Keuhan Co., Ltd. (the "Company") complies with the personal information protection provisions of applicable laws, including the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Protection of Communications Secrets Act, the Telecommunications Business Act, and the Act on the Consumer Protection in Electronic Commerce, etc. The Company establishes and follows this Privacy Policy for its LuniFit application and related services (the "Service") to protect users' rights.

1. Items of Personal Information Processed and Purposes

The Company processes personal information for the following purposes and does not use it for unrelated purposes.

Purposes

• Confirming intent to register and managing membership and identity authentication
• Providing and operating the Service, including recording and reviewing health and lifestyle data
• Generating AI-based summaries, estimates, recommendations, and reports from user input
• Providing personalized content, notifications, and customer support
• Maintaining security, preventing and investigating misuse, and complying with legal obligations

Items Collected

• Account / authentication: email, name, and a third-party account identifier from Google, Apple, or Kakao
• Profile: nickname, gender, birth year (age), height, weight, and goals (e.g., target weight, goal pace, daily water goal)
• Health and lifestyle records (sensitive information): meals, calories and nutrition, weight and body composition, exercise, fasting, water intake, and menstrual cycle information
• User-submitted content: text input, photos (e.g., food images), and voice input
• Automatically collected: device type and OS, app version, language, country/region, time zone, a device identifier, push notification token, and service usage records

Health and menstrual data are sensitive information, processed only to provide the features you request and, where required by law, based on your separate consent, which you may withdraw at any time.

2. Rights of Information Subjects and How to Exercise Them

You and your legal representative may request access, correction, deletion, suspension of processing, and withdrawal of consent regarding your personal information. You can also exercise key rights directly in the app (edit profile, "Start Fresh" data reset, and account deletion). To make other requests, contact the Personal Information Protection Officer (Section 9); the Company will act without delay.

3. Retention and Use Period

The Company retains personal information for the period necessary to provide the Service and until you withdraw membership or delete your account, after which it is destroyed without delay, except where applicable law requires longer retention, in which case the information is stored separately and used only for the legally required purpose.