Privacy Policy

Effective October 28, 2026 · ShelledNuts · dev.shellednuts@gmail.com

ShelledNuts ("we") runs the Teum service and handles your personal information as described below, in line with Korea's Personal Information Protection Act and other applicable laws. This is a translation; the Korean version prevails.

1. Information we collect

• Sign-in: your social account identifier, email, name or nickname, and profile photo URL when Kakao, Apple or Google provide them (we do not use the photo in the app)
• Using the service: user name, nickname, studios you belong to and pass dates, the membership plan the owner assigns you (bookable units and booking limits) and hold periods, tasks you manage as a manager, requests to join studios, bookings and class sign-ups, check-in records (check-in time and bookings cancelled because you did not check in), favorite bookable units, notes the owner keeps about you, and feedback you send
• Class chat: messages you send, photos and PDF files you attach, reports about messages, and the list of people you block
• Community (only in studios where the owner turns it on): a profile photo and one-line bio you add yourself (optional), whether your profile shows in each studio’s member list, posts, photos, comments and likes, direct messages, and reports about posts or messages
• Studio information an owner adds: studio name, studio ID, description, cover photo, thumbnail, pinned notice and visibility
• Collected automatically: push token, device type (iOS or Android), the store transaction ID when you subscribe (we never receive card details), and device information the ad SDK collects to show ads

2. Why we use it

To identify you and sign you in; to provide booking, classes and studio management (including membership plans, holds, check-in and automatic cancellation of bookings without a check-in); to let you find studios and handle join requests; to run class chat, posts, member lists and direct messages and handle reports and blocks; to send notifications about booking changes, upcoming bookings, check-in, pass expiry, membership plans, join requests, new posts and new messages; to check Premium subscriptions; to answer questions and improve the service; and to prevent abuse.

3. How long we keep it

• We delete it without delay when you delete your account, except where a law requires us to keep it for a set period.
• Photos and PDFs attached in class chat are kept for 90 days from the day they were sent, then deleted. Attachments of deleted messages are removed within a day.
• When you delete a post, comment or direct message, other users no longer see it, and it is deleted with your account. Post photos, profile photos and studio cover photos and thumbnails are deleted when you remove or replace them or delete your account.
• Join request records are kept for the 7-day period that blocks a repeat request after a decision and for service statistics, and are deleted with your account.
• Apple and Google keep subscription purchase records under their own policies.
• Records of reports and blocks (nicknames and the reported post, message or studio information) are kept as long as needed to handle them and prevent abuse, and are not linked to deleted accounts.

4. Sharing with third parties

• The owner of a studio you belong to sees your nickname, user name, pass dates, membership plan and holds, and booking and check-in records, which they need to run the studio. Managers the owner appoints see what they need for the tasks they are given.
• When you ask to join a studio, its owner and member managers see your nickname and user name.
• Other members of the same studio may see your nickname on booking slots; the owner can hide it.
• If the owner turns on the member list and you choose to show your profile, members of that studio see your nickname, user name, profile photo, bio and the date you joined. Posts and comments are visible to members of that studio, and direct messages to the person you write to.
• If an owner makes a studio public, its name, ID, description, cover photo, thumbnail, pinned notice, number of rooms and members, and opening hours are visible to other signed-in users.
• Otherwise we share it only with your consent or where the law requires.

5. Service providers and transfers abroad

• Supabase Inc.: data storage and sign-in · stored in Seoul, South Korea
• 650 Industries, Inc. (Expo): sending push notifications · United States · push token and notification content
• Apple Inc. (APNs) and Google LLC (Firebase Cloud Messaging): delivering push notifications to devices · United States · push token and notification content
• Google LLC (AdMob): ads · United States · device information and advertising ID
• Apple Inc. and Google LLC: optional sign-in and in-app subscriptions · United States
• Kakao Corp.: optional sign-in · South Korea
• Resend, Inc.: sending email (guardian consent emails, and report and block alerts to us) · United States · recipient email address and email content (alerts include nicknames and the reported post, message or studio information)
• Slack Technologies, LLC: internal alerts to us (sign-up, studio and payment events, reports and blocks, service statistics) · United States · user names, nicknames, studio names and public studio information, and reported post or message content (no email addresses, phone numbers or payment details)
• Cloudflare, Inc. (heremyapp): hosting this website · worldwide · request data (IP address, browser information, time, URL) processed briefly to deliver and protect the site
• Data reaches these providers over the network while you use the service, and is deleted when its purpose ends or you delete your account.

6. How we delete it

When the retention period ends or you delete your account, electronic files are erased so they cannot be recovered.

7. Your rights

• You can view and correct your nickname and other details in My info, and delete your account and personal information in My info → Delete account.
• For other requests, such as stopping processing, write to dev.shellednuts@gmail.com.

8. Children under 14

• Children under 14 can join with the consent of a parent or legal guardian.
• To ask for consent we first collect only the guardian’s name and email from the child, and email the guardian the details and a confirmation code. The child continues sign-up after entering the code the guardian received.
• If consent is not given within 7 days, we delete that information without delay. Guardians can ask at any time to view, correct or delete the child’s information, or withdraw consent.
• Members under 14 get child-directed ad settings (no personalized ads, general audience).
• Members under 14 cannot search for studios or send join requests and join only when an owner invites them; they do not appear in member lists, cannot send or receive direct messages, and cannot be managers.

9. Cookies and advertising identifiers

• The app and this website do not use cookies.
• The ad SDK (AdMob) uses the device advertising ID to show ads. Teum does not request personalized ads; you can reset or delete the advertising ID in your device settings.

10. Security

Encrypted connections (HTTPS), row-level access control with least privilege, and encrypted sign-in data on the device.

11. Privacy officer

ShelledNuts · dev.shellednuts@gmail.com

12. Remedies

• For reports or advice about privacy violations in Korea, you can contact:
• Personal Information Infringement Report Center (privacy.kisa.or.kr, call 118) · Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972) · Supreme Prosecutors’ Office (www.spo.go.kr, call 1301) · Korean National Police Agency (ecrm.police.go.kr, call 182)

13. Changes

• This policy takes effect on October 28, 2026. We will announce changes in the app and on this website.
• To get the previous policy (effective October 21, 2026), write to dev.shellednuts@gmail.com.