Article 1 (Purpose)

The purpose of these terms of service is to stipulate the terms and procedures for using the fall prevention sensor and its connected monitoring application (hereinafter referred to as the "Service") provided by RANIX Co., Ltd. (hereinafter referred to as the "Company").

Article 2 (Definitions)

• “Service” refers to the function that detects posture in real time through the bed fall and posture detection sensor and provides it to the user through the app.
• “User” refers to individuals (members), nursing institutions, guardians, etc. who use the services provided by the Company in accordance with these Terms.
• “Device” refers to the fall and posture detection sensor provided by the Company.

Article 3 (Effect and Modification of Terms)

• “Service” refers to the function that detects posture in real time through the bed fall and posture detection sensor and provides it to the user through the app.
• “User” refers to individuals (members), nursing institutions, guardians, etc. who use the services provided by the Company in accordance with these Terms.

Article 4 (Content and Provision of Service)

• The Company provides the following services:
• Real-time fall and posture detection through sensors, and respiration/heart rate detection while lying down.
• Notification and status monitoring via mobile app.
• The service is provided 24 hours a day, year-round in principle, but may be temporarily restricted if technical inspection or operational suspension is necessary.

Article 5 (Obligations of the User)

• Users must not engage in the following acts when using the service:
• Entering false information
• Theft of others' information
• Unauthorized hacking or alteration of the sensor or app
• Acts that violate relevant laws or public order and morals
• Users must properly install and maintain the equipment so as not to interfere with service operations.

Article 6 (Protection of Personal Information)

The Company safely processes the user's personal information in accordance with relevant laws, and matters concerning the processing of personal information are subject to the separately established 「Privacy Policy」.

Article 7 (Change and Suspension of Service)

The Company may change or suspend the provision of services in the following cases:

• When necessary for operations such as system inspection and maintenance
• When force majeure events such as natural disasters, power outages, and communication failures occur
• When the Company otherwise deems it necessary

Article 8 (Disclaimer)

1. The Company is exempt from liability for service provision if it cannot provide the service due to natural disasters, war, suspension of service by key telecommunication business operators, and other equivalent force majeure events.

2. The Company is exempt from liability for damages caused by force majeure events such as system failures, system failures due to external attacks, and all computer and software-related problems for which response methods have not yet been developed by famous domestic and foreign security-related companies or research institutes, occurring without gross negligence.

3. The Company is exempt from liability for service use failures caused by the user's fault.

4. The Company does not take any civil or criminal responsibility for damages incurred by the user in connection with the use of the service provided free of charge.

5. The Company has no obligation to intervene in disputes arising between users or between users and third parties through the service, and is not responsible for compensating for damages resulting from them.

6. The Company is not responsible for any disputes that arise between users or between users and third parties.

Article 9 (Intellectual Property Rights)

The copyright and intellectual property rights to all content, software, sensor designs, etc. included in the service belong to the Company, and unauthorized reproduction and distribution are prohibited.

Article 10 (Competent Court and Governing Law)

These Terms shall be interpreted in accordance with the laws of the Republic of Korea, and the court having jurisdiction over the location of the Company shall be the competent court of first instance for disputes related to the use of the service.

Article 11 (Membership Withdrawal and Personal Data Deletion)

The user may request withdrawal from the Company at any time, and the Company will process the membership withdrawal request without delay. However, if it is necessary to perform a transaction contract already concluded, these Terms will continue to apply.

1. For users who do not use the Company's service for 1 year, the account may be converted to a dormant account and service use may be restricted.

2. Upon conversion to a dormant account, all information except for the ID, password, name, self-authentication value (DI) to prevent duplicate subscriptions, and mobile phone number necessary for account activation will be deleted. However, if necessary to preserve in accordance with relevant laws, the Company will retain the user information for a specified period.

3. If the user simply deletes the mobile app, the user's data generated while using the mobile app may not be deleted from the server.

4. When a user withdraws from the Company's service, even the data stored on the server is deleted. Therefore, even if you re-register, you cannot restore existing data.

Article 12 (Privacy Policy)

The Company receives personal information upon signing up on the Web and Mobile App.

1. The Company collects the minimum information necessary to perform the usage contract when collecting user information. Mandatory items: ID, password. Optional items: name, date of birth, age, gender, phone number (or mobile phone number). When the Company collects unique identification information and sensitive information under the Personal Information Protection Act, it must obtain the consent of the subject.

2. The Company does not hold the password among the personal information provided when signing up for the Web and Mobile App service, and matters related to this follow the Privacy Policy within the Web and Mobile App.

Article 13 (Obligations of the Company)

1. The Company shall not engage in acts prohibited by relevant laws and these Terms or contrary to public order and morals, and shall do its best to provide continuous and stable service as stipulated by the Terms.

2. The Company must have a security system for personal information protection so that users can safely use online and mobile services.

3. The Company does not send advertising emails, mobile phone messages, phone calls, mail, etc. for commercial purposes without the user's consent to receive them.

4. When a failure or loss occurs in servers and facilities, the Company repairs or restores them immediately without delay. However, in unavoidable circumstances such as natural disasters, war, emergencies, or judicial issues, the service may be temporarily or permanently suspended.

Addendum

These Terms apply from June 25, 2025.

RANIX Co., Ltd. (hereinafter referred to as the "Company") safely manages personal information by complying with the "Personal Information Protection Act" and related laws to protect the freedom and rights of information subjects and to properly perform public duties. In accordance with Article 30 of the "Personal Information Protection Act", the following privacy policy is established and disclosed to inform data subjects of the procedures and standards for processing personal information and to ensure prompt and smooth handling of related grievances.

1. Purpose of Processing Personal Information

• The Company collects the minimum necessary personal information to provide services.
• We collect the minimum necessary personal information for service provision during membership registration or service use.

2. Items of Personal Information Collected

• When registering for membership
  • [Required] ID, Password
  • [Optional] Name, Date of Birth, Contact Information, Gender
• When using the service
  • [Required] Posture information in bed, respiration, heart rate information
• During customer consultation
  • Additional information may be collected for consultation processing when contacting the customer center

3. Processing and Retention Period of Personal Information

• Major items used by service
  • Nursing home, nursing hospital mobile healthcare, senior health management business: posture information in bed, respiration, and heart rate information
• Retention period
  • 5 years or until membership withdrawal

4. Provision of Personal Information to Third Parties

• The method of collecting personal information is as follows. (Operational basis: Consent of the data subject, Article 5-3, Paragraph 2, Item 6 of the National Health Promotion Act)
• When collecting personal information, users are informed in advance and their consent is sought as a principle, and personal information is collected through the following methods:
• When the user agrees to the collection of personal information and directly enters the information during membership registration and service use
• Nursing homes, nursing hospitals, welfare facilities, etc. that have received "consent to provide to third parties" from the personal information provider

5. Consignment of Personal Information Processing

• There are no consigned matters.

6. Rights, Obligations, and Exercise Methods of Information Subjects

• The information subject (or legal representative in the case of a child under 14 years of age) may exercise the following rights related to personal information protection at any time.
  ※ Requests for access, etc. to personal information of children under the age of 14 must be made directly by the legal representative, and an information subject who is a minor over the age of 14 may exercise their rights regarding their personal information themselves or through a legal representative.
  • ① Request to read personal information
  • ② Request for correction in case of errors, etc.
  • ③ Request for deletion
  • ④ Request for suspension of processing
• If the information subject requests the correction or deletion of personal information errors, the personal information will not be used or provided until the correction or deletion is completed.
• Requests to read and suspend the processing of personal information may be restricted under Article 35, Paragraph 4 and Article 37, Paragraph 2 of the Personal Information Protection Act.
• Requests for correction and deletion of personal information cannot be requested if the personal information is specified as an object of collection in other laws.
• When requesting access, correction/deletion, or suspension of processing in accordance with the rights of the information subject, we verify whether the person making the request is the person themselves or a legitimate representative.

7. Destruction of Personal Information

• In principle, the Company destroys personal information without delay when the purpose of processing personal information is achieved. However, this does not apply if it must be preserved according to other laws.
• If personal information must be preserved in accordance with other laws despite the expiration of the personal information retention period consented to by the information subject or the achievement of the processing purpose, the personal information (or personal information file) is moved to a separate database (DB) or stored in a different location.
• The procedure, deadline, and method of destruction are as follows:
  • Destruction procedure: Information entered by the user is destroyed after being stored for a certain period according to internal policies and related laws after the purpose is achieved, or destroyed immediately.
  • Destruction method: The Company destroys personal information recorded and stored in the form of electronic files so that records cannot be reproduced, and personal information recorded and stored in paper documents is destroyed by shredding or incineration.

8. Measures to Ensure the Safety of Personal Information

• In accordance with Article 29 of the Personal Information Protection Act, the Company takes the following technical, administrative, and physical measures necessary to ensure safety.
• Establishment and implementation of an internal management plan: The Company's internal management plan is established and implemented in compliance with the internal management guidelines of the Personal Information Protection Commission and the Ministry of Health and Welfare.
• Minimization and training of personnel handling personal information: Employees handling personal information are designated and managed only to the necessary number of personnel, and training for safe management is conducted for handling employees.
• Restriction of access to personal information: Necessary measures are taken to control access to personal information by granting, changing, and canceling access rights to the database system that processes personal information, and unauthorized access from the outside is controlled using an intrusion prevention system.
• Storage of access records and prevention of forgery/falsification: Records (web logs, summary information, etc.) of accessing the personal information processing system are stored (minimum 1 year) and managed, and security functions are used to prevent access records from being forged, falsified, stolen, or lost.
• Encryption of personal information: User's personal information is encrypted and stored and managed. In addition, separate security functions such as encrypting important data during storage and transmission are used.
• Technical measures against hacking, etc.: To prevent personal information leakage and damage caused by hacking or computer viruses, the Company installs security programs, conducts periodic updates and inspections, installs systems in areas where access from the outside is controlled, and technically and physically monitors and blocks them.
• Access control for unauthorized persons: A separate physical storage location for the personal information system storing personal information is established, and access control procedures are established and operated.

9. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices

• The Company uses 'cookies' that store and retrieve the information subject's usage information from time to time to understand the user's website visit history.
• Cookies are a small amount of information sent by the server (http) used to operate the website to the user's computer browser, and may also be stored on the hard disk in the user's PC computer.
• Purpose of using cookies: They are used to provide more convenient services to users by understanding the user's connection frequency and visit time.
• Installation, operation, and refusal of cookies: You can set to allow or block cookies through browser option settings.
  • Internet Explorer: Tools menu at the top right of the web browser > Internet Options > Privacy > Settings > Advanced
  • Edge: Settings menu at the top right of the web browser > Cookies and site permissions > Manage and delete cookies and site data
  • Chrome: Settings menu at the top right of the web browser > Privacy and security > Cookies and other site data
• If you refuse or block storing cookies, you may experience difficulties in using the service.

10. Personal Information Protection Officer

• The Company has designated a Personal Information Protection Officer and a Protection Manager as follows to protect personal information and handle complaints related to personal information. (Personal Information Protection Officer according to Article 31, Paragraph 1 of the "Personal Information Protection Act")



Personal Information Protection Officer

• Department: Convergence Development Division Application S/W Team
• Position: Team Leader
• Name: Seok-hee Lee
• Phone: 02-584-5516
• Email: shlee@ranix.co.kr



Personal Information Protection Manager

• Department: Convergence Development Division Application S/W Team
• Position: Principal Researcher
• Name: Seong-soo Park
• Phone: 02-584-5516
• Email: sspark@ranix.co.kr

11. Remedies for Infringement of Rights

• If your personal information has been infringed and you need to report or consult, you can get help by contacting national agencies.
• Personal Information Infringement Report Center (without exchange number) 118
  privacy.kisa.or.kr
• Supreme Prosecutors' Office Cyber Investigation Division (without exchange number) 1301
  cybercid.spo.go.kr
• National Police Agency Cyber Investigation Bureau (without exchange number) 182
  ecrm.cyber.go.kr
• Personal Information Dispute Mediation Committee (without exchange number) 1833-6972
  kopico.go.kr

12. Duty to Notify

The privacy policy may be modified to reflect changes in laws or services. If the privacy policy changes, we will notify you of the changes at least 7 days in advance. However, if a significant change occurs in user rights, we will notify you at least 30 days in advance.

The Company values your information and promises to do our best so that users can use the service with peace of mind.

Date of Announcement: June 25, 2025

Effective Date: June 27, 2025