We and our Service Providers and entrusted processors (each, a “Service Provider”) may directly collect your information through the Services. For example, we collect information when you perform the following activities. (The personal information collected, and collection methods may slightly vary by country or service channel, as required or permitted by applicable law..)

• Creating an account on the Platform;
• Registering or connecting your existing THE GENUYN account with social network services (“SNS”) such as Facebook, Instagram, Google, or X;
• Registering or connecting your existing THE GENUYN account with third-party login services such as Apple ID;
• Accessing our Services;
• Participating in any type of event organized by us through the Services;
• Participating in any type of survey organized by us through the Services;
• Making any purchases through the Platform;
• Contacting us via methods we provide; or
• Reporting infringement or unauthorized distribution of our contents;
• Subscribing to our newsletters, text messages, push notifications, or other marketing communications;
• Joining or managing membership and loyalty programs offered through the Services;
• Downloading or obtaining access to our digital products (e.g., PDF files, templates);
• Providing the personal information of a third party (e.g., gift recipient) when using our gifting or forwarding features;

“Personal Information” is any information that identifies, relates to, or could reasonably be linked with you.

We may process and store your information in accordance with following conditions:

• while you are using our Platform (while your account is alive, not closed and deleted);

• as required under law, regulations, contracts or statutory obligations; and/or

• only for as long as your information is necessary for the purposes described in the Privacy Policy

We will put in place measures such that your personal information in our possession or under our control is deleted in an irreversible format and/or de-identified as soon as it is reasonable to assume that (1) the purpose for which that personal information was collected is no longer being served by the retention of such personal information; and (2) retention is no longer necessary for any other legal or business purposes. If any personal information is to be retained as required by relevant laws and regulations, we retain it for the period as required by such laws and regulations before destruction. The personal information which is stored and managed by us will not be used for purposes not authorized by law or by you. However, some information you have shared with others on the Platform may, and will likely, remain visible after you close your account such as comments, message board postings, and communications you have with other users of the Platform and certain submissions. In the case of Reporting Illegal Content, the submission is and will not be made public. Nonetheless, please contact THE GENUYN at privacy@thegenuyn.com and THE GENUYN, in THE GENUYN’s sole and reasonable discretion, may assist you in deleting such content, and shall timely do so wherever and to the extent legally obligated.

THE GENUYN is very sensitive to this issue of children’s privacy and, therefore, we endeavor to protect the privacy of children using the Internet and our Services. We do not knowingly collect personal information from children under 14 in Korea. If we learn that we have collected such information without required consent, we will delete it without undue delay. Parents or legal guardians should supervise their Children when they participate in online(mobile) activities.

While you use our Services, your information may be transferred, stored, and processed within and outside of your country of residence in accordance with this Privacy Policy. Personal Information may be transferred to and processed in countries outside your country of residence in connection with our use of certain service providers. We do not operate our own data centers and use reputable cloud and SaaS providers (Including Squarespace, Google Workspace, Paddle, Publuu). Information that you provide to us will be stored in our IT systems located in the Republic of Korea (“Korea”) and where applicable, in the infrastructure of these service providers. We make an effort to implement appropriate technical, physical, and administrative safeguards to protect the privacy and security of your information and to use it only consistent with your relationship with us and terms described in this Privacy Policy. In addition, we enter into service agreements and relevant clauses with our Service Providers whenever feasible and appropriate.

We take personal information very seriously and make reasonable efforts to prevent loss, theft, leakage, unauthorized alteration, and deletion of personal information through implementing appropriate physical, technical, administrative security measures as below (but not limited to):

• Access control (including secure password policy);

• Pseudonymization and encryption of personal information;

• Installation of anti-virus software and firewall; and/or

• Managing and monitoring of event logs for accountability

You may exercise your rights regarding personal information as below:

• Right of access: You may ask us to provide copies of your personal information, including how we collect, store, use, process, share, and/or disclose information about you. These rights always apply unless some exemptions exist.

• Right to rectification: You may contact us if you identify that your information in our possession is not accurate. You may ask us to rectify, update, and complete such inaccurate information.

• Right to erasure (right to be forgotten): You may ask us to delete your information collected, stored, processed, shared, and disclosed by us when certain circumstances are met.

• Right of restriction of processing: You may limit the way we collect, process, use, store, share, and disclose your information if you are concerned about how we use it.

• Right to data portability: This right only applies to the information you have directly given us. You may ask us to transfer such information in a usable format from one organization to an(other) organization(s), or give it to you.

• Right to object: You may ask us to stop processing your information when certain circumstances are met.

We may change, modify, add, or remove portions of this Privacy Policy from time to time. Material changes that adversely affect your rights will be announced at least 7 days before the effective date, and at least 30 days in advance for changes that are unfavorable to you, through a notice on our homepage and, where practicable, by email. For non-material updates, we will indicate the “Last Updated” date at the top of this Privacy Policy. Your continued use of the Services after the effective date constitutes your acknowledgment of the updated Privacy Policy.

If you disagree with any changes to this Privacy Policy and do not wish your Personal Information to be subject to the revised Privacy Policy, please close your account and/or stop using the Services.

If you have any inquiries about your rights, please contact us at privacy@thegenuyn.com

If you have any questions or comments regarding our Privacy Policy or wish to access personal information collected by us, please contact us at privacy@thegenuyn.com

You can also contact us by writing at the following address:

THE GENUYN.

27, Hoenamu-ro, Yongsan-gu

Seoul, Republic of Korea

Last Updated: August 21, 2025