Privacy Policy
Updated on August 29, 2024
Bredis Healthcare, Inc., along with our affiliates and subsidiaries is a “controller” in relation to personal data (“Bredis Healthcare,” “we,” “us,” and “our”). We respect your concerns about privacy. This Privacy Policy explains how we collect, use, and share your data when you use SteadyPath.
We process your personal data based on our Terms of Service and Privacy Policy. By signing up to SteadyPath Service, you consent to both terms.
Article 1 Information We Collect
Through the Service, we may obtain information about you in various ways. The types of personal information we may obtain include those listed in the Privacy Policy as well as the following
a) Information You Provide Directly
-
Username you have entered within the app.
-
Medication information (such as medication name, added date and time, archived date and time, dose, and usage).
-
Your Daily logs related to health (such as meal records, appetite, medication time, wear-off time, wear-off symptoms, answers to behavior checklist, bed time, wake-up time, sleep difficulties).
b) Information We Obtain By Automated Means
-
Information about your use of SteadyPath (such as in-app usage information, including menus and settings clicked, features used, frequency and duration of use of SteadyPath, sign-in methods, account creation date, and any error messages displayed). We also collect any information stored in cookies we have set on your device.
-
Device information (such as firmware version, operating system, and device IDs, including MAC address, Android ID, serial number, and mobile advertiser IDs).
We also may collect other information about you, your devices and apps, and your use of the Services in ways that we describe to you at the time of collection or otherwise with your consent. Importantly, we make sure that the information we collect does not allow to identify you as a particular individual.
Article 2 What to include in the Privacy Policy
Through the Service, we may obtain information about you in various ways. The types of personal information we may obtain include those listed in the Privacy Policy as well as the following
a) Information You Provide Directly
-
Username you have entered within the app.
-
Medication information (such as medication name, added date and time, archived date and time, dose, and usage).
-
Your Daily logs related to health (such as meal records, appetite, medication time, wear-off time, wear-off symptoms, answers to behavior checklist, bed time, wake-up time, sleep difficulties).
b) Information We Obtain By Automated Means
-
Information about your use of SteadyPath (such as in-app usage information, including menus and settings clicked, features used, frequency and duration of use of SteadyPath, sign-in methods, account creation date, and any error messages displayed). We also collect any information stored in cookies we have set on your device.
-
Device information (such as firmware version, operating system, and device IDs, including MAC address, Android ID, serial number, and mobile advertiser IDs).
We also may collect other information about you, your devices and apps, and your use of the Services in ways that we describe to you at the time of collection or otherwise with your consent. Importantly, we make sure that the information we collect does not allow to identify you as a particular individual.
We process your personal data to fulfill our contractual obligations to you, such as processing your order and providing customer support. This processing is necessary to perform the contract to which you are a party. Another reason we process your personal data is to comply with our legal obligations, such as maintaining records for tax, legal reporting, and other regulatory requirements. We may also process your personal data to protect your vital interests or those of another person, such as emergencies that may put a natural person at risk.
In addition, we process your personal data based on our legitimate interests, such as improving our services, conducting analytics, and preventing fraud. We have balanced these interests against your privacy rights to ensure they are not overridden.
Article 3 How We Use the Information We Collect
We may use the information we obtain through the Service for the purposes described in the Privacy Policy and to:
-
Respond to your requests and inquiries made through and about SteadyPath.
-
Communicate with you about SteadyPath.
-
Provide services or features that you request.
-
Deliver customized content, such as providing recommendations tailored to your interests and the manner in which you interact with SteadyPath.
-
Provide promotions and offers by way of direct marketing communications, only where you have given us your separate consent.
-
Operate, evaluate, and improve our business (including developing new products, enhancing and improving our products and SteadyPath, managing our communications, analyzing our products, consumer base, and SteadyPath, performing data analytics, and performing accounting, auditing, and other internal functions).
-
Protect against, identify, and prevent fraud and other criminal activity, claims, and other liabilities.
-
Comply with and enforce applicable legal requirements, relevant industry standards, and our policies, including this Privacy Policy.
-
To identify and authenticate you so you may use SteadyPath.
-
To provide you with SteadyPath, including allowing you to interact with and connect to other Bredis Healthcare and third-party content.
-
We may use and combine the information we collect about you from SteadyPath with data from other services or features you use and your devices, and other sources, to provide you with a better experience. We may also use the information you provide directly or through other sources as described above to provide content you may like or that has been personalized. For example, when you link SteadyPath to certain third party apps, services, or devices, we may provide a recommendation related to or based off of this linking.
-
We may collect personal information about your online activities on connected devices over time and across third-party websites, devices, apps and other online features and services.
Article 4 How We Keep Your Information Secure
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, or destruction. We take steps to ensure that your information is treated securely and pursuant to this Privacy Policy. Unfortunately, no system is 100% secure, and we cannot ensure or warrant the security of any information you provide to us. To the fullest extent permitted by applicable law, we do not accept liability for unauthorized disclosure.
By using our Services or providing personal information to us, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of our Services or your personal information. If we learn of a security system’s breach, we will notify you electronically by posting a notice on our Services, via the app, or by sending an email to you.
Article 5 International Data Transfers
All information processed by us may be transferred, processed, and stored anywhere in the world, including, but not limited to, the United States or other countries, which may have data protection laws that are different from the laws where you live. Regardless of where your information is processed, we apply the same protections described in this Privacy Policy, and we also comply with applicable laws and regulations relating to the transfer of data. We endeavor to safeguard your information consistent with the requirements of applicable laws and regulations.
Article 6 Information Sharing
We will disclose your information internally within our business and to the following entities, but only for the purposes described above.
-
Affiliates: other Bredis Healthcare Inc. companies which we control or own;
-
Business partners: partners who we work together with to provide you with SteadyPath, such as third-party apps you may choose to connect with SteadyPath. These business partners control and manage your personal information;
-
Service providers: carefully selected companies that provide services for or on behalf of us, such as cloud service providers who maintain data on our behalf. These providers are also committed to protecting your information;
-
Other parties when required by law or as necessary to protect SteadyPath: for example, it may be necessary by law, legal process, or court order from governmental authorities to disclose your information. Government authorities may also seek your information from us for the purposes of law enforcement, national security, anti-terrorism, or other issues that are related to public security;
-
Other parties in connection with corporate transactions: we may disclose your information to a third party as part of a merger or transfer, acquisition or sale, or in the event of bankruptcy; and
-
Other parties with your consent or at your direction: in addition to the disclosures described in this Privacy Notice, we may share information about you with third parties when you separately consent to or request such sharing.
Article 7 How Long Do We Retain Your Information and Where Does It Go?
How long your data will be retained depends on the legal basis relied upon to process your data. For example, the data we process to perform our contract with you requires us to keep the data throughout the time you use SteadyPath. As long as you are an active user of SteadyPath, we will retain and process this data. Data such as your account information and device information and identifiers fall into this category.
Data we process to promote our business interests, such as your usage of SteadyPath, is only kept for as long as needed for the purposes for which it was collected. For example, this data may be collected to perform analytics so we can develop improvements to SteadyPath, or we may process data to keep a record of enquiries you made through or about SteadyPath to improve your customer service experience.
In addition, we may also process your data based on your consent. If you withdraw your consent, we will continue to process data collected prior to your withdrawal until the purposes for which such data was collected have been achieved.
Please note, although we aim to retain your data for the time period described above, your data may be processed longer pursuant to applicable law. For example, if a specific statute mandates we require a certain piece of data, we comply and retain that data until the required retention period expires.
As long as your data is retained by us your data will always be subject to appropriate safeguards.
Your use of SteadyPath will involve the transfer, storage and processing of your personal information to other countries; such countries include, without limitation, countries in the European Economic Area and the Republic of Korea. All international data transfers are subject to legal requirements to ensure that your personal information is processed safely and as you would expect.
Article 8 Your Rights and Choices
Your personal information belongs to you. In accordance with applicable law, you have the right to:
-
Know what personal information is being collected
-
Request deletion of your personal information
-
Opt-out of the sale or sharing of personal information
-
Non-discrimination for exercising your privacy rights
-
Access your personal data
-
Rectify inaccurate or incomplete data
-
Erase your data (right to be forgotten)
-
Restrict processing
-
Data portability
-
Object to processing
However, certain actions such as requesting the deletion of your personal information may also result in a loss of access to the Service we provide. We will not delete data that we are required by law to retain. If you would like to exercise any of these rights, please contact us as set forth in Article 10 (Contact Us).
Article 9 Updates to This Privacy Notice
We may update this Privacy Notice from time to time and without prior notice to you to reflect changes in our personal information practices with respect to the Service. We will indicate at the top of this Privacy Notice when it was most recently updated. You understand and agree that you will be deemed to have accepted the updated Privacy Policy if you continue to use our Services after the revised Privacy Policy takes effect. If there are any material changes to this Privacy Policy, we will notify you as required by applicable law.
Article 10 Contact Us
If you have any questions about this privacy policy or wish to exercise your rights, please contact us at:
-
Email: platform@bredis.co.kr
-
Address: #5032, 34-2, Baekseo-ro 125beon-gil, Dong-gu, Gwangju, Republic of Korea
-
Phone: +82 02 - 6959 - 7657
Article 11 Supplemental Notice for California Residents
This Article for California Residents only applies to our processing of personal information that is subject to the CCPA and the CPRA. The CCPA and the CPRA provide California residents with the right to know what categories of personal information a person (either a natural person or a legal entity) has collected about them and whether such person disclosed that personal information for a business purpose (e.g., to a service provider) in the preceding twelve (12) months. California residents can find this information below.

The categories of sources from which we collect personal information and our business and commercial purposes for using personal information are set forth above.
Additional Privacy Rights for California Residents
-
“Sales” of Personal Information under the CCPA and CPRA. For purposes of the CCPA and CPRA, Bredis Healthcare does not “sell” personal information, nor do we have actual knowledge of any “sale” of personal information of minors under 16 years of age.
-
Non-Discrimination. California residents have the right not to receive discriminatory treatment by us for the exercise of their rights conferred by the CCPA and CPRA.
-
Authorized Agent. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. To designate an authorized agent, please contact us as set forth below.
-
Verification. When you make a request, we will ask you to provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, which may include confirming the email address associated with any personal information we have about you.
-
Limit of use and disclosure of sensitive personal information. You can ask us to only use your sensitive personal information (for example, your precise geolocation data) for limited purposes, such as providing you with the services you requested.
If you are a California resident and would like to exercise any of your rights under the CCPA, please contact us as set forth in Article 10 (Contact Us). We will process such requests in accordance with applicable laws.
Article 12 Supplemental Notice for Nevada Residents
If you are a resident of Nevada, you have the right to opt-out of the sale of certain personal information to third parties who intend to license or sell that personal information. You can exercise this right by contacting us as set forth below with the subject line “Nevada Do Not Sell Request” and providing us with your name and the email address associated with your account. Please note that we do not currently sell your personal information as sales are defined in Nevada Revised Statutes Chapter 603A.
Article 13 Supplemental Notice for Virginia Residents
Under the Virginia Consumer Data Protection Act, you may request us to exercise your right to access your personal data, to correct inaccuracies in your personal data, to obtain a copy of your personal data, to opt out of the processing of the personal data for purposes of (a) targeted advertising, (b) the sale of personal data, or (c) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. Please note that we do not currently sell your personal information as sales are defined in Chapter 53 of the Code of Virginia.
Article 14 Children’s Information
The Services are not directed to children under 13, (or other age as required by local law). So we do not knowingly collect personal information from children. If you learn that your child has provided us with personal information without your consent, contact us immediately as set forth in Article 10 (Contact Us) so we can take necessary steps to remove your child from our Services. If we learn that we have collected a child’s personal information in violation of applicable law, we will promptly take steps to delete such information.
Article 15 Third-party Websites/Applications
The Services may contain links to third-party websites/applications and other websites/applications may reference or link to our Services. We do not control these third-party services. Be sure to read the privacy policies of each website and application with which you interact. We do not endorse, screen or approve, and are not responsible for, the privacy practices or content of such other websites or applications. Providing personal information to third-party websites or applications is at your own risk.
Article 16 Supervisory Authority
If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable law. The full list of authorities on the protection of personal data in each EU Member State is here.
Article 17 Cookie Policy
This Policy applies to cookies collected by us or our partners on the Services. A “cookie” is a small text file that is placed in device browsers or devices by websites, apps, online media, and advertisements. Cookies store preferences and facilitate and enhance your user experience. We use cookies for various purposes and to enhance your online experience, including storage of session counts, analysis of our website traffic, understanding the online behavior and interests of people who interact with the Services.
The following are the types of cookies we use:
-
Necessary: necessary cookies are required to enable the basic features of the Services, including Bredis Healthcare website, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.
-
Statistics: statistics cookies help Bredis Healthcare to understand how visitors interact with our website by collecting and reporting information anonymously.
-
Marketing: marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third-party advertisers.
-
Analytics: analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.
By using our Services, you consent to the use of cookies in accordance with this Policy. You will see an information banner informing you about your privacy choices and rights regarding the cookies. If you do not agree to or wish to withdraw your consent on all or part of the use of these cookies while using our website, you can easily do it via clicking the respective icon at the website.