Effective Date: May 3, 2026 | Last Updated: September 2, 2026
Browniebase ("we" or "operator") values the privacy of users of Badapong ("the App").
Badapong is usable anonymously without sign-up and collects only minimal information.
Optional social sign-in is available for certain features such as writing reviews.
We comply with applicable data protection laws including the EU GDPR and Korea's Personal Information Protection Act.
1. Information We Collect
Anonymous Device Identifier – A random UUID auto-generated by Supabase on first launch. Does not identify individuals and is unrelated to advertising IDs.
Account Information (Optional) – Only if you sign in with Apple or Google: your email address (or Apple's private relay address if "Hide My Email" is used) and display name. All core forecast features work without signing in.
Location (Optional) – Precise location (lat/lon) collected only when "Find nearby spots" is used. Not stored on servers; immediately discarded after use. Spot-proximity checks for visit-review notifications are performed on-device only; coordinates are never transmitted or stored.
User-Generated Content (Optional) – Spot reviews (text, rating, photos), condition feedback (forecast vs. actual experience responses), and facility information reports. Stored only when you submit them.
Map Viewport Coordinates – Sent to Mapbox for map tile loading (no user identifiers).
Aggregate Usage Statistics – Daily active use (DAU), screen views, Klook CTA clicks (de-identified, aggregated).
Meetups and chat (optional) – Meetup listings (title, description, meeting point, time slots), participation records,
chat messages and photos, display name, and report/block records. Meetups require social sign-in; chat messages are deleted about 30 days after a meetup ends.
Partner (business) verification (partners only) – Business registration number, representative name, opening date and trade name
(used for verification with the Korean National Tax Service), instructor certification and liability insurance document images, numbers and expiry dates.
Used only for verification; other users see only whether a badge is verified.
Push notification token (optional) – Device token used to send meetup chat, cancellation and forecast alerts. Deleted when notifications are turned off.
We do NOT collect: phone number, credit card, government ID, or other financial/unique identifiers. Name and email are collected only if you choose to use optional social sign-in.
2. Purpose of Collection and Use
Provide underwater visibility grades (A~E) and ocean weather forecasts
Recommend nearby dive spots based on location (only when permission granted)
Maintain user preferences such as favorites, language, activity
Analyze usage statistics for quality improvement
Provide community features (reviews, facility reports) and moderate inappropriate content
Validate and improve forecast accuracy — anonymous condition feedback is used for per-spot calibration of the forecast model (de-identified, aggregated/statistical use)
Provide value-added service via external tour booking platform (Klook)
3. Data Retention
Anonymous device identifiers are discarded upon app deletion or user request.
Location information is used in-memory and immediately discarded — never stored on servers.
User preferences persist until changed by the user.
Account information is deleted upon account deletion (see Account Deletion Guide).
User-generated content is deleted or de-identified upon deletion request or account deletion.
4. Third-Party Services
We do not sell or share user information for marketing purposes. The following third-party services are used to operate the App:
Supabase Inc. – Database and anonymous authentication (servers in Singapore/USA, Privacy Policy)
Mapbox – Map tile delivery. Viewport coordinates are sent to Mapbox for tile loading (no user identifiers). (Mapbox Privacy Policy)
Open-Meteo / ECMWF / NOAA – Marine and weather forecast data sources. No user data is sent; only grid coordinates (lat/lon) are used.
Klook Travel Technology Limited – Dive and snorkel tour booking platform. When a user taps a "Book" button in the App, they are redirected to the Klook website, where Klook's privacy policy applies. Badapong does not directly share user data with Klook. (Klook Privacy Policy)
5. Location Data Handling
When the user invokes "Find nearby spots," precise location is collected once.
It is used only to sort dive spots by distance, is never stored on servers,
and is discarded from device memory immediately after use.
Location permission can be revoked at any time via system settings; all forecast features remain fully functional without it.
6. Camera and Photo Handling
The App requests camera or gallery access only when you attach photos to a spot review.
Uploaded review photos are stored as publicly visible content and are deleted together with the review
or upon account deletion. Without this permission, you can still write text-only reviews and use all forecast features.
7. External Payment and Affiliate Links
Badapong provides links to an external tour booking platform (Klook). When a user completes a booking via these links, the operator may receive commission.
This does not impose any additional cost on the user, and Klook's payment and refund policies apply.
No payments occur within the Badapong app itself.
8. Advertising
Badapong currently does not display advertisements. We will update this policy with prior notice if ads are added in the future.
9. Security Measures
All network communications are encrypted via HTTPS (TLS)
Anonymous authentication tokens are stored in secure device storage
Location data is used in-memory only and immediately discarded (never stored on servers)
10. User Rights
You may exercise the following rights at any time:
Request deletion of specific data (contact via email)
Anonymous user IDs and preferences stored on Supabase servers are deleted upon user request or after a period of inactivity.
11. Children's Privacy
The App is not intended for children under 14 years of age.
Diving, snorkeling, and similar activities should be performed by qualified adults or with adult supervision for safety reasons.