service platform · Privacy Policy

Service provider: READY HEALTH Co., Ltd. (the “Company”)

This policy applies to the service platform, including the application and its related online services. By using the platform you confirm that you have read, understood and agreed to this policy in full.

1. Scope of data collected

To provide personalised genetic testing and health guidance, the Company collects the following data according to your usage and service needs:

Basic user data：Including but not limited to your name, gender, date of birth, telephone number, contact address and email, together with data required for identity verification or payment.
Health and biological data | Genetic testing data：Including the biological specimen you submit (such as saliva or other specimen types), the genetic sequencing data and genetic variant information derived from it, and the report the Company produces from its analysis. Genetic data on this platform is supplied by SD Health Biotech Co., Ltd. under the separate informed consent form you sign with that company. This platform receives and processes the genetic testing results you request from SD Health Biotech Co., Ltd. in order to provide personalised health management guidance.
Health and biological data | Self-reported health data：Including but not limited to dietary habits, exercise records, medication information, allergens, health examination reports, medical images, medical records and any other health-related information you enter or upload of your own accord.
Health and biological data | Mobile and wearable device health data：With your authorisation, the platform reads health data from your mobile device or connected wearables through Apple Health (HealthKit) or Android Health Connect, including steps, heart rate, sleep (duration and stages) and body weight. This access is granted item by item at the device operating-system level, and the platform reads only the data types you have explicitly consented to. For the detailed items, purposes and how to withdraw authorisation, see section 6 of this policy.
Technical and usage data：Including device model, operating system version, IP address, browsing and operation records, interaction behaviour, error logs, and records of your interaction with and feedback on AI recommendations.

2. Purposes of data use

Core service delivery：To provide genetic testing, data analysis, AI-personalised health guidance and related health management services. This includes combining the mobile device health data you have authorised (steps, heart rate, sleep, weight and so on) with the Company’s algorithms to generate personalised exercise, sleep, weight and nutrition guidance for you.
Product development and improvement：Statistical analysis under de-identified or anonymised conditions, to improve algorithms and features and to develop new services.
Academic research and commercial collaboration：Where individuals cannot be identified, data analysis may be carried out with research institutions or partner organisations to advance the biotechnology and health fields.
Legal and security obligations：To comply with regulations and the requirements of competent authorities, or as necessary to safeguard public safety and users’ rights.

3. Data sharing and disclosure

Internal authorised use：Your data is accessible only to personnel authorised by the Company, for the purposes set out above.
Sharing with third-party partners：To complete genetic testing, cloud storage and data analysis, the Company may share necessary data with partners under confidentiality agreements (such as laboratories, cloud service providers and data processors), limited to the minimum scope required for the service.
Sharing with affiliates：To provide a complete and integrated health management experience, the Company may share relevant testing and health management information with Co., Ltd. to the extent necessary. Such data is anonymised or de-identified so that it cannot be traced back to a specific individual, and is used only within the services you have authorised.
Mandatory legal disclosure：The Company may provide relevant data as required by law, court order or the request of a competent authority.
Cross-border transfer：To provide a stable service, some anonymised data may be transferred to compliant cloud servers located outside the country for storage.
Breach notification：If the Company becomes aware of theft, alteration, damage, loss or leakage of the personal data it holds, it will take immediate remedial measures and notify the data subjects and the competent authority in accordance with the Personal Data Protection Act.

4. Data retention and deletion

Your personal data is retained until the purpose of use is fulfilled, and is then deleted or anonymised within the shortest reasonable period.

You have the right to request access to, correction of, or deletion of your personal data in accordance with the law. Where retention is required by law or contract (such as genetic testing reports), it will be handled accordingly, which may affect your use of some services.

5. Data security measures

The Company applies data encryption, permission management, access control, redundancy and security auditing to prevent unauthorised access, use or leakage. Network transmission nevertheless carries risk, and the Company cannot guarantee that data will never be attacked or stolen.

6. Reading, use and withdrawal of mobile device health data

How access is granted：The platform reads your health data through Apple HealthKit (iOS) and Android Health Connect (Android). Authorisation is granted item by item, selected by you in the device operating system; you may authorise only some data types, or none at all. Without your authorisation the platform reads none of this data.
Items read and their purposes：Steps and heart rate are used for activity and exercise analysis and personalised exercise and health management guidance; sleep (duration and stages) for sleep quality analysis and improvement suggestions; weight for weight trend tracking and related health management guidance. This data is combined with the Company’s algorithms to generate personalised health management guidance for you.
Transmission and storage：For this analysis, your health data is organised on the device and uploaded to the Company’s servers for processing and storage, protected by encryption and access control in transit and at rest.
Restrictions on use：The Company undertakes that this health data is used solely to provide the health management services you have chosen. It will not be used for advertising, marketing push notifications or data mining of any kind, will not be resold or provided externally, will not be used to judge employment, insurance eligibility or credit, and your health data will not be stored in iCloud or any similar third-party cloud service.
Withdrawing authorisation：You may at any time withdraw all or part of the platform’s data authorisation in your device’s Apple Health (iOS) or Android Health Connect settings. The platform then stops reading the corresponding data, without affecting data lawfully collected and processed before withdrawal.
Third-party platform policies：HealthKit and Health Connect are provided and managed by Apple and Google respectively; your data on those platforms is additionally governed by Apple’s and Google’s own privacy policies.

7. Consent for marketing, referral and other commercial uses

Limitation to the original purpose：Personal data collected by the Company is in principle used only within the specific purposes set out in section 2 of this policy, and not repurposed beyond the existing authorisation.
Commercial use requires added terms and explicit consent：If the Company intends in future to use your personal data for marketing, referral (directing you to buy particular goods or services), commercial recommendation or any other commercial purpose beyond the original purpose of collection, it will add specific terms to this policy or the relevant contract (such as a confidentiality or partnership agreement) setting out the purpose, data scope, recipients and methods, and must obtain your explicit consent (opt-in) beforehand. Without that consent, the Company will not use your personal data for such commercial purposes.
Withdrawal of consent：You may withdraw consent for marketing or referral use at any time. The Company then stops processing for those purposes, without affecting your right to use other parts of the service.
Absolute exclusion of health data and special-category data：To comply with Apple’s and Google’s platform policies and the Personal Data Protection Act, the following data will never be used for marketing, referral, advertising, data mining or resale, even with your consent: (1) health data read through Apple HealthKit or Android Health Connect (steps, heart rate, sleep, weight and so on); (2) genetic testing data and other special-category personal data under Article 6 of the Personal Data Protection Act.

8. Amendments to this policy

The Company may amend this policy at any time in line with regulations and service needs. Amendments will be published in the app and take effect from the date of announcement. Continued use of the service is deemed consent to the amended terms.

9. Contact

If you have any question about data protection or this policy, please contact our customer service centre:

LINE customer service：@rdhealth
Customer service line：(02) 8768-1779
Service unit： Co., Ltd.

READY1 Platform Terms of Service