Terms and Conditions
Chapter 1: General Provisions
Article 1 (Purpose)
The terms and conditions (hereinafter referred to as the “Terms and Conditions”) aims to stipulate the rights, obligations, and responsibilities between the Company and members in using the services (including applications (apps), firmware, software, APIs, and our other devices) provided by EOFLOW Co., Ltd. (hereinafter referred to as the “Company”).
Article 2 (Definition of terms)
- The definitions of terms used in the Terms and Conditions are as follows:
- ① “Member” refers to a person who agrees to the Terms and Conditions and uses the service through an application or web
- ② “Service” refers to the application (app), firmware, software, API, devices, and all accompanying services provided to the members by the Company.
- ③ “Application” refers to a mobile program provided by the Company to provide the services.
- ④ “Firmware, software and API” refers to programs for devices provided by the Company.
- ⑤ “API” collectively refers to the interface between devices and applications provided by the Company.
- ⑥ “Use contract” refers to the entire contract made between the Company and members with regards to the use of the service, and the Terms and Conditions form part of this contract.
- ⑦ “User ID” refers to a unique combination of letters and numbers given by the Company to each member via the application of a member to identify each member and provide services.
- ⑧ “Password” refers to a unique combination of letters and numbers set by the member and registered with the Company so that it can be used to verify the identity of the member identified by the user ID.
- ⑨ “Devices” collectively refer to “EOPATCH, ADM, etc.” provided by the Company.
- ⑩ “Termination” refers to an expression of the Company or a member’s intention to invalidate the contract starting from a certain time of the future.
- ⑪ “Personal information” refers to “personal information” under the Personal Information Protection Act, the Act on Promotion of Information and Communication Network Utilization and Information Protection of Korea (hereinafter referred to as the “Information and Communication Network Act”) and “personal data” under the EU General Data Protection Regulation (“GDPR”) and Legislative Decree no. 196/2003 (“Privacy Code”)
- The terms that are used in the Terms and Conditions but not specified in Paragraph 1 are in accordance with the relevant laws and regulations and guides for each service, and otherwise, subject to general customs and commerce practices.
Article 3 (Effect and change of the terms and conditions)
- The Terms and Conditions apply to members who use the service.
- The Terms and Conditions become effective upon notification by being posted online on the website, posted on the initial screen of the application, or providing a connection screen, and upon consent of the user.
- If there is a reasonable reason, the Company may change the Terms and Conditions to the extent that it does not violate relevant laws such as the Act on the Regulation of Terms and Conditions, the Act on Promotion of Information and Communication Network Utilization and Information Protection. The reason for the change shall be specified and notified by way of the preceding paragraph or other similar ways from 7 days before the effective date to the day before the effective date. However, if the Terms and Conditions are changed against the members, it will be notified with a grace period of at least 30 days in advance.
- Members may request for membership withdrawal (termination) if they do not agree to the change in the Terms and Conditions under the preceding paragraph. However, if a member continues to use the service for more than one month after the effective date of the changed Terms and Conditions, the member will be deemed to have agreed to the change of the Terms and Conditions.
Article 4 (Rules other than the terms and conditions)
- Matters not specified in the Terms and Conditions are subject to related laws such as the Basic Act on Telecommunications, the Computer Program Protection Act, and the Copyright Act, as well as separate terms and conditions, regulations, or detailed guidelines for use of the services provided by the Company.
- The company may have separate terms and conditions and policies for individual services in place, and if the contents conflict with the Terms and Conditions, those separate terms and conditions and policies will apply in priority.
Article 5 (General rules for members)
- The Company may notify members using other means of communication, such as sending e-mails, text messages (SMS/MMS), application notifications (PNS), etc.
- For notifications to many unspecified members or users that cannot be notified by way of the method under the preceding paragraph, the Company may post them online on the website or the initial screen of the application or provide a connection screen instead of sending individual notifications.
- The Company notifies members of the relevant details in case of business alliance with other companies, business transfer, and spin-off or merger of the Company.
CHAPTER 2 SERVICE USE CONTRACT
Article 6 (Establishment of the contract)
- If a member clicks or selects the button of “I agree” to the Terms and Conditions notified by the Company through the service screen, they are deemed to have agreed to the Terms and Conditions.
- The service use contract is established when the company approves the customer’s application for subscription pursuant to Article 7 below.
Article 7 (Subscription application and approval)
- To sign up as a member, you must agree to the Terms and Conditions, grant all consents to each required item related to personal information, and consents to other services, and enter ID, password, email, name, diabetes type, and date of birth, gender, and other matters deemed necessary by the Company in the form the Company provides.
- When registering for service use, members must provide complete information consistent with the current facts (hereinafter referred to as the Registration Information), and in the event of a change in the registered matters referred to in Paragraph 1 of this Article, members are obligated to correct this according to the procedures set by the company, such as changing member information. The Company is not responsible for any problems arising from the member’s failure to change member information.
- All members must provide their own information for using the service, and members who do not correctly register their information, such as stealing other’s information or registering false information, may be subject to disadvantages such as termination according to the Terms and Conditions or may be subject to punishment in accordance with relevant laws and regulations.
- Membership registration can be done only by using a person’s own personal information, and the company can take action to check the information registered by the member. Members must actively cooperate with the company’s verification measures, and if a member does not, the company may treat the information registered by the member as inaccurate.
Article 8 (Assigning and changing User ID, etc.)
- The company assigns a user ID to a member according to the Terms and Conditions.
- User ID cannot be changed, and if you want to change it due to unavoidable reasons, you must cancel the membership registration of the ID and re-register
- User ID may be changed or suspended at the request of a member or by sole discretion of the Company in the following cases.
- ① If it causes emotions of disgust to others or contrary to established good practices
- ② If the same name is used or there is a risk of misunderstanding as the same name with the name of the Company, the Company’s service or service operator, etc
- ③ If there are other reasonable reasons
- Members are responsible for managing their user IDs and passwords. Each member is responsible for any damages in the use of the service or wrongful use by a third party due to management negligence, and the Company is not responsible for it.
- Other matters related to the management and change of personal information of each member follow the guides for each service.
Article 9-1 (Protection and use of personal information)
- The Company strives to protect the personal information of members in accordance with the relevant laws and regulations. Regarding the protection and use of personal information, the relevant laws and regulations and the company’s Privacy Policy are applied. However, the Company’s Privacy Policy does not apply outside the scope of the service provided by the Company. In addition, members must thoroughly manage their passwords in the way that they are not exposed to others, and the Company is not responsible for the information exposed due to reasons attributable to members.
- The Company may provide the member’s personal information to a third party within the scope permitted by law in the following cases.
- ① If the Company obtains prior consent of the information subject.
- ② If there are special regulations under applicable laws, etc.
- ③ In the other cases specified in the Privacy Policy.
Article 9-2 (Special rules on device interlocking services)
- After signing up for this service, a member can purchase a device provided by the Company (a blood glucose management device that injects and measures the member’s blood glucose and transmits it to a predetermined server) and can link it with this service.
- The Company may provide the information measured by the device to affiliated companies, corporations, organizations, institutions, or others with separate consent from the users and within the scope of the consent.
- Information provided by customers to the Company
- ① Required information
To create an account for our services, you will need to provide some information such as username, ID, email address, password, date of birth and gender. - ② Optional information
We may need additional information such as height, weight, carbohydrate content, notifications, to support for the use of certain features of the service.
- ① Required information
- Information received by the Company
- ① Device and information used
The user’s device collects data to calculate various indicators such as the user’s blood glucose, bolus injection amount, basal insulin injection amount, temporary insulin injection amount. When a user’s device synchronizes with our applications or software, the data recorded on the device is transferred from that device to our servers. This data is used for notification services. - ② Location information
Services include the feature to use accurate location data such as GPS signals, Wi-Fi access points, and base station IDs. When users give the Company a permission to access their location, the Company collects this type of data. At any time, users can block the Company’s access by using mobile device settings. The Company can also estimate their approximate location from their IP address. This can be used as a notification service to guardians in case of an emergency.
- ① Device and information used
Article 10 (Restriction of service approval)
- The Company may not approve the application for use if it falls under each of the following items and may withhold approval until the reason is resolved.
- ① When it is impossible to provide service due to technology
- ② When the user uses false information for application, such as using the name of another person (group)
- ③ When false information is entered in the required items for the application, or there are omissions or errors in important matters
- ④ When the application is filed for hindering or for the purpose of hindering the stability and order of society or established good practices
- ⑤ When it is judged that the use of the service in a wrongful way can damage the Company
- ⑥ If the applicant has previously lost his or her membership due to wrongful use or the like However, an exception applies when the Company’s approval for re-registration is granted after more than one year has passed since the qualification loss.
- ⑦ When the capacity of service-related facilities is insufficient
- ⑧ If the applicant wants to use the service for the purpose of pursuing profit
- ⑨ When the applicant is in a competitive relationship with the service
- ⑩ In other cases in which the requirements for use application set by the Company are not satisfied or are deemed necessary considering the company’s circumstances
- If the Company finds out any of the reasons of Paragraph 1 after signing up for membership, the Company may take measures to restrict the use such as termination or suspension of the use contract.
- The Company may withhold approval according to the guide for each service if the customer applying for use is a minor stipulated by relevant laws and regulations.
- After completing the membership registration process, the Company may withdraw the approval of the use if any of the reasons of Paragraph 1 is found.
CHAPTER 3 USE OF SERVICE
Article 11 (Service use)
- The Company starts the service immediately from the time of membership registration. However, for some services, the service can be started from the specified date.
- If the service cannot be started due to a business or technical setback of the Company, the member is notified by posting it online on the website, posting it on the initial screen of the application, or providing a connection screen.
- The Company provides dedicated applications for mobile devices (iOS devices, Android OS devices, etc.), and members can use the service by downloading and installing dedicated applications on devices within the scope allowed by the Company. (However, the configuration and functions of the application may differ depending on the type of device and the carrier to which the member subscribes.)
Article 12 (Service hours)
- In principle, the service is provided 24 hours a day, 365 days a year, unless there is a special problem with the Company’s business or technology. However, the Company may temporarily suspend the service on a day or time determined by the Company for regular system inspection, expansion, and replacement, and temporary suspension of service due to scheduled work will be notified in advance through the method specified in Article 5.
- Some services with the set operating hours or operating periods are operated according to a separate standard, not 24 hours a day. Separately determined standards will be announced in advance through the method set forth in Article 5.
- The Company may temporarily suspend all or part of the service without prior notice in case of inevitable reasons such as urgent system inspection, expansion and replacement, equipment failure, congestion in service use, national emergency, power outage, etc.
- The company may stop providing all or part of the services after prior notice to the members if it is necessary for service reorganization or other service operation.
Article 13 (Service content)
- The service consists of device service (patch, ADM, etc.), application, and web service, and the details of the service are as follows.
Blood glucose, medication records and settings, meals and exercise values can be entered according to the form presented by the Company, and this input data and values automatically collected through the device are provided to members in various forms of information for blood glucose management. In addition, functions such as dosing functions, notifications, and alarms according to the dosing schedule and situation are provided.
Article 14 (Change and restriction of service)
- The Company may notify the members of the contents of the service to be changed and the date of provision in the manner specified in Article 5 and provide the changed service.
- The Company may limit or suspend all or part of the service if it falls under any of the following items.
- ① When there are reasons such as repair, inspection, replacement or breakdown of computers or other information and communication facilities, disruption of communication, etc.
- ② When it is unavoidable due to repair of facilities or other necessary works for service
- ③ When it is impossible to provide normal service due to power failure, failure of all facilities, or congestion of service use
- ④ When a member interferes with the Company’s business activities
- ⑤ When the service cannot be continued due to various circumstances of the Company, such as the termination of the contract with the service provider
- ⑥ In case of force majeure such as natural disaster or national emergency
- ⑦ When it is impossible to provide the services any longer due to a change in business plan or management reasons of the Company
- In the case of service suspension pursuant to Paragraph 2 of this Article, the Company shall notify the members by the method specified in Article 5. (However, this is not the case if prior notice is not possible due to service interruption caused by reasons beyond the Company’s control such as disk or system failure without the operator’s intention or negligence.)
- The Company is not responsible for any problems arising from service change or suspension unless there is an intention or negligence on the part of the Company.
Article 15 (Prohibition of resale of service)
- Members may not use the service itself and part of or all the service contents in a way of copying, replicating, selling, reselling, or transferring for commercial purposes.
CHAPTER 4 OBLIGATIONS OF THE PARTIES
Article 16 (Obligations of the Company)
- The Company does not disclose or distribute the personal information of a member, which has been obtained in connection with providing the service, to a third party without the consent of the person. However, this is not the case for a legal procedure in accordance with the provisions of the law, such as a request from a relevant agency for investigation purposes under related laws or a request from the competent authority.
- To provide continuous and stable service, the Company repairs or restores without delay in the event of a failure in related equipment and software unless there is an unavoidable reason. However, in case of natural disaster, emergency, or other unavoidable circumstances, the service may be temporarily stopped or suspended.
- When a complaint from a member is received in relation to the service, the Company promptly handles it, and if it is difficult to process it quickly, the Company notifies the member of the reason and handling schedule through the method of Article 5
- In the event of damage to a member due to the service provided by the Company, the Company shall be liable only if such damage is caused by reasons attributable to the Company.
- The Company complies with laws and regulations related to the operation and maintenance of services such as the Personal Information Protection Act, the Information and Communication Network Act, the Communication Secret Protection Act, and the Telecommunication Business Act.
Article 17 (Obligations of Members)
- Members may not perform any of the following acts when using the service, and the Company does not have legal responsibility for any violation.
- ① Acts of using false information or stealing or wrongfully using another member’s ID and password when applying for the use of this service or changing information
- ② Acts of reproducing, distributing, or commercially using the information obtained in the use of the company’s services without prior consent of the Company
- ③ Acts of wrongfully using and stealing other “user’s” “personal identification information”
- ④ Acts of infringing the Company’s copyright, the copyright of a third party or other rights
- ⑤ Acts of disseminating information, sentences, figures, voices or other things of contents that violate public order and established good practices
- ⑥ Acts of collecting, storing, and disclosing personal information of other members without following a legitimate process
- ⑦ Acts of sending e-mail data containing software viruses, other computer codes, files and programs designed for the purpose of disrupting or destroying the normal operation of computer software, hardware, and telecommunication equipment
- ⑧ Acts of interfering with the other person’s daily life by continuing to reach the other person with words, sounds, writings, images, or videos that cause shame, disgust or fear
- ⑨ Other illegal or unjust acts of harassing other members such as stalking
- ⑩ Acts that violate other relevant laws and regulations or against public order and established good practices
- Members must comply with relevant laws and regulations, the provisions of the Terms and Conditions, notices notified in the usage guide and service, and matters notified by the Company, and must not engage in any other acts that interfere with the business of the Company.
- Members may not be engaged in the business activities to sell products using the service, except when officially recognized by the Company, and particularly, hacking, acts of gaining profits through advertisements, commercial activities through obscene sites, illegal distribution of commercial software, etc. The Company is not responsible for the result or loss of business activities in violation of this, and legal actions such as punishment by related organizations, and members are obligated to compensate the Company for damages incurred in connection with such actions.
- Members shall not allow a third party to use their member ID, password, and mobile phone number, and if a member becomes aware that the information has been stolen or used by a third party, the member must notify the Company immediately and inform the Company. If there is a guidance to it, the member must follow it.
- Members are responsible for all the consequences arising from the negligence in management of member ID and password, mobile phone number, and wrongful use, and the Company is responsible for any problems arising from reasons attributable to the company, such as system failure of the Company.
Article 18 (Protection of personal information)
- The Company highly values the protection of member’s personal information and strives to protect member’s personal information in accordance with relevant laws such as the Personal Information Protection Act and the Information and Communication Network Act. The Personal Information Protection Act and related laws, the Company’s personal information processing policy, and the guidelines separately determined by the Company are applied
Article 19 (Protection of personal location information)
- The Company strives to protect the personal location information of members in accordance with relevant laws, such as the “Location Information Protection and Use, etc.”. Relevant laws and regulations such as the Act on Protection and Use of Personal Location Information, the Information and Communication Network Act, and the Basic Telecommunication Act, the Company’s Privacy Policy, and the guidelines separately determined by the Company are applied.
Article 20 (Entrustment of personal information processing work)
- In principle, the Company performs tasks such as processing and management of collected personal information by itself, but if necessary, it may entrust part or all of the personal information processing work to a company selected by the Company. When entrusting the handling of personal information, the Company will explicitly notify the member of the handling entrustment through the Personal Information Processing Policy of the Company.
CHAPTER 5 TERMINATION OF CONTRACT AND RESTRICTION ON USE
Article 21 (Termination of contract and suspension of use)
- When a member performs any of the following acts or at the request of a related agency such as the Korea Communications Commission, the Company may terminate the use contract with the member without prior notice or suspend the member’s use of the service for a predetermined period.
- ① Acts that infringe the copyright, intellectual property rights, or other rights of the Company or a third party
- ② Acts judged to be associated with crimes
- ③ Acts of spreading hacking or computer viruses, or continuously transmitting certain contents such as advertising information against the will of others
- ④ Acts of wrongfully using another member’s ID
- ⑤ Acts of collecting, stealing, storing or distributing personal information of other members
- ⑥ Acts of pretending to be another person
- ⑦ Acts of forging the sender of service materials and works
- ⑧ Acts of stalking or harassing others
- ⑨ Acts that repeat joining and withdrawals from membership without justifiable reasons to obtain financial gain or interfere with the Company’s service operation
- ⑩ Acts of transferring or selling your ID to another person
- ⑪ Any act that interferes with or may interfere with the service operation, and any act that violate the Terms and Conditions, the Company’s other service terms and conditions, or other related laws
- The Company may restrict the approval of the application for a certain period or reject the application when a member who has been terminated pursuant to Paragraph 1 applies for the use again.
- If a member wants to terminate this service, the “member’s information” in the service will be deleted. (However, the information created and posted by the member may not be deleted.)
Article 22 (Indemnity)
- The Company is exempt from liability and does not compensate for damages in any of the following cases.
- ① The Company is exempted from liability if it cannot provide the service due to wars, incidents, natural disasters, emergencies, technical defects that cannot be resolved with current technology, or other force majeure reasons.
- ② The Company is exempted from responsibility for service suspension, use disruptions and contract termination due to reasons attributable to the member.
- ③ The Company is exempted from liability for damages to members due to a telecommunication service provider’s interruption or failure to provide telecommunication services normally unless there is intentional or gross negligence of the Company.
- ④ The Company is exempted from liability in case of service suspension or failure due to unavoidable reasons such as repair, replacement, periodic inspection, construction of the service facilities, which has been notified in advance, unless there is intentional or gross negligence of the Company.
- ⑤ The Company is exempted from liability for all problems arising from the member’s computer or the other device environment or the network environment without the Company’s intention or gross negligence.
- ⑥ The Company shall be exempted from liability for the reliability, accuracy or similar details of the information, data, and facts posted or transmitted in the service or on the website by a member or a third party unless there is an intentional or gross negligence on the part of the Company.
- ⑦ For free services that are provided by the Company, the Company does not compensate for damages unless there is an intentional or gross negligence on the part of the Company.
- ⑧ Some of these services may be used through services provided by other providers or for services of other providers, and the Company is exempt from liability for damages caused by the services provided by other providers unless there is an intentional or gross negligence on the part of the Company.
- ⑨ The Company is exempt from liability for damages caused by errors in the member’s smartphone or computer, or due to incorrectly or unfilled personal information and e-mail addresses unless there is an intentional or gross negligence on the part of the Company.
- The Company’s service and the services of a linked company (referring to the company operating a site linked by links to the company’s service screen) operate independently of each other, and the Company is not responsible for transactions made between the linked company and the members.
Article 23 (Governing law and competent court)
- For a dispute regarding the Terms and Conditions, the procedure specified by the laws of the Republic of Korea will be followed.
- Matters not specified in the Terms and Conditions are subject to other related laws and business practices, such as the Commercial Act, the Telecommunications Business Act, and the Act on Consumer Protection in E-commerce.
- If a lawsuit is filed for a dispute arising from the use of the service, the court governing the member’s or Company’s address shall be the court having jurisdiction over the first trial.
Supplementary Provisions
- The Terms and Conditions will take effect from 03/29/2021.
Privacy Policy of EOFlow Co., Ltd.
EOFlow Inc. (“Company”) complies with the Personal Information Protection Act and relevant laws and regulations, and processes personal information lawfully and safely. In accordance with Article 30 of the Personal Information Protection Act, this Privacy Policy has been established and disclosed to inform data subjects of the procedures and standards for the processing and protection of personal information, and to facilitate the prompt and smooth handling of any related concerns.
[Symbols of key personal information processing (Labeling)]

1 Purpose of Personal Information Processing
- The Company processes personal information for the following purposes. The personal information will not be used for purposes other than those stated below. In the event of changes to the purpose, separate consent will be obtained in accordance with Article 18 of the Personal Information Protection Act.
- A) Membership Registration and Management for EOFLOW Services
- To confirm a user's intent to register, provide membership-based services, identify and authenticate individuals, maintain and manage member status, prevent unauthorized use, verify legal guardian consent for children under 14, issue notifications and announcements, and handle complaints.
- B) Service Provision
- To deliver services and content, provide personalized services and authentication, and support other related services.
- C) Legal Compliance
- Personal information may also be processed if required by law or for compliance with legal obligations.
2 Items of Personal Information Collected
- In accordance with the Personal Information Protection Act, the Company collects only the minimum necessary personal information required to provide its services.
-
-
Service Purpose Information Collected Retention Period Membership
(User)User verification, service provision, membership management, unauthorized use prevention, legal guardian consent check (for under 14), notifications Required: Email address, country, name, ID/password, gender, birthdate, diabetes type/diagnosis year, height, weight
Optional: Emergency medical info (hospital name, doctor, contact), profile image
For under 14: Guardian’s name, birthdate, emailUntil account deletion or
legal retention period endsMembership
(Guardian)User verification, service provision, membership management, unauthorized use prevention Required: Email, name, ID/password, resident country Until account deletion or
legal retention period endsBlood Glucose
ManagementMonitoring and providing statistics Required: Insulin delivery (bolus, basal/temporary), sensor glucose, blood glucose, carbohydrate intake, physical activity Until account deletion or
legal retention period ends - In addition, the following information may be generated and collected during the membership registration or login process.
- * OS info, device model, browser type/version, language/country settings, IP address
-
3 Personal Information of Children Under Age 14
- A) Where consent is required to process personal information of children under 14, the Company obtains consent from the legal guardian.
- B) The Company may request minimal information (guardian’s name, contact details), verify consent via the guardian’s email, and require confirmation through the website.
4 Provision of Personal Information to Third Parties
- A) The Company does not provide personal information to third parties unless with the data subject’s consent or under special legal provisions (Articles 17 and 18 of the Personal Information Protection Act).
- B) When consent is obtained
-
Recipient Data Provided Purpose,
Retention/Transfer DetailsGuardian/Physician Collected via EOBridge (Narsha App) Purpose: Monitoring user condition (upon user request)
Retention: During service period and legal retention duration
Transfer Details: transferred via network during service use - C) Without consent, under legal grounds
-
Legal Basis Recipient Data Provided Purpose,
Retention/Transfer DetailsArticle 31, Medical Device Act (Adverse Event Reporting) Ministry of Food and Drug Safety Name, gender, birthdate, age (at time of report), adverse event details Purpose: Regulatory safety reporting
Retention: As per relevant law
Transfer Details: As per relevant law; transferred via network upon occurrence
5 Cross-Border Transfer of Personal Information
- Personal information collected from service users may be transferred overseas as follows
-
Recipient Country Data Transferred Purpose,
Retention/Transfer DetailsAmazon Web Service Inc.
[aws-korea-privacy@amazon.com]USA Personal data & log data collected during service use Purpose: Data storage and service operation
Retention: During service period and legal retention duration
Transfer Details: transferred via network during service useEOFlow, Inc.
[eo-usa-privacy@eoflow.com]USA Personal data & log data collected during service use Purpose: System maintenance and operation
Retention: During service period and legal retention duration
Transfer Details: transferred via network during service use - A) The Company ensures that cross-border processors comply with Article 26 of the Personal Information Protection Act through contracts specifying security, prohibition of reprocessing, and liability terms.
- B) If the contents of the consignment work or the consignee are changed, we will disclose them through this privacy policy without delay.
6 Retention and Destruction of Personal Information
- A) When the retention period expires or the purpose is fulfilled, personal information is promptly destroyed unless otherwise required by law.
- B) If the personal information must continue to be preserved in accordance with other laws and regulations despite the expiration of the personal information retention period agreed by the information subject or the achievement of the purpose of processing, the personal information will be transferred to a separate database (DB) or stored in a different storage location. ※ Items of personal information to be preserved under other laws and regulations and the basis for retention can be found in "2 Items of Personal Information to be Processed”
- C) The procedure and method of destroying personal information are as follows.
- ① Destruction Process
- The responsible department selects the data and proceeds with approval from the Privacy Officer.
- ② Destruction Methods
- Electronic files are irreversibly deleted; paper documents are shredded or incinerated.
7 Rights of Data Subjects and Legal Guardians
- A) Data subjects may exercise the following rights at any time: request to view, correct, delete, suspend processing of personal information, or withdraw consent.
- ※ Requests such as viewing personal information of children under the age of 14 must be made directly by the legal representative, and the information subject who is a minor over the age of 14 may exercise the rights of the minor himself or herself with respect to the personal information of the information subject or exercise the right through a legal representative.
- B) The exercise of rights may be made in writing, e-mail, fax, etc., in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action without delay.
- ① The information subject can directly view and correct the information after going through the identity verification process through "Change Personal Information" (or "Modify Member Information") at any time.
- ② The information subject may withdraw consent to the collection and use of personal information at any time through 'Membership Withdrawal'
- C) The exercise of the right may be done through the legal representative of the information subject or an agent such as a delegated person. In this case, you must submit a power of attorney in accordance with the "Notice on Personal Information Processing Method" Attachment No. 11 Form.
- D) The right of the information subject to request the suspension of viewing and processing of personal information may be restricted by Article 35, paragraph 4 and Article 37, paragraph 2 of the Personal Information Protection Act.
- E) If the personal information is specified as the subject of collection under other laws and regulations, you cannot request the deletion of the personal information.
- F) The Company confirms that the person exercising the right is the person or the rightful representative.
- G) You can exercise your rights to the following departments. The Company will endeavor to promptly process the exercise of the rights of the information subject.
- ▶ Contact for Rights Requests:
- - Department: CS Team
- - Phone: 070-5217-2034
- - Email: cs@eoflow.com
8 Safeguards for Personal Information
- The Company implements the following technical, administrative, and physical safeguards.
- A) Internal policies and procedures for personal data protection
- The Company has established internal guidelines for the protection of personal information and is taking measures to protect the personal information of information subjects.
- B) Minimal access rights and staff training
- The Company restricts access to personal information of information subjects to a minimum number of people, and conducts regular training for personal information protection.
- C) Access control to personal information systems
- The Company takes necessary measures to control access to personal information by granting, changing, and canceling access rights to the personal information processing system.
- D) Logging and protection of access records for at least two years
- The Company keeps and manages records of access to the personal information processing system for at least two years, and takes measures to prevent forgery, theft, or loss of access records.
- E) Encryption of personal information
- The personal information of the information subject is encrypted and stored and managed. In addition, we use additional security features such as encryption when storing and transmitting important data.
- F) Installation of security software
- The company takes measures to prevent damage by using anti-virus programs, and the anti-virus programs are updated regularly to prevent damage caused by viruses.
- G) Access control for unauthorized persons
- We have a separate physical storage place for the personal information system that stores personal information, and we establish and operate access control procedures for it.
9 Sensitive Information and Disclosure Options
- Sensitive health data may be shared with guardians or doctors only if the user agrees.
Service | Sensitive Data | Disclosure | Opt-out |
---|---|---|---|
Blood Glucose Management | Insulin data, glucose, carbs, exercise, etc. | May be shared with guardian/doctor upon consent | User can choose to disable sharing information |
10 Privacy Officer and Contact
- A) The Company designates the following Privacy Officer and department for personal data matters.
- ▶ Privacy Officer
-
- - Name: Insu Ahn
- - Department: IT Security Team
- - Phone: 031-738-0200
- - Email: privacy@eoflow.com
- ▶ Privacy Team
-
- - Department: CS Team
- - Phone: 070-5217-2034
- - Email: cs@eoflow.com
- B) The information subject may contact the person in charge of personal information protection and the person in charge of personal information protection for all personal information protection-related inquiries, complaints, and damage relief that occurred while using the Company's services. The Company will faithfully respond to and handle inquiries from information subjects.
11 Remedies for Infringement
- A) The information subject may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee and the Personal Information Infringement Report Center of the Korea Internet & Security Agency in order to receive relief from personal information infringement. For other personal information infringement reports and consultations, please contact the following organizations.
-
- ① Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- ② Korea Internet & Security Agency (KISA): 118 (privacy.kisa.or.kr)
- ③ Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
- ④ Korean National Police Agency: 182 (ecrm.cyber.go.kr)
- B) The Company guarantees the information subject's right to self-determination of personal information, strives to consult and remedy damages caused by personal information infringement, and if you need to report or consult with us, please contact the department in charge below.
- ▶ Customer consultation and reporting related to personal information protection
-
- - Department: CS Team
- - Phone: 070-5217-2034
- - Email: cs@eoflow.com
12 Notification of Policy Changes
- This Privacy Policy is effective as of 2025.05.12.