1. Purpose of Processing Personal Information Rapha for AS processes personal information for the following purposes and does not use it for any other purposes.

2. Processing and Retention Period of Personal Information

① Rapha for AS processes and retains personal information within the period agreed upon by the information subject or within the period required by law when collecting personal information from the information subject.

• Not applicable as no personal information is collected.

3. Rights and Obligations of Data Subjects and Legal Representatives, and Methods of Exercising Them ① Data subjects can exercise the following rights regarding Rapha for AS’s personal information protection at any time.

1. Request for access to personal information
2. Request for correction if there are errors
3. Request for deletion
4. Request for suspension of processing

• As no information is collected, users can directly delete the app to handle these requests.

4. Items of Personal Information Being Processed

• No personal information is collected.

5. Destruction of Personal Information Rapha for AS will promptly destroy the relevant personal information when the purpose of processing personal information is achieved. The procedures, deadlines, and methods for destruction are as follows:

• No personal information is collected.

6. Installation, Operation, and Refusal of Personal Information Automatic Collection Devices

• No personal information is collected.

7. Personal Information Protection Manager

• No personal information is collected.

8. Changes to the Privacy Policy ① This privacy policy takes effect from the date of enforcement, and any additions, deletions, or corrections due to legal requirements and policies will be announced through notices 7 days before the changes take effect.

• This privacy policy is effective from April 16, 2024.