Innomax, in accordance with the Personal Information Protection Act, has the following policy in place to protect users' personal information and rights and to smoothly handle any grievances related to personal information.

Innomax services (hereinafter referred to as "services") consider the protection of your personal information very important and comply with the personal information protection regulations under the 'Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.' and the 'Personal Information Protection Act'. We also inform you through this privacy policy about how your personal information is used and protected. Special attention is given to sensitive health information.

The "services" will notify any changes to the privacy policy through the "services."

Table of Contents

Article 1. Items of personal information collected and purpose of use Article 2. Consent to the collection of personal information Article 3. Methods of collecting personal information Article 4. Use and provision of collected personal information to third parties Article 5. Access, correction, and withdrawal of consent (withdrawal of membership) Article 6. Retention and use period of personal information Article 7. Procedures and methods of destroying personal information Article 8. User rights and obligations Article 9. Notification or communication method of the privacy policy Article 10. Technical and managerial measures for personal information protection Article 11. Personal information management officer and person in charge Article 12. Protection of children's personal information Article 13. Transmission of advertising information Article 14. Changes to the privacy policy

Article 1. Items of personal information collected and purpose of use

The "services" collect the following personal information items. The personal information being processed will not be used for any purpose other than the following purposes unless separate consent is obtained or there are special regulations in other laws according to Article 18 of the Personal Information Protection Act.

• Collected items: email, name, date of birth, gender
  • Purpose of use: identity verification and data provision for service use
  • Retention period: until membership withdrawal
• Collected items: blood glucose level
  • Purpose of use: analysis of blood glucose level fluctuations and correlation study of diagnostic device measurement values
  • Retention period: retained excluding personal information, until membership withdrawal
• Collected items: diagnostic scan data
  • Purpose of use: correlation study between data obtained through diagnostic scans and blood glucose levels
  • Retention period: retained excluding personal information, until membership withdrawal

Article 2. Consent to the collection of personal information

1. The "services" provide information about "collection and use of personal information" before membership registration and login, and by registering or logging in, it is considered that the user has agreed to the collection and use of personal information.
2. Users have the right to refuse consent to the collection and use of personal information, and there is no disadvantage for refusing consent. However, service use may be impossible, or there may be restrictions on service provision according to the purpose of service use.

Article 3. Methods of collecting personal information

1. The "services" collect personal information by directly receiving input from users or through methods such as automatic generation during the service use process.
2. "Optional collected information" is collected through user authorization.