Biometric Data Policy & Consent
LightWeight Inc. (the "Company") offers an optional Facial Recognition Login for its Digital Exercise Equipment. To provide it, the Company collects and uses Biometric Data, as described below. In this document, "Biometric Data" means biometric identifiers (a scan of your face geometry) and any biometric information derived from them, as those terms are used in applicable biometric privacy laws. This document is the Company's Biometric Data policy, and it is also the consent we ask you to give, separately from any other terms, before you register your face. It is publicly available and also serves as the Company's written retention and destruction policy for Biometric Data.
What we collect and why
On the Facial Recognition Login screen, the Digital Exercise Equipment's camera is on and automatically captures an image when a face is detected close to the screen. The capture is used only to create or match your face template.
| Item | Details |
|---|---|
| Biometric Data collected | A scan of your face geometry (a face template) generated from camera images of your face, together with the camera images used to create and match it |
| Linked identification data | Member identification information used to connect the face template to your account (member number, name) |
| Purposes | Providing Facial Recognition Login on the Digital Exercise Equipment; verifying that you are the account holder and connecting you to your account; and operating, maintaining, troubleshooting, and securing the Facial Recognition Login feature |
| What we will never do | We will never sell, lease, trade, or otherwise profit from your Biometric Data. We do not use it for marketing, do not use it to train artificial intelligence models, and do not use it for any purpose other than those above |
Retention and destruction schedule
- Your face template and related Biometric Data are kept only while you keep Facial Recognition Login registered and continue to use the Service, within the outer limits stated below.
- We permanently destroy your Biometric Data without delay when the first of the following occurs: you close your account; you withdraw this consent; you stop using Facial Recognition Login; the feature is discontinued; or the purpose of collection is otherwise satisfied. This does not apply where applicable law requires a longer retention period.
- If a Temporary Member account is not converted to full membership within one year of its creation, we destroy the face template registered to it when the account is processed under the Privacy Policy; the template is never merely stored separately.
- In any event, we destroy Biometric Data when the purpose of collection has been satisfied or 24 months after your last interaction with the Company, whichever comes first, and in no case later than 45 days after we determine that keeping it is no longer necessary. This schedule is also within the one-year limit that some state laws set after the purpose for collection expires.
- Destruction is permanent and irreversible. Copies in backup systems are overwritten or destroyed within the backup rotation cycle and in any event within the outer limits above.
- Face images of anyone who has not registered (including guests) are not stored at all: they are deleted immediately after the match attempt. The camera's feed is not recorded or retained.
Service providers and where your data is processed
- The Facial Recognition Login service is operated for the Company by ITCEN PNS Co., Ltd. (a security and biometric authentication platform provider, www.itcenpns.com), under a contract that limits processing to the Facial Recognition Login purpose, requires safeguards and confidentiality, restricts subcontracting, and requires deletion or return when the work ends.
- Your face template and related data are transmitted to and stored on servers located in the Republic of Korea, where the Company is based. Apart from the service provider above, we do not disclose your Biometric Data to anyone, except where required by law or legal process.
Security
We protect Biometric Data using at least the same care we apply to other confidential and sensitive information, including encryption of data in transit and access controls, and we treat it with a heightened standard given its nature. Security incidents are handled under the incident response procedures described in the Privacy Policy.
Your choices
- Facial Recognition Login is optional. You can always log in by other means the Company provides, such as member number login, and declining this consent does not affect your use of any other part of the Service.
- You can withdraw this consent at any time by turning off Facial Recognition Login (mobile app > My tab > Facial Recognition Settings). Temporary Members can withdraw by contacting customer support, asking on-site staff, or any other method the Company designates.
- When you withdraw, we destroy your Biometric Data as described in the retention and destruction schedule above.
How consent is given
- Before you register your face, this consent is presented to you separately from the Terms of Service and any other agreement, and you agree by your own affirmative act: checking the consent box or providing an electronic signature. Either act is your written release under applicable biometric privacy laws.
- The Company keeps a record of your consent for as long as the law requires.
- Facial Recognition Login is not offered to children. You must be a Member to register, which requires being at least 14 years old, and the Company does not knowingly collect Biometric Data from anyone under 14, including children under 13 as defined by the Children's Online Privacy Protection Act (COPPA).
Effective Date and Contact Information
Posted: August 27, 2026
Effective: August 27, 2026
LightWeight Inc.
Website: www.lightweight.run
Email: contact@lightweight.run
Phone: +82 31-212-3175 (weekdays 10:00–18:00 KST)