FlowNote AI Privacy Policy

The Company processes personal information for the purposes below. Collected personal information is not used for any other purpose, and if the purpose changes the Company takes the measures required by applicable law.

1. Sign-up and identity verification

• Account registration
• Identification
• Account management
• Sign-in service

2. Service provision

• Member management
• Pilates sequence creation
• Member-specific sequence generation
• Class record management
• Exercise library
• Muscle naming reference
• AI-based sequence recommendations
• AI-based class record generation
• AI analysis services

3. Customer support

• Responding to inquiries
• Delivering notices
• Service improvement

4. Payments

• Subscription management
• Billing
• Payment history management

5. Service quality improvement

• Statistical analysis
• Service improvement
• Error analysis
• Security hardening

① Instructor accounts

Required

• Name
• Phone number
• Email
• Gender
• Date of birth
• Education
• Sign-in information
• Encrypted password

Optional

• Profile photo
• Studio information

② Member information registered by the instructor

Instructors may register their own members' information.

Collected items

• Name
• Phone number
• Date of birth
• Gender
• Occupation

The following information may also be generated while using the service.

• Class records per member
• Sequences
• AI analysis results
• Exercise records
• Member notes

③ Automatically generated information

The following may be generated automatically while using the service.

• IP address
• Browser information
• Operating system
• Device information
• Access time
• Usage logs
• Cookies
• Error logs

The Company retains personal information until the processing purpose is achieved. Upon account withdrawal, personal information is destroyed without delay. However, the following is retained for the period required by applicable law.

The Company does not provide users' personal information to third parties, except in the following cases.

• Where the user has given prior consent
• Where provision is required by applicable law

The Company may outsource personal information processing as follows.

The Company complies with data protection laws when entering outsourcing contracts.

FlowNote AI uses the OpenAI API to provide AI features.

When AI features are used, some information entered by the user may be processed on OpenAI's servers.

The Company does not use personal information for purposes other than AI features.

The Company destroys personal information without delay once the retention period ends or the processing purpose is achieved.

Electronic files are deleted irrecoverably, and printed materials are shredded or incinerated.

Users may exercise the following rights at any time.

• Access their personal information
• Correct their personal information
• Delete their personal information
• Suspend processing of their personal information
• Withdraw their account

The Company handles such requests promptly in accordance with applicable law.

The Company implements the following measures to protect personal information.

• SSL-encrypted communication
• Minimised access privileges
• Encrypted password storage
• Database access control
• Administrator access management
• Regular security reviews
• Log monitoring
• Server security updates

The Company may use cookies to provide the service.

Users may refuse cookie storage through their browser settings.

However, refusing cookies may limit the use of some features.

FlowNote AI does not, as a rule, provide its service to children under the age of 14.

If personal information of a child under 14 is identified, the Company takes the measures required by applicable law.

The Company designates a privacy officer to protect personal information.

Privacy officer

• Name: Gyutae Park (박규태)
• Title: Chief Executive Officer
• Email: group912@checkend.co.kr

Users may direct privacy-related inquiries to the privacy officer.

The Company responds promptly.

This Privacy Policy may be amended in line with changes in law or the service.

Material changes are announced in-service or by email.

This Privacy Policy takes effect on July 1, 2026.