Privacy Policy

The Company collects users’ personal information as follows. The personal information processed by the Company will not be used for purposes other than those specified below. Should the purpose of collection or use change, the Company will obtain separate consent in accordance with the Personal Information Protection Act and take the necessary steps.

1) The purposes of collection and use of member information, items collected, and retention period are as follows:

2) The purposes of collection and use of user information, items collected, and retention period are as follows:

3) User information collected and used under internal company policies is as follows:

4) During service usage, the following automatically generated information may be collected, stored, combined, and analyzed: - IP address, cookies, service usage records, device information (device ID, OS version, model name, manufacturer information, etc.), advertising ID, communication logs 5) The Company may use all collected personal information and automatically collected data for member management, prevention of illegal or fraudulent use, statistical analysis of service usage, service improvement, and development of new services. 6) Users may refuse consent; however, since this information is essential for providing the AirKitchen service, refusal may limit service availability.

① The Company may outsource personal information processing tasks to third-party companies to provide smoother and enhanced services. When outsourcing such tasks, the Company supervises the contracted parties to ensure the safe processing of personal information and restricts any processing beyond the commissioned purpose.

② The Company outsources personal information processing tasks as follows:

① The Company destroys the user’s personal information without delay once the retention period has expired, the processing purpose has been achieved, or the information becomes unnecessary due to termination of the service agreement.

② If personal information must continue to be preserved under other laws despite expiration of the consented retention period or achievement of the processing purpose, the information will be moved to a separate database (DB) or stored in a different location. - Cases where personal information must be retained under other laws:

③ The Company may destroy or separately store personal information of users who have not used the service for 1 year. - In such cases, the Company may notify users 30 days prior via public notice or email regarding the scheduled destruction or separation, the expiration date of the inactivity period, and the personal information items subject to such measures. Users must maintain accurate contact information for this purpose. ④ Methods of destruction: - Procedure: Personal information subject to destruction is approved by the Personal Information Protection Officer before being destroyed. - Method: Electronic files are destroyed through technical or physical methods to prevent recovery. Printed documents are shredded or incinerated.

① Users may directly view, modify, and delete their personal information, and the Company provides features for such actions. ② Users and legal representatives may request access, modification, or deletion of personal information, and the Company will verify identity and take appropriate action. ③ If a user requests correction of errors in personal information, the information will not be used or provided until correction is completed. ④ Users must keep their personal information up to date, and are responsible for consequences arising from inaccurate information. ⑤ If a user signs up using someone else's personal information, membership may be revoked and penalties may apply under relevant laws. ⑥ Users are responsible for maintaining the security of their email accounts, passwords, and other credentials, and must not transfer or lend them to third parties.

① Online Behavioral Advertising (1) Online behavioral advertising uses user visit history, activity logs, and search history (hereinafter 'behavioral information') to provide useful advertising. (2) The Company allows online advertising providers to collect advertising identifiers (advertising ID) and behavioral information. - Advertising identifiers are IDs issued by mobile operating systems (OS) used for personalized ads (e.g., ADID, IDFA). - Behavioral information includes app usage history, purchase history, search history, etc. (3) Information is automatically collected when the user visits the website or uses the app. The advertising provider is: - Google

(4) For personalized advertising, the Company provides the following information. The Company does not identify individuals using advertising IDs and does not provide other personal information together with them.

(5) How to manage personalized ads ① Users may disable personalized ads at any time, in which case personalized ads will no longer appear. ② Personalized ads can be disabled through the following OS settings if users do not wish to receive interest-based ads in mobile apps. (6) Protection of Behavioral Information ① AirKitchen values user information and does not collect sensitive information that may clearly infringe on user rights or privacy. The Company does not combine behavioral information collected via advertising identifiers with personally identifiable information without user consent. ② Behavioral information collected via advertising identifiers is retained for up to 1 year for providing demographic-based targeted advertisements and content, after which it is destroyed using non-recoverable methods. ③ AirKitchen does not knowingly collect behavioral information from children under 14, nor does it provide personalized advertising to users known to be under 14.

The Company implements the following technical and administrative measures to prevent loss, theft, leakage, alteration, or damage of personal information while processing users’ personal data. ① Password Encryption User passwords are stored and managed using one-way encryption and can only be checked or modified by the user who knows the password. ② Protection Against Hacking (1) The Company does its best to prevent leakage or damage of personal information due to hacking, computer viruses, or network intrusion. (2) Intrusion prevention systems are used to ensure maximum security. (3) Sensitive personal information is transmitted securely over networks through encrypted communication. ③ Minimization and Training of Personal Information Handlers The Company limits the number of employees handling personal information and provides training to ensure compliance with laws and internal policies. ④ Operation of a Dedicated Personal Information Protection Department The Company operates a dedicated department responsible for personal information protection and ensures that compliance with this policy is monitored and any issues are addressed promptly.

① The Company appoints a Personal Information Protection Officer and related staff responsible for overseeing personal information processing and handling user complaints and inquiries. ② Users may contact the Personal Information Protection Officer or related staff regarding any inquiries, complaints, or damage relief related to personal information while using the Company’s services. The Company will respond promptly.

⑴ Personal Information Protection Officer

⑵ Complaint Handling Department

Users may contact the institutions below for reporting or consulting regarding personal information infringement. These institutions are independent from the Company, and users may seek assistance from them if they are not satisfied with the Company’s internal complaint handling or investigation results.

① This Privacy Policy may be modified in accordance with laws, government policies, or internal company policies. Any additions, deletions, or revisions will be announced through the website’s ‘Notice’ section. ② This Privacy Policy takes effect on August 6, 2025, and previous versions may be found in the Notice section. - Announcement Date: September 19, 2025 - Effective Date: September 19, 2025