Terms of Service
These Terms of Service ("Terms") govern your use of the website carna-ai.com, the CARNA AI member service, the CARNA AI MALL online store (carna-ai.com/carna/mall) and the member pages that display CARNA AI HealthViewer measurement results (together, the "Service"). The Service is operated by CARNA AI Holdings Global FZCO, Dubai, United Arab Emirates ("CARNA AI", "we", "us"), together with its regional branches listed in the Contact section. By creating an account or using the Service you agree to these Terms.
1. Definitions
- "HealthViewer" means the CARNA AI HealthViewer kiosk, the CARNA AI wearable band and related measurement devices operated by CARNA AI or its partners (hotels, clinics, wellness centres, pharmacies, corporate sites and other venues).
- "Measurement Results" means the wellness indicator values, indices, categories and reports generated when you are measured on a HealthViewer, identified by the mobile number entered at the device.
- "AI MALL" means the online store at carna-ai.com/carna/mall where CARNA AI products, supplements and partner products are presented and sold.
- "Member" means a person or company that has created an account on the Service. "Personal Member" means an individual who registered with a verified mobile number; "Corporate Member" means a partner, buyer or venue operator whose account has been approved by CARNA AI.
- "Account" means the single member account used across carna-ai.com, the member pages and AI MALL. Your email address is your login ID.
2. One account for the website, the member pages and AI MALL
- Your Account is shared between carna-ai.com, the member pages (My Results, My Page) and AI MALL. You log in once and the same identity is used in all of them.
- Your Measurement Results from HealthViewer kiosks and bands are used together with the personal information you provide on the website and in AI MALL. When the mobile number you verified at sign-up matches the mobile number entered at a HealthViewer, the Measurement Results recorded under that number are linked to your Account and shown on your member pages. AI MALL may use the same Account information (name, email, mobile number, language, delivery address) and, where you opt in, your Measurement Results to present products and wellness programmes relevant to you.
- Purchases in AI MALL require a delivery address and may require additional information (recipient name, customs identification where the destination country requires it) which is collected at checkout.
3. Registration and account security
- You must provide accurate information and keep it up to date. Personal Members must verify a mobile number in their own name; Corporate Members must use a business email and provide company details. CARNA AI may refuse, suspend or delete an account that uses false information, impersonates another person or company, or is used in breach of these Terms.
- Social sign-in (Google, Kakao, Naver, Facebook, LINE, Microsoft, Apple) creates or links an Account using the email address provided by that provider. The provider's own terms apply to your use of that provider.
- You are responsible for keeping your password and devices secure and for all activity under your Account. Notify partners@carna-ai.com immediately if you suspect unauthorised use.
- Accounts may not be sold, transferred or shared.
- Corporate accounts are activated after review by CARNA AI, usually within one business day. Activation may be refused without giving reasons.
4. Nature of the Service — non-medical wellness information
- CARNA AI HealthViewer is a non-medical wellness reference tool. Measurement Results, indices, AI-generated wellness reports, chat answers and product suggestions are provided for general wellness awareness only.
- The Service is not intended to diagnose, treat, cure or prevent any disease, and nothing in the Service constitutes medical advice. Do not make decisions about medication, treatment or medical care on the basis of the Service. Always consult a qualified healthcare professional.
- Values shown may differ from laboratory tests. CARNA AI does not warrant that Measurement Results are accurate, complete or suitable for any particular purpose.
- The AI chat assistant may produce inaccurate or incomplete answers. Answers are generated automatically and are not reviewed by a person before being shown to you.
5. AI MALL purchases
- Product descriptions, prices, availability, shipping options and payment methods are shown in AI MALL at the time of purchase. A contract of sale is formed when CARNA AI (or the named partner seller) confirms your order.
- Supplements and wellness products sold in AI MALL are not medicines. Product claims are limited to those permitted by the regulations of the destination country. Read the label and consult a professional before use, especially if you are pregnant, nursing, taking medication or under medical care.
- Cancellation, return and refund conditions are stated in AI MALL for each product and are subject to the consumer-protection law of your country of residence.
6. Acceptable use
You must not: access or attempt to access another person's Measurement Results or Account; use automated tools to scrape or overload the Service; upload malicious code; use the AI chat to obtain content that is unlawful, harmful or infringing; reverse engineer the Service; or use the Service for any unlawful purpose. CARNA AI may restrict or terminate access for breach.
7. Intellectual property
The Service, its software, AIQRM / rPPG / BIA analysis methods, report formats, texts, images, trademarks and the name CARNA AI are owned by CARNA AI or its licensors and are protected by patent, copyright and trademark law. You receive a personal, non-transferable, revocable licence to use the Service for its intended purpose. You may download or print your own Measurement Results for personal use.
8. Availability and changes
We may change, suspend or discontinue any part of the Service, including AI MALL, at any time. We try to keep the Service available but do not guarantee uninterrupted operation. We may update these Terms; material changes will be announced on the Service or by email at least 7 days before they take effect. Continued use after the effective date constitutes acceptance.
9. Account deletion (withdrawal)
- You may delete your Account at any time from My Page → Delete account after verifying yourself by SMS or email. Deletion ends your membership on carna-ai.com, the member pages and AI MALL at the same time.
- On deletion your login, name, email, mobile number, consents, inquiry history and AI chat history are deleted from the member database, except for data that must be retained by law (for example order and payment records, which are kept for the statutory period and then deleted). Measurement Results stored under the HealthViewer device record are no longer linked to any Account.
- CARNA AI may delete an Account that has been inactive for 24 months after giving 30 days' notice by email.
10. Liability
To the fullest extent permitted by law, CARNA AI is not liable for indirect, incidental or consequential loss, or for any decision you take on the basis of Measurement Results, reports, chat answers or product suggestions. Nothing in these Terms excludes liability that cannot be excluded by law, including mandatory consumer rights in your country of residence.
11. Governing law and disputes
These Terms are governed by the laws of the United Arab Emirates (Dubai) unless mandatory consumer law of your country of residence provides otherwise. For Members in the Republic of Korea, the Korean Act on Promotion of Information and Communications Network Utilization, the Personal Information Protection Act and the E-Commerce Act apply where mandatory. Disputes are first addressed to partners@carna-ai.com; we aim to answer within 10 business days.
12. Contact
CARNA AI Holdings Global FZCO (Dubai, UAE) · CARNA AI Asia regional headquarters and branches in Korea, Japan, Malaysia, Vietnam, the Philippines, Indonesia, Taiwan and the UAE · partners@carna-ai.com
Consent to Collection and Use of Personal Information
CARNA AI Holdings Global FZCO and its regional branches ("CARNA AI") collect and use your personal information as described below. Please read carefully. You may refuse consent, but the items marked "required" are necessary to create an account; without them the Service cannot be provided.
1. Items collected
| Category | Items | When |
|---|
| Account (required) | Email address (login ID), password (stored hashed), name, mobile number with country code, country, preferred language | Sign-up |
| Corporate member (required) | Company name, position, business registration number, country, business email, business phone | Corporate sign-up |
| Verification | SMS / email verification codes (stored hashed, deleted after 5 minutes), time of verification | Sign-up, ID / password recovery, account deletion |
| Social sign-in (optional) | Provider name, provider user ID, email and display name supplied by the provider | When you choose social sign-in |
| HealthViewer Measurement Results (required for personal members) | Measurement date and time, device / venue, age range and sex as entered at the device, body-composition values (BIA), rPPG-derived values, AIQRM wellness indicator values and indices, generated wellness reports | When the mobile number entered at a HealthViewer matches your verified mobile number |
| AI MALL (required for purchases) | Delivery address, recipient name and phone, order history, payment status (payment card numbers are processed only by the payment provider and are not stored by CARNA AI) | Checkout |
| Inquiries and AI chat | Inquiry contents, chat questions and answers, time, language | When you submit an inquiry or use the AI chat |
| Automatically collected | IP address, approximate country / city from IP, device type, browser, operating system, pages visited, visit time, login history and count, cookies (session, language, "keep me logged in") | Every visit |
| Marketing (optional) | Consent status for news and offers | Sign-up / My Page |
2. Purposes of use
- Creating and managing your Account; identifying you and verifying your mobile number or email; preventing unauthorised use.
- Linking your HealthViewer kiosk and band Measurement Results with your Account and showing them on your member pages, and using the same Account information and (where you opt in) Measurement Results in AI MALL to present wellness programmes and products relevant to you.
- Processing, delivering and supporting AI MALL orders; handling returns and refunds; issuing receipts and tax documents.
- Answering purchase, partnership and support inquiries; operating the AI chat assistant.
- Service security, abuse prevention, error analysis, statistics and improvement of the Service (statistics are produced in a form that does not identify you).
- Sending service notices (account, order, security). Marketing news and offers are sent only with your separate optional consent, which you can withdraw at any time in My Page.
- Complying with legal obligations (tax, consumer protection, e-commerce record keeping).
3. Retention period
- Account information and Measurement Result links: until you delete your Account, then deleted without delay (within 5 days).
- Verification codes: 5 minutes. Verification logs and SMS / email delivery logs: 1 year.
- Inquiry and AI chat records: 1 year after the inquiry is closed, unless you delete your Account earlier.
- Access logs (IP, pages visited): 3 months, or longer where required by law (for example 3 months under the Korean Protection of Communications Secrets Act).
- AI MALL records kept by law after deletion: contract / withdrawal records 5 years; payment and supply records 5 years; consumer complaint and dispute records 3 years (Korean E-Commerce Act and equivalent laws of the destination country).
- Inactive accounts (no login for 24 months) are deleted after 30 days' notice.
4. Processing by service providers
To operate the Service we use the following processors, who process data only on our instructions: web hosting and database (Cafe24, Republic of Korea); SMS delivery (iwinv bizservice, Republic of Korea, for Korean numbers; Twilio Inc., USA, for international numbers); email delivery (Google Workspace / Gmail, USA); AI chat generation (OpenAI, USA — your chat questions, without your name or contact details, are sent to generate the answer); social sign-in providers you choose; payment providers and delivery carriers named in AI MALL at checkout; flag images (flagcdn.com) and fonts (Google Fonts) loaded by your browser. Some of these providers are located outside your country; data is transferred to them under their applicable data-protection terms.
5. Your rights
You may at any time view and correct your personal information in My Page, withdraw marketing consent, request a copy of your data, or delete your Account (My Page → Delete account, after SMS or email verification). You may also contact partners@carna-ai.com. Where local law provides additional rights (for example under the Korean Personal Information Protection Act, the UAE Personal Data Protection Law, the EU GDPR or the Japanese APPI), those rights apply. You may refuse consent; required items are necessary to provide the Service.
6. Security
Passwords are stored as salted hashes; verification codes are hashed and expire; connections use HTTPS; administrator access is restricted and logged; identifiers in links are encoded. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Children
The Service is not directed to children under 14 (or the higher age set by local law). We do not knowingly collect personal information from children without verifiable parental consent.
8. Data protection contact
CARNA AI Holdings Global FZCO, Dubai, UAE · Data protection contact: partners@carna-ai.com · Korean personal-information manager: CARNA AI Asia (Seoul), same address.
Consent to Provision of Personal Information to Third Parties
CARNA AI provides your personal information to the third parties listed below only for the purposes stated. This is separate from processing by our service providers (described in the Privacy consent), who act on our instructions. You may refuse this consent; however, the items marked "required" are necessary to display your Measurement Results or to deliver AI MALL orders.
| Recipient | Items provided | Purpose | Retention by recipient |
|---|
| CARNA AI regional branches and subsidiaries (CARNA AI Asia and the branches in Korea, Japan, Malaysia, Vietnam, the Philippines, Indonesia, Taiwan and the UAE) — required | Account information, Measurement Result links, inquiry contents, AI MALL order information | Operating the Service, HealthViewer and AI MALL in your region; local customer support and delivery | Same as CARNA AI (until account deletion or the statutory period) |
| HealthViewer partner venue where you were measured (hotel, clinic, wellness centre, pharmacy, corporate site or other operator) — required for personal members | Mobile number as entered at the device, Measurement Results and reports produced at that venue | Showing you your results at the venue, follow-up wellness programmes offered by that venue | According to the venue's own retention policy, at most 5 years from measurement |
| Partner sellers in AI MALL (named on the product page) — required for orders of their products | Recipient name, delivery address, phone number, ordered items | Fulfilment, delivery and after-sales service of the ordered products | Until the order and statutory record-keeping period (up to 5 years) are complete |
| Delivery carriers and customs brokers named at checkout — required for orders | Recipient name, address, phone number, parcel contents and value, customs ID where the destination country requires it | Shipping and customs clearance | Until delivery is complete and the carrier's statutory period |
| Payment providers named at checkout — required for orders | Order amount, order number, email, name (card details are entered directly with the provider) | Payment processing, fraud prevention, refunds | According to the provider's policy and financial regulations |
| Wellness programme partners you select (for example a nutrition or supplement programme offered by a partner brand) — optional, per programme | Name, email, mobile number, language, and the Measurement Results you choose to share | Providing the programme you enrolled in and personalised recommendations | Until you leave the programme or delete your Account |
| Public authorities, courts or regulators | Information required by a lawful order | Compliance with law | As required by law |
Some recipients are located outside your country (for example the UAE, Korea, Japan, Malaysia, Vietnam, the Philippines, Indonesia, Taiwan, Singapore or the United States). By giving this consent you agree to the transfer of your personal information to those countries for the purposes above. Recipients are bound by contract to use the information only for the stated purpose and to protect it in line with applicable law.
We do not sell your personal information. We do not provide Measurement Results to insurers, employers or advertisers. Marketing by partners is sent only if you separately opt in to that partner's programme.
You may withdraw this consent at any time by email to partners@carna-ai.com or by deleting your Account; withdrawal does not affect provision that took place before withdrawal, and orders already placed will still be fulfilled.