JUST DO Privacy Policy January 7th , 2025 Privacy policy JUST DO (hereinafter referred to as the "Company") processes information about individuals (hereinafter referred to as "Personal Information") for the following purposes in providing all services such as products, applications, services, websites, etc. provided by the Company (collectively, the "Company Services"). The Personal Information processed will not be used for any purpose other than the following purposes, and the Company will comply with the laws and regulations applicable to the countries and regions in which the Company operates (such laws and regulations are collectively referred to as "Applicable Laws") and will endeavor to protect the Personal Information sufficiently based on this Privacy Policy (hereinafter referred to as "this Policy"). What information does the application obtain and how is it used? The Service Provider shall process and retain personal information within the period of retention and use agreed upon when collecting personal information from the information subject or within the period of retention and use of personal information in accordance with the law. The Company collects the following personal information by lawful and fair means - Personal information that you receive from customers - Information that customers automatically get when they use your service - Personal information that we lawfully collect, including from third parties, in addition to the above. 1. User-provided information 1.1 Account Information We collect information you provide when you sign up for our Services, when you log into your account, when you communicate with us, when you respond to surveys, upload content, or otherwise use our Services. We collect your email address when you choose to sign up for the Services so that we can provide you with the Services and comply with applicable regulations. Specific examples - The email address you used to create your account - What to say when you respond to a survey - Your profile information (icon image, username, status messages, and ID for search) and profile information (unless you make it private) is public and can be viewed by third parties, such as other customers. 2. Information that customers automatically get when they use your service 2.1 Personal Information in connection with your use of the Services When you use our Services, we collect information about your activities and information about the devices you use and how you use them. Specific examples - Service usage - Date of use, time of use, in-service search results, content consumed 2.2 Device information Like most third-party services, we collect information about the device you use, browser, mobile operating system version, mobile device unique device ID (IMEI, UDID, IDFA, ADID) mobile device IP address, and mobile network information. - Information about apps, browsers, and devices, and more - Language preferences and time zones - IP address - Login, logout times 2.3 Geolocation information - Companies can use a customer's IP address to generate their approximate location. Otherwise, you can enable access to location sensor information, such as GPS or Bluetooth beacons, from your customers' mobile devices. Not requested or collected. 2.4 Cookies and Other Analytics Tools A cookie is a small text file that is stored on your computer when you visit a website. This text file preserves information that can be read by the site operator when you visit the website again in the future. We may use cookies or similar web tracking technologies for the following purposes, for example - To remember login states and use them for visitor authentication, session persistence, and security measures. - To improve convenience by remembering settings such as language and the date of your last visit, you can use the - To provide better service by understanding the number of visits and usage patterns. - To send you more relevant ads - To measure the effectiveness of your ads You can control whether or not you accept cookies by using your browser settings or other tools. However, if you choose to disable cookies or limit your ability to set cookies, you may not be able to access all or some features of the Website and, as a result, may limit your overall experience. 2.5 Information about using Google Analytics We use Google Analytics by Google to measure our services, including our website, in order to improve our services. In order to collect data, Google may set cookies or read existing cookies, which automatically transmit information such as the URL or IP address of the page you accessed to Google. We may use this information to understand usage and to provide our services. For more information about the processing of data by Google in Google Analytics, please read the Google Analytics Terms of Service and Google's Privacy Policy Personal information we collect from third parties We may collect your information from third parties. We do not control or supervise Customer's information provided by third parties, and Customer's requests for information when signing up for our Services should be directed to the third party. Specific examples - Sign in with Google or Apple - Customers can sign in to your company's services using Google or Apple sign-in services. These services will authenticate the customer's identity to satisfy your company's signup form (email verification). Child privacy We do not knowingly collect personally identifiable information from children under the age of 13. Our Services are intended for general audiences. If a child customer uses the Service and provides personal information, please proceed with the consent of a legal representative. The Company assumes that the Customer has the necessary legal capacity to use the Service or, if the Customer is a child, that the Customer is using the Service with the consent of the guardian. We recognize the need for greater privacy protection for personal information we collect from customers under the age of 13 in the United States, under the age of 16 in Europe, and under the age of 11 in Thailand. If you believe that we may be collecting Personal Information from children in any of these countries or territories, please contact us at justdo3x10service@gmail.com so that we can take the necessary steps. If we learn that we have inadvertently collected Personal Information from a child in any of these countries or territories, we will take reasonable steps to void the relevant account and promptly delete such Personal Information from our records. How is personal information processed and retained? The Company shall process and retain the personal information agreed upon when collecting personal information from the information subject within the period of retention and use of personal information in accordance with the laws and regulations. In principle, the Company destroys the personal information of users without delay when they withdraw from the service, terminate the service, or achieve the purpose of use, such as the end of the retention period agreed to by the user. However, if the Company obtains separate consent from the user for the retention period of personal information, or if the Company is obligated to retain personal information in accordance with internal policies and related laws and regulations, the Company shall securely store and destroy the personal information in accordance with the applicable period. If you would like us to delete any User Provided Data that you have provided through the Application, please contact us at justdo3x10@justdo3000.com and we will respond within a reasonable time. Holdings Retention period Statutory Law Records about contracts or withdrawals, etc. 5 years Consumer protection in e-commerce and more Legal Records of consumer complaints or dispute handling 3 years Website and app visits and access history 3 months Communications Privacy Act What are the procedures and methods for destroying personal information? The Company shall destroy personal information without delay when it becomes unnecessary, such as the expiration of the personal information retention period or the achievement of the purpose of processing. If the retention period of personal information agreed to by the information subject has expired or the purpose of processing has been achieved, but the personal information must continue to be retained in accordance with other laws and regulations, the personal information shall be transferred to a separate database (DB) or preserved in a different storage location. The items of personal information we retain under other laws and the grounds for retention can be found in the "Processing and retention of personal information" section. The process and methods for destroying personal information are as follows Destruction Procedures The person in charge of the personal information will select the personal information that is subject to destruction and destroy it with the approval of the Privacy Officer. Destruction methods Personal information recorded and stored in electronic files shall be destroyed so that the records cannot be reproduced, and personal information recorded and stored in paper documents shall be destroyed by shredding or incineration. Disclosure of Personal Information to Third Parties In principle, we do not provide personal information to external parties without your consent. However, we may share your information with third parties in the ways described in our Privacy Policy in the following cases We aggregate your personal information to help us improve our applications and company services, and only anonymized data is periodically sent to external services. Note that the application utilizes third-party services that have their own privacy policies for data processing. - Third-party service providers used by your application - Google play service - Apple Appsotre - AdMob - Google Analytics We may disclose user-provided information and automatically collected information when - As required by law to comply with a subpoena or similar legal process. - If we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraudulent activity, or respond to a government request. - For service providers who do not independently use the information we disclose and who have agreed to abide by the rules set forth in this Privacy Policy. International Collection and Transfer of Personal Information Our Services are transferred to Google Cloud servers located in South Korea and stored for the duration of this Privacy Policy. As an APEC member, South Korea participates in the Cross-Border Privacy Rules (CBPR) and has been recognized by the European Commission for its Privacy Shield adequacy decision. All personal information collected by the Company for the provision of services is stored using secure encrypted communication from the collection stage, and all data including personal information is stored and operated, so in the case of global services, if you refuse to transfer, you will not be able to use the service. The Company provides and outsources the storage of personal information to overseas companies as follows. - Legal basis for overseas transfer: Article 28-8, Paragraph 1, Item 3 of the Personal Information Protection Act (Overseas processing and storage for contract fulfillment) -. Personal information items to be processed: customer email address, ID, password - Country of transfer: South Korea - When and how personal information is transferred: from the time you use the service to remote locations using a dedicated network - To whom personal information is transferred (outsourced) : Google Cloud 1-877-355-5787 (U.S. calling) +1 646-257-4500 (INTERNATIONAL calling) - Purpose of using personal information: Cross-border data backup (archiving) to protect user data from disasters, disasters, etc. - Period of retention and use of personal information: Storage period as stipulated in this policy - How to opt-out of transfers of your personal information, the process, and the effect of opting-out In principle, we back up (archive) all data for recovery in case of data loss due to disaster or catastrophe, so if you refuse to move overseas, you will not be able to use the service. If you do not wish to relocate, you can cancel your account on the homepage (Menu - My Account - Cancel Account) or you can send a request to justdo3x10@justdo3000.com. Measures to ensure the safety of personal information The Company takes measures reasonably designed to protect against the unauthorized access, use, alteration or destruction of your personal information. We use our best efforts to follow generally accepted industry standards to protect personal information submitted to us during transmission and after we receive it. For example, our websites and apps are designed to be protected by HTTPS encryption. The Company takes administrative and technical protective measures to safeguard your personal information in accordance with applicable laws and regulations. Administrative safeguards Establishment and operation of information protection management system, minimization of personal information handlers, and regular training of employees on personal information protection Technical safeguards Access control and restriction of access rights, monitoring to prevent leakage or damage of personal information, encryption of important personal information, encryption of communication sections, use of security programs such as use of antivirus programs, frequent backups, and management of access history Physical safeguards Installing and operating the system in an area with controlled access from the outside Installation and operation of automatic personal information collection devices and rejection thereof The Company uses 'cookies' that store and retrieve usage information from time to time to provide individualized services. Cookies are small amounts of information sent to the user's computer browser by the server (http) used to operate the website and are stored on the data subject's PC or mobile. The data subject can set settings such as accepting or blocking cookies through the web browser options settings. However, if you refuse to save cookies, you may experience difficulties in using customized services. What do we use cookies for? We use this information to provide you with optimized information about each service and website you visit by understanding how you visit and use them, popular search terms, whether you use a secure connection, etc. Examples of how to install, operate, and reject cookies - Allow/block cookies in your web browser - Chrome: Web browser settings > Privacy & security > Clear browsing data - Edge: Web browser settings > Cookies and site permissions > Manage and delete cookies and site data - Allow/block cookies on mobile browsers - Chrome: Mobile browser settings > Privacy & security > Clear browsing data - Safari: Mobile device Settings > Safari > Advanced > Block All Cookies - Samsung Internet: Mobile browser settings > Browsing data > Clear browsing data Rights and obligations of information subjects and legal representatives and how to exercise them Data subjects may exercise their rights to access, correct, delete, suspend, or withdraw their personal information at any time, and to object to or request an explanation of automated decisions (hereinafter referred to as "exercise of rights"). * Requests for access to personal information about children under the age of 14 must be made directly by a legal representative, and information subjects who are minors over the age of 14 may exercise their rights in relation to the personal information of the information subject by themselves or through a legal representative. - Customers can view or modify their personal information at any time in "Settings" - > "Profile", "Account", etc. - You may request that we suspend the processing of your personal information at any time, and we may refuse to do so if there are special provisions in the law, or if there is a risk of harm to the body, life, or property of others, or if there is a risk of unjustified infringement on property, etc. - You can withdraw your consent to the collection and use of your personal information at any time. - We generally do not collect personal information from children, but if you are under the age of 14, your legal representative has the right to view or correct your personal information and to withdraw consent to its collection and use. You may exercise these rights through an agent, such as your legal representative or authorized person. For requests or complaints regarding our use of your personal information, please contact justdo3x10@justdo3000.com. Privacy Officer and Responsible Party The Company is responsible for the overall handling of personal information, and designates a person in charge of personal information protection as follows to handle complaints and damage relief from information subjects related to the handling of personal information. Privacy Officer RAYS, Inc. Department Name: Privacy Team Email: justdo3x10@justdo3000.com The information subject may contact the person in charge of personal information protection and the department in charge for all personal information protection-related inquiries, complaints, and damage relief arising from the use of the Company's services. The Company will respond to and handle inquiries from information subjects without delay. Your consent By using the Application, you consent to the processing of your information by the Service Provider as currently set out in this Privacy Policy and as amended by the Company. "Processing" means using or contacting information in any way, including, but not limited to, using cookies on your computer/mobile device or otherwise collecting, storing, deleting, using, combining and disclosing information. Changes to the Privacy Policy This Policy may change from time to time, and we will always post the most current Privacy Policy on the site you are viewing. If we make material changes, we will notify you in a way that is easy to understand, such as through a notice within the Services. Please be sure to review the most current Privacy Policy. If you do not agree to the changes and no longer wish to use our Services, you may close your account. If you do not agree to these changes, you may delete your account or stop using the Service at any time. Your continued use of the Services constitutes your acceptance of any changes to this Privacy Policy. This Privacy Policy is effective as of September 23, 2024. Contact us If you have any questions or comments about this Privacy Policy, please email us at justdo3x10@justdo3000.com RAYS, Inc. To: Privacy team 50, Gonghang-daero 55-gil, Gangseo-gu, Seoul, Republic of Korea