Privacy Policy

MUA and NP Inc. protect and respect your privacy and comply with applicable laws.

This Privacy Policy explains how we handle personal information that we collect from you or that you provide to us. If you do not agree with this Privacy Policy, you should not use the Services and uninstall the App.

If you use our Services in a clinical setting, you may receive other privacy notices from your applicable healthcare provider and clinical study sponsor. These notices apply to the activities described in those notices.

Personal Information We Collect

Personal information that you may provide to MUA includes:

- Contact information, such as your first and last name, phone number, and email address

- Profile data that you provide when you register through the Services. Profile data includes your user name and image that you may set on the Services, and other information that you add to your account profile. - Physical and mental health data you enter

- Your voluntary responses to questions and surveys

- Third-party service data. We use this when you share or link to the Service in other ways. This data may include your username, profile picture, and other information related to your account with that third-party service and is provided to us according to your settings on that service.

Automatic data collection. We may automatically record information about your interactions with the Service over time. This includes:

- Interaction data, such as the content of the MUA running on your VR headset, the duration and frequency of features

- Technical system information, such as crash logs

- Field of view and orientation estimated by the camera

- Navigation data using hand gear and hand use

- Physical environment data (e.g. spatial awareness of the device)

How we use your personal information

Your personal information may be used for the following purposes and as otherwise described at the time of collection: - Operate and improve our Services and business

- Help you invite friends to use our Services

- Communicate with you about our Services, including sending you announcements, terms and conditions updates, security alerts, support and administrative messages

- Provide you with a personalized experience by collecting your needs and interests

- Responding to your questions and feedback

In addition, we may use your personal information for research and development purposes, including to analyze and improve the Services and our business.

Retention of Personal Information

Basically, we retain personal information to fulfill the purposes for which it was collected. This may include, for example, to satisfy legal, accounting or reporting requirements, to establish or defend legal claims, and for fraud prevention purposes.

If applicable laws, such as the Act on the Consumer Protection in Electronic Commerce, the Framework Act on Electronic Documents and Transactions, and the Protection of Communications Secrets Act, require specific retention periods, we store personal information accordingly and do not use it for any other purposes.

- Act on the Consumer Protection in Electronic Commerce

Ÿ   Records related to contracts or withdrawal of offers: 5 years

Ÿ   Records related to payment and supply of goods: 5 years

Ÿ   Records related to customer complaints and dispute resolution: 3 years

- Framework Act on Electronic Documents and Transactions

1. Records related to electronic document distribution via certified electronic addresses: 10 years

- Framework Act on National Taxes

1. Books and evidentiary documents related to all transactions specified by tax laws: 5 years

- Protection of Communications Secrets Act

1. Login records: 3 months

- Others

1. Bio & mind data used for personalized content recommendations within MUA: 14 days

Deletion of Personal Information

Personal information is securely deleted in an irreversible manner once it is no longer needed for its intended purpose, such as when a user deletes their account or the service is discontinued. Information subject to legal retention requirements is also deleted without delay after the specified period has elapsed.

Electronic files are permanently erased using technical methods to prevent recovery or reproduction, while printed materials, if any, are destroyed through shredding or incineration to ensure secure disposal.

All users may request the correction or deletion of their personal information at any time by sending an email to muacs@npinc.co.kr. Upon receiving such a request, the Personal Information Processing and Protection Officer will review the personal information and take the necessary actions in accordance with the user’s request, except in cases where specific procedures or retention requirements are stipulated by law. Once the required actions are taken, the user will be informed of the outcome.

How We Share Personal Information

We may share your personal information with the following parties, as described separately in this Privacy Policy or at the time of collection:

- Connected Third-Party Services: If you connect a social media or other service account, we may share your personal information with that third-party service. The third-party’s use of the shared information is governed by that third-party’s privacy policy and your account settings in connection with that third-party. - Professional Advisors: When an advisor affiliated with the service is required, such as a lawyer, arbitrator, or insurance company

- Authorities and Others: Law enforcement agencies, governmental authorities, and private parties who believe that it is necessary or appropriate for the compliance and protection purposes described above

- Business Transferors: Parties and other related participants in a corporate transfer, merger, consolidation, acquisition, reorganization, sale, or other disposition of all or a portion of the business or assets of NP Inc. or its affiliates (including in connection with bankruptcy or similar proceedings)

- Other Users and Unspecified Persons: Your profile and User Content may be displayed to other users of the Service. For example, if you create multiple user profiles, people who share the Service may have access to your profile or User Content. We are also not responsible for users posting screen captures or saves to other places (e.g., social media, search engines).

Entrustment of Personal Information Processing

We do not entrust external companies to process personal information.

Management for Personal Information Protection

We take technical and administrative measures to safely protect the personal information of users. We also limit access to personal information to a minimum number of people. The countermeasures and personnel are as follows.

(1) Technical measures

- Maintaining security for each server in preparation for external intrusions such as hacking

- Using antivirus programs on the computers of our personnel who access personal information

(2) Management personnel

- Personnel who perform tasks such as responding to user requests and collecting feedback

- Personnel who perform research and development tasks by accessing the database where personal information is stored

- Personnel who perform personal information management tasks such as personal information protection managers and staff

- Other personnel who inevitably process personal information for work-related reasons

Use by Children

Due to the nature of MUA's services, children under the age of 14 are judged to be incapable of using the service, and therefore membership registration is not permitted.

Changes to the Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make a significant change to this Privacy Policy, we will update the date and notify you through the site or other appropriate means. Any modifications to this Privacy Policy will take effect when we post the modified version. In all cases, your use of the service after the effective date of the modified Privacy Policy indicates your acceptance of the modified policy.

Contact

For any questions regarding our Privacy Policy, please contact us at the contact information below.

[Personal Information Processing and Protection Officer]

- Officer: Changjun PARK / cjpark@npinc.co.kr

- Department in Charge: VUE Division

Ownership and Deletion of Content, Responsibility

Definition

For the purpose of these Terms, “Content” means any type of work, including text, images, video, music, effects, software, and information or other materials created, posted, or provided through the Service. “User Content” means any content provided by users through the Service.

Rights to Content Ownership

Subject to the foregoing, MUA and its licensors exclusively own all rights, title, and interest in and to the Service and Content, including related intellectual property rights. You acknowledge that the Service and Content are protected by copyright, trademark, and other laws of Korea. You agree not to remove, alter, or obscure any copyright, trademark, service symbol, or other proprietary notices contained in or accompanying the Service or Content. Rights to User Content

By making any User Content available through the Services, you grant MUA the right to use, copy, modify, create, distribute, and publicly display your User Content in connection with operating the Services and Content.

Deletion of User Content

You may specifically delete User Content. However, in certain cases, some User Content may not be completely deleted, and copies of User Content may continue to exist (e.g., posts or comments you have posted). We are not responsible for the deletion of such User Content.

Access to Apps

The following terms apply to the App accessed or downloaded through any App Provider (e.g. Meta Quest Store). You acknowledge and agree that:

1. These Terms are entered into between you and the MUA, not the App Provider, and the MUA, not the App Provider, is solely responsible for the App.

2. The App Provider has no obligation to provide any maintenance or support services in connection with the App.

3. In the event that the App does not conform to any applicable warranty, you may notify the App Provider, and the App Provider shall have no other warranty obligation whatsoever in connection with the App. Any other claims, losses, liabilities, or damages resulting from any failure to conform to any warranty shall be the sole responsibility of the MUA.

You represent and warrant that you are not a resident of a country designated by the Korean government as a terrorist-supporting country or a national interest risk country, and that you are not on any of the Korean government’s prohibited or restricted party lists.

To use the App, your VR headset must meet certain system requirements. These requirements can be found on our Site and in the App Provider’s App Information. Third-Party Services: Links to Third-Party Websites or Resources

The Service may contain links to third-party websites or resources. We provide these links as a convenience. We are not responsible for the content, products, content, or services provided or available on such websites or resource links. You assume all risk arising from your use of any third-party website or resource.

Termination

We may terminate your access to and use of the Service at any time, in our sole discretion, without notice to you. You may also terminate or delete your account at any time by emailing muacs@npinc.co.kr. Certain provisions of this Agreement will survive termination of your account, including, but not limited to, the ownership provisions, warranty disclaimers, limitations of liability, and dispute resolution provisions.

Indemnification

You shall indemnify and hold harmless MUA and its officers, employees, and agents from and against any and all claims, disputes, demands, liabilities, damages, losses, and expenses arising out of or related to (1) your access to or use of the Service or Content, (2) your User Content, or (3) your violation of these Terms.