anthropic (AI features) - Email provider (Resend, etc.) - External storage integrations (only when you connect them): Google Drive / OneDrive (Microsoft) / Box / Dropbox. When connected, we access video files in your own storage using an authentication token that we issue and store encrypted. - Google Calendar integration (only when you connect it). When you approve the connection with your own Google account, we access the following through the Google Calendar API: (1) the list of calendars you subscribe to (read only, solely so you can choose the target calendar), and (2) on the calendar you choose, or on a dedicated "NEWDIH" calendar we create, only the events that NEWDIH itself created (create, update and delete). We never read or modify events created by you or by other apps. The OAuth tokens we receive from Google are stored encrypted and used solely to mirror your club's schedule into your Google Calendar. We do not use information obtained from Google for advertising, do not sell or transfer it to third parties, and do not use it to train AI or machine-learning models. You can stop the integration at any time with "Disconnect" in the app; on disconnect we delete the events we created and the tokens we hold, and revoke our access on the Google side. NEWDIH's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. ・Google (이용 분석 / Google 애널리틱스). 서비스 이용 현황을 파악하기 위해 쿠키 등으로 수집한 정보를 Google에 전송합니다. 로그인 중에는 동일 이용자의 이용을 기기를 넘어 집계하기 위해 당사가 불가역적으로 변환한 식별 부호(이름·이메일 등은 포함되지 않음)를 함께 전송합니다.
쿠키 사용
당사는 본 서비스에서 다음과 같은 쿠키를 사용합니다. ・필수 쿠키: 로그인 상태 유지(Clerk), CSRF 방어, 언어 설정 등. 서비스 제공에 필수적이므로 중지할 수 없습니다. ・분석 쿠키: Google 애널리틱스(GA4)가 발행하는 쿠키(_ga 및 _ga_ 로 시작하는 쿠키). 어떤 화면이 얼마나 사용되는지 파악하여 개선에 활용하는 목적으로만 사용합니다. 광고 목적의 쿠키는 사용하지 않습니다. 분석 쿠키의 취급은 접속 지역에 따라 다음과 같이 구분합니다. ・EU・영국・EEA・스위스에서의 접속: 사전 동의를 하시기 전까지 분석 쿠키를 일절 사용하지 않습니다(옵트인). 최초 접속 시 동의를 요청하는 배너를 표시합니다. ・그 외 지역에서의 접속: 본 정책에서의 공표와 최초 접속 시의 통지를 근거로 분석 쿠키를 사용합니다. 배너의 ‘사용하지 않음’ 또는 이 페이지의 ‘쿠키 설정 변경’에서 언제든지 중지할 수 있습니다. 중지를 선택하신 경우, 이후에는 분석 쿠키를 발행하지 않으며 이미 저장된 분석 쿠키도 삭제합니다. 브라우저 설정에서 쿠키를 거부하거나 삭제할 수도 있습니다.
5. Handling of children (under 13 and aged 13-17)
Use by 13-17 year-olds requires guardian consent. When invited as a player by a club, the invitation email is sent to the guardian's address, and the guardian accepts using their own Passport. Children under 13 cannot create their own account. For a child who attends NEWDIH SOCCER SCHOOL, a parent or guardian may register the child's name, its reading and date of birth as a family child within their own account. This information is used only to confirm school enrollment and to provide school benefits and consultations, and is never shared with partner shops. The only information a shop receives is the contact details and the message that the guardian personally entered and consented to send when requesting a consultation. A guardian can delete a registered child at any time.
6. Your rights
- You may request disclosure, correction, suspension, or deletion of your personal data we hold. - Contact us via email (section 8).
7. Retention period
- Active account data: while the account is active. - After account deletion: erased or anonymized within 30 days, except where retention is required by law (e.g., 7 years for invoices). - Audit logs: 365 days.
8. Business operator and contact
Operator: NEWJI INC. (operator of NEWDIH APP) Address: 1-1-17 Minamidai, Nakano-Ku, Tokyo 164-0014, Japan Representative: Ryuji Ikuta, Representative Director Personal Information Protection Manager: Ryuji Ikuta Contact: support@newdih.com
9. Compliance with NEWDIH Guidelines
Our services operate under the NEWDIH ONLINE FOOTBALL CLUB GUIDELINE series v1.0 (12 documents). In particular, we comply with: - 02 PLAYER GUIDELINE: Player utterances and thoughts are not used for evaluation or ranking. - 03 GUARDIAN GUIDELINE: Guardians are positioned as protectors of a safe thinking environment, not as evaluators. - Each GUIDELINE is distributed via our designated channels. Contact support@newdih.com for details.