END USER LICENSE AGREEMENT

LEEBIO INC.

306-2, 1 , Kangwondaehak-gil, Chuncheon-si, Gangwon-do, Republic of Korea

Email: CS@leebio.co.kr

Phone: +82-70-4139-8083

AQUAL VERA LEGAL DOCUMENTS PACKAGE

Effective Date: February 5, 2026

SECTION 1: END USER LICENSE AGREEMENT (EULA)

This End User License Agreement ("Agreement") is a legal agreement between you ("User" or "You") and LEEBIO INC. ("Company", "We", "Us", or "Our") for the AQUAL VERA mobile application ("App" or "Application").

By downloading, installing, or using the App, you agree to be bound by the terms of this Agreement. If you do not agree to the terms of this Agreement, do not download, install, or use the App.

1. Grant of License

Subject to your compliance with this Agreement, LEEBIO INC. grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to download, install, and use the App on a mobile device that you own or control, solely for your personal, non-commercial use.

2. Scope of License

This license is limited to a non-transferable license to use the Licensed Application on any Apple-branded products that You own or control and as permitted by the Usage Rules set forth in the Apple Media Services Terms and Conditions, or on any Android device as permitted by the Google Play Terms of Service.

3. Restrictions

You agree not to, and you will not permit others to:

License, sell, rent, lease, assign, distribute, transmit, host, outsource, disclose, or otherwise commercially exploit the App.
Modify, make derivative works of, disassemble, decrypt, reverse compile, or reverse engineer any part of the App.
Remove, alter, or obscure any proprietary notice (including any notice of copyright or trademark) of LEEBIO INC. or its affiliates, partners, suppliers, or the licensors of the App.

4.Technical Requirements & Permissions

To use the App effectively, you acknowledge that the App requires access to certain features of your device:

Bluetooth: Required to connect to AQUAL VERA water testing devices to receive test data.
Camera: Required to take photos of water test results for analysis and record-keeping.
Location Services (Optional): Required only if you choose to tag your test results with location data. The App will only access location when you explicitly click the "Save Location" button.

5. Maintenance and Support

LEEBIO INC. is solely responsible for providing any maintenance and support services with respect to the App.

You acknowledge that Apple and Google have no obligation whatsoever to furnish any maintenance and support services with respect to the App.

6. User Contributions

The App may allow you to submit, post, display, or transmit content (including water test data and images) ("User Contributions"). By providing any User Contributions, you grant us the right to use, reproduce, modify, perform, display, distribute, and otherwise disclose to third parties any such material for the purpose of providing the App's services, subject to our Privacy Policy.

7. Intellectual Property

The App, including without limitation all copyrights, patents, trademarks, trade secrets, and other intellectual property rights are, and shall remain, the sole and exclusive property of LEEBIO INC.

8. Warranty Disclaimer

The App is provided to you "AS IS" and "AS AVAILABLE" and with all faults and defects without warranty of any kind. To the maximum extent permitted under applicable law, LEEBIO INC. expressly disclaims all warranties, whether express, implied, statutory, or otherwise.

9. Limitation of Liability

To the fullest extent permitted by applicable law, in no event shall LEEBIO INC. be liable for any special, incidental, indirect, or consequential damages whatsoever.

10. Termination

This Agreement is effective until terminated by you or LEEBIO INC. Your rights under this Agreement will terminate automatically if you fail to comply with any of its terms.

11. Governing Law

This Agreement is governed by the laws of the United States and the State of California, without regard to conflict of laws principles.

12. Third-Party Beneficiaries

You acknowledge and agree that Apple and Google, and their subsidiaries, are third-party beneficiaries of this Agreement, and that, upon your acceptance of the terms and conditions of this Agreement, they will have the right (and will be deemed to have accepted the right) to enforce this Agreement against you as a third-party beneficiary thereof.

LEEBIO INC.

306-2, 1 , Kangwondaehak-gil, Chuncheon-si, Gangwon-do, Republic of Korea Email: CS@leebio.co.kr

Phone: +82-70-4139-8083

SECTION 2: PRIVACY POLICY

This Privacy Policy describes how LEEBIO INC. ("Company", "We", "Us", or "Our") collects, uses, and discloses your information when you use our AQUAL VERA mobile application (the "Service").

A. Information We Collect

1. Account Information

When you register for an account, we collect:

Email address
Password (stored in encrypted format)
Name
Phone number

2. Social Login Information

If you choose to log in via third-party services, we collect:

Facebook: Email, public profile name, and profile photo.
Google: Email, public profile name, and profile photo.

3. Water Test Data

We collect data related to your water quality tests:

Test results (pH, hardness, etc.)
Test result images
Timestamps of tests
Location Data (OPTIONAL): We only collect GPS location if you explicitly click the "Save Location" button to tag a specific test result.

4. Bluetooth Data

To connect with AQUAL devices, we process:

AQUAL device information (model, firmware)
MAC address of the connected device
Connection logs for troubleshooting

5. Device Information

We automatically collect:

Device ID (for session management)
List of registered devices
Notification tokens (for sending push notifications)

B. Firebase Services (Backend Infrastructure)

IMPORTANT: Our Service is built on Firebase, a comprehensive backend platform provided by Google. Firebase operates on our server-side infrastructure and handles all data storage, authentication, and communication. Understanding Firebase's role is essential to understanding how your data is managed.

Firebase Services We Use:

1.Firebase Authentication:

Manages all user accounts (email/password and social logins)
Validates login sessions and secures access
Stores authentication tokens securely

2. Firebase Cloud Firestore / Realtime Database:

Stores your user profile information
Saves all water test results and historical data
Maintains device registrations and app settings
Synchronizes data across your devices in real-time

3. Firebase Cloud Storage:

Securely stores all test result images you upload
Provides encrypted storage with access controls
Enables image retrieval when viewing past tests

4. Firebase Cloud Messaging (FCM):

Sends push notifications to your device
Delivers alerts about test results and app updates
Manages notification tokens securely

5. Firebase Analytics:

Collects anonymized usage statistics (e.g., which features are used, crash reports)
Data is aggregated and cannot be traced back to individual users
Retention Period: Maximum 1 4 months per Google's data retention policy
Helps us improve app performance and fix bugs

📍 Data Location & Processing:

Server Location: Your data is stored on Google Cloud Platform servers, primarily located in the United States.
Data Controller: LEEBIO INC. is the data controller; Firebase processes data on our behalf.
Data Protection: Google Cloud infrastructure complies with SOC 2, ISO 27001 , and other international security standards.
Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256).

🔗 Firebase Governance:

All Firebase services are governed by:

Google Firebase Terms of Service
Google Privacy Policy
Google Cloud Data Processing Addendum

Note: While Google provides the infrastructure, LEEBIO INC. remains fully responsible for how your data is used within the AQUAL VERA app.

Firebase Data Deletion Process:

When you delete your account:

✅ Your Firebase Authentication account is immediately deactivated
✅ All Firestore/Database records are immediately deleted from the active database
✅ All images in Firebase Cloud Storage are immediately deleted
✅ Your FCM notification tokens are immediately revoked
⏱ Data may remain in Google Cloud encrypted backups for up to 30 days before permanent deletion (per Google Cloud backup policies)
📊 Anonymized Firebase Analytics data (which cannot identify you) is retained for up to 1 4 months

C. DATA RETENTION & DELETION POLICY

IMMEDIATE DELETION POLICY: Upon your request to delete your account (via the app settings or by contacting support), we execute an immediate deletion process for all personally identifiable information.

Data Deleted IMMEDIATELY:

✅ Account Information (Email, password, login credentials)

✅ Profile Information (Name, phone number)

✅ All Water Quality Test Records and Results

✅ All Test Result Images

✅ Notification History

✅ Saved Location Information

✅ Device Authentication Info and Registered Device List

✅ Bluetooth Connection Records

Retained Data:

⚠ Anonymized App Usage Statistics: Collected via Firebase Analytics. This data cannot be linked back to you individually and is retained for a maximum of 1 4 months per Google's policy.

⚠ CRITICAL NOTICES:

❌ NO RECOVERY: Deleted data CANNOT be recovered once the deletion process is initiated. This is permanent and irreversible.

⚡ IMMEDIATE PROCESSING: Deletion requests are processed immediately upon request; there is NO grace period or waiting time.

📋 FIREBASE DELETION: Your data is removed immediately from Firebase's active databases (Authentication, Firestore, Cloud Storage).

🗄 BACKUP PURGE: Due to Google Cloud's standard backup procedures, deleted data may remain in encrypted, inaccessible backups for up to 30 days before being permanently overwritten. During this period, the data is encrypted and cannot be accessed or restored by anyone, including LEEBIO INC.

📊 ANONYMIZED DATA: Firebase Analytics data is anonymized and aggregated. It cannot be deleted on a per-user basis because it is not linked to your identity. This data expires automatically after 1 4 months.

D. How We Use Information

To provide and maintain our water testing services.
To establish Bluetooth connections with AQUAL VERA testing devices.
To store, analyze, and display your historical test data.
To send you administrative and service-related notifications.
To improve app functionality and user experience.
To provide customer support and troubleshoot issues.

E. Information Sharing

🔒 WE DO NOT SELL YOUR PERSONAL DATA.

We only share your information with the following categories of third parties:

1. Service Providers (Backend Infrastructure)

Google Firebase / Google Cloud: Processes and stores all app data on our behalf, including:

User authentication and account management
Database storage (test results, profiles, settings)
File storage (test images)
Push notifications
Anonymized analytics

Firebase acts as a "data processor" under our instruction. Google does not use your AQUAL VERA data for its own purposes.

Google Play Services: For app distribution, updates, and device compatibility checks.

2. Third-Party Authentication Providers

Facebook Login: Only for authentication purposes. Facebook receives your login request but does not access your test data.
Google Sign-In: Only for authentication purposes. Google receives your login request but does not access your test data.

3. Legal Requirements

Legal Compliance: We may disclose your information if required by law, court order, subpoena, or government regulation.
Protection of Rights: We may disclose information to protect our rights, property, safety, or that of our users or the public.

4. Business Transfers

If LEEBIO INC. is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

✅ What We DON'T Do:

❌ We do NOT sell your data to advertisers
❌ We do NOT share your data with marketing companies
❌ We do NOT use your test data for purposes other than providing the Service
❌ Firebase does NOT use your personal data for Google's advertising or own products

F. Data Security

We implement robust security measures to protect your data:
Encryption of data in transit (HTTPS/SSL) and at rest.
Strict Firebase security rules to control database access.
Secure Bluetooth pairing protocols.
Regular security audits and access controls restricted to authorized personnel.

G. International Data Transfers

LEEBIO INC. is based in South Korea. However, our infrastructure uses Google Cloud servers primarily located in the United States. By using the Service, you consent to the transfer of your information to the United States and South Korea, where data protection laws may differ from those of your jurisdiction. We ensure adequate safeguards are in place for such transfers.

H. Your Rights (CCPA & GDPR Compliance)

Depending on your location, you may have the following data protection rights:

1. Right to Access

You have the right to request a copy of all personal data we hold about you, including:

Account and profile information
All water test records and results
Test images stored in Firebase Cloud Storage
Device registration information
Firebase Analytics summary (anonymized, if available)

To request your data, contact us at CS@leebio.co.kr. We will provide your data in a portable format (JSON/CSV) within 30 days.

2. Right to Rectification

You can update your profile information directly in the app or request correction of inaccurate data by contacting support.

3. Right to Deletion

You have the right to request deletion of your personal data at any time (see Section C for detailed deletion policy). Deletion includes all data in Firebase services (Authentication, Firestore, Cloud Storage, FCM tokens).

4. Right to Data Portability

You have the right to receive your data in a structured, commonly used, machine-readable format (e.g., JSON, CSV). This allows you to transfer your data to another service if desired.

5. Right to Opt-Out

Marketing Communications: You can unsubscribe from promotional emails at any time.
Push Notifications: You can disable push notifications in your device settings or app settings.
Firebase Analytics: Analytics data is already anonymized and cannot be opted out on a per-user basis. However, you can disable analytics collection by contacting support.

6. California Residents (CCPA Rights)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know: What personal information is collected, used, shared, or sold (we do not sell data).
Right to Delete: Request deletion of your personal information.
Right to Opt-Out: Opt-out of the sale of personal information (we do not sell data).
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

7. European Residents (GDPR Rights)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

Right to Object: Object to processing of your personal data.
Right to Restriction: Request restriction of processing your personal data.
Right to Lodge a Complaint: File a complaint with your local data protection authority.
Right to Withdraw Consent: Withdraw consent at any time (e.g., for location tracking).

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

📧 Email: CS@leebio.co.kr

📞 Phone: +82-70-41 39-8083

We will respond to your request within 30 days (or as required by applicable law). We may need to verify your

identity before processing your request.

I. Third-Party Services & Data Processors

Our Service integrates with and relies upon several third-party services. We are not responsible for their privacy practices. Please review their respective privacy policies:

1. Google Firebase (Primary Backend)

Purpose: Complete backend infrastructure (authentication, database, storage, messaging, analytics)
Data Shared: All user data, test results, images, device information
Data Location: Google Cloud (primarily United States)
Legal Basis: Necessary for service provision; Firebase acts as data processor on our behalf
Privacy Policy: Google Privacy Policy
Terms of Service: Firebase Terms
Data Processing: Google Cloud DPA

2. Facebook Login (Optional)

Purpose: Social login authentication
Data Shared: Email, profile name, profile photo (only if you choose Facebook login)
Privacy Policy: Facebook Privacy Policy
Control: You can revoke AQUAL VERA's access anytime via Facebook Settings → Apps and Websites

3. Google Sign-In (Optional)

Purpose: Social login authentication
Data Shared: Email, profile name, profile photo (only if you choose Google login)
Privacy Policy: Google Privacy Policy
Control: You can revoke AQUAL VERA's access anytime via Google Account → Security → Third-party apps

4. Google Play Services (Android Only)

Purpose: App distribution, updates, in-app features
Privacy Policy: Google Privacy Policy

Important Notes:

⚠ These third-party services have their own privacy policies and terms. By using AQUAL VERA, you also agree to their terms when interacting with their services.
🔒 LEEBIO INC. uses Firebase under a Data Processing Agreement, meaning Google cannot use your AQUAL VERA data for its own purposes (such as advertising or training AI models).
📧 If you have questions about how Firebase processes your data, contact us at CS@leebio.co.kr

J. Children's Privacy (COPPA)

Our Service is NOT intended for children under the age of 1 3. We do not knowingly collect personally identifiable information from children under 1 3. If we discover that a child under 1 3 has provided us with personal information, we will immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us.

K. Bluetooth & Location Permissions

Bluetooth: Used EXCLUSIVELY for connecting to AQUAL test devices to retrieve data. We do not use Bluetooth for user tracking or advertising.
Location: Access is OPTIONAL. We only request location permission if you wish to geotag your water test results. Location is recorded only when you tap "Save Location".
Camera: Access is required only when you initiate the function to take a photo of your test result.

L. Changes to Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and sending an email or in-app notification. Continued use of the Service after such changes constitutes your acceptance of the new Privacy Policy.

M. Contact Information

If you have any questions about this Privacy Policy, please contact us:

LEEBIO INC.

203-1, KNU Startup CUBE 2step, 1 Kangwondaehak-gil, Gangwon-do, chuncheon-si 24341 South Korea

LB@leebio.co.kr

SECTION 3: TERMS OF SERVICE

Please read these Terms of Service ("Terms", "Terms of Service") carefully before using the AQUAL VERA mobile application (the "Service") operated by LEEBIO INC. ("us", "we", or "our").

1. Agreement to Terms

By accessing or using the Service, you agree to be bound by these Terms. If you disagree with any part of the terms, then you may not access the Service.

2. Eligibility

You must be at least 1 3 years old to use the Service. By agreeing to these Terms, you represent and warrant to us that: (a) you are at least 1 3 years old; (b) you have not previously been suspended or removed from the Service; and (c) your registration and your use of the Service is in compliance with any and all applicable laws and regulations.

3. Accounts and Registration

To access certain features of the Service, you must register for an account. You agree to provide accurate, current, and complete information during the registration process and to update such information to keep it accurate, current, and complete. You are responsible for safeguarding your password and for all activities that occur under your account.

4. Acceptable Use Policy

You agree not to misuse the Service. For example, you must not:

Use the Service for any illegal purpose or in violation of any local, state, national, or international law.
Violate, or encourage others to violate, any right of a third party, including by infringing or misappropriating any third-party intellectual property right.
Interfere with security-related features of the Service.
Reverse engineer or otherwise attempt to discover the source code of any portion of the Service.

5. Bluetooth Device Connection

The Service is designed to connect via Bluetooth to AQUAL water testing devices. You acknowledge that successful connection depends on various factors including device compatibility, distance, and interference.

We do not guarantee that the Service will always successfully pair with every device.

6. Test Result Accuracy Disclaimer

DISCLAIMER: The water quality test results provided by the Service are for informational purposes only. While we strive for accuracy, the Service is not a substitute for professional laboratory analysis. Do not rely solely on the Service for critical health or safety decisions regarding water quality.

7. Intellectual Property Rights

The Service and its original content (excluding User Content), features, and functionality are and will remain the exclusive property of LEEBIO INC. and its licensors.

8. Third-Party Services & Backend Infrastructure

The Service relies on third-party services for critical functionality:

Firebase (Google): Our backend infrastructure is powered by Firebase, which handles all data storage, authentication, and cloud functions. By using AQUAL VERA, you acknowledge that your data is processed and stored on Firebase/Google Cloud servers.
Facebook Login & Google Sign-In: If you choose to use social login, you will be subject to Facebook's and Google's respective terms of service and privacy policies.
Third-Party Links: The Service may contain links to third-party websites or services that are not owned or controlled by LEEBIO INC.. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services.

Important: You acknowledge that LEEBIO INC. is not responsible for any issues arising from your use of Firebase, Facebook, Google, or other third-party services, except as required by applicable law.

9. Disclaimer of Warranties

THE SERVICE IS PROVIDED ON AN "AS-IS" AND "AS AVAILABLE" BASIS. LEEBIO INC. DISCLAIMS ALL WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

10. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT SHALL LEEBIO INC. BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUES. IN NO EVENT SHALL THE AGGREGATE LIABILITY OF LEEBIO INC. EXCEED THE GREATER OF ONE HUNDRED U.S. DOLLARS ($1 00.00) OR THE AMOUNT YOU PAID US, IF ANY, IN THE PAST SIX MONTHS.

11. Indemnification

You agree to defend, indemnify, and hold harmless LEEBIO INC., its officers, directors, employees, and agents,

from and against any claims, liabilities, damages, losses, and expenses, including, without limitation, reasonable legal and accounting fees, arising out of or in any way connected with your access to or use of the Service or your violation of these Terms.

12 Dispute Resolution & Arbitration

PLEASE READ THIS SECTION CAREFULLY. IT AFFECTS YOUR LEGAL RIGHTS, INCLUDING YOUR RIGHT TO FILE A LAWSUIT IN COURT.

Any dispute arising from or relating to the subject matter of these Terms shall be finally settled by arbitration in San Francisco, California, using the English language in accordance with the Arbitration Rules and Procedures of JAMS then in effect.

Class Action Waiver: YOU AND LEEBIO INC. AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN YOUR OR ITS INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR REPRESENTATIVE PROCEEDING.

13. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the United States and the State of California, without regard to its conflict of law provisions.

14. Termination

We may terminate or suspend your account and bar access to the Service immediately, without prior notice or liability, under our sole discretion, for any reason whatsoever and without limitation, including but not limited to a breach of the Terms.

15. Changes to Terms

We reserve the right, at our sole discretion, to modify or replace these Terms at any time. By continuing to access or use our Service after those revisions become effective, you agree to be bound by the revised terms.

Questions? Contact Us: LEEBIO INC.

Email: CS@leebio.co.kr Phone: +82-70-4139-8083