Privacy Policy
Introduction
Onesoftdigm Co., Ltd. (the "Company") complies with applicable laws, including the Personal Information Protection Act, in providing the Fitrus health management solution and related services (the "Services") and makes its best efforts to protect data subjects' personal information.
Through this Privacy Policy, the Company explains the purposes and methods of using personal information provided by members and the measures taken to protect it.
| Personal information collected | Name, nickname, email address or mobile telephone number, date of birth, physical information (height, weight, etc.), sensitive information (health information), payment and Service Pass information, device information, GPS location information, etc. |
| Processing purposes | Membership registration and management, provision of non-medical health analysis services, service improvement, etc. |
| Retention period | Until fulfillment of the purposes of collection and use, membership withdrawal, or deletion of the relevant records (or until the end of the statutory retention period where retention is required by applicable laws) |
| Provision to third parties | Members' affiliated companies or institutions and the National Health Insurance Service (where separate consent has been obtained) |
| Outsourced processing | NAVER Cloud Corp., Google Cloud Korea LLC, Google LLC, Hecto Data Co., Ltd., NICE Information & Telecommunication Inc., Nurigo Co., Ltd., and Hefeng Internet Technology (Beijing) Co., Ltd. (QWeather) |
| Complaints | support@onesoftdigm.com |
Article 1 (Purposes of Processing Personal Information)
The Company collects only the minimum personal information necessary to provide the Services for the purposes below. It does not use collected information for other purposes or disclose it externally without the user's consent.
| Category | Processing purposes |
|---|---|
| Membership registration and management | Identifying members using the Services, managing member information based on names and nicknames, confirming intent to register, restricting registration by children under 14, managing membership status and confirming intent to withdraw, restricting members who violate the Terms of Service and preventing improper use, and establishing communication channels for notices and notifications |
| Service provision | Ensuring normal app operation and maintaining service quality, connecting Fitrus devices and transmitting and receiving data, retrieving location-based weather information and providing it to watches, recording and managing women's health information, retrieving and integrating health examination information, analyzing diet and exercise records, and providing personalized services |
| Non-medical health analysis | Monitoring physical condition by analyzing measurements, health examination information, and diet and exercise records, and providing AI-based personalized health analysis, reports, and guidance |
| Corporate-linked services | Registering company codes and confirming affiliation, managing corporate administrator accounts and permissions, and providing employee health management services using members' names and nicknames and health information and service usage status within the scope consented to |
| Service improvement and statistics | Developing new services, optimizing quality by analyzing service usage records, identifying access frequency and evaluating service effectiveness according to demographic characteristics, and compiling statistics, conducting scientific research, and preserving records in the public interest through pseudonymization |
| Marketing and advertising | Announcing events and promotions, delivering prizes, and providing personalized services and advertisements based on members' interests and usage behavior |
| Customer inquiries | Verifying user identity, receiving and handling complaints, retaining records for complaint handling and dispute mediation, and notifying users of results |
Article 2 (Personal Information Collected and Collection Methods)
Personal Information Collected
The Company collects and processes the following personal information about users of the Services.
- Membership registration and management
- Account information: name, email address or mobile telephone number, password (for ordinary registration), nickname, confirmation of whether the user is at least 14, and social service account information (for social login)
- Basic physical information: sex, date of birth, height, and weight
- Basic services and non-medical health analysis
- Health measurements: step count, sleep information, heart rate, heart rate variability (HRV) measurements, raw photoplethysmography (PPG) data and waveforms, blood pressure, blood oxygen, blood glucose, body composition, stress, body temperature, etc.
- Diet information: food photographs, meal names or notes, meal timing, food classifications, calories, and analysis results
- Health examination integration information: name, date of birth, mobile telephone number, mobile carrier (when using PASS), authentication method and identity verification results, and health examination results (physical measurements, vision and hearing, blood pressure, blood, urine, liver and kidney function tests, dental examinations, overall findings, etc.)
- Women's health information: whether menstruation has started, amount and type of bleeding, irregular bleeding, discharge, ovulation test results and values, symptoms, condition and well-being, body temperature, notes, etc.
- Health analysis information: AI health analysis results and personalized reports
- When using corporate-linked services
- Member information: company code, name, nickname, email address, employee number, department, affiliation and approval status, service usage status, basic physical information, health measurements, and measurement dates and times
- Corporate administrator account information: administrator ID, affiliated company or institution, assigned permissions, account status, last login date and time, and the responsible person's name, email address, and mobile telephone number (where entered)
- When using subscription and delivery services
- Order and delivery information: name, mobile telephone number, delivery address, ordered product, pricing plan, subscription status, and subscription start, end, and renewal dates
- Payment information: order number, purchaser's name, email address or mobile telephone number, payment amount, card number or billing key, card expiration date, and card issuer
- Service Pass information: coupon code, issuance type, eligible sales channel and product, registered account, issuance, registration and usage status, registration deadline, application and expiration dates, and order number or device serial number used to verify purchase and registration
- Service use and quality improvement
- Device model, OS version, manufacturer, unique device identifier, country, language, mobile carrier information, package name, app version, last login date and time, etc.
- IP address, cookies, service usage records (errors during use, use of functions such as in-app selections, time spent on pages, etc.), error logs, crash logs and service stability analysis information, visit dates and times, improper usage records, app instance identifiers, push notification tokens, etc.
- Fitrus device model, unique device identifiers such as MAC addresses, firmware version, connection and usage history, status information, battery status, etc.
- Outdoor exercise recording service: GPS location information (exercise location and route)
- Watch weather information service: GPS location information (latitude and longitude) and city name
- Customer support and complaint handling: email address, inquiry details and attachments, device information and app version generated during support, etc.
- Marketing and events: email address, mobile telephone number, push notification token, OS, and marketing consent status by channel, etc.
- Users who register through social services are subject to the privacy policies of NAVER, Kakao, Google, and Apple login.
Collection Methods
The Company collects personal information about users as follows.
- Direct user entry: information entered directly by members within the Services
- Device connectivity: information collected through connectivity with Fitrus devices
- Automatically generated information: information automatically generated and collected by systems during use of the Services
- External institution integration: information received through identity verification and health examination information integration
- Corporate linkage: information entered by a member or corporate administrator or generated during corporate linkage approval
- Subscriptions, payments, and Service Passes: information collected during subscription applications, entry of delivery information, electronic payments, coupon issuance and registration, and verification of purchases through external sales channels
Collection of Sensitive Information
- The Company classifies and manages health information as sensitive information under the Personal Information Protection Act and always obtains separate, explicit consent when collecting it.
- Under Android OS policies, the Company may request location permission for Bluetooth (BLE) connectivity with Fitrus devices. However, the Company does not store or track members' real-time geographic location (GPS coordinates) on its servers.
- When a member starts recording outdoor exercise, the Company uses the device's GPS location to measure the route, distance, pace (speed), and changes in elevation. Location use continues while the screen is off or the app is in the background to maintain measurement continuity. Even in this case, the Company does not collect or transmit GPS coordinates to its servers, and the measured exercise location and route are stored only within the member's device.
- When a member uses the watch weather function, the Company transmits latitude, longitude, and city name to its servers to provide weather information for the current location and retrieves weather information through an external weather provider. Location information processed on the Company's servers is destroyed without delay after the weather query is completed.
- The Company restricts membership registration to protect the personal information of children under 14.
Article 3 (Processing and Retention Periods)
The Company processes and retains personal information for the periods prescribed by law or consented to by members at collection. Information for which no separate retention period is specified is retained until membership withdrawal or fulfillment of the purposes of collection and use.
General Retention Periods for Service Provision
| Category | Reason for retention | Retention period |
|---|---|---|
| Membership registration and management | Identifying users, maintaining and managing membership status, delivering notices, etc. | Until membership withdrawal |
| Services including non-medical health analysis | Health analysis and personalized guidance, device connectivity, AI reports, etc. | Until fulfillment of the purposes of collection and use, membership withdrawal, or deletion of the relevant records |
| Corporate-linked services | Confirming affiliation and managing employee health | Until membership withdrawal, termination of corporate linkage, departure from employment, or termination of the contract with the client company |
| Subscription, order, and delivery information | Managing subscription contracts, delivery, returns and exchanges, after-sales service, and disputes | Until termination of the subscription contract and fulfillment of the relevant processing purposes; information subject to statutory retention is retained for the prescribed period |
| Payment method information | Payment of subscription fees and recurring payments | Until deletion of the payment method or termination of the subscription contract |
| Service Pass information | Issuing, registering and applying passes, preventing duplicate or improper use, managing usage periods, and handling disputes | Until the Service Pass ends and the relevant processing purposes are fulfilled; transaction and contract records are retained for statutory periods |
| Device connection and usage history | Device connectivity, providing device lists, responding to failures, and preventing improper use | Until the member deletes the device history or withdraws; records needed for contracts, after-sales service, or dispute handling are retained until the relevant purposes are fulfilled |
| Service error and crash logs | Service stability analysis | 30 days from collection |
| Customer support and complaint handling | Handling complaints and resolving disputes | 90 days after support ends |
| Marketing and advertising | Managing consent records for marketing information | Until consent is withdrawn or membership withdrawal |
Even if a member withdraws while holding a valid subscription contract, the Company may retain the minimum order, contract, and payment information necessary to perform the subscription contract and handle remaining payments until the contract ends. Such information is used only for contract performance and settlement.
Exceptional Retention Periods under Applicable Laws and Other Grounds
The Company destroys personal information without delay after the purposes of collection and use have been fulfilled, except in the following cases.
-
Use of pseudonymized information
The Company may pseudonymize collected personal information, including sensitive information, so that a specific individual cannot be identified and retain and use it for statistical compilation, scientific research, or preservation of records in the public interest until the relevant purposes are fulfilled.
-
Retention under internal Company policies
Retention of improper usage records under internal Company policies Retained information Reason for retention Retention period Improper usage records Preventing improper registration and use and cooperating with investigations by law enforcement authorities 1 year from membership withdrawal -
Retention under applicable laws
Where retention is required by applicable laws, including the Commercial Act and the Act on Consumer Protection in Electronic Commerce, the Company retains member information for the prescribed periods. Such information is used only for the retention purpose, and the periods are as follows.
Statutory personal information retention periods Legal basis Retained information Retention period Protection of Communications Secrets Act Personal information relating to service use, including users' internet logs and access location tracking data 3 months Act on Consumer Protection in Electronic Commerce Personal information relating to service use, including records of contracts, withdrawal of offers, payments, and supply of goods 5 years Electronic Financial Transactions Act Records of electronic financial transactions 5 years Act on Consumer Protection in Electronic Commerce Records of consumer complaints or dispute handling 3 years Framework Act on National Taxes Books and supporting documents relating to all transactions 5 years Act on Consumer Protection in Electronic Commerce Records of labeling and advertising 6 months Protection of Communications Secrets Act Other communications fact confirmation records 12 months
Article 4 (Outsourced Processing and Provision to Third Parties)
Outsourced Processing of Personal Information
-
To provide the Services smoothly and process personal information securely, the Company outsources personal information processing as follows.
Outsourced personal information processing Processor Outsourced work Retention period NAVER Cloud Corp. Providing cloud infrastructure and server operating environments and storing data Until termination of the outsourcing contract Google Cloud Korea LLC AI-based health data analysis and generation of personalized reports Until termination of the outsourcing contract Google LLC Sending service notifications and push messages Until termination of the outsourcing contract Hecto Data Co., Ltd. Retrieving health examination information on behalf of the Company Until termination of the outsourcing contract NICE Information & Telecommunication Inc. Electronic and recurring payments and registration and management of payment methods Until termination of the outsourcing contract Nurigo Co., Ltd. Sending messages such as SMS and Alimtalk Until termination of the outsourcing contract Hefeng Internet Technology (Beijing) Co., Ltd. (QWeather) Retrieving and providing weather information for the current location Until termination of the outsourcing contract -
When entering into an outsourcing contract, the Company specifies responsibilities in contracts and other documents, including prohibition of processing for purposes outside the outsourced work, technical and administrative safeguards, restrictions on subcontracting, management and supervision of processors, and compensation for damages. It supervises processors to ensure secure processing of personal information.
-
Changes to outsourced work or processors are disclosed without delay through this Privacy Policy.
Overseas Transfer of Personal Information
The Company transfers personal information overseas as follows for AI-based health data analysis, service notifications and push messages, and retrieval and provision of weather information for the current location.
| Recipient and contact | Destination country | Transferred information | Timing and method | Purpose | Retention and use period |
|---|---|---|---|---|---|
| Google LLC (Google Cloud Support) | United States and other overseas countries | Sex, date of birth, height, weight, health measurements, health examination information, diet information, and other health information the user requests to have analyzed | Transmission over an encrypted network when using AI-based health analysis | AI-based health data analysis and generation of personalized reports | Until termination of the outsourcing contract |
| Google LLC (Firebase Support) | United States and other overseas countries | FCM push token, notification title, and notification body | Transmission over an encrypted network when service notifications are sent | Sending service notifications and push messages | Until termination of the outsourcing contract |
| Hefeng Internet Technology (Beijing) Co., Ltd. (QWeather Support) | China and other overseas countries | Latitude and longitude or a location ID converted from them | Transmission over an encrypted network when using the watch weather function | Retrieving and providing weather information for the current location | Until termination of the outsourcing contract |
Users may refuse overseas transfer for AI-based health analysis by not using that function. In that case, AI-based health analysis and personalized reports will be unavailable. Overseas transfer for service notifications and push messages may be refused through the app or device notification settings. In that case, users cannot receive push notifications but may use other Services. Overseas transfer for retrieval and provision of weather information may be refused by not using the watch weather function. In that case, watch weather information for the current location will be unavailable.
- Legal basis for overseas transfer: Article 28-8(1)3(a) of the Personal Information Protection Act (outsourced processing overseas for performance of a contract with the data subject)
Principle of Third-Party Provision
The Company processes users' personal information only within the scope specified in Article 1 and does not provide it to third parties beyond its original scope without members' prior consent.
Provision with Users' Consent
Where necessary for use of the Services, the Company may provide personal information to third parties as follows after obtaining users' separate consent under the Personal Information Protection Act. Users have the right to refuse consent to third-party provision, and refusal does not restrict use of basic app services.
| Recipient | Purpose | Information provided | Retention and use period |
|---|---|---|---|
| Member's affiliated company or institution | Employee health management | Name, nickname, email address, employee number, department, service usage status, sex, date of birth, height, weight, health measurements such as blood pressure, heart rate, blood glucose and body composition, and measurement dates and times | Until membership withdrawal, termination of corporate linkage, departure from employment, or termination of the contract with the client company |
| National Health Insurance Service | Identity verification and retrieval and return of health examination results | Name, date of birth, mobile telephone number, mobile carrier, and authentication results from the identity verification institution | Until fulfillment of the provision purpose |
When corporate-linked services are used, the name of the affiliated company or institution receiving personal information is displayed on a separate consent screen.
Exceptional Provision without Consent
In principle, the Company does not provide personal information externally without members' consent. Exceptions may apply where laws contain special provisions or emergencies arise, as follows.
-
Provision through use of pseudonymized information
The Company may pseudonymize collected personal information, including sensitive information, so that a specific individual cannot be identified and process it for internal analysis or only at institutions permitted by applicable laws, within legally permitted purposes such as statistical compilation, scientific research, or preservation of records in the public interest.
-
Provision under applicable laws
Legal grounds for third-party provision of personal information Legal basis Reason for provision Personal Information Protection Act Emergencies such as disasters, infectious diseases, imminent threats to life or physical safety, or property loss Criminal Procedure Act and Protection of Communications Secrets Act Responding to requests under seizure, search, or inspection warrants or requests for communications fact confirmation records Civil Procedure Act Compliance with court orders to submit documents
Article 5 (Restriction on Registration by Children under 14)
The Company restricts service use and membership registration by children under 14, whose personal information processing requires consent from a legal representative.
Article 6 (Procedures and Methods for Destruction of Personal Information)
In principle, the Company destroys personal information without delay after the purposes of collection and use have been fulfilled. The procedures and methods are as follows.
Destruction Procedures
- Information entered by users for membership registration or other purposes is destroyed without delay after withdrawal or fulfillment of the processing purpose. However, information necessary to perform an ongoing subscription contract or for retention under Article 3 is destroyed after the relevant retention period ends.
- Information that must be retained for a specified period under applicable laws in accordance with Article 3 is transferred to a separate database or stored in a different location as prescribed by law and destroyed after that period.
- Personal information stored separately is not used for purposes other than its retention purpose except as provided by law and is destroyed with approval from the personal information protection officer.
- Where personal information has been provided to a third party, the Company takes necessary measures to ensure its destruction in accordance with applicable laws and the consent given after the provision purpose is fulfilled or the retention and use period ends.
Destruction Methods
- Electronic files: permanently deleted using technical methods that make recovery or reproduction impossible.
- Paper records: destroyed by shredding or incineration.
Article 7 (Rights of Users and Legal Representatives and Methods of Exercise)
Exercise of Users' Rights
Users may exercise personal information protection rights against the Company at any time, including access, correction or deletion, suspension of processing, withdrawal of consent, and requests for explanations of automated decisions.
Methods and Procedures
- In-app settings: users may directly view and edit information through the app settings and request withdrawal of consent or membership withdrawal. However, some or all Services may become unavailable.
- Customer support channels: the Company acts without delay when users contact the personal information protection officer or responsible department in writing, by telephone, or by email.
- Representatives: rights may be exercised through an authorized representative. A power of attorney under the Notice on Methods of Processing Personal Information must be submitted.
Handling Correction and Deletion Requests
- If a user requests correction of an error, the Company does not use or provide the relevant personal information to third parties until correction is complete.
- If incorrect personal information has already been provided to a third party, the Company notifies that party of the correction results without delay and takes measures to ensure correction.
Restrictions on Rights and Children's Registration
- Restriction on children's registration: in principle, the Company does not collect personal information from children under 14 or allow them to register. If a child is found to have registered using a false age, the Company immediately suspends the account and destroys the related information.
- Legal restrictions: rights such as requests for access or suspension of processing may be restricted under applicable laws, including the Personal Information Protection Act.
- Identity verification: when receiving a rights request, the Company verifies whether the requester is the data subject or a duly authorized representative.
Users' Obligations
Users must keep their personal information accurate and up to date to prevent incidents. They must guard against disclosure of account information and are responsible for incidents arising from misappropriation or infringement of others' personal information.
Article 8 (Installation, Operation, and Rejection of Automatic Personal Information Collection Tools)
Operation of Automatic Collection Tools
The Company uses cookies and advertising identifiers (ADID/IDFA), which store and retrieve usage information, to provide personalized services and improve convenience.
| Category | Definition and purpose |
|---|---|
| Cookies | Small amounts of information stored in a user's browser when visiting a website, used for automatic login and a personalized web environment. |
| Advertising identifiers (ADID/IDFA) | Advertising identifiers issued by the operating system to provide personalized services matching mobile app users' interests and analyze advertising usability. |
Blocking and Rejecting Automatic Collection Tools
Users may refuse installation of or delete automatic collection tools at any time. However, refusing cookies may make some Services difficult to use.
- Web browsers (cookie settings)
- Chrome: Settings > Privacy and security > Delete browsing data or cookie settings
- Safari: Settings > Preferences > Privacy > Block all cookies
- Edge: Settings > Privacy, search, and services > Manage cookies and site permissions
- Mobile devices (advertising identifier settings)
- Android: Settings > Security and privacy > Privacy > Other privacy settings > Ads > Delete advertising ID
- iOS: Settings > Privacy & Security > Tracking > Turn OFF "Allow Apps to Request to Track"
- Menu names and paths may differ depending on the OS version.
Article 9 (Purposes and Retention Periods for Personal Location Information)
The Company processes personal location information within the purposes of providing the relevant location-based services and destroys it without delay after those purposes are fulfilled. Exercise locations and routes, distance, pace (speed), and changes in elevation measured for outdoor exercise recording are not transmitted to the Company's servers and are stored only within members' devices. They are deleted when the member deletes the relevant exercise records or app data. Latitude, longitude, and city names used to provide watch weather information are transmitted to the Company's servers to retrieve weather information for that location. Location information processed on the Company's servers is destroyed without delay after the query is completed. However, where records confirming use or provision are generated under the Location Information Act, they are retained for 1 year and then destroyed.
| Processed information | Purpose | Retention period |
|---|---|---|
| Location-related information generated during Bluetooth (BLE) scanning and device connection | Fitrus device connectivity and transmission and receipt of data | Real-time location information: destroyed immediately after device connection and data transmission are completed; records confirming use and provision: retained for 1 year and then destroyed |
| GPS location information generated during outdoor exercise recording (exercise location and route) | Measuring route, distance, pace (speed), and changes in elevation | Within the member's device until deletion of the relevant exercise records or app data |
| GPS location information (latitude and longitude) and city name generated for watch weather information | Retrieving weather information for the current location and providing it to the watch | Company servers: destroyed without delay after completion of the weather query; processor: until termination of the outsourcing contract |
Article 10 (Measures to Ensure the Security of Personal Information)
The Company takes the following technical, administrative, and physical measures to prevent loss, theft, disclosure, alteration, or damage when processing users' personal information.
Administrative Measures
Establishing and implementing internal management plans, minimizing personnel who handle personal information, and conducting regular security training, etc.
Technical Measures
Managing access permissions to personal information processing systems and installing intrusion prevention systems and security software, etc.
Physical Measures
Controlling access to server rooms and document storage facilities, etc.
Article 11 (Processing of Pseudonymized Information)
The Company may pseudonymize collected personal information so that a specific individual cannot be identified and process it as follows for statistical compilation, scientific research, and preservation of records in the public interest.
Processing Purposes
- Scientific research to improve the Services
- Compiling service usage statistics and generating reports
- Preserving healthcare-related records in the public interest
Processing and Retention Period
- Until fulfillment of the processing purpose (completion of the research)
Personal Information Subject to Pseudonymization
- Date of birth, sex, physical information (height, weight, etc.), health information (step count, heart rate, etc.), service usage records, etc.
Article 12 (Personal Information Protection Officer)
The Company designates the following personal information protection officer to oversee personal information processing and handle data subjects' complaints and remedies relating to it.
| Name | Oh-hyun Kwon |
| Position | Director |
| ohkwon@onesoftdigm.com |
For other reports or consultations concerning personal information infringements, please contact the following institutions.
| Personal Information Dispute Mediation Committee | www.kopico.go.kr / 1833-6972 |
| Personal Information Infringement Report Center | privacy.kisa.or.kr / 118 |
| Supreme Prosecutors' Office Cyber Investigation Division | www.spo.go.kr / 1301 |
| National Police Agency Cyber Investigation Bureau | ecrm.cyber.go.kr / 182 |
Article 13 (Duty to Notify)
Announcement and Effectiveness
If the Company intends to amend these Terms, it announces the effective date and reasons for amendment together with the existing Terms on the website or through members' registered email addresses from 7 days before the effective date until that date. Amendments unfavorable to members are announced on the website or through their registered email addresses with a grace period of at least 30 days.
Revision History
- Announcement date: September 21, 2026
- Effective date: October 22, 2026