Ganbomi Privacy Policy

• There is no sign-up form. You sign up and sign in with your phone's fingerprint or face (a passkey), and we do not collect your name, email, phone number, profile, device identifiers or advertising IDs. Our server keeps only a random account number and the public key used to sign you in.
• Your fingerprint or face never leaves your phone's operating system; the App and the Company never receive or store biometric data. Only a public key and signatures created by your phone are sent to the server.
• The lifestyle information you enter is encrypted and sent to our server in Seoul, Korea, which computes your results and deletes your inputs immediately after returning them. No lifestyle data or results remain on our server.
• Your results and history are stored only on your phone.
• The App is free, with no ads, payments or subscriptions. We never sell or share your data with anyone.
• The App is not a medical device and does not provide medical diagnosis.

1. Verifying members — confirming that a request comes from a signed-up user and a genuine copy of the App, to block bots and unauthorised programs (account number, public key, app attestation).

2. Computing liver-health indicators from the lifestyle information you enter (score, five indicators, influential factors, lifestyle suggestions).

3. Usage limits — limiting analyses per account per day and requests per connection to prevent abuse and runaway server cost.

4. Answering your questions.

A. Account — kept on our server (Seoul). Created when you sign up and deleted immediately when you delete your account.

B. Sent to our server for each analysis and deleted immediately after the result is returned — never stored or logged.

Alcohol, smoking, menopause status, blood pressure and pulse (if entered), and the liver-health indicators computed from them, are health-related data (special category / sensitive data). We process them only with your separate consent given on the "Server analysis consent" screen when you sign up (Section 7). Each request also carries the verification data from A (access token, app attestation, body checksum) and nothing else — no name, contact details, device ID, advertising ID or location.

C. Server access records. The server is configured not to log request bodies, IP addresses or tokens (cloud request logs are excluded and load-balancer logging is off). Our own server log contains only the request path, response status, processing time (ms), the first 8 characters of the account number and a rejection reason code, and is deleted after 30 days. Records of administrators changing server settings (Google's built-in audit logs) are kept for 400 days. Per-IP request counts for rate limiting are kept in memory only and never written.

D. Stored only on your phone (never sent to us): results and history, your last inputs (as defaults), settings (country, language, theme, text size, recording interval, app lock, external AI), the transmission log (time, number of items, processing time, model version), the session token and attestation key (OS secure store / secure chip), any external-AI API key you enter (OS secure store). Fingerprint/face data for passkeys and app lock is handled entirely by the operating system; the App and the Company never receive or store it.

E. Optional features where you send data yourself: Section 5.

F. Contact: your email address and message when you write to us at ganbomi.privacy@aribnc.com.

We use no analytics or crash-reporting SDKs, no cookies and no advertising identifiers. The Kakao and LINE sign-in SDKs run only when you tap that sign-in. We do not store analysis inputs for statistics or research; if we ever introduce this, it will require a separate opt-in and this policy will be updated.

1. Sign-in method (chosen at sign-up): The default is a passkey, which tells no company that you signed up. For phones that cannot use fingerprint or face, we offer Apple, Google, Kakao and LINE sign-in. That provider will then know, under its own terms, that you signed in to Ganbomi; our server verifies the token it issued with that provider's server and keeps only a hash of your unique ID. We request no profile items (name, email, picture) from Kakao or LINE.

2. External AI (off by default): If you choose Google Gemini, OpenAI ChatGPT, Anthropic Claude or xAI Grok in Settings and enter your own API key, then when you tap "Talk with AI" the data is sent directly from your phone to that provider, never through our server. Everything sent is listed on the confirmation screen before sending.

   External AI (off by default): If you choose Google Gemini, O

   Sent	Not sent
   Age, sex, height, weight, BMI · alcohol (occasions, daily average grams) · smoking (product types and amounts) · physical activity (types, days, minutes, sitting time) · diet (food-group frequencies, whole grains, eating out, estimated daily nutrients) · this result's score and band name, each indicator's status word, influential factors and lifestyle suggestions · the messages you type	Indicator percentages · estimated test values · name, contact details, device information · account number · previous records

   The provider's own privacy policy governs the data after transfer. You can disconnect or delete the key at any time in Settings. The conversation exists only in your phone's memory and disappears when you close the App.

We do not sell or share your personal data with third parties. We have no data agreements with screening centres, research institutes, insurers, supplement or pharmaceutical companies. Disclosure required by law is the only exception; no lifestyle data or results exist on our server, and account numbers are not linked to names or contact details.

• You must consent on the "Server analysis consent" screen to sign up. Without consent there is no account and the App cannot be used, because the analysis itself runs on the server.
• You can withdraw consent at any time in Settings > Server analysis consent; nothing further is sent, and there is no lifestyle data on the server to erase. The account record is deleted immediately via Settings > Delete account.
• External AI is a separate switch in Settings.

1. Our analysis server and account database are in Seoul, Republic of Korea; using the App outside Korea transfers your inputs and account data to Korea.

   - EU/EEA: The European Commission has decided that the Republic of Korea ensures an adequate level of protection (Commission Implementing Decision (EU) 2022/254 of 17 December 2021). We are subject to Korea's Personal Information Protection Act. Legal basis: your explicit consent (GDPR Art. 6(1)(a) and Art. 9(2)(a)). - United Kingdom: The Data Protection (Adequacy) (Republic of Korea) Regulations 2022 (in force 19 December 2022) recognise Korea as adequate. Legal basis: explicit consent. - Other countries: processing is based on the consent you give at sign-up to transfer to Korea. This section will be updated if country-specific requirements are added. Items transferred: Sections 2-A and 2-B; when: at sign-up, sign-in and each analysis request; recipient: the Company (and Google Cloud, Seoul region, Section 4); retention: Section 3.

2. Sign-in and attestation verification: The servers of the sign-in provider you choose (Apple, Google, Kakao, LINE) and of the attestation providers (Apple, Google) are located where those companies operate them. Our server contacts them only to check that the token or attestation they issued is genuine; no lifestyle data or account number is sent. Passkey sign-up involves no such check (our server verifies the public-key signature itself).

The App is for adults aged 19 or over, applied worldwide. Users under 19 may not use it; the App will not run an analysis if the entered age is below the threshold. We do not knowingly collect children's data.

You may access, correct, delete or restrict processing of your personal data. The only data on our server is the account record in 2-A, which is not linked to any name or contact details, so the fastest and most reliable way to exercise your rights is directly in the App: view your account record (Settings > Account: account number, sign-in method, sign-up date, consent status); delete your account (Settings > Delete account — the server record is erased immediately; the App also erases this phone's records, settings and external-AI keys and disconnects the sign-in links to Google/Kakao/LINE — a passkey stored on the phone is removed in the phone's password & passkey settings); view/delete history (History; Settings > My records > Delete all records on this phone); withdraw consent (Settings); disconnect external AI (Settings). For anything else, email ganbomi.privacy@aribnc.com; we respond within 10 days. Because we cannot link an email address to an account number, we will guide you to the in-app "Delete account" rather than deleting an account on your behalf by email. EU/UK users may also lodge a complaint with their local supervisory authority.

TLS 1.2+ in transit; immediate deletion of inputs; no logging of request bodies, IP addresses or tokens; no names or contact details collected; accounts are a random number plus a public key or hash; every request must carry a valid access token (1 hour), an app attestation (App Attest / Play Integrity) and a body checksum, or it is rejected without being read; per-account daily and per-connection rate limits and an outer firewall (Cloud Armor) that blocks all but the allowed paths; least-privilege service account, secrets only in Secret Manager, audit logs of administrative actions, processor agreements with the cloud provider; on-device data in the OS app sandbox, session tokens and API keys in the OS secure store (Keychain/Keystore), attestation and passkey private keys never leave the secure chip, optional app lock. We notify and report data breaches as required by law (via in-app and website notices, as we hold no contact details).

Data protection officer: Co-CEOs Yunsuk Chun and Jongkyu Kim · ganbomi.privacy@aribnc.com · +82-70-7462-9418

We announce changes on our website and in the App at least 7 days before they take effect (30 days for changes that materially affect your rights).

• Effective date: November 15, 2026 · Version 1.0 (in-app consent version 2026-10)