Quick links
- September 1, 2026
- June 5, 2026
- January 22, 2026
[Required] WellnessHouseSeoul (WHS) Integrated Platform Terms of Service
Effective Date: June 5, 2026 | Operator: AAC Co., Ltd.
Article 1. Purpose
These Terms govern the basic matters regarding the rights, obligations, responsibilities, conditions of use, and procedures between the Company and members in connection with the use of the WellnessHouseSeoul (WHS) integrated platform services (hereinafter "Service") operated by AAC Co., Ltd. (hereinafter "Company").
Article 2. Definitions
| Term | Definition |
|---|---|
| WHS | The WellnessHouseSeoul integrated platform operated by the Company, including the associated website, mobile application, and all ancillary services. |
| Member | A person who has agreed to these Terms and created a WHS account through the Company's prescribed procedures to use the Service. |
| Account or WHS Integrated Account | All login credentials set by a member for the purpose of member identification and service use. |
| Individual Service | Services operated by individual medical or non-medical business operators that are connected and provided through WHS. |
| Individual Service Provider | Each corporation or sole proprietor that directly operates and provides an individual service. |
| Health Information | Information relating to an individual's physical health — such as blood pressure, blood glucose, body composition, weight, sleep, and activity levels — that a member submits to the Service by direct entry, device linkage, or file upload, and which constitutes sensitive information under Article 23 of the Personal Information Protection Act. |
| Self-Submitted Health Record (PHR) | Health-related documents concerning the member — such as copies of medical records, health examination results, and copies of prescriptions — that the member personally uploads and submits directly to the Service. This information is not collected directly by the Company from medical institutions; the member is the party submitting the information. |
| Health Management Service | Value-added services provided by the Company based on a member's health information and self-submitted health records, including personalized health management information, reports, content recommendations, and linkage with individual service providers. |
Article 3. Effectiveness and Amendment of Terms
- These Terms take effect by posting on the service screen or otherwise notifying members.
- The Company may amend these Terms within the scope that does not violate applicable laws.
- When amending the Terms, the Company will post notice on the service's initial screen and through notices from 7 days before the effective date, specifying the effective date and reasons for amendment.
- For changes unfavorable to members, notice will be given from 30 days before the effective date, with individual notice via members' registered email or app push notifications.
- If, despite the Company's notice stating that "failure to express objection by the effective date will be deemed as consent," a member does not explicitly express objection, the member is deemed to have consented to the amended Terms.
- However, if the conditions for personal information processing change, tacit consent cannot substitute for explicit consent, and explicit consent must be obtained again from the member.
- If a member does not agree to the amended Terms, the member may discontinue use of the Service and request membership withdrawal.
Article 4. Platform Status and Role
- WHS is an integrated platform provider connecting members with individual service providers.
- The Company is not a party to the products, services, medical acts, diagnoses, procedures, consultations, or prescriptions provided through individual services.
- Responsibility for the provision, contracting, performance, results, and all associated liability for individual services rests entirely with the respective individual service provider.
- The Company does not directly intervene in transactions or use between members and individual service providers, and is not liable for disputes arising therefrom.
- However, where a member has given separate consent pursuant to Article 8 and Annex 1, the Company additionally assumes the status of a health information processor that directly processes health information and self-submitted health records.
- This Service does not provide medical acts. Health management information, reports, and content provided by the Company are general reference information and do not substitute for medical diagnosis, prescription, or treatment.
Article 5. Membership Registration and Accounts
- Membership registration is completed when a user agrees to these Terms and the Privacy Policy and the Company approves the application.
- Members may access individual services connected through WHS using a single WHS integrated account.
- When a member accesses a specific individual service, a separate service agreement is formed with the relevant individual service provider.
- Persons under 14 years of age may not register as members. However, where processing of health information of children under 14 is necessary, it is handled through a separate procedure upon obtaining consent from a legal representative.
- The Company may decline or suspend membership applications in cases of use of another person's information, entry of false information, history of Terms violations, or technical/operational reasons.
Article 6. Account Management and Responsibility
- Members are responsible for managing their own account.
- Members must not provide or share account information with third parties.
- The Company is not liable for damages arising from account theft, unauthorized use, or information leakage attributable to the member.
- The Company may require members to use additional authentication methods when necessary for security purposes.
- Members must update their account information immediately if it changes; the Company is not liable for any disadvantages arising from failure to update.
Article 7. Provision and Changes to the Service
- The Company provides the Service 24 hours a day, 365 days a year as a principle.
- Service provision may be temporarily suspended in cases of system maintenance, technical failures, acts of God, etc., and the Company will provide advance or subsequent notice.
- The Company may change the content of the Service based on operational or technical needs, and will provide advance notice of content changes. However, post-hoc notice may be given in cases of urgency.
- The Company will provide 30 days' advance notice in cases of full or partial suspension of the Service, except where unavoidable circumstances such as critical bugs, urgent security issues, or acts of God apply.
Article 8. Processing of Personal Information and Health Information
- The Company collects and uses the minimum necessary personal information to provide the Service; personal information processing is governed by the separate Privacy Policy.
- The Company does not, as a rule, collect or process sensitive information such as health information and self-submitted health records (PHR). However, where a member has given separate explicit consent, processing is carried out within the purposes and scope specified in Annex 1.
- The Company does not directly collect medical records from medical institutions. Health records are processed only through the method of members directly uploading their own copies of medical records, health examination results, etc. to the Service.
- Members must upload only their own medical materials lawfully obtained; unauthorized uploading of another person's medical records is prohibited.
- Detailed matters regarding health information processing are specified in Annex 1.
- Consent to health information processing is given separately from consent to use the basic Service. Refusal to consent to health information processing does not restrict use of the basic WHS platform services.
Article 9. Third-Party Provision of Personal Information
- The Company does not provide personal information to third parties without member consent.
- Only where a member has separately consented may account identification information, health information, and marketing-use information be provided to third parties within the scope of consent.
- Provision without member consent is permitted where required by law.
- Third-party provision of health information is made only through a separate consent that is distinct from consent to provide account identification information.
Article 10. Members' Obligations
Members must not engage in the following acts:
- Stealing another person's account or personal information
- Interfering with the normal operation of the Service
- Violating laws or these Terms
- Infringing on the rights of the Company or third parties
- Providing false or inaccurate information
- Uploading another person's medical records or health records that are not the member's own
- Using health information within the Service for medical device purposes or telemedicine
- Engaging in commercial activities using the Service without the Company's prior consent
- Distributing computer viruses, malicious code, etc.
- Reverse engineering or decompiling the Service
Article 11. Management of Posts
- Members are responsible for posts they publish within the Service.
- The Company may, without prior notice, delete or restrict posts that violate laws, infringe on the rights of others, or contain false, obscene, or violent content.
- Where a member's post is subject to a takedown request from a third party on grounds of defamation, copyright infringement, etc., the Company will take action in accordance with applicable laws.
Article 12. Intellectual Property Rights
- Copyright and intellectual property rights in the Service and content provided within the Service belong to the Company or the rightful owner.
- Members may not reproduce, distribute, or use such content commercially without the Company's prior consent.
Article 13. Damages
- If a member causes damages to the Company by violating these Terms, the member must compensate the Company for such damages.
- If a third party raises objections against the Company due to a member's violation, the member must respond at their own cost and responsibility to indemnify the Company.
Article 14. Disclaimer and Limitation of Liability
- The Company is not liable for damages caused by reasons attributable to members, reasons attributable to individual service providers, force majeure, or failure to achieve or loss of expected profits.
- The Company makes no warranty as to the quality, results, or effectiveness of individual services.
- However, the limitation provisions of this Article do not apply to damages arising from loss, leakage, forgery, or falsification of health information, and the liability standards under Articles 39 and 39-2 of the Personal Information Protection Act apply.
- The Company implements the technical and administrative measures necessary to ensure the security of health information processing pursuant to Article 29 of the Personal Information Protection Act.
Article 15. Restriction of Use and Termination of Agreement
- The Company may take graduated measures such as warnings, temporary suspension, and permanent suspension where a member violates these Terms or interferes with normal service operation.
- As a rule, a warning and request for correction will be issued first; if correction is not made or violations are repeated or serious, measures such as deletion of posts, temporary suspension, permanent suspension, and termination of the agreement may be taken.
- Immediate action may be taken without prior warning in cases of serious infringement of others' rights or criminal acts.
- Members may request membership withdrawal at any time through the in-service function.
- Where a member withdraws consent to health information processing, processing of health information will stop immediately upon withdrawal, and previously processed health information will be destroyed without delay. However, where there is a statutory retention obligation, the information will be retained for that period before destruction.
Article 16. Priority Application of Terms and Relationship with Individual Service Terms
- These Terms govern general matters regarding the use of the WHS integrated platform and account services.
- Regarding the use of individual services, the individual service terms set by the respective individual service provider take precedence.
- Regarding health information processing, Annex 1 (Health Information Service Consent) takes precedence over these Terms.
- The hierarchy of terms set out in this Article applies commonly to all individual service terms connected to WHS.
Article 17. Governing Law and Jurisdiction
- These Terms shall be governed by the laws of the Republic of Korea.
- Litigation arising from disputes shall be filed with the court of competent jurisdiction under the Civil Procedure Act.
Annex 1: Consent to Health Information Services
This Annex is a separate consent form for processing of sensitive information (health information) pursuant to Article 23 of the Personal Information Protection Act. Explicit consent is obtained from members separately from the main Terms. Refusal to consent to this Annex does not restrict use of WHS basic services (account and individual service connection).
Article 1. Purpose
This Annex governs the purposes, items, retention periods, and member rights with respect to sensitive information (health information) collected and processed by the Company when members use WHS health information services.
Article 2. Definitions
| Term | Definition |
|---|---|
| Health Information | Information relating to physical health — such as blood pressure, blood glucose, body composition, weight, sleep, and activity levels — that a member provides to the Company by direct entry or device linkage. |
| Self-Submitted Health Record (PHR) | Records that a member submits by directly uploading to the Service, such as copies of medical records from medical institutions, health examination results, and copies of prescriptions. |
| Device-Linked Data | Health measurement values automatically transmitted through linkage with health measurement devices or related apps, such as InBody devices, blood pressure monitors, blood glucose meters, and wearable devices. |
[Important] The member is the party submitting self-submitted health records. The Company does not directly collect medical records from medical institutions. Members must upload only their own records lawfully obtained.
Article 3. Sensitive Information Items Collected and Purposes of Processing
[Required Consent] When Using Health Management Services — Basic Health Information Collection and Use
| Category | Items Collected | Purpose | Retention Period |
|---|---|---|---|
| Directly entered health information | Weight, blood pressure (systolic/diastolic), blood glucose, heart rate, sleep duration, step count, exercise information | Providing health management services, providing personalized health information | During service use period. Immediately destroyed upon withdrawal or consent revocation |
| Device-linked data | Body composition (body fat percentage, skeletal muscle mass, body water content, etc.), blood glucose (continuous/self-measured values), device unique identification information | Providing device linkage services, analyzing health trends, generating reports | During service use period. Immediately destroyed upon withdrawal or consent revocation |
Consequences of refusing consent: Personalized reports based on health information, device linkage features, and health management services will be unavailable.
[Optional Consent ①] Collection and Use of Self-Submitted Health Records (PHR)
| Category | Items Collected | Purpose | Retention Period |
|---|---|---|---|
| Self-submitted health records (PHR) | Copies of medical records, health examination results, copies of prescriptions, radiological images, etc. directly uploaded by the member | Managing personal health records, use when linking with individual service providers, providing personalized health management services | Immediately destroyed upon revocation of consent |
[Optional Consent ②] Use of Health Information for Personalized Marketing and Advertising
| Category | Items Used | Purpose | Retention Period |
|---|---|---|---|
| Marketing use | Health interests, service usage patterns | Recommending personalized health products/services and advertising | Until consent is withdrawn |
[Optional Consent ③] Third-Party Provision of Health Information
| Recipient | Purpose | Items Provided | Retention Period |
|---|---|---|---|
| DERNA Clinic (더나의원) | Medical reservations, reception, consultations, procedures, skin diagnosis result confirmation, post-procedure management | Member identification information, reservation information, reception information, medical questionnaire information, skin diagnosis results, procedure history, consultation history | Until purpose of provision is achieved or until statutory retention period |
| Swellnessy | Personalized beverage recommendations based on skin diagnosis and procedure information, product announcements, purchase linkage | Member identification information, skin diagnosis results, procedure history, recommendation basis information, purchase information | Until purpose of provision is achieved or until consent is withdrawn |
| WHS Store and listed/partner brands | Personalized cosmetics and beauty product recommendations based on skin diagnosis and procedure information, product announcements, purchase linkage | Member identification information, skin diagnosis results, procedure history, recommendation basis information, purchase information, product interest information | Until purpose of provision is achieved or until consent is withdrawn |
[Optional Consent ④] Pseudonymization for Research and Statistical Purposes
| Category | Items Processed | Purpose | Retention Period |
|---|---|---|---|
| Pseudonymization | Pseudonymized data of collected health information | Health management research, anonymous statistical analysis, service improvement | Until research purpose is achieved |
Article 4. Scope and Components of Health Information Services
- Health report provision: Providing personalized reports, statistics, and analysis results based on member health information.
- Device linkage management: Confirming and managing the status of linkage with InBody and other health measurement devices and related apps; consent can be revoked or data deleted.
- Self-submitted health record management: Retaining health records directly uploaded by members; records can be shared with individual service providers at the member's discretion.
- Individual service linkage: Providing health information to partner medical institutions, health management services, and other individual service providers under member consent to enable personalized services.
- Personalized content recommendations: Recommending health-related content, products, and services based on health information.
Article 5. Procedures and Precautions for Uploading Self-Submitted Health Records
- Members may submit their own medical documents through the health record upload function within the Service.
- Upon uploading, members must confirm that the uploaded document is a record pertaining to themselves, that they lawfully obtained it, and that they will not upload another person's medical records.
- Members are responsible for the content of documents they upload, and the Company does not warrant the accuracy or authenticity of uploaded documents.
- Members may delete uploaded records at any time.
Article 6. Device Linkage
- Where measurement data is transmitted to WHS through API linkage with health measurement device operators such as InBody Co., Ltd., both the third-party provision consent of the device operator and a separate health information collection consent from WHS are required.
- Members may confirm the linkage status on the device linkage screen and may terminate linkage with a specific device or all devices at any time. Data transmission from the relevant device will stop immediately upon termination of linkage.
Article 7. Health Information Security Management
- Encryption: Safe encryption algorithms are applied to health information during storage and transmission.
- Access control: Personnel with access to health information are minimized and access rights are managed.
- Separate storage: Health information is managed separately from general personal information.
- Access log management: Access logs for health information processing systems are generated and retained, and are periodically reviewed.
- Security inspection: Regular vulnerability assessments and security audits are conducted.
Article 8. Members' Rights and How to Exercise Them
- Members may exercise rights to access, correct/delete, suspend processing, and withdraw consent with respect to health information.
- Rights may be exercised via the [Health Information Settings] screen within the Service or by submitting a written, telephone, or email request to the Chief Privacy Officer.
- Upon withdrawal of consent, the relevant health information will be destroyed without delay, within 5 business days of the date of the processing request. However, where there is a statutory retention obligation, the information will be retained for that period before destruction.
- Withdrawal of consent may result in the discontinuation of health information-based services, but use of basic WHS services will remain available.
Article 9. Disclaimer of Medical Acts
- The health information services governed by this Annex are services providing information for health management assistance purposes.
- The Company is not a medical institution, and the information provided does not constitute medical diagnosis, prescription, or treatment.
- Health information analysis results and reports are reference information only and do not substitute for the judgment of medical professionals.
- If you experience or suspect a health abnormality, or if an emergency occurs, please visit a medical institution immediately or contact emergency services (119).
Article 10. Disclaimer
- The Company is not liable for problems arising from the accuracy or completeness of self-submitted health records uploaded by members, unless guilty of willful misconduct or gross negligence.
- The Company is not liable for the processing, retention, or use of health information by partner medical institutions or other individual service providers, unless guilty of willful misconduct or gross negligence. Data processing by such providers is governed by their respective privacy policies.
- The Company is not liable for damages arising from reasons attributable to members.
Article 11. Effective Date and Amendments
- This Annex is effective as of June 5, 2026.
- Where the content of this Annex changes, notice will be given in accordance with the procedures of Article 3 of the main Terms and member consent will be obtained again.
- However, in the case of unfavorable changes to sensitive information processing, individual notice will be given to members and a separate consent procedure will be conducted.
Supplementary Provisions
- These Terms are effective as of June 5, 2026.
- For service agreements formed under the existing WHS Terms of Service (effective January 22, 2026) prior to the entry into force of these Terms, the provisions of these amended Terms will newly apply, limited to matters related to Article 8(2) of the prior Terms (declaration of non-collection of sensitive information), upon consent to these amended Terms.
- In such cases, consent to health information processing pursuant to Annex 1 will also be newly obtained from existing members.