Privacy Policy

Effective Date: March 16, 2026

WeKnew Inc. ("Company") complies with the Personal Information Protection Act of the Republic of Korea and applicable privacy laws of the countries where the Service is provided. We process users' personal information lawfully and securely in connection with the Knewman service ("Service"). This Privacy Policy is established and disclosed in accordance with applicable laws.

1. Nature of the Service

Knewman is an explanation-focused AI service designed to help users better understand health-related topics. This Service does not replace medical professionals and does not provide medical treatment, diagnosis, therapy, prescriptions, or disease prevention. Information provided through the Service constitutes general health information and lifestyle guidance and does not substitute for consultation with a qualified medical professional. If you have health concerns or require diagnosis or treatment, please consult a healthcare professional.

2. Personal Information We Collect

(1) Information provided directly by users:

• Email address
• Nickname
• Text freely entered by users in the AI chat (which may include health-related information)

* We do not collect gender, date of birth, phone number, location data, or social login information.

(2) Information collected automatically:

The following information may be automatically collected during use of the Service:

• IP address from access logs
• Browser User-Agent information
• Server API request/response logs
• Subscription status information (product_id, platform, expiration date)

* We do not collect device IDs, advertising identifiers (ADID/IDFA), location data, or push tokens.

* We do not use Firebase, Google Analytics, Adjust, AppsFlyer, or advertising SDKs.

3. Purpose of Processing Personal Information

The Company processes personal information for the following purposes:

1. Providing AI-based health information
2. Processing user queries and responses
3. Automatically recommending content (card news) based on user conversation context
4. Service operation and security management
5. Error analysis and system stability
6. Subscription status management
7. Compliance with legal obligations

4. Processing of Health-Related Information

Information entered by users in the AI chat may include health-related content. Such information is processed only within the scope of generating AI responses and providing the Service.

The Service does not provide the following:

• Disease diagnosis
• Health risk assessment
• Health score calculation
• Automated medical decision-making

5. AI Processing and International Transfer

The Service may use APIs from external AI service providers to generate AI-based health information responses.

Only when users have explicitly consented to use the AI chat feature, conversation data entered by users may be transmitted to external AI service providers and used to generate responses.

Information that may be transmitted:

• Conversation messages entered by users
• Question content
• Health-related consultation content

AI service providers used by the Company:

• OpenAI LLC (United States)
• Amazon Web Services – AWS Bedrock (Claude model)

Data processing locations:

• United States: AI response generation processing
• Seoul Region, Republic of Korea (AWS ap-northeast-2): Service data storage

AI service providers may process data in accordance with their own privacy policies, and the Company does not directly control how such providers process data.

The Company does not use conversation data entered by users for training, retraining, or improving its own artificial intelligence models.

Users may withdraw their consent for AI data processing at any time through the settings within the app. Upon withdrawal of consent, access to the AI chat feature may be restricted.

5-1. Third-Party AI Service Data Processing

The Service may use APIs from external AI service providers to generate AI-based health information responses.

&circled1; Data Collected

When using the AI chat feature, the following information may be processed:

• Conversation messages entered by users
• Question content
• Health-related consultation content

&circled2; Collection Method

After users consent to use the AI chat feature, when they use the chat function, the relevant information is automatically processed and may be transmitted to external AI service providers' systems during the AI response generation process.

&circled3; Data Transfer Recipients

• OpenAI LLC (United States)
• Amazon Web Services, Inc. – AWS Bedrock

&circled4; Purpose of Use

• AI-based response generation
• Natural language processing and question understanding
• Service quality improvement
• System stability

&circled5; Protective Measures

The Company applies the following measures to protect personal information:

• TLS/HTTPS encryption for data transmission
• Data processing in secure cloud environments (AWS)
• Access control and security management policies

&circled6; Retention Period

Subject to the data retention policies of the AI service providers. The Company does not separately store such data or use it for training its own AI models.

&circled7; Withdrawal of Consent

Users may withdraw their consent for AI data processing at any time through Settings > Privacy within the app. Upon withdrawal of consent, access to the AI chat feature may be restricted.

6. Third-Party Provision and Processing Delegation

The Company delegates personal information processing to the following service providers:

• Amazon Web Services (AWS) – Server operation
• OpenAI – AI response generation
• AWS Bedrock – AI model API
• RevenueCat – In-app subscription management
• Apple App Store / Google Play – Payment processing

The Company does not directly store users' payment card information.

7. Retention and Deletion of Personal Information

• Conversation data: Hard-deleted immediately upon account deletion
• Server logs: Retained for 1 year, then automatically deleted
• Backup data: Retained for up to 30 days, then automatically deleted (due to the nature of backup systems, data may not be immediately deleted upon account deletion)
• Payment records: Retained for up to 5 years in accordance with applicable laws (on RevenueCat and platform servers)

8. Technical and Administrative Safeguards

The Company applies the following measures to protect personal information:

• Personal information is stored in a secure cloud environment (AWS)
• Encryption (HTTPS/TLS) is applied to all data in transit
• Encryption is applied to stored personal information
• Passwords are protected using a secure hashing method (Argon2id)
• Access privileges are restricted, and regular security management and backup policies are maintained

9. Users' Rights

Users have the following rights:

• Right to access personal information
• Right to request correction
• Right to request deletion
• Right to request restriction of processing

Account deletion is available through the Profile menu within the app.

10. Children's Personal Information

Users under the age of 18 may not use the Service without parental consent.

11. Privacy Officer