Athledium Privacy Policy

Effective Date: July 27, 2026

Athledium ("the Service") values your privacy and complies with applicable data protection laws. This Privacy Policy explains what information we collect and how we use, store, and share it.

1. Operator and Publisher

• Service Operator: WizClass Co., Ltd. — Business Reg. No. 813-86-02709, 4F, 135 Dogok-ro, Gangnam-gu, Seoul, Korea, +82-2-564-0780
• App Publisher (Google Play): Inos Holdings LLC — 5992 Spring St, Buena Park, CA 90621-4738, USA
• Representative: Sungwoo Park (admin@athledium.com)
• Data Protection Officer: Seongeun Cho (Director), info@athledium.com
• Website: https://athledium.com

2. Information We Collect

a. Account & Authentication (Social Login)

• The Service offers social login (Google, Email) via Web3Auth.
• Collected: email address, social account identifier, login-method identifier (internal identifier used for account linking and data continuity).
• A blockchain wallet is created for you upon login. We do not hold your wallet's private key (non-custodial).

b. Blockchain & Wallet Information

• Wallet address (public), in-service point (AEMP/AEMS) balances and accrual history, on-chain token transaction data.
• Note: due to the nature of blockchain, wallet addresses and transactions are recorded on a public ledger and are inherently non-deletable.

c. Health & Activity Information

• Step count data (accessed via Android Health Connect only with your explicit permission).
• Step data is used solely for reward (point) accrual and not for any other purpose without consent.
• Crew (group) activity information.

d. Device & Technical Information

• Push notification token for device identification, device type/OS, access logs, service usage records.
• Device-level identifiers used to prevent abuse (fraudulent accrual) — including a per-install unique identifier (a random UUID generated at app install) and the connecting IP address. These are used solely to detect and prevent multi-account fraudulent accrual and are not shared with third parties.

e. Automatically Collected Information

• Usage records and error logs may be generated and collected during app use.

3. Purposes of Use

• Authentication, login, wallet creation/management
• Step-based reward (point) accrual and management
• Providing features such as crews and rankings
• Sending push notifications (reward accrual, announcements)
• Detecting and preventing abuse (e.g., multi-account fraudulent accrual)
• Service improvement, error handling, customer support
• Compliance with legal obligations

4. Health Data (Health Connect) Notice

• The Service accesses only step count data from Android Health Connect, and only where you have explicitly granted permission.
• Health data is used solely for reward accrual and is never sold to third parties or used for advertising.
• You may revoke permission at any time via device settings or Health Connect.
• The Service uses step data obtained from Health Connect solely for reward accrual, and never for advertising, marketing, or sale to third parties. Health data is not reviewed by humans, sold, or transferred, and the Service complies with Google Play's Health and Fitness data policy and the Health Connect terms of use.

5. Third-Party Services and Data Processors

The Service uses the following external services; information is processed as necessary to provide the Service.

• We do not sell your personal information to third parties beyond the purposes above.
• [Cross-border transfer notice (e.g., to the U.S.) — providers may process data abroad; consent/notice language to be finalized after legal review]

Cross-border transfer: The Service is published by a U.S. entity (Inos Holdings LLC), and the third-party providers listed above (Web3Auth, Supabase, Google Firebase, etc.) may process and store data overseas, including in the United States. By using the Service, you are deemed to consent to your personal data being transferred and processed abroad. Transferred items, countries, and purposes depend on each provider's location, and the Service endeavors to comply with safeguards required by applicable law.

6. Retention Period

• We delete your information without delay upon account withdrawal or when the purpose of collection is fulfilled.
• Where retention is required by law, we retain it for the required period. [Items/periods — to be finalized after legal review]
• Note: wallet addresses and transactions recorded on the public blockchain ledger are technically non-deletable.

7. Your Rights

• You may request access, correction, deletion, or restriction of processing of your personal information at any time.
• Account & data deletion request: You can delete your account directly via [Settings > Delete Account] in the app. Deletion removes your server-stored personal data including account info, step records, points (AEMP/AEMS), and device information. (Meets Google Play requirements.)
• Note: wallet addresses and transactions on the public blockchain ledger cannot be technically deleted.
• Note: after deletion, the account cannot be re-accessed, and a wallet that was not backed up cannot be recovered.
• You may revoke health data permission at any time in device settings.

8. Security Measures

• We apply technical and administrative safeguards including access control, tenant isolation, encrypted communication (HTTPS), and server access control.
• We do not store your wallet's private key (non-custodial).

9. Children's Privacy

• The Service restricts registration by children under 14. Users under 14 may not use the Service. (Considering Korea PIPA, U.S. COPPA, etc.)

10. Changes to This Policy

• This policy may be amended due to legal or service changes; changes will be announced in-app or via this page.

11. Contact

• Privacy inquiries: info@athledium.com
• Data Protection Officer: Seongeun Cho (Director), info@athledium.com

---