Privacy Policy

Effective Date: 01 October 2026

Welcome to use our products and services.

This Privacy Policy is intended to explain how we collect, use, store, share and protect your personal information, as well as your corresponding rights. By using our products and services, you acknowledge that you understand and agree to all terms of this Privacy Policy. If you do not agree, please stop using our services. Important clauses concerning your personalinformationrelated rights and interests are presented in bold for your attention.

This Policy applies to all products and services provided by us, including but not limited to selfservice devices, mobile applications, webbased services and relevant operationmanagement systems. Unless a separate privacy policy is issued for a specific product, this Policy shall apply.

This Policy covers the following topics:

1. How We Collect Personal Information

2. How We Use Personal Information

3. Sharing and Transfer of Personal Information

4. Your Rights Regarding Personal Information

5. Protection of Personal Information

6. Cookies and Tracking Technologies

7. Storage of Personal Information

8. Minors / Children’s Privacy Protection

9. Updates to This Privacy Policy

10. Contact Us

Ⅰ How We Collect Personal Information

We follow the principle of data minimisation. We only collect necessary personal information for the purpose of providing, maintaining and securing our services, and will not collect information irrelevant to the services.

(1) Account Registration Scenario

When you register for or log in to our application or operationmanagement system, we collect account information, contact details, identityverification information and other personal data you voluntarily provide.

(2) Anonymous Usage via SelfService Devices

You may use part of our services through selfservice devices without registering an account.

1. Scenarios with content upload You may voluntarily upload images, photos or other content to complete your service request. Uploaded content may contain facial images, portraits or other biometric sensitive personal information. Such content shall be used solely to fulfil your current service request and shall not be used for ad delivery, user profiling or any other irrelevant purposes. Upon completion of the service, original uploaded content will be automatically deleted within the shortest necessary period. You warrant that if the uploaded content contains personal information of thirdparty natural persons, you have obtained valid authorisation or have a legitimate basis for processing such information.

2. Scenarios without content upload Certain selfservice devices do not require you to upload images, photos or portrait materials. We only collect device operation logs, transaction records, network status and other information necessary to deliver the service.

(3) AutomaticallyCollected Information

When you use our services, we may automatically collect the following information: device model, system version, device identifier, IP address, network status, service interaction records, fault logs, approximate location information or geographic region inferred from IP address, as well as necessary records related to payment transactions.

Payment services are provided by thirdparty payment service providers. We do not collect or store complete bankcard numbers, payment verification codes, CVV or other sensitive payment information. We only retain necessary transaction order numbers for reconciliation, aftersales support and dispute resolution.

(4) Information Obtained from Lawful ThirdParty Sources

We obtain necessary information from cooperating service providers only within the scope permitted by law, for identity verification, risk prevention, antifraud, service operation and maintenance, and transaction security guarantee.

Ⅱ How We Use Personal Information

We process your information only upon your consent, for fulfilling core service purposes and for complying with statutory obligations, in accordance with this Policy. Specific purposes include:

1. To provide, maintain and improve services, including personalising your user experience.

2. To verify your account and prevent fraud, spam and other harmful activities.

3. To display advertisements and measure their effectiveness, including personalised advertisements (where permitted by applicable law, only for registeredaccount users; anonymous users of selfservice devices will not receive personalised advertisements).

4. To analyse usage patterns and develop new features and products.

5. To comply with statutory obligations, such as responding to legal requests and protecting the interests of users and the public.

Ⅲ Sharing and Transfer of Personal Information

We will not sell your personal information to third parties for commercial purposes. Sharing may only occur under the following circumstances:

1. Your explicit consent: We share your personal information with other parties upon your explicit consent.

2. Service providers: Thirdparty parties performing services on our behalf, such as advertising, statistics, cloudservice and analytics providers. Such thirdparties shall process personal information only under our instructions and shall assume corresponding confidentiality obligations.

3. Legal requirements: Comply with legal requirements, such as responding to court orders, government requests, or protecting users’ and the public interests.

4. Business transfer: Sharing in scenarios such as merger, acquisition or asset sale.

5. Affiliated companies: Share information with our affiliated companies solely for the service purposes stated in this Policy. Affiliated companies shall comply with equivalent privacyprotection requirements.

Ⅳ Your Rights Regarding Personal Information

You may conveniently exercise the following rights. Subject to dataprotection laws of your jurisdiction, we will respond to your reasonable requests within 15 working days:

If you use services via selfservice devices without registering an account and wish to exercise rights of access, correction, deletion or withdrawal of consent, please submit your application via the contact email shown at the end of this Policy. Accountsetting functions are not available for anonymous selfservicedevice users.

1. Access and correction: Access or correct your personal information via 【Account Settings】 or customerservice entry.

2. Deletion / account cancellation: Request deletion of your personal information (except for statutory exceptions), or apply for account cancellation. After cancellation, we will delete or anonymise your information in accordance with law.

3. Data portability: Request a copy of your personal information in a portable format.

4. Withdrawal of consent: Withdraw your consent for personalinformation collection and use where applicable.

5. Optout of advertising: Disable personalisedadvertising functions via your devicesystem settings or inapp 【SettingsPrivacy Management】.

Ⅴ Protection of Personal Information

We adopt multiple technical and organisational measures to protect your information from unauthorised access, use and disclosure:

1. Adopt encrypted data transmission and encrypt storage of sensitive information such as passwords;

2. Conduct regular internal / thirdparty security audits and vulnerability scanning, and fix risks in a timely manner;

3. Provide regular dataprotection training for employees; dataaccess permissions follow the minimumnecessary principle, and only authorised personnel may access data.

Please understand that due to technical limitations and riskprevention constraints, even with robust security measures, 100 % security of information cannot always be guaranteed. The system and communication network you use to access our services may encounter issues beyond our control. We will endeavour to guarantee the security of any information you send to us. If you discover any leakage of your personal information, please contact us immediately by using the contact information provided in this Policy so we can take corresponding measures.

In the event of a personalinformationsecurity incident, we will inform you in accordance with applicable laws: basic facts and potential impacts of the incident, measures we have taken or will take, suggestions for you to prevent and mitigate risks, and remedies for you. We will notify you by email, letter, phone, pushnotification or other means. Where individual notification is impracticable, we will issue a public announcement by reasonable and effective means. Meanwhile, we will report the handling of personalinformationsecurity incidents to regulatory authorities as required.

Ⅵ Cookies and Tracking Technologies

(1) We and thirdparty service providers may use Cookies, webbeacons and similar technologies to collect interaction information for service optimisation, usagepattern analysis, advertisementeffect evaluation, personalisedadvertising delivery, and to remember your preferences and login status to improve user experience. The Cookie and trackingtechnology rules described in this Chapter apply only to mobileclient applications and web interfaces. Selfservice hardware devices do not use Cookiebased tracking technologies.

(2) We use such technologies only within necessary scope:

1. Necessary technologies: Required for basic service operation and cannot be disabled;

2. Analytical / marketing technologies: Used for serviceusage statistics and personalised recommendations / advertisements. You may refuse such technologies via devicebrowser settings or inapp 【SettingsPrivacy Management】.

(3) You may manage or delete stored Cookies via your browser or devicesystem settings; this may affect availability of some functions.

(4) Users in the European Economic Area (EEA) and the United Kingdom: We will obtain your explicit affirmative consent before placing nonessential Cookies.

Ⅶ Storage of Personal Information

1. Storage location: Your personal information will mainly be stored on servers located in your serviceregion to guarantee service stability and access speed. If crossborder transmission is required for business purposes, we will strictly comply with applicable laws and dataprotection regulations of your jurisdiction by conducting dataexit security assessments and signing standarddataprotection contracts to safeguard your personalinformation security.

2. Retention period: Personal information is retained only for the shortest period necessary to fulfil service purposes or as required by applicable laws; upon expiry, data will be deleted or anonymised in accordance with law. For images, photos or other content you upload via selfservice devices, we retain such data only for the shortest period required to complete your service and will automatically delete original data after service completion.

Ⅷ Minors / Children’s Privacy Protection

This product / service is not designed for children. If the statutory minimumusageage in your jurisdiction is higher than 13 years old, local law shall prevail (16 years old for users within the European Economic Area (EEA) and the United Kingdom). If we discover we have collected children’s personal information without verifiable parental consent, we will delete such information promptly. If you are a parent or legalguardian and become aware we have collected your child’s personal information, please contact us via the contact information shown at the end of this Policy and we will delete the relevant data from our servers promptly.

For minors who have reached the local statutory minimumusageage but are under 18 years old, we apply enhancedprivacy settings by default:

1. Restrict collection and use of personal data for personalised advertising;

2. Share data with thirdparty serviceproviders only to the extent strictly necessary for coreservice delivery;

3. Provide parents and legalguardians with tools to view, correct or delete their child’s personal information.

We comply with the U.S. Children’s Online Privacy Protection Act (COPPA), the GDPR childrenrelated provisions and other applicable global laws for children’s personalinformation protection.

Ⅸ Updates to This Privacy Policy

Our privacy policy may be revised.

Without your explicit consent, we will not reduce the rights to which you are entitled under this privacy policy. We will publish any revisions made to this privacy policy on this page.

For material changes, we will notify you via prominent productservice pages, insystem messages, emails or other appropriate means to reach you. If you object to such changes, you may discontinue your use of our products and services. Your continued use of our products and/or services shall constitute your acceptance to be bound by the revised privacy policy.

Ⅹ Contact Us

If you have any questions or concerns regarding this Privacy Policy, please contact us:

Guangzhou Kexiaozhan Technology Co., Ltd. Is the personalinformationprocessing

controller for this service. Certain selfservice devices are deployed and maintained onsite by cooperating thirdparty agents. Agents are only responsible for onsite hardware maintenance and do not participate in collection, storage or processing of personalinformation. For matters related to personalinformationprotection, please contact the actual dataprocessing controller:

Company Name: Guangzhou Kexiaozhan Technology Co., Ltd. Address: No. 28 Xinhuanshuncun Road, Dalong Subdistrict, Panyu District, Guangzhou, Guangdong Province, China, 101, 201, 301

Contact Email: kxz@kemore.com

We will respond to your reasonable request within 15 workingdays upon receipt.