Medisupporter Terms of Service

These are the terms of service governing the use of the Medisupporter service (the "Service") provided by FIRST FLUKE (the "Company").

Effective date: August 31, 2026

Business information

• Company name: FIRST FLUKE
• Representative: Kim Gahyun
• Business registration number: 711-23-02368
• Mail-order sales registration number: 2025-Seoul Gwanak-0512
• Address: 25 Jowon-ro, Gwanak-gu, Seoul, Republic of Korea
• Business type: Information and communications / Application software development and supply
• Email: hello@firstfluke.com

Article 1 (Purpose)

These terms set out the rights, obligations, and responsibilities of the Company and its users, and other necessary matters, in relation to the use of Medisupporter (the "Service") provided by the Company.

Article 2 (Definitions)

(1) "Service" means all internet-related services provided by the Company, including inquiry channel connection, inbox operation, appointment intake and management, hospital manual management and reply assistance, hospital homepage creation and publication, and AI auto-reply and suggested reply drafting, provided through the website.

(2) "User" means a member or non-member who uses the Service in accordance with these terms.

(3) "Member" means a person who has registered with the Service and may continuously use the services provided by the Company.

(4) "Hospital" means the hospital or clinic unit (tenant) that a member has created in the Service to operate inquiries and consultations. A hospital's operator may invite staff and assign roles such as owner, admin, clinician, staff, and viewer.

(5) "Connected service" means an external inquiry channel that a hospital has connected to the Service (Naver TalkTalk, KakaoTalk Channel, Instagram, and the like).

(6) "Patient" means a person who has left an inquiry or consultation with a hospital through the hospital's inquiry channel or inquiry form.

(7) "Paid service" means the subscription products and add-on features the Company provides for a fee.

Article 3 (Publication, Explanation, and Amendment of the Terms)

(1) The Company publishes the content of these terms together with its company name, the name of its representative (Kim Gahyun), the address of its place of business (25 Jowon-ro, Gwanak-gu, Seoul), its email address (hello@firstfluke.com), and its business registration number (711-23-02368) on the initial screen of the Service or on the terms of service page so that users can easily find them.

(2) Before a user agrees to these terms, the Company provides a separate linked screen or pop-up screen to obtain the user's confirmation of important matters such as suspension of the Service, restrictions on use, termination of the agreement, and payment and refunds for paid services.

(3) The Company may amend these terms to the extent that the amendment does not violate applicable law, including the Act on Consumer Protection in Electronic Commerce, the Act on the Regulation of Terms and Conditions, the Act on Promotion of Information and Communications Network Utilization and Information Protection, and the Personal Information Protection Act.

(4) Where the Company amends these terms, it will announce the amended terms together with the current terms on the initial screen of the Service, stating the effective date and the reason for the amendment, from seven days before the effective date until the day before it. However, where the terms are changed to the disadvantage of users, the Company will give notice with a grace period of at least 30 days.

(5) Matters not stipulated in these terms and the interpretation of these terms are governed by applicable law or commercial practice.

Article 4 (Provision and Modification of the Service)

(1) The Company performs the following work.

• Inquiry channel connection and the receipt and sending of inquiry messages
• Inbox operation (inquiry triage, assignee designation, and reply history management)
• Appointment intake and appointment calendar management
• Hospital manual management and manual-grounded reply assistance
• Hospital homepage creation and publication
• AI auto-reply and suggested reply drafting
• Other work determined by the Company

(2) Where there is substantial reason to do so, the Company may modify the content of the Service according to operational or technical needs, and will notify users of such content through announcements within the Service or by email (hello@firstfluke.com) before the change.

(3) The Company compensates users for damage caused by a modification of the Service. This does not apply where the Company proves that it acted without intent or negligence.

Article 5 (Suspension of the Service)

(1) The Company may temporarily suspend the provision of the Service in the event of maintenance, replacement, or failure of information and communications facilities, interruption of communications, or similar causes.

(2) The Company compensates users for damage caused by a temporary suspension of the Service under paragraph (1). This does not apply where the Company proves that it acted without intent or negligence.

(3) Where the Company can no longer provide the Service due to a change of business line, discontinuation of business, or similar reasons, the Company will notify users by the method set out in Article 8 and compensate them in accordance with the conditions originally presented by the Company.

Article 6 (Membership Registration)

(1) A user applies for membership registration by entering member information in the form prescribed by the Company and by agreeing to these terms and to the collection and use of personal information, and confirming that they are at least 14 years old.

(2) The Company registers as a member any user who applies for membership, unless the user falls under any of the following.

1. The registration details contain falsehoods, omissions, or errors
2. The user has previously lost membership status (except where the Company has consented to re-registration)
3. Registering the user as a member is judged to cause significant technical difficulty for the Company

(3) A membership agreement is formed at the time the Company's acceptance reaches the member.

(4) Where there is a change to the information registered at the time of membership registration, the member must notify the Company of the change within a reasonable period, such as by editing their member information.

Article 7 (Withdrawal of Membership and Loss of Membership Status)

(1) A member may request withdrawal at any time, and the Company will process the withdrawal immediately.

(2) The Company may restrict or suspend membership status where a member falls under any of the following.

1. The member registered false information when applying
2. The member caused damage to the Company or a third party in connection with use of the Service
3. The member interferes with another person's use of the Service or misappropriates their information
4. The member attempts to access hospital or consultation information for which they have no authorization
5. The member uses the Service to engage in conduct prohibited by law or these terms, or contrary to public order and morals

(3) Where the same conduct is repeated two or more times after the Company has restricted or suspended membership status, or where the cause is not remedied within 30 days, the Company may terminate membership status. In such a case, the Company will notify the member and give them an opportunity to explain.

Article 8 (Notices to Members)

(1) Where the Company gives notice to a member, it may do so to the email address designated by the member.

(2) For notices to an unspecified number of members, the Company may substitute individual notice by posting the notice in the Service announcements for seven days or more. However, individual notice will be given for matters that materially affect the member's own transactions.

Article 9 (Payment for Paid Services)

(1) The types of paid services and their fees are posted on the Service screens.

(2) Payment for paid services is made through the payment gateway designated by the Company (Polar) using payment methods provided by the Company, such as credit cards. Payment instrument information is handled by the payment gateway and is not stored by the Company.

(3) The user is responsible for the accuracy of the information entered during payment, and the Company is not liable for any disadvantage arising from inaccurate information.

Article 10 (Automatic Renewal, Withdrawal of Subscription, Termination, and Refunds)

(1) Subscription-based paid services provided by the Company renew automatically at the fixed interval unless the user requests termination, and are charged to the registered payment method at the time of renewal.

(2) Before an automatic renewal charge, the Company notifies the user of the upcoming charge, the amount, and how to cancel the renewal, through notifications within the Service or by email (hello@firstfluke.com).

(3) A user may terminate a subscription before automatic renewal, through the subscription management menu within the Service or by contacting customer support (hello@firstfluke.com).

(4) A user may request withdrawal of subscription and a full refund within seven days of the payment date, provided that the paid features have not been used at all. Because the Service is provided on a period and usage basis, where use of the paid features has commenced, the provision of that portion of the service is deemed complete and withdrawal of subscription is restricted pursuant to Article 17(2) of the Act on Consumer Protection in Electronic Commerce; the Company gives advance notice of this on the payment screen.

(5) Where a withdrawal of subscription is established, the Company refunds the payment through the payment gateway (Polar) to the same payment method within three business days from the date it receives the notice of withdrawal.

(6) Where withdrawal of subscription is restricted under paragraph (4), or where a user terminates a subscription during a subscription period, subscription fees already paid are not refunded and the user may continue to use the Service until the end of that billing period. However, where the user was unable to use the Service normally due to causes attributable to the Company, the user may request a refund limited to the unused portion.

(7) A free trial provided by the Company does not automatically convert into a paid subscription when the trial period ends; a user who wishes to use paid services must purchase a subscription themselves.

(8) Where the price of a subscription service changes, the Company gives notice 30 days before the effective date, and a user who does not agree to the changed price may terminate the subscription.

(9) The Company does not use so-called dark patterns, such as hidden renewal conditions or deliberately complicated termination paths, in the subscription or termination process.

Article 11 (Connected Services and Scope of Permissions)

(1) A hospital may connect external inquiry channels such as Naver TalkTalk, KakaoTalk Channel, and Instagram on its own initiative, and is responsible for granting the permissions required for such connections.

(2) The Company accesses connected services only within the scope of the permissions granted by the hospital, and such access is limited to receiving inquiry messages and sending replies on the hospital's behalf. Connection tokens are stored encrypted.

(3) Where a hospital disconnects a connected service or revokes permissions in the external service, the related features cease to be provided from that point.

(4) The Company is not liable for restrictions arising from the circumstances of external providers, such as policy changes, pricing policies, or service discontinuation of connected services.

Article 12 (Protection of Personal Information and Handling of Patient Information)

(1) The Company collects the minimum personal information necessary to provide the Service and, when collecting and using it, notifies the purpose and obtains consent.

(2) The Company does not use collected personal information for purposes other than those notified, and where a new purpose of use arises or the information is provided to a third party, the Company notifies the purpose and obtains consent in advance. Exceptions apply where otherwise provided by applicable law.

(3) For patients' personal information — consultation messages, contact details, and appointment details a patient leaves with a hospital — the personal information controller is the relevant hospital, and the Company processes such information only within the scope of providing the Service as an entrusted processor on the hospital's behalf. The Company stores consultation message bodies encrypted, controls access on a role basis, and keeps audit records of access to and copying of patient information.

(4) The hospital is responsible for complying with its legal obligations as a personal information controller, including notifying patients of, and obtaining their consent to, the collection and use of personal information, and bears responsibility for managing its staff accounts and permissions and their handling of patient information.

(5) Specific standards and methods for processing personal information are available in the Privacy Policy.

Article 13 (Obligations of the Company)

(1) The Company does not engage in conduct prohibited by law or these terms or contrary to public order and morals, and does its best to provide the Service continuously and reliably.

(2) The Company maintains a security system to protect personal information so that users can use the Service safely, and stores the connection tokens registered by hospitals and patient consultation messages in encrypted form.

(3) The Company does not send commercial advertising email that users do not want.

Article 14 (Obligations Regarding Member IDs and Passwords)

(1) Members are responsible for managing their ID (email) and password and must not allow third parties to use them.

(2) Where a member becomes aware that their ID or password has been stolen or is being used by a third party, they must immediately notify the Company and follow the Company's guidance.

(3) A hospital's owner or admin is responsible for managing the appropriateness of the permissions granted to staff (consultation replies, access to patient information, connection management, and the like).

Article 15 (Obligations of Users)

Users must not engage in the following conduct.

1. Registering false information when applying or making changes
2. Misappropriating another person's information
3. Attempting to access hospital, consultation, or patient information without authorization
4. Using patient personal information beyond the purpose of providing the Service, or disclosing it externally
5. Infringing the intellectual property rights, including copyright, of the Company or third parties
6. Damaging the reputation of, or interfering with the business of, the Company or third parties
7. Accessing the Service by automated means without the Company's prior consent, or interfering with the normal operation of the Service
8. Any conduct that violates applicable law

Article 16 (Rights in User Content and Data)

(1) Rights in the content a user enters or uploads to the Service — hospital manuals, consultation replies, hospital homepage content, and the like ("User Content") — belong to the user.

(2) The Company uses User Content only to the extent necessary to provide, operate, and improve the Service, and obtains the user's prior consent where it wishes to use it beyond that scope. The Company does not use User Content or patients' consultation content to train AI models.

(3) Users must ensure that User Content does not infringe the copyright, portrait rights, reputation, or other rights of others, and users are responsible for disputes arising therefrom.

(4) The hospital is responsible for ensuring that content published to its hospital homepage complies with applicable law, including the Medical Service Act.

Article 17 (Ownership of Copyright and Restrictions on Use)

(1) Copyright and other intellectual property rights in works created by the Company and in the Service belong to the Company.

(2) Users must not use information obtained through use of the Service in which intellectual property rights belong to the Company for commercial purposes by reproduction, transmission, publication, distribution, or other means, or allow third parties to use it, without the Company's prior consent.

Article 18 (Automated Decisions and AI-Generated Output)

(1) The Company uses artificial intelligence (AI) technology for purposes such as drafting a first automated response to inquiries received outside consultation hours and drafting suggested and quick replies for consultation staff.

(2) The results of such AI processing are reference material to assist reply work, and their accuracy and completeness are not guaranteed. AI-generated content is not a medical diagnosis, prescription, or opinion, and the judgment on, and responsibility for, the final reply to a patient rests with the hospital.

(3) Out-of-hours auto-replies are sent only where the hospital has enabled the feature, and every auto-reply carries a notice that it was generated by AI. Where confidence is low or no basis exists in the hospital's manuals, the inquiry is routed to staff review without an auto-reply.

(4) Suggested and quick reply drafts for staff reach the patient only after a staff member has reviewed, edited, and sent them.

(5) Users may request an explanation of the criteria, procedure, and method of automated processing, or request reprocessing with human intervention. Details follow the automated decision provisions of the Privacy Policy.

Article 19 (Limitation of Liability and Disclaimer)

(1) The Company is exempt from responsibility for providing the Service where it cannot provide the Service due to a natural disaster or equivalent force majeure.

(2) The Company is not liable for impediments to use of the Service caused by reasons attributable to the user.

(3) Responsibility for the content of medical care and consultations between a hospital and a patient, and for medical disputes arising therefrom, rests with the hospital, and the Company is not liable therefor absent intent or gross negligence on the part of the Company.

(4) The Company is not liable for a user's failure to obtain expected revenue from use of the Service, or for damage arising from use of material or AI-generated output obtained through the Service, absent intent or gross negligence on the part of the Company.

(5) The Company is not liable for restrictions arising from policy changes, outages, or discontinuation of the external services connected by a hospital (Naver, Kakao, Meta, and the like).

Article 20 (Dispute Resolution)

(1) The Company endeavors to reflect legitimate opinions or complaints raised by users and to remedy the resulting harm.

(2) Where a user applies for relief in relation to a dispute between the Company and the user, the parties may follow the mediation of a dispute mediation body referred by the Fair Trade Commission or a Mayor/Do Governor.

Customer support and dispute-related bodies

• Customer support email: hello@firstfluke.com
• Fair Trade Commission Consumer Counseling Center: 1372 (www.ftc.go.kr)
• Korea Consumer Agency Consumer Dispute Mediation Committee: 1372 (www.kca.go.kr)
• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)

Article 21 (Jurisdiction and Governing Law)

(1) Any lawsuit concerning a dispute between the Company and a user is subject to the exclusive jurisdiction of the district court having jurisdiction over the user's address at the time of filing, or over the user's place of residence where there is no address. However, where the user's address or place of residence is unclear, or the user resides overseas, the lawsuit is filed with the competent court under the Civil Procedure Act.

(2) The law of the Republic of Korea applies to lawsuits filed between the Company and a user.

Addendum

These terms take effect on August 31, 2026.