Privacy Policy

1. Scope of Application

This Pophie Privacy Policy (the "Policy") applies to the Pophie smart devices, companion mobile application, related cloud services, and our website and online store (pophie.com and its subdomains, including checkout, community, and account) provided by INSBOTICS TECHNOLOGY PTE. LTD. ("we," "us," or "our") (collectively, our "products or services").

This Policy applies to users in different countries and regions. For users in specific regions, including Mainland China, the United Kingdom, the European Economic Area, and the United States, we also provide corresponding regional addenda. In the event of any inconsistency between a regional addendum and this Policy, the applicable regional addendum shall prevail.

2. What Information We Process

In order to provide product functions, ensure the secure and stable operation of our services, improve the service experience, and fulfill applicable legal obligations, we may process the following information:

2.1 Account and Identity Information

• Mobile phone number
• Email address
• Identifier of a third-party login account
• Nickname, profile photo, and other account information voluntarily submitted by you

2.2 Device and Connection Information

• Device identification information, such as device ID and serial number (SN)
• Hardware version, software version, and firmware version
• Network connection status and IP address
• Local binding data and local cache data, such as Bluetooth pairing information, Wi-Fi provisioning records, login status or authentication information, and cached device status

2.3 Log and Diagnostic Information

• Operation logs
• Error information
• Fault diagnosis data
• Technical logs relating to service stability and security

2.4 Interactive Content and Generated Content

In order to enable interactive capabilities, generate letter content, and provide related services, we may process the necessary information generated during your interaction with the device.

From a hardware perspective, Pophie is equipped with a camera, microphone, and related sensing capabilities for touch interaction and motion perception in order to provide functions such as image perception, voice interaction, touch interaction, and motion perception.

On this basis, we may process:

• Voice content or audio signals
• Image content
• Text instructions
• Interaction records
• Letter content and the necessary generated results related thereto

Please note in particular that:

• Users may view generated letter content within the App;
• Interactive content relating to letter generation will be retained to the extent necessary to support letter generation and related services;
• Generated letter content will continue to be retained until you actively delete it, so that you may view and use it within the App;
• We will not authorize any third party to use your voice, photos, interactive content, letter content, or other personal content to train its general-purpose artificial intelligence models;
• We will not make your personal content available for viewing by other users without authorization.

3. How We Use This Information

We may use the above information for the following purposes:

• Account registration, login, and identity verification
• Device binding, Bluetooth connection, network configuration, firmware upgrades, status monitoring, and the operation of basic services
• Voice interaction, image processing, letter generation, and optimization of the interactive experience
• Security protection, anomaly detection, risk control, and troubleshooting
• Customer service, after-sales support, and service notifications
• Statistical analysis, performance assessment, and service optimization
• Fulfillment of applicable legal obligations

4. Permission Requests

To enable different functions, we may request the following system permissions from you:

• Bluetooth permission: used for device discovery, binding, connection, and communication
• Location permission: used for location capabilities required for device connection, network provisioning, and related functions
• Photo album permission: used when you voluntarily upload a profile photo or select an image from your photo album
• Notification permission: used to send you notifications such as letter reminders

You may disable the relevant permissions through your device or system settings. If the relevant permissions are disabled, we will be unable to continue providing the functions or services corresponding to such permissions, but this will not affect other basic functions that do not rely on such permissions.

5. Automated Processing and Artificial Intelligence Capabilities

We may use automated tools, algorithmic models, or rule engines to support letter content generation and the generation of images associated with letters.

In the foregoing processing activities, we may rely on technical capabilities provided by third parties to provide the relevant content-generation services.

Unless otherwise permitted by applicable law or otherwise expressly notified to you by us, we will not make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you.

6. Third-Party Services

In order to provide relevant functions, we may integrate necessary third-party services, SDKs, cloud infrastructure, or platform capabilities. Such third-party services may include third-party login services, cloud infrastructure services, statistical analysis services, map and location services, and other technical support capabilities necessary to provide our products or services.

Where a third party processes your information as an independent processor or independent service provider, its processing activities shall be governed by its own privacy policy or terms of service. Where a third party processes information on our behalf, we will require it, through contractual arrangements, management requirements, or other appropriate measures, to process the relevant information in accordance with applicable law, contractual obligations, and reasonable security standards.

7. Sharing, Transfer, and Public Disclosure

7.1 Sharing

We will share your personal information only under the following circumstances:

• To provide service functions such as login, push notifications, location, statistical analysis, cloud storage, or content delivery, we share necessary information with third-party service providers on a need-to-know basis;
• To support product development, system maintenance, customer service, technical support, and security protection, we share necessary information with relevant service providers within the necessary scope;
• Where we have obtained your explicit consent;
• Where sharing is required by applicable law, regulatory requirements, or judicial procedures.

7.2 Transfer

Unless we obtain your explicit consent or applicable law otherwise requires, we will not transfer your personal information to any other company, organization, or individual.

7.3 Public Disclosure

We will publicly disclose your personal information only under the following circumstances:

• Where we have obtained your explicit consent;
• Where disclosure is mandatory under applicable law, judicial procedures, or requests from competent authorities;
• Where disclosure is necessary, within the scope permitted by law, to protect the life, property, or safety of you, other users, or the public.

8. Storage Location and Cross-Border Processing

The cloud infrastructure on which our products or services currently rely is primarily deployed on cloud infrastructure located in the United States. Accordingly, your personal information may be stored in the United States and may be accessed or processed to the extent necessary for service provision, security maintenance, troubleshooting, backup restoration, or technical support.

Where we store, access, or process your personal information outside your jurisdiction, we will take corresponding protective measures in accordance with applicable law, such as access controls, encryption, the principle of minimum necessity, contractual restrictions, and other data protection mechanisms recognized by applicable law.

Where required by applicable law, we will provide you with further information regarding the relevant cross-border processing and, where necessary, obtain your corresponding consent or fulfill other statutory obligations.

9. Retention Period

We retain your personal information only for the shortest period necessary to achieve the relevant purposes and will delete or anonymize it after the retention period expires, in accordance with applicable law.

Under normal circumstances:

• Account information: retained for the period necessary to achieve account management and service provision. After you delete your account, we will delete or anonymize the relevant personal information within a reasonable period in accordance with applicable law, unless otherwise provided by laws or regulations.
• Letter content: retained until you actively delete it, so that you may view and use the relevant content within the App. After you delete a letter or delete your account, we will delete or anonymize the relevant information in accordance with applicable law.
• Raw operation logs: retained for the period necessary to ensure security, conduct troubleshooting, and maintain stable service operation, and deleted or anonymized once such period is no longer necessary.
• Backup data: retained for the necessary period in accordance with the system backup strategy and deleted, updated, or otherwise appropriately handled when overwritten by backup cycles or no longer needed.

10. Security Measures

We take reasonable and practicable security measures to protect your personal information, including but not limited to:

• Adopting encryption measures during transmission and storage;
• Implementing access controls, hierarchical permission management, and the principle of minimum necessity;
• Applying necessary security management measures to logs, diagnostic data, and content data;
• Imposing confidentiality and access-restriction requirements on employees and partners;
• Establishing a security incident response mechanism and taking remedial measures in a timely manner in the event of a security incident.

11. Your Rights

Subject to applicable law, you may exercise relevant rights through the App or through the contact details set out in this Policy. We will process your request after verifying your identity.

Under normal circumstances, you may have the following rights:

• Access, review, and manage account information
• Correct inaccurate information
• Delete letters or related content
• Withdraw permission authorizations
• Unbind devices
• Delete your account
• Submit complaints, inquiries, and rights requests

Users in different regions may enjoy additional rights. Please refer to the applicable regional addendum for details.

12. Minors

Our products and services are primarily intended for adults. If a minor uses our products or services, the minor's parent or guardian shall review this Policy together with the minor, and the minor shall use the products or services only after obtaining the parent or guardian's consent.

For standards concerning children or minors in different countries or regions and the requirements for guardian consent, we will provide further explanations in the applicable regional addenda.

13. Policy Updates

As our business develops, functions are adjusted, or applicable requirements change, we may update this Policy.

If this Policy is updated, we will notify you through in-App pop-ups, page notices, or other reasonable means. For changes that may have a material impact on your rights and obligations, we will provide more prominent notice.

14. How to Contact Us

If you have any questions, comments, or suggestions regarding this Policy, or if you need to exercise rights relating to personal information, lodge a complaint, or provide feedback, please contact us through the following methods:

• Data controller / operating entity: INSBOTICS TECHNOLOGY PTE. LTD.
• Place of registration: Singapore
• Email of the person responsible for personal information protection: support@pophie.com
• Channel for rights requests and privacy inquiries: support@pophie.com

Under normal circumstances, we will respond to your request within 15 business days.

15. Website, Online Store, Community, and Support

This section applies to your use of our website and its associated subdomains — including our online store and checkout, your web account, our community forum, and our support chat. It supplements the sections above, which focus on the Pophie device and companion app.

15.1 Information We Collect Through the Website

• Account and contact information — email address, name, and, where you provide it, phone number, used to create and manage your web account and to communicate with you.
• Order and delivery information — the products you order, order number and value, shipping and billing address, recipient name and phone number, and the payment method used. Card and payment credentials are collected and processed directly by Shopify checkout and our payment providers; we do not store full card numbers. This also includes orders imported from our Kickstarter campaign.
• Device, connection, and identifiers — IP address, browser and device type, user agent, and cookie or local-storage identifiers such as a first-party visitor ID used for analytics.
• Approximate location — country, region, and city inferred from your IP address, used for localization, tax and shipping eligibility, and analytics.
• Marketing and analytics information — how you reach and move through our site, including referral and campaign parameters (UTM), advertising click identifiers, pages viewed, time on page, and email engagement (such as opens and clicks). We may associate these signals with your email address or account.
• Content you submit — posts, profile details, and activity in our community forum; messages and contact details you provide in support chat; and product feedback you send us, including any attachments and the related device serial number.

15.2 How We Use This Information

We use the information above to:

• Operate the online store, process and fulfill your orders, arrange shipping and returns, and provide order history and after-sales support;
• Create and secure your web account, verify your identity at sign-in (including sign-in with Google), and let you manage your profile, linked email addresses, devices, and orders;
• Send you service messages and, where permitted, marketing emails you can unsubscribe from at any time;
• Measure and improve our website and marketing, including analytics, attribution, conversion measurement, and advertising and remarketing on platforms such as Google and Meta;
• Operate our community forum and support chat, and respond to your questions and feedback;
• Prevent fraud and abuse, maintain security, and comply with legal, tax, and accounting obligations.

For users in the United Kingdom and the European Economic Area, our legal bases are: performance of a contract (operating the store, checkout, account, and support you request); your consent (non-essential cookies, advertising and remarketing, and optional marketing emails); our legitimate interests (analytics, measurement, security, and fraud prevention, balanced against your rights); and compliance with legal obligations (for example, retaining transaction records). You may withdraw consent at any time.

15.3 Cookies, Analytics, and Advertising

We use cookies and similar technologies on our website. Where the law requires it, we ask for your consent before setting non-essential cookies, through our consent banner, and we honor the Global Privacy Control (GPC) signal.

• Essential — sign-in session, consent state, and language preference; required for the site to function.
• Analytics — a first-party visitor identifier and Google Analytics, used to understand how our site is used. Some analytics and measurement events are also sent from our servers.
• Advertising — Google Ads and Google Tag Manager, and the Meta Pixel, used for advertising and measurement. We also send conversion and event data from our servers to Google and Meta, including a hashed (pseudonymized) version of your email address and your IP address for ad measurement and matching.

Sharing information with these advertising partners may be considered a "sale" or "sharing" under California law. You can opt out at any time using the Do Not Sell or Share My Personal Information link (also in the footer of every page), and we honor GPC as a valid opt-out request. We do not knowingly sell or share the personal information of consumers under 16 years of age.

15.4 Third Parties We Work With on the Website

To provide the website, store, community, and support, we share the necessary information with the following categories of service providers. Where a provider acts on our behalf, it is bound by contract to protect your information; where it acts as an independent controller, its own privacy policy applies.

We do not authorize these partners to use your personal content to train their general-purpose artificial intelligence models.

Content you post in public areas of our community forum is visible to other users and may be indexed by search engines. The license you grant us for content you submit, and the rules for participating, are set out in our Terms of Service and community guidelines.

15.5 International Transfers

Our website infrastructure and service providers are located primarily in the United States, and your personal information may be transferred to, stored in, or processed there and in other countries where our providers operate. Where we transfer your personal information across borders, we apply appropriate safeguards recognized by applicable law, such as encryption, access controls, the principle of minimum necessity, and contractual protections with the recipients.

15.6 How Long We Keep It

• Order and transaction records — retained for as long as needed to fulfill your order and support after-sales service, and to meet tax, accounting, and legal obligations (which for transaction records is generally 5–10 years, depending on your jurisdiction).
• Account information — retained while your account is active; deleted or anonymized after account deletion, subject to law.
• Marketing data — retained until you unsubscribe or object, after which we stop marketing to you.
• Analytics and advertising data — retained for a limited period and then deleted or aggregated / anonymized.
• Forum and support content — retained until you or we delete it, subject to law and community rules.

15.7 Your Choices and Rights on the Website

• Marketing — unsubscribe from any marketing email using the link in the email.
• Cookies and advertising — change your cookie choices in the consent banner, use the "Do Not Sell or Share My Personal Information" link, or enable GPC in your browser.
• Your account — access, correct, or delete your profile, linked emails, and account from within your web account.
• Data rights — depending on your region, you may request access, correction, deletion, a copy, restriction, objection, or portability, and may lodge a complaint with your supervisory authority. The regional addenda below set out these rights in more detail for your region.
• Contact — to exercise any right, email support@pophie.com.

15.8 Children

Our website and online store are intended for adults. We do not knowingly collect personal information from children under 16 (or under 13 where 13 is the minimum age under applicable law, such as the U.S. Children's Online Privacy Protection Act); if we learn that we have, we will delete it promptly. The Pophie device is set up and controlled by an adult account holder. If you allow a child to interact with the device, you do so as the child's parent or guardian and are responsible for providing any consent required for the resulting processing.

Regional Addenda

Depending on your region, you may also review the following addenda:

Mainland China Addendum+

This Addendum forms part of the Pophie Privacy Policy, applies to users located in Mainland China, and shall be read together with the Pophie Privacy Policy. In the event of any inconsistency between this Addendum and the Pophie Privacy Policy, this Addendum shall prevail.

1. Applicable Laws and Processing Principles

For users located in Mainland China, we will process your personal information in accordance with the Personal Information Protection Law of the People's Republic of China, the Cybersecurity Law of the People's Republic of China, the Data Security Law of the People's Republic of China, and other applicable laws and regulations.

We adhere to the principles of lawfulness, legitimacy, necessity, and minimum necessity in processing your personal information, and we apply heightened protection standards when processing sensitive personal information, minors' personal information, cross-border transfers, and similar matters.

2. Sensitive Personal Information

In light of the characteristics of the product, the information we process may involve sensitive personal information, including but not limited to:

• Voice content
• Image content
• Personal information of minors
• Other sensitive personal information as defined under applicable law

Before processing sensitive personal information, we will fulfill our notification obligations as required by applicable law and, where necessary, obtain your separate consent.

3. Cross-Border Transfer and Overseas Storage

Based on the current service architecture, the cloud infrastructure on which our products or services rely is primarily deployed on cloud infrastructure located in the United States. Relevant personal information may therefore be stored in the United States and may be accessed or processed to the extent necessary for service provision, backup restoration, troubleshooting, or technical support.

For users in Mainland China, where cross-border transfer, cross-border access, or overseas storage of personal information occurs, we will take corresponding protective measures in accordance with applicable law, including, for example:

• Conducting personal information protection impact assessments within the necessary scope
• Adopting security measures such as encryption, access controls, and permission isolation
• Establishing necessary contractual and management mechanisms with recipients as required by applicable law
• Obtaining your separate consent or fulfilling other statutory obligations where required by applicable law

During letter content generation and the generation of related images, relevant necessary information may also be processed by overseas third-party technical service providers to the extent necessary to provide the services.

For such cross-border processing activities, we will take corresponding protective measures in accordance with applicable law and, where required by applicable law, fulfill notification obligations, obtain separate consent, or fulfill other statutory obligations.

4. Third-Party Services and Information Sharing

To provide relevant functions, we may integrate third-party login services, cloud infrastructure services, statistical analysis services, map and location services, and other necessary technical support capabilities.

For details regarding specific third-party services, SDKs, processing purposes, processing methods, and categories of personal information, please refer to the Pophie Third-Party SDK and Information Sharing List.

Where required by applicable law, we will also provide further explanations through in-product lists, authorization prompts, or other means.

5. Deletion, Account Deletion, and Retention Period

For users in Mainland China, upon fulfillment of the processing purpose, expiration of the retention period, your active deletion, deletion of your account, or other circumstances required by applicable law, we will delete or anonymize the relevant personal information, unless otherwise provided by laws or regulations.

Under normal circumstances:

• Account information: retained for the period necessary to achieve account management and service provision. After you delete your account, we will delete or anonymize the relevant personal information within a reasonable period in accordance with applicable law, unless otherwise provided by laws or regulations.
• Letter content: retained until you actively delete it, so that you may view and use the relevant content within the App. After you delete a letter or delete your account, we will delete or anonymize the relevant information in accordance with applicable law.
• Raw operation logs: retained for the period necessary to ensure security, conduct troubleshooting, and maintain stable service operation, and deleted or anonymized once such period is no longer necessary.
• Backup data: retained for the necessary period in accordance with the system backup strategy and deleted, updated, or otherwise appropriately handled when overwritten by backup cycles or no longer needed.

6. Protection of Minors

Our products and services are primarily intended for adults. If a minor uses our products or services, the minor's guardian shall accompany the minor in reading the relevant policies, and the minor shall use the products or services only after obtaining the guardian's consent.

If we discover that a minor's personal information has been collected without obtaining appropriate guardian consent, we will promptly take deletion measures or other appropriate handling measures.

Where we knowingly process the personal information of a minor under the age of fourteen, we will obtain the guardian's separate consent in accordance with applicable law and adopt stricter protective measures.

7. Rights You May Enjoy in Mainland China

Under applicable law, you may generally exercise the following rights:

• Access and copy your personal information
• Correct and supplement your personal information
• Delete your personal information
• Withdraw consent
• Delete your account
• Request an explanation of this Addendum or the Pophie Privacy Policy

If you wish to exercise the relevant rights, you may contact us through the contact details set out in the Pophie Privacy Policy.

U.K. and EEA Addendum+

This Addendum forms part of the Pophie Privacy Policy, applies to users located in the United Kingdom and the European Economic Area, and shall be read together with the Pophie Privacy Policy. In the event of any inconsistency between this Addendum and the Pophie Privacy Policy, this Addendum shall prevail.

1. Legal Bases for Processing

For users located in the United Kingdom and the European Economic Area, we generally process your personal data on the following legal bases:

• Necessity for the performance of a contract with you or for the provision of services to you, for example, completing account registration and login, device binding, connection and network provisioning, letter generation, synchronization of service status, and maintenance of core service operations
• Your consent, for example, for optional permissions, access to your photo album, optional notifications, or the processing of certain sensitive data where required by applicable law
• Our legitimate interests, for example, to protect the security of our products and services, conduct troubleshooting, improve the service experience, carry out limited statistical analysis, and prevent fraud and abuse, provided that such interests do not improperly override your rights and freedoms
• Compliance with legal obligations, for example, to fulfill compliance, record-keeping, regulatory cooperation, and security incident reporting obligations under applicable law

2. International Transfers

Based on the current service architecture, the cloud infrastructure on which our products or services rely is primarily deployed on cloud infrastructure located in the United States. Your personal data may therefore be transferred to, stored in, or otherwise processed in countries or regions outside the United Kingdom or the European Economic Area, including the United States.

In addition, during letter content generation and the generation of related images, relevant necessary information may also be processed by overseas third-party technical service providers to the extent necessary to provide the services.

Where such international transfers occur, we will implement appropriate safeguards in accordance with applicable law, such as:

• Encryption, access controls, and the principle of minimum necessity
• Contractual safeguard mechanisms with relevant recipients
• Use of data transfer mechanisms recognized by applicable law in appropriate circumstances

Where required by applicable law, we will provide further information regarding the specific safeguards applicable to the relevant international transfers.

3. Automated Processing

We may use automated tools, algorithmic models, or rule engines to support letter content generation and the generation of images associated with letters.

In the foregoing processing activities, we may rely on technical capabilities provided by third parties to provide the relevant content-generation services.

Unless otherwise permitted by applicable law or otherwise expressly notified to you by us, we will not make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you.

4. Your Additional Rights

Under applicable law, you may also have one or more of the following rights:

• To obtain a copy of your personal data held by us
• To rectify inaccurate or incomplete personal data
• To erase personal data, or in certain circumstances, to request restriction of processing
• To object to certain processing activities based on legitimate interests
• To request data portability where applicable
• To withdraw consent previously given by you
• To lodge a complaint with the competent data protection supervisory authority in your country or region

5. Children and Minors

Our products and services are primarily intended for adults. If a minor uses our products or services, the minor's parent or guardian shall assist in reading the relevant policies, and appropriate consent shall be obtained where necessary.

With respect to age thresholds for children or minors and guardian-consent mechanisms, we will adopt corresponding protective measures in accordance with the applicable laws of the United Kingdom or the European Economic Area and obtain appropriate consent where necessary.

6. Contact and Complaints

If you have any questions, comments, or complaints regarding the way we process your personal data, you may contact us through the contact details set out in the Pophie Privacy Policy.

If you believe that our processing activities do not comply with applicable data protection laws in the United Kingdom or the European Economic Area, you have the right to lodge a complaint with the competent data protection supervisory authority in your country or region.

Where applicable law requires us to designate a UK representative, an EU representative, or provide additional contact information, we will further disclose the relevant information in accordance with applicable law.

U.S. Addendum+

This Addendum forms part of the Pophie Privacy Policy, applies to users located in the United States, and shall be read together with the Pophie Privacy Policy. In the event of any inconsistency between this Addendum and the Pophie Privacy Policy, this Addendum shall prevail.

1. Scope of Application

Depending on your state of residence and applicable law, you may be entitled to additional privacy rights. This Addendum provides supplemental disclosures for users in the United States.

2. Categories of Information We Collect

In conjunction with the Pophie Privacy Policy and this Addendum, we may collect or process the following categories of information:

• Identifiers and account information
• Device and network information
• Log and diagnostic information
• Interactive content, generated content, and media content
• Location or geolocation-related information
• Information relating to customer support, feedback, or service operations

We generally use such information to provide services, maintain security, conduct troubleshooting, improve the service experience, perform statistical analysis, and fulfill legal obligations.

3. Sale, Sharing, and Targeted Advertising

• We do not sell your personal information.
• We do not use your personal information for commercial profiling or targeted advertising unrelated to the current services.
• We do not use your information for purposes unrelated to the original purpose without authorization.

If our business model changes in the future, we will update the privacy policy in accordance with applicable law and provide any required choice or opt-out mechanisms.

4. Third-Party Services and Categories of Recipients

To provide relevant functions, we may integrate third-party login services, cloud infrastructure services, statistical analysis services, map and location services, and other necessary technical support capabilities.

We may disclose necessary information to the following categories of recipients:

• Cloud infrastructure and technical service providers
• Third-party login service providers
• Statistical analysis service providers
• Map, geolocation, or location-capability service providers
• Relevant parties for security, compliance, legal, or regulatory purposes

5. Rights You May Enjoy in the United States

Depending on your state of residence and applicable law, you may have one or more of the following rights:

• To know the categories of personal information we collect, use, and disclose
• To request access to your personal information
• To request deletion of your personal information
• To request correction of inaccurate personal information
• To request a copy of your personal information
• Where applicable, to opt out of certain types of data processing activities
• To submit requests through an authorized agent, where permitted by applicable law
• To appeal or request review of our refusal to take action, where required by applicable law

6. Non-Discrimination Commitment

Where you lawfully exercise your privacy rights, we will not unlawfully discriminate against you for making a privacy rights request.

7. Contact and Appeals

If you wish to exercise relevant rights, submit a privacy request, or lodge a complaint, you may contact us through the contact details set out in the Pophie Privacy Policy.

If applicable law requires us to provide state-law appeal channels, authorized-agent mechanisms, or more specific state-level supplemental disclosures, we will further disclose the relevant information in accordance with applicable law.

Third-Party SDK and Data Sharing List+

This List sets out the basic information relating to third-party SDKs, third-party services, and third-party technical capabilities that may be integrated into Pophie products or services in Mainland China. The specific integrations may vary depending on the product version, functional module, or user scenario. If any relevant third-party service is adjusted, we will update this List accordingly.

Third Party Name	Purpose of Use	Types of Personal Information That May Be Processed	Usage Scenario
WeChat	Enables users to log in with a WeChat account or link an account	Third-party account identifier, nickname, profile photo, and information necessary for the login process	When a user actively chooses to log in or link an account through WeChat
AMap	Enables location, network provisioning, and other location-related functions	Location information, device information, network information, and information necessary to provide the relevant functions	Device connection, network provisioning, and location-related functions
Sensors Analytics	Supports data analytics, performance analysis, exception analysis, and service optimization	Device information, log information, usage information, and information necessary for statistical analysis	Data analytics, performance analysis, and service optimization
Cloud service provider (United States)	Provides cloud storage, computing, content delivery, backup restoration, and related infrastructure capabilities	Account information, device information, log information, letter content, and other information necessary to provide the services	Operation of cloud services, data storage, backup restoration, and technical support

Notes

• We integrate relevant third-party services only to the extent necessary to provide the corresponding functions or services.
• Where a third party processes personal information independently, such processing shall be governed by that third party's privacy policy or terms of service.
• Where we entrust a third party to process personal information on our behalf, we require it, through contractual arrangements, management requirements, or other appropriate measures, to process the relevant information in accordance with applicable law, contractual obligations, and reasonable security standards.
• Where required by applicable law, we will further disclose the third party's name, processing purpose, processing method, and categories of personal information through in-product pop-ups, authorization prompts, privacy policies, or other appropriate means.