1. Purpose of collecting personal information
NEWJI INC. (operator of the NEWDIH football brand and this NEWDIH APP service; "we") collects personal information to provide the service, verify identity, monitor usage, prevent abuse, improve the service, and respond to inquiries.
2. Information we collect
- Name / email / date of birth - Affiliated club / coach or player ID - Videos / training records / tactical drawings - Sign-in history / IP address (hashed) / User-Agent - Approximate location at sign-up (country and subdivision code). We store only the country/region code derived from your IP address by our hosting provider; the IP address itself is not stored. Used solely to understand where our members join from. - Inquiry contents
3. Encryption and protection
- Email is stored as HMAC-SHA256 (lookup hash) and AES-256-GCM (reversible encryption); never as plaintext. - Videos are stored on Cloudflare Stream and accessible only via signed URLs. Processed frames and thumbnail images generated for AI analysis are stored on Cloudflare R2. - All traffic is encrypted with TLS 1.2+.
4. Third-party transfers
We don't share personal data without consent, except with these service providers: - Clerk (authentication) - Cloudflare (video / image delivery / Stream & R2 storage) - Stripe (payments / future) - Anthropic (AI features) - Email provider (Resend, etc.) - External storage integrations (only when you connect them): Google Drive / OneDrive (Microsoft) / Box / Dropbox. When connected, we access video files in your own storage using an authentication token that we issue and store encrypted. - Google Calendar integration (only when you connect it). When you approve the connection with your own Google account, we access the following through the Google Calendar API: (1) the list of calendars you subscribe to (read only, solely so you can choose the target calendar), and (2) on the calendar you choose, or on a dedicated "NEWDIH" calendar we create, only the events that NEWDIH itself created (create, update and delete). We never read or modify events created by you or by other apps. The OAuth tokens we receive from Google are stored encrypted and used solely to mirror your club's schedule into your Google Calendar. We do not use information obtained from Google for advertising, do not sell or transfer it to third parties, and do not use it to train AI or machine-learning models. You can stop the integration at any time with "Disconnect" in the app; on disconnect we delete the events we created and the tokens we hold, and revoke our access on the Google side. NEWDIH's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. ・Google（访问分析 / Google Analytics）。为了了解服务的使用情况，我们会将通过 Cookie 等获取的信息发送给 Google。在您登录期间，为了将同一用户在不同设备上的使用合并统计，我们还会一并发送由本公司不可逆转换的标识符（不包含姓名、电子邮件等）。
Cookie 的使用
本公司在本服务中使用以下 Cookie。 ・必需 Cookie：保持登录状态（Clerk）、CSRF 防御、语言设置等。这些对于提供服务不可或缺，无法停用。 ・分析 Cookie：由 Google Analytics（GA4）发行的 Cookie（_ga 以及以 _ga_ 开头的 Cookie）。仅用于了解各页面的使用情况以改进服务。我们不使用广告用途的 Cookie。 分析 Cookie 的处理方式按访问来源地区区分如下。 ・来自欧盟、英国、EEA、瑞士的访问：在您事先同意之前，不会使用任何分析 Cookie（选择加入）。首次访问时会显示征求同意的横幅。 ・来自其他地区的访问：以本政策中的公开说明和首次访问时的通知为依据使用分析 Cookie。您可以随时通过横幅上的“不使用”或本页面的“更改 Cookie 设置”停止使用。 选择停止后，之后将不再发行分析 Cookie，并会删除已保存的分析 Cookie。您也可以在浏览器设置中拒绝或删除 Cookie。
5. Handling of children (under 13 and aged 13-17)
Use by 13-17 year-olds requires guardian consent. When invited as a player by a club, the invitation email is sent to the guardian's address, and the guardian accepts using their own Passport. Children under 13 cannot create their own account. For a child who attends NEWDIH SOCCER SCHOOL, a parent or guardian may register the child's name, its reading and date of birth as a family child within their own account. This information is used only to confirm school enrollment and to provide school benefits and consultations, and is never shared with partner shops. The only information a shop receives is the contact details and the message that the guardian personally entered and consented to send when requesting a consultation. A guardian can delete a registered child at any time.
6. Your rights
- You may request disclosure, correction, suspension, or deletion of your personal data we hold. - Contact us via email (section 8).
7. Retention period
- Active account data: while the account is active. - After account deletion: erased or anonymized within 30 days, except where retention is required by law (e.g., 7 years for invoices). - Audit logs: 365 days.
8. Business operator and contact
Operator: NEWJI INC. (operator of NEWDIH APP) Address: 1-1-17 Minamidai, Nakano-Ku, Tokyo 164-0014, Japan Representative: Ryuji Ikuta, Representative Director Personal Information Protection Manager: Ryuji Ikuta Contact: support@newdih.com
9. Compliance with NEWDIH Guidelines
Our services operate under the NEWDIH ONLINE FOOTBALL CLUB GUIDELINE series v1.0 (12 documents). In particular, we comply with: - 02 PLAYER GUIDELINE: Player utterances and thoughts are not used for evaluation or ranking. - 03 GUARDIAN GUIDELINE: Guardians are positioned as protectors of a safe thinking environment, not as evaluators. - Each GUIDELINE is distributed via our designated channels. Contact support@newdih.com for details.