ChoiceDx Privacy Policy

Effective Date: September 1, 2025
Version: v.6

ChoiceDx, hereinafter referred to as the "Company," values the privacy of its users and complies with applicable privacy and data protection laws.

This Privacy Policy explains how personal information is collected, used, protected, and managed when users access the ChoiceDx AI skin, hair, and scalp analysis services.

1. Purposes of Collecting and Using Personal Information

The Company processes personal information only within the purposes and scope agreed to by the user.

Personal information will not be used for any other purpose unless permitted by applicable law or separately authorized by the user.

The collected personal information may be used for the following purposes.

1. Providing AI skin, hair, and scalp analysis services

2. Providing personalized product recommendations and consultation support based on analysis results

3. Operating the services and responding to customer inquiries

4. Analyzing service usage statistics

5. Improving service quality and user experience

6. Providing app usage guides, notices, promotions, events, and newsletters

7. Improving AI analysis algorithms and training AI models to enhance analysis accuracy

Users may be asked to provide personal information required for account registration or use of essential service functions.

1. Categories of Personal Information Collected

A. Required Information

The Company may collect the following information to provide the essential functions of the services.

Year of birth
Gender
Race or ethnicity
Captured images
Skin, hair, and scalp analysis results
Service usage records

Information Regarding Captured Images

ChoiceDx may collect images containing the user's face, skin, hair, or scalp to provide AI skin, hair, and scalp analysis services.

These images are used to provide ChoiceDx analysis services and related consultation procedures.

Captured images are not disclosed to other users and are not provided to third parties without the user's consent.

When a user requests deletion, the images will be deleted without undue delay in accordance with applicable law.

B. Optional Information

The Company may additionally collect the following information to provide personalized services.

Name
Email address
Telephone number
Address

C. Automatically Collected Information

The following information may be collected automatically while users access or use the services.

Device information
Operating system information
System activity information
App and website usage records
IP address
Location information
Language settings
Access time and service usage duration
Error and crash information

D. Information Concerning Minors

ChoiceDx services are intended for users aged 18 or older.

If the Company becomes aware that personal information belonging to a user under the age of 18 has been collected, the information will be deleted without undue delay in accordance with applicable law.

1. Use of Personal Information

The Company uses collected personal information for ongoing customer management and the provision of appropriate services.

The main purposes for which personal information is used are as follows.

1. Providing AI skin, hair, and scalp analysis services

2. Providing personalized consultations and product recommendations based on analysis results

3. Receiving and responding to customer inquiries

4. Improving service quality and user experience

5. Improving algorithms and AI models to enhance analysis accuracy

6. Providing service information and marketing communications with the user's consent

When collecting or using personal information that requires separate consent, the Company obtains the user's explicit consent through methods such as an online checkbox, electronic consent, or written consent.

1. Provision of Personal Information to Third Parties

The Company does not use personal information beyond the stated purposes of collection or provide it to third parties without the user's consent.

The following cases are exceptions.

1. When the user has explicitly consented to the provision of personal information

2. When the provision of personal information is required or permitted by applicable law

3. When information is provided in a form that does not identify an individual for statistical, research, or public-interest purposes

Users may refuse to consent to the provision of personal information to third parties.

However, access to certain services may be restricted when such provision is essential for delivering the relevant service.

When the Company provides personal information to a third party located outside the user's country, it will provide separate notice and obtain consent in accordance with applicable law.

1. Outsourcing and International Transfer of Personal Information

The Company may outsource certain personal information processing activities to professional service providers to perform service-related contracts and improve user convenience.

Service Provider: Amazon Web Services, Inc.

Address: 1 Rue Rateau, 93120 La Courneuve, France

Destination Country: France

Personal Information Transferred: Personal information collected through the app and services as specified in this Privacy Policy

Purpose of Transfer: Cloud server operation, data storage, data analysis, operation of AI analysis services, and maintenance of system stability

Transfer Method: Transmission through encrypted networks during use of the services

Retention and Use Period: Until the purpose of processing has been fulfilled or the retention period required by applicable law has expired

When entering into a personal information processing agreement with a service provider, the Company establishes the measures required under applicable law and supervises the service provider to ensure that personal information is securely managed.

1. Retention and Use Period of Personal Information

The Company may retain personal information for up to one year after the purposes of collection and use have been fulfilled.

However, when the user has provided separate consent for research and development intended to improve analysis accuracy, analysis images such as facial, skin, hair, and scalp images may be retained for up to five years.

Once the applicable retention period expires, the personal information will be securely deleted.

When a user requests account withdrawal or withdraws consent to personal information processing, the relevant personal information will be deleted without undue delay unless retention is required by applicable law.

Information that must be retained for a certain period under applicable law will be stored separately for the legally required period and deleted afterward.

1. Procedures and Methods for Destroying Personal Information

The Company destroys personal information without undue delay when its retention period expires or the purposes of processing have been fulfilled.

A. Destruction Procedure

Personal information for which a reason for destruction has occurred is securely destroyed after confirmation and approval by the person responsible for personal information protection.

B. Destruction Method

Personal information stored in electronic files is deleted using technical methods that prevent recovery or restoration.

Paper documents containing personal information are shredded or incinerated.

The Company may not be held responsible for personal information loss or incidents caused by the user's negligence or circumstances beyond the Company's reasonable control, except to the extent otherwise required by applicable law.

1. User Rights

Users may exercise the following rights concerning their personal information at any time.

1. Request access to personal information

2. Request correction or amendment of personal information

3. Request deletion of personal information

4. Request suspension or restriction of personal information processing

5. Withdraw consent to the collection and use of personal information

6. Request account withdrawal

Users may exercise these rights by contacting the person responsible for personal information protection by email or another available method.

The Company will respond to user requests promptly and appropriately in accordance with applicable law.

The procedure for withdrawing consent will be provided through a method that is no more difficult than the procedure used to obtain consent.

1. Person Responsible for Personal Information Protection

The Company has appointed the following person to protect users' personal information and handle privacy-related inquiries and complaints.

Name: Wonsuk Choi (Ryan)

Position: Chief Executive Officer

Address: A-1301-2, 184 Jungbu-daero, Giheung-gu, Yongin-si, Gyeonggi-do, 17950, Republic of Korea

Email: privacy@choicetech.kr

Requests regarding access, correction, deletion, suspension of processing, withdrawal of consent, and other personal information matters may be submitted through the contact information above.

The Company will process such requests promptly and appropriately in accordance with applicable law.

1. Changes to This Privacy Policy

This Privacy Policy may be amended due to changes in applicable laws, government policies, service details, or the Company's internal operating policies.

When material changes are made, the Company will notify users before the effective date through the ChoiceDx website, service notices, or another appropriate method.

The effective date and version number will be displayed in the amended Privacy Policy.

ChoiceDx Privacy Protection Principles

As an AI-powered skin, hair, and scalp analysis platform, ChoiceDx considers the secure protection of users' personal information to be a fundamental operating principle.

The Company collects only the personal information necessary to provide its services, processes it according to clearly stated purposes, and continuously reviews and improves its privacy protection system to provide reliable AI analysis services.

Version: v.6

Effective Date: September 1, 2025