Privacy Policy

Publication Date: June 1, 2026 · Effective Date: June 1, 2026

1. Scope of Application

This Pophie Privacy Policy (the "Policy") applies to the Pophie smart devices, companion mobile application, and related cloud services provided by INSBOTICS TECHNOLOGY PTE. LTD. ("we," "us," or "our") (collectively, our "products or services").

This Policy applies to users in different countries and regions. For users in specific regions, including Mainland China, the United Kingdom, the European Economic Area, and the United States, we also provide corresponding regional addenda. In the event of any inconsistency between a regional addendum and this Policy, the applicable regional addendum shall prevail.

2. What Information We Process

In order to provide product functions, ensure the secure and stable operation of our services, improve the service experience, and fulfill applicable legal obligations, we may process the following information:

2.1 Account and Identity Information

Mobile phone number
Email address
Identifier of a third-party login account
Nickname, profile photo, and other account information voluntarily submitted by you

2.2 Device and Connection Information

Device identification information, such as device ID and serial number (SN)
Hardware version, software version, and firmware version
Network connection status and IP address
Local binding data and local cache data, such as Bluetooth pairing information, Wi-Fi provisioning records, login status or authentication information, and cached device status

2.3 Log and Diagnostic Information

Operation logs
Error information
Fault diagnosis data
Technical logs relating to service stability and security

2.4 Interactive Content and Generated Content

In order to enable interactive capabilities, generate diary content, and provide related services, we may process the necessary information generated during your interaction with the device.

From a hardware perspective, Pophie is equipped with a camera, microphone, and related sensing capabilities for touch interaction and motion perception in order to provide functions such as image perception, voice interaction, touch interaction, and motion perception.

On this basis, we may process:

Voice content or audio signals
Image content
Text instructions
Interaction records
Diary content and the necessary generated results related thereto

Please note in particular that:

Users may view generated diary content within the App;
Interactive content relating to diary generation will be retained to the extent necessary to support diary generation and related services;
Generated diary content will continue to be retained until you actively delete it, so that you may view and use it within the App;
We will not authorize any third party to use your voice, photos, interactive content, diary content, or other personal content to train its general-purpose artificial intelligence models;
We will not make your personal content available for viewing by other users without authorization.

3. How We Use This Information

We may use the above information for the following purposes:

Account registration, login, and identity verification
Device binding, Bluetooth connection, network configuration, firmware upgrades, status monitoring, and the operation of basic services
Voice interaction, image processing, diary generation, and optimization of the interactive experience
Security protection, anomaly detection, risk control, and troubleshooting
Customer service, after-sales support, and service notifications
Statistical analysis, performance assessment, and service optimization
Fulfillment of applicable legal obligations

4. Permission Requests

To enable different functions, we may request the following system permissions from you:

Bluetooth permission: used for device discovery, binding, connection, and communication
Location permission: used for location capabilities required for device connection, network provisioning, and related functions
Photo album permission: used when you voluntarily upload a profile photo or select an image from your photo album
Notification permission: used to send you notifications such as diary reminders

You may disable the relevant permissions through your device or system settings. If the relevant permissions are disabled, we will be unable to continue providing the functions or services corresponding to such permissions, but this will not affect other basic functions that do not rely on such permissions.

5. Automated Processing and Artificial Intelligence Capabilities

We may use automated tools, algorithmic models, or rule engines to support diary content generation and the generation of images associated with diaries.

In the foregoing processing activities, we may rely on technical capabilities provided by third parties to provide the relevant content-generation services.

Unless otherwise permitted by applicable law or otherwise expressly notified to you by us, we will not make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you.

6. Third-Party Services

In order to provide relevant functions, we may integrate necessary third-party services, SDKs, cloud infrastructure, or platform capabilities. Such third-party services may include third-party login services, cloud infrastructure services, statistical analysis services, map and location services, and other technical support capabilities necessary to provide our products or services.

Where a third party processes your information as an independent processor or independent service provider, its processing activities shall be governed by its own privacy policy or terms of service. Where a third party processes information on our behalf, we will require it, through contractual arrangements, management requirements, or other appropriate measures, to process the relevant information in accordance with applicable law, contractual obligations, and reasonable security standards.

7. Sharing, Transfer, and Public Disclosure

7.1 Sharing

We will share your personal information only under the following circumstances:

To provide service functions such as login, push notifications, location, statistical analysis, cloud storage, or content delivery, we share necessary information with third-party service providers on a need-to-know basis;
To support product development, system maintenance, customer service, technical support, and security protection, we share necessary information with relevant service providers within the necessary scope;
Where we have obtained your explicit consent;
Where sharing is required by applicable law, regulatory requirements, or judicial procedures.

7.2 Transfer

Unless we obtain your explicit consent or applicable law otherwise requires, we will not transfer your personal information to any other company, organization, or individual.

7.3 Public Disclosure

We will publicly disclose your personal information only under the following circumstances:

Where we have obtained your explicit consent;
Where disclosure is mandatory under applicable law, judicial procedures, or requests from competent authorities;
Where disclosure is necessary, within the scope permitted by law, to protect the life, property, or safety of you, other users, or the public.

8. Storage Location and Cross-Border Processing

The cloud infrastructure on which our products or services currently rely is primarily deployed on Alibaba Cloud infrastructure located in the United States. Accordingly, your personal information may be stored in the United States and may be accessed or processed to the extent necessary for service provision, security maintenance, troubleshooting, backup restoration, or technical support.

Where we store, access, or process your personal information outside your jurisdiction, we will take corresponding protective measures in accordance with applicable law, such as access controls, encryption, the principle of minimum necessity, contractual restrictions, and other data protection mechanisms recognized by applicable law.

Where required by applicable law, we will provide you with further information regarding the relevant cross-border processing and, where necessary, obtain your corresponding consent or fulfill other statutory obligations.

9. Retention Period

We retain your personal information only for the shortest period necessary to achieve the relevant purposes and will delete or anonymize it after the retention period expires, in accordance with applicable law.

Under normal circumstances:

Account information: retained for the period necessary to achieve account management and service provision. After you delete your account, we will delete or anonymize the relevant personal information within a reasonable period in accordance with applicable law, unless otherwise provided by laws or regulations.
Diary content: retained until you actively delete it, so that you may view and use the relevant content within the App. After you delete a diary or delete your account, we will delete or anonymize the relevant information in accordance with applicable law.
Raw operation logs: retained for the period necessary to ensure security, conduct troubleshooting, and maintain stable service operation, and deleted or anonymized once such period is no longer necessary.
Backup data: retained for the necessary period in accordance with the system backup strategy and deleted, updated, or otherwise appropriately handled when overwritten by backup cycles or no longer needed.

10. Security Measures

We take reasonable and practicable security measures to protect your personal information, including but not limited to:

Adopting encryption measures during transmission and storage;
Implementing access controls, hierarchical permission management, and the principle of minimum necessity;
Applying necessary security management measures to logs, diagnostic data, and content data;
Imposing confidentiality and access-restriction requirements on employees and partners;
Establishing a security incident response mechanism and taking remedial measures in a timely manner in the event of a security incident.

11. Your Rights

Subject to applicable law, you may exercise relevant rights through the App or through the contact details set out in this Policy. We will process your request after verifying your identity.

Under normal circumstances, you may have the following rights:

Access, review, and manage account information
Correct inaccurate information
Delete diaries or related content
Withdraw permission authorizations
Unbind devices
Delete your account
Submit complaints, inquiries, and rights requests

Users in different regions may enjoy additional rights. Please refer to the applicable regional addendum for details.

12. Minors

Our products and services are primarily intended for adults. If a minor uses our products or services, the minor's parent or guardian shall review this Policy together with the minor, and the minor shall use the products or services only after obtaining the parent or guardian's consent.

For standards concerning children or minors in different countries or regions and the requirements for guardian consent, we will provide further explanations in the applicable regional addenda.

13. Policy Updates

As our business develops, functions are adjusted, or applicable requirements change, we may update this Policy.

If this Policy is updated, we will notify you through in-App pop-ups, page notices, or other reasonable means. For changes that may have a material impact on your rights and obligations, we will provide more prominent notice.

14. How to Contact Us

If you have any questions, comments, or suggestions regarding this Policy, or if you need to exercise rights relating to personal information, lodge a complaint, or provide feedback, please contact us through the following methods:

Data controller / operating entity: INSBOTICS TECHNOLOGY PTE. LTD.
Place of registration: Singapore
Email of the person responsible for personal information protection: support@pophie.com
Channel for rights requests and privacy inquiries: support@pophie.com

Under normal circumstances, we will respond to your request within 15 business days.

Regional Addenda

Depending on your region, you may also review the following addenda:

Mainland China Addendum

This Addendum forms part of the Pophie Privacy Policy, applies to users located in Mainland China, and shall be read together with the Pophie Privacy Policy. In the event of any inconsistency between this Addendum and the Pophie Privacy Policy, this Addendum shall prevail.

1. Applicable Laws and Processing Principles

For users located in Mainland China, we will process your personal information in accordance with the Personal Information Protection Law of the People's Republic of China, the Cybersecurity Law of the People's Republic of China, the Data Security Law of the People's Republic of China, and other applicable laws and regulations.

We adhere to the principles of lawfulness, legitimacy, necessity, and minimum necessity in processing your personal information, and we apply heightened protection standards when processing sensitive personal information, minors' personal information, cross-border transfers, and similar matters.

2. Sensitive Personal Information

In light of the characteristics of the product, the information we process may involve sensitive personal information, including but not limited to:

Voice content
Image content
Personal information of minors
Other sensitive personal information as defined under applicable law

Before processing sensitive personal information, we will fulfill our notification obligations as required by applicable law and, where necessary, obtain your separate consent.

3. Cross-Border Transfer and Overseas Storage

Based on the current service architecture, the cloud infrastructure on which our products or services rely is primarily deployed on Alibaba Cloud infrastructure located in the United States. Relevant personal information may therefore be stored in the United States and may be accessed or processed to the extent necessary for service provision, backup restoration, troubleshooting, or technical support.

For users in Mainland China, where cross-border transfer, cross-border access, or overseas storage of personal information occurs, we will take corresponding protective measures in accordance with applicable law, including, for example:

Conducting personal information protection impact assessments within the necessary scope
Adopting security measures such as encryption, access controls, and permission isolation
Establishing necessary contractual and management mechanisms with recipients as required by applicable law
Obtaining your separate consent or fulfilling other statutory obligations where required by applicable law

During diary content generation and the generation of related images, relevant necessary information may also be processed by overseas third-party technical service providers to the extent necessary to provide the services.

For such cross-border processing activities, we will take corresponding protective measures in accordance with applicable law and, where required by applicable law, fulfill notification obligations, obtain separate consent, or fulfill other statutory obligations.

4. Third-Party Services and Information Sharing

To provide relevant functions, we may integrate third-party login services, cloud infrastructure services, statistical analysis services, map and location services, and other necessary technical support capabilities.

For details regarding specific third-party services, SDKs, processing purposes, processing methods, and categories of personal information, please refer to the Pophie Third-Party SDK and Information Sharing List.

Where required by applicable law, we will also provide further explanations through in-product lists, authorization prompts, or other means.

5. Deletion, Account Deletion, and Retention Period

For users in Mainland China, upon fulfillment of the processing purpose, expiration of the retention period, your active deletion, deletion of your account, or other circumstances required by applicable law, we will delete or anonymize the relevant personal information, unless otherwise provided by laws or regulations.

Under normal circumstances:

Account information: retained for the period necessary to achieve account management and service provision. After you delete your account, we will delete or anonymize the relevant personal information within a reasonable period in accordance with applicable law, unless otherwise provided by laws or regulations.
Diary content: retained until you actively delete it, so that you may view and use the relevant content within the App. After you delete a diary or delete your account, we will delete or anonymize the relevant information in accordance with applicable law.
Raw operation logs: retained for the period necessary to ensure security, conduct troubleshooting, and maintain stable service operation, and deleted or anonymized once such period is no longer necessary.
Backup data: retained for the necessary period in accordance with the system backup strategy and deleted, updated, or otherwise appropriately handled when overwritten by backup cycles or no longer needed.

6. Protection of Minors

Our products and services are primarily intended for adults. If a minor uses our products or services, the minor's guardian shall accompany the minor in reading the relevant policies, and the minor shall use the products or services only after obtaining the guardian's consent.

If we discover that a minor's personal information has been collected without obtaining appropriate guardian consent, we will promptly take deletion measures or other appropriate handling measures.

Where we knowingly process the personal information of a minor under the age of fourteen, we will obtain the guardian's separate consent in accordance with applicable law and adopt stricter protective measures.

7. Rights You May Enjoy in Mainland China

Under applicable law, you may generally exercise the following rights:

Access and copy your personal information
Correct and supplement your personal information
Delete your personal information
Withdraw consent
Delete your account
Request an explanation of this Addendum or the Pophie Privacy Policy

If you wish to exercise the relevant rights, you may contact us through the contact details set out in the Pophie Privacy Policy.

U.K. and EEA Addendum

This Addendum forms part of the Pophie Privacy Policy, applies to users located in the United Kingdom and the European Economic Area, and shall be read together with the Pophie Privacy Policy. In the event of any inconsistency between this Addendum and the Pophie Privacy Policy, this Addendum shall prevail.

1. Legal Bases for Processing

For users located in the United Kingdom and the European Economic Area, we generally process your personal data on the following legal bases:

Necessity for the performance of a contract with you or for the provision of services to you, for example, completing account registration and login, device binding, connection and network provisioning, diary generation, synchronization of service status, and maintenance of core service operations
Your consent, for example, for optional permissions, access to your photo album, optional notifications, or the processing of certain sensitive data where required by applicable law
Our legitimate interests, for example, to protect the security of our products and services, conduct troubleshooting, improve the service experience, carry out limited statistical analysis, and prevent fraud and abuse, provided that such interests do not improperly override your rights and freedoms
Compliance with legal obligations, for example, to fulfill compliance, record-keeping, regulatory cooperation, and security incident reporting obligations under applicable law

2. International Transfers

Based on the current service architecture, the cloud infrastructure on which our products or services rely is primarily deployed on Alibaba Cloud infrastructure located in the United States. Your personal data may therefore be transferred to, stored in, or otherwise processed in countries or regions outside the United Kingdom or the European Economic Area, including the United States.

In addition, during diary content generation and the generation of related images, relevant necessary information may also be processed by overseas third-party technical service providers to the extent necessary to provide the services.

Where such international transfers occur, we will implement appropriate safeguards in accordance with applicable law, such as:

Encryption, access controls, and the principle of minimum necessity
Contractual safeguard mechanisms with relevant recipients
Use of data transfer mechanisms recognized by applicable law in appropriate circumstances

Where required by applicable law, we will provide further information regarding the specific safeguards applicable to the relevant international transfers.

3. Automated Processing

We may use automated tools, algorithmic models, or rule engines to support diary content generation and the generation of images associated with diaries.

In the foregoing processing activities, we may rely on technical capabilities provided by third parties to provide the relevant content-generation services.

4. Your Additional Rights

Under applicable law, you may also have one or more of the following rights:

To obtain a copy of your personal data held by us
To rectify inaccurate or incomplete personal data
To erase personal data, or in certain circumstances, to request restriction of processing
To object to certain processing activities based on legitimate interests
To request data portability where applicable
To withdraw consent previously given by you
To lodge a complaint with the competent data protection supervisory authority in your country or region

5. Children and Minors

Our products and services are primarily intended for adults. If a minor uses our products or services, the minor's parent or guardian shall assist in reading the relevant policies, and appropriate consent shall be obtained where necessary.

With respect to age thresholds for children or minors and guardian-consent mechanisms, we will adopt corresponding protective measures in accordance with the applicable laws of the United Kingdom or the European Economic Area and obtain appropriate consent where necessary.

6. Contact and Complaints

If you have any questions, comments, or complaints regarding the way we process your personal data, you may contact us through the contact details set out in the Pophie Privacy Policy.

If you believe that our processing activities do not comply with applicable data protection laws in the United Kingdom or the European Economic Area, you have the right to lodge a complaint with the competent data protection supervisory authority in your country or region.

Where applicable law requires us to designate a UK representative, an EU representative, or provide additional contact information, we will further disclose the relevant information in accordance with applicable law.

U.S. Addendum

This Addendum forms part of the Pophie Privacy Policy, applies to users located in the United States, and shall be read together with the Pophie Privacy Policy. In the event of any inconsistency between this Addendum and the Pophie Privacy Policy, this Addendum shall prevail.

1. Scope of Application

Depending on your state of residence and applicable law, you may be entitled to additional privacy rights. This Addendum provides supplemental disclosures for users in the United States.

2. Categories of Information We Collect

In conjunction with the Pophie Privacy Policy and this Addendum, we may collect or process the following categories of information:

Identifiers and account information
Device and network information
Log and diagnostic information
Interactive content, generated content, and media content
Location or geolocation-related information
Information relating to customer support, feedback, or service operations

We generally use such information to provide services, maintain security, conduct troubleshooting, improve the service experience, perform statistical analysis, and fulfill legal obligations.

3. Sale, Sharing, and Targeted Advertising

We do not sell your personal information.
We do not use your personal information for commercial profiling or targeted advertising unrelated to the current services.
We do not use your information for purposes unrelated to the original purpose without authorization.

If our business model changes in the future, we will update the privacy policy in accordance with applicable law and provide any required choice or opt-out mechanisms.

4. Third-Party Services and Categories of Recipients

We may disclose necessary information to the following categories of recipients:

Cloud infrastructure and technical service providers
Third-party login service providers
Statistical analysis service providers
Map, geolocation, or location-capability service providers
Relevant parties for security, compliance, legal, or regulatory purposes

5. Rights You May Enjoy in the United States

Depending on your state of residence and applicable law, you may have one or more of the following rights:

To know the categories of personal information we collect, use, and disclose
To request access to your personal information
To request deletion of your personal information
To request correction of inaccurate personal information
To request a copy of your personal information
Where applicable, to opt out of certain types of data processing activities
To submit requests through an authorized agent, where permitted by applicable law
To appeal or request review of our refusal to take action, where required by applicable law

6. Non-Discrimination Commitment

Where you lawfully exercise your privacy rights, we will not unlawfully discriminate against you for making a privacy rights request.

7. Contact and Appeals

If you wish to exercise relevant rights, submit a privacy request, or lodge a complaint, you may contact us through the contact details set out in the Pophie Privacy Policy.

If applicable law requires us to provide state-law appeal channels, authorized-agent mechanisms, or more specific state-level supplemental disclosures, we will further disclose the relevant information in accordance with applicable law.

Third-Party SDK and Data Sharing List

This List sets out the basic information relating to third-party SDKs, third-party services, and third-party technical capabilities that may be integrated into Pophie products or services in Mainland China. The specific integrations may vary depending on the product version, functional module, or user scenario. If any relevant third-party service is adjusted, we will update this List accordingly.

Third Party Name	Purpose of Use	Types of Personal Information That May Be Processed	Usage Scenario
WeChat	Enables users to log in with a WeChat account or link an account	Third-party account identifier, nickname, profile photo, and information necessary for the login process	When a user actively chooses to log in or link an account through WeChat
AMap	Enables location, network provisioning, and other location-related functions	Location information, device information, network information, and information necessary to provide the relevant functions	Device connection, network provisioning, and location-related functions
Sensors Analytics	Supports data analytics, performance analysis, exception analysis, and service optimization	Device information, log information, usage information, and information necessary for statistical analysis	Data analytics, performance analysis, and service optimization
Alibaba Cloud	Provides cloud storage, computing, content delivery, backup restoration, and related infrastructure capabilities	Account information, device information, log information, diary content, and other information necessary to provide the services	Operation of cloud services, data storage, backup restoration, and technical support

Notes

We integrate relevant third-party services only to the extent necessary to provide the corresponding functions or services.
Where a third party processes personal information independently, such processing shall be governed by that third party's privacy policy or terms of service.
Where we entrust a third party to process personal information on our behalf, we require it, through contractual arrangements, management requirements, or other appropriate measures, to process the relevant information in accordance with applicable law, contractual obligations, and reasonable security standards.
Where required by applicable law, we will further disclose the third party's name, processing purpose, processing method, and categories of personal information through in-product pop-ups, authorization prompts, privacy policies, or other appropriate means.

Website Cookies and Your California Privacy Rights

This section applies to your use of our website (pophie.com) and its associated subdomains.

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you the right to opt out of the "sale" or "sharing" of your personal information, including sharing for cross-context behavioral advertising.

Cookies and Advertising Technologies

We use cookies and similar technologies on our website, including Google Ads and Google Tag Manager (advertising and measurement) and Meta Pixel (advertising). Sharing information with these advertising partners may be considered "sharing" under California law. We also use first-party analytics to understand how our website is used.

How to Opt Out

You can opt out at any time by clicking the Do Not Sell or Share My Personal Information link (also available in the footer of every page) and saving your preference. We also honor the Global Privacy Control (GPC) browser signal as a valid opt-out request.

We do not knowingly sell or share the personal information of consumers under 16 years of age.