BUYFUTURE PRIVACY POLICY

Effective Date: September 10, 2025

This Privacy Policy (“Policy”) explains how BuyFuture Inc. (“BuyFuture,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal and business information provided by users of our mobile application and services (the “App”), including both general users and business users (collectively, “Users”). By using the App, you agree to the terms set forth in this Policy.

1. Information We Collect

We collect personal and business information from you when you create an account, voluntarily register a store as part of the onboarding process, make a reservation, or otherwise interact with the App, including both the general user app and the business user app. For business users, store registration is a required step to access the service, and information such as business name, address, and contact details is considered essential. Store-related information may be made publicly available to general users of the App, and business users are asked to confirm this at the time of registration through a required checkbox. In addition, information provided by business users (such as store details) may be displayed to general users of the App. Likewise, information about user activities (such as coupon usage) may be shared with business users for service operation and analytics purposes. Users are deemed to provide this information voluntarily, and explicit consent is obtained through a clear checkbox notice prior to account creation. The information we collect may include:

  • Full name, date of birth, and email address;
  • Business name, business address, and contact details;
  • Reservation information such as time, party size, and special requests;
  • Payment-related data such as transaction history and ticket purchases;
  • Device identifiers and technical data via analytics tools;
  • Any content or media uploaded during store registration or user profile setup.
  • Location data, if you enable location-based services, such as to recommend nearby merchants, improve booking accuracy, support store management functions, or help us understand user interest in regions where our services are not yet available. We do not permanently store precise GPS location data of users; instead, we may temporarily access your current location only when you actively use certain features (e.g., pressing a “view nearby” button) and discard it immediately after use. In some cases, we may store generalized location data (e.g., city or postal code, not precise GPS coordinates) to analyze user interest and inform future service planning (e.g., sending alerts when the service becomes available in that area). When displaying maps or markers, we use Google Maps services, which may process location information directly from your device; such processing is subject to Google’s own privacy policy. Where required, we will request your explicit consent (e.g., via a checkbox at sign-up) before collecting such information. You may change or delete your saved location information at any time in your profile settings.
  • We do not knowingly collect or process sensitive personal information (such as health data, biometric identifiers, or government-issued ID numbers).

2. How We Collect Information

Information is collected directly from you during account creation, profile updates, service use, or payment transactions. We also collect device data automatically through third-party SDKs, including Firebase Analytics, Crashlytics, and AppsFlyer. AppsFlyer is currently used for analytics purposes only, such as measuring app performance and user engagement. It is not used for targeted advertising or remarketing at this time. You may limit or disable tracking through your mobile device settings, as follows:

  • iOS: Settings > Privacy > Tracking > Disable “Allow Apps to Request to Track” for BuyFuture
  • Android: Google Settings > Ads > Reset advertising ID or opt out of personalized ads

3. Purpose of Use

We use collected data for the following purposes:

  • To provide, manage, and improve our services;
  • To facilitate reservations, purchases, and ticket redemption;
  • To send notifications, service messages, or promotional offers with your consent;
  • To prevent fraudulent activity and fulfill legal obligations including anti-money laundering (AML) monitoring, where applicable;
  • To ensure compliance with financial regulations, including anti-money laundering (AML) monitoring, fraud detection, and regulatory reporting;
  • To conduct service analytics and improve security and reliability.
  • To create aggregated and anonymized statistical reports (e.g., age group distribution, peak usage times, coupon redemption rates) based on user activity, and provide such reports to business users (e.g., merchants). These reports do not contain personal information and cannot reasonably be used to identify any individual user.
  • In addition, when a user enables the “Hide My Info” function in the App, only the minimum information necessary for store operations will be shared with business users. By default, this will be limited to either the user’s name or an internal identification number, while all other personal information (such as birth date or phone number) will remain hidden.

4. Third-Party Service Providers

We share information with third-party providers who support core functionalities of the App:

  • Firebase (Google): analytics, crash reporting, messaging;
  • AppsFlyer: attribution and in-app referral tracking;
  • TalkPlus: in-app chat between users and merchants, including message storage on TalkPlus’s servers. Chat history is retained according to TalkPlus’s internal policies, including storage period, encryption standards, and server location;
  • Amazon Web Services (AWS): secure cloud storage and hosting.

We conduct due diligence and maintain data processing agreements with all providers to ensure compliance with applicable laws. We prohibit third-party providers from using your data for their own marketing or analytics purposes. BuyFuture is not responsible for the content of messages exchanged between users (including business users), and reserves the right to allow users to report inappropriate messages via in-app reporting tools.

5. Data Transfers and Storage

We store and process personal data using servers located in the United States and South Korea via Amazon Web Services (AWS). By using our App, you consent to the transfer of your data to these jurisdictions. For users subject to California law, we affirm that BuyFuture does not sell or share personal data for cross-context behavioral advertising, as defined under the California Consumer Privacy Act (CCPA). We use encryption and secure protocols (e.g., HTTPS, TLS) when transmitting personal data. Where applicable, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission for the lawful transfer of personal data outside the European Economic Area.

6. Data Retention and Deletion

We retain your personal information while your account is active or as required to provide services, comply with legal obligations, resolve disputes, or enforce our agreements. When no longer needed, your data will be securely deleted. If you signed up using a third-party login provider (such as Google, Facebook, etc.), your account with BuyFuture remains subject to our Terms of Use, and deletion of your BuyFuture account does not automatically disconnect your third-party login. You must separately manage connected apps in your third-party account settings to fully revoke access. You may delete your account at any time via the in-app ‘Delete Account’ feature or by emailing us at privacy@buyfuture.app. Account deletion requests are subject to identity verification and applicable retention laws. Some non-personal or anonymized data, and content previously shared publicly, may remain visible even after account deletion. In addition, we may retain certain data for a limited period after deletion where necessary for legal compliance, fraud prevention, or internal audit purposes. Retention periods may vary depending on the type of data and legal requirements in your jurisdiction.

7. User Rights

Depending on your jurisdiction, you may have rights regarding your personal data, including:

  • The right to access the data we hold about you;
  • The right to correct inaccurate information;
  • The right to request deletion of your data;
  • The right to withdraw consent to processing, where applicable.
  • The right to data portability and to object to certain processing activities (if you are located in the European Union or EEA).

You can exercise these rights by contacting us at help@buyfuture.app. We may ask you to verify your identity before processing your request. You will not be discriminated against for exercising your rights under this Policy. We will respond to verified requests within 30 days, unless an extension is permitted by law.

8. Children’s Privacy

We do not knowingly collect personal information from individuals under the age of 14. If we discover that we have inadvertently collected such data, we will delete it promptly.

9. Security

We implement reasonable physical, administrative, and technical safeguards to protect the confidentiality and integrity of your data. While we strive to protect your information, no system can be guaranteed fully secure, and you use the App at your own risk. We regularly review our data handling practices and access controls. In the event of a data breach, we will notify affected users in accordance with applicable data protection laws.

10. Compliance with Financial Regulations

While BuyFuture does not operate as a money transmitter, process payments directly, or store funds on behalf of users, we monitor transactions and usage patterns for potential abuse in accordance with guidance from the U.S. Financial Crimes Enforcement Network (FinCEN). We may retain metadata related to transactions as needed to comply with financial regulations. We cooperate with lawful requests from regulatory and enforcement authorities and reserve the right to suspend accounts for suspicious activity.

11. Governing Law

This Policy shall be governed by and construed in accordance with the laws of the State of New York, United States, without regard to its conflict of law provisions. Any disputes arising under or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts located in New York County, New York. To the fullest extent permitted by law, you and BuyFuture agree that any dispute arising from or related to this Privacy Policy shall be resolved individually, and not as part of a class, consolidated, or representative proceeding. You further waive any right to a jury trial.

12. Changes to This Policy

We reserve the right to revise this Policy at any time. Updates will be posted in the App or communicated via email. Your continued use of the App after updates constitutes your consent to the revised Policy.

13. Contact Information

If you have questions about this Policy or our data practices, please contact us at:

help@buyfuture.app

© BuyFuture Inc. All rights reserved.