Baview Privacy Policy

Effective: 2026-11-09

Baview is operated by Kommode (owner: Dahye Kim, Republic of Korea) ("Baview", "we"). This policy explains what personal data the Baview app and server process, why, and for how long. We follow the EU General Data Protection Regulation (GDPR) and the Korean Personal Information Protection Act.

At a glance

1. What we process and why

When Data Purpose Kept for
Using the app (automatic) Device ID (a random number created by the app), app language, country code from your phone's region setting, IP address and time of access Providing the service, free search limit, preventing abuse, security Device ID records: see the rows below. Server access logs (IP): up to 30 days
Signing in Apple or Google account identifier, email address (if provided, including Apple "Hide My Email" addresses), login token Creating your account, sign-in, answering you and sending notices Until you delete your account
Choosing a username Username Shown as the author of your posts and comments Until you delete your account
Searching for a product Photo (stored with location and other metadata removed), text your phone reads from the photo, barcode number Recognising the product, improving product recognition Until you delete your account. Photos from devices that never signed in are deleted after 2 years. Our processor keeps them for up to 30 days
Searching (products and places) Search record: who (device ID or account), when, what (product or place name and ID), country code, language, result (e.g. number of bad reviews found) Free search limit, fixing errors, improving the service, statistics Until you delete your account. For devices that never signed in, the device ID is removed after 2 years so the record can no longer be linked to anyone
Using "Near me" or place search Your current location or the map centre, search text Finding places nearby Sent from your phone directly to Google, never to Baview's server. Only the IDs of the places found are sent to our server to add Baview post counts
Posting Posts, comments, links, place (optional), reactions, saves, reports, blocks, pages you looked up (to show new posts) Running the community, handling reports Until you delete them or your account
Contacting us or sending a legal notice Email address, name (if given), your request, how it was handled Answering you, handling disputes 3 years after the matter is closed

We do not ask for sensitive data (health, political opinions, etc.). Please photograph only the product, not other people's faces. Posts are public, so please don't include sensitive data, contact details or addresses of yourself or others.

2. Legal bases (GDPR)

Storing the device ID and login token on your phone is strictly necessary to provide the service you request.

3. Location

4. Processors and international transfers

We use the following companies to run the service. Your data may therefore be processed outside your country. For transfers outside the EU we rely on EU adequacy decisions (Republic of Korea; EU-US Data Privacy Framework) or the EU Standard Contractual Clauses. Under Korean law, the basis is Art. 28-8(1)(3)(a) of the Personal Information Protection Act (entrustment needed to perform our contract with you, disclosed in this policy).

Recipient and contact Country Data Purpose When and how Kept for
Render Services, Inc. · privacy@render.com USA All data handled by the server (section 1) Hosting the server and database Each time you use the app, via HTTPS As in section 1
OpenAI, L.L.C. · privacy@openai.com USA Photo, text read from it, barcode, product and place names, review texts to translate Recognising products; organising and translating reviews When you search, via HTTPS Up to 30 days, then deleted
Google LLC · policies.google.com/privacy USA Place search text, place ID, coordinates (sent directly from your phone) Place search, nearby places, place details When you search for places, via HTTPS According to Google's policy

You can refuse by not using the feature or deleting your account; the feature (e.g. photo search, place search) then can't be used.

Also good to know:

5. Sharing

We do not sell personal data. We disclose data only where the law requires it, for example to a court or the police, and only as far as necessary.

6. Your rights

You can ask at any time to access, correct or delete your data, restrict or object to processing (including processing based on legitimate interests), receive your data in a portable format, and withdraw consent.

We answer within the time the law requires (one month under the GDPR). You also have the right to complain to a data protection authority, in particular in the country where you live or work.

7. Deleting your account

Deleted: your account, username, posts and comments, reactions and comments on your posts, your reactions, saves, reports and blocks, search records, your photos, free search counters. This cannot be undone. Kept: anonymous statistics and the results found for products and places (not personal data), and records we must keep for legal reasons or disputes (for the periods in section 1).

8. Deletion

When a retention period ends or the purpose is fulfilled, we permanently delete the data from our database without delay.

9. Data stored on your phone

The app stores only what it needs on your phone: device ID, login token (in the phone's secure storage), language and display settings, recent searches. They are removed when you delete the app.

10. Security

Encrypted connections (HTTPS), restricted admin access, collecting only what is needed, removing location data from photos, secure storage of login tokens.

11. Children

Baview is only for people aged 14 or older, and we do not process data of children under 14. If we learn that we have, we delete it.

12. Privacy contact

Responsible for privacy: Dahye Kim (김다혜, owner) · info@baview.app

EU representative

EU users and authorities can also contact our representative in the EU (Art. 27 GDPR, Art. 13 Digital Services Act):

13. Operator

14. Changes

If we change this policy, we will tell you in the app 7 days before it takes effect (30 days before for changes that are less favourable to you).