Loona Deskmate Privacy Policy This Privacy Policy applies only to the Loona Deskmate products or services provided by KEYi Tech Co., Ltd. (registered address: 5/F, LIGONG International Education Exchange Building, North Xisanhuan Road, Haidian District, Beijing, People’s Republic of China; hereinafter referred to as “KEYi Tech,” “we,” “us,” or “our”), including Loona Deskmate devices, the Loona Deskmate app, desktop software, and related accounts, cloud capabilities, paid services, and ancillary services. Last Updated: [March 30, 2026] This Policy will help you understand the following: - How we collect and use your personal information - How we store your personal information - How we protect your personal information - How we share your personal information - Your rights - How we handle minors’ personal information - How this Policy is updated - How to contact us KEYi Tech understands the importance of your personal information and will make every effort to ensure that your personal information is secure and reliable. We are committed to maintaining your trust and adhere to the following principles in protecting your personal information: lawfulness, legitimacy and transparency; purpose limitation; data minimization; accuracy; storage limitation; security; and accountability. At the same time, KEYi Tech undertakes to adopt appropriate security measures in accordance with mature industry standards to protect your personal information. Please read and understand this Privacy Policy carefully before using our products or services. 1. How We Collect and Use Your Personal Information When you use Loona Deskmate products or services, we may collect and use information that you voluntarily provide or that is generated in the course of your use of the services in the following ways: 1.1 Account Registration and Login When you register a Loona Deskmate account, we will require you to provide certain personal information, including your email address, password, and nationality. We collect your email address and password in order to help you complete account registration and use Loona Deskmate products or services, protect the security of your account, contact you, and send you important notices. We collect your nationality in order to determine your region and assign you to the appropriate server. In addition, you may choose to provide age, gender, nickname, date of birth, profile photo, occupation information, usage preferences, and similar profile information according to your own needs. Such information is not necessary for your use of Loona Deskmate products or services. However, it may be important in improving the completeness of your account profile, enhancing personalized experiences, and improving service quality. We will not require you to provide such information, and your refusal to provide it will not adversely affect your use of basic functions. 1.2 Device Network Connection and Configuration When you use Loona Deskmate products or services to connect to Wi-Fi, we may, as required by the system, request access to relevant information. Through such permission, we may obtain information about the Wi-Fi network to which you are currently connected, including the Wi-Fi name (SSID). We collect the Wi-Fi SSID in order to ensure that Loona Deskmate products or services can correctly identify and use the current Wi-Fi network so that the relevant functions can operate properly. Except where necessary to implement this function, we will not use location information or the Wi-Fi SSID for any other purpose. 1.3 Voice, Text, Image, Document, and Conversational Interactions When you interact with Loona Deskmate through voice commands, text input, image uploads, document uploads, or other interaction methods, in order to identify, understand, and respond to your instructions and continuously improve service quality, we may collect information that you actively provide or that is generated during the interaction, including voice command information, text input information, image information, document content, conversation records, and related contextual information. Such information may be used for the following purposes: 1. To enable core functions such as speech recognition, image understanding, document parsing, natural language understanding, task execution, and Agent response generation; 2. To improve the accuracy, continuity, and contextual understanding of interactions; 3. To conduct troubleshooting, quality evaluation, and product optimization. If such functions rely on third-party speech services, image processing services, document parsing services, cloud model capabilities, or other technical services, we will take necessary measures to protect your personal information in compliance with applicable laws and regulations. We process images, documents, and similar content only when you actively upload, expressly send, or expressly authorize us to process such content. We do not proactively obtain such content without your active initiation. 1.4 Camera, Microphone, and Multimodal Perception Functions As an intelligent hardware product designed for personal desktop work scenarios, Loona Deskmate may be equipped with a camera, microphone, environmental perception, or multimodal interaction capabilities. When you enable relevant functions, the device may process audio information, video images, image information, environmental perception information, or trigger information necessary for the implementation of the relevant function, for purposes such as voice wake-up, visual recognition, desktop status understanding, intent recognition, task assistance, natural interaction, or other functions that you actively enable. We will process such information only to the extent necessary to realize the relevant functions and in accordance with the principle of data minimization. Where a function can be completed locally on the device without cloud upload, we will prioritize local processing. Where cloud capabilities are required, we will transmit and process the information only to the extent necessary. 1.5 Facial or Identity Recognition Functions When you enable facial or identity recognition functions of Loona Deskmate, we will collect and process the facial feature information you enroll for the purpose of enabling device-based identity recognition, personalized interaction, and related functional experiences. Facial information constitutes sensitive personal information. We will process such information only where there is a specific purpose and sufficient necessity, and we will obtain your separate consent in accordance with applicable law. To ensure that such identity recognition information is not lost when you replace a device, reset a device, re-bind a device, or switch among authorized devices, and to support restoration or synchronization of related functions across authorized devices, we will securely store the facial feature information you enroll on our servers. If you choose not to enable facial or identity recognition functions, this will not affect your use of other basic services that do not depend on such functions. We will process your facial feature information only to the extent necessary to realize the above purposes and will adopt security measures such as encryption and access controls to protect such information. Without your separate consent, or unless otherwise required by laws or regulations, we will not use your facial feature information for purposes unrelated to the above. We will retain your facial feature information for the period necessary to realize the relevant functions. If you delete such data, disable the relevant function, unbind the device, or cancel your account, we will delete or anonymize the relevant information in accordance with applicable law, unless otherwise required by laws or regulations. 1.6 Computer Information Transfer Function When you use Loona Deskmate’s computer information transfer, cross-device collaboration, desktop content receiving or sending, or similar functions, we may, where you actively initiate, expressly trigger, or expressly authorize such function, collect, transmit, and process the content you choose to send or synchronize, such as text information, task information, instruction content, file content summaries, or other information that you explicitly choose to transfer. Such information will be processed only to the extent necessary to realize the transfer, collaboration, receiving, sending, or processing function that you actively initiate. We will not proactively capture, read, transmit, or synchronize relevant information on your computer without your express trigger or authorization. If such functions involve device connection, content relay, cloud processing, or support from third-party technical service providers, we will adopt reasonable and necessary security measures to protect the security of the information during transmission and processing. 1.7 Device Operation and Service Support Information When you use Loona Deskmate products and services, in order to ensure the normal provision of our services, improve and optimize service experience, and protect the security of your account, we may collect and use your device model, system version, login IP address, app software version, desktop software version, device firmware version, and device identifier. With respect to log information (such as operation records in the app or desktop software, and service fault information), we will collect and process such information only when you actively authorize and upload it for the purpose of troubleshooting, fault diagnosis, or obtaining technical support. If Loona Deskmate provides task-assistance capabilities for desktop work scenarios, we may also process, to the extent necessary for the relevant functions, task execution status, function invocation results, abnormal interruption information, and service call results for the purposes of troubleshooting, performance optimization, and service stability improvement. 1.8 Personalization, Memory, and Preference Settings To provide you with a service experience better suited to personal desktop work scenarios, Loona Deskmate may process information relating to your personalized settings, interaction preferences, feature toggle states, usage habits, device configurations, authorized connection status, memory content, or preference tags, based on settings you actively configure or preferences formed through your use. Such information may be used to help the device better adapt to your usage habits, maintain continuity of interaction, and provide function feedback or personalized expression better aligned with your needs. 1.9 Paid Features, Purchases, and Order Management When you purchase paid features, subscription services, value-added services, or related goods of Loona Deskmate, we will collect and process transaction-related information, including order information, purchase records, payment status, subscription status, transaction numbers, and invoicing information (if applicable), for the purposes of completing transactions, providing services, processing refunds, conducting after-sales support, and fulfilling legal and regulatory obligations. Please note that the actual payment process is generally completed by third-party payment institutions. We do not directly collect or store your full bank card number, payment account password, payment PIN, or other financial sensitive information, but we may receive transaction confirmation results, such as payment status, payment time, order number, or transaction identifier. If you purchase an ongoing subscription service, we may also provide renewal reminders, service validity reminders, or related customer support based on your subscription status. 1.10 Notifications and Commercial Information We may use your information to recommend relevant content, products, or services to you. Subject to your consent where required, we may send you information about products and services that may interest you and invite you to participate in our events (including promotional activities), market research, or satisfaction surveys. If you do not wish to receive such information, you may unsubscribe at any time in accordance with the instructions provided or by other means we make available. 2. How We Store Your Personal Information 2.1 Storage Location Loona Deskmate products and services are offered to users globally, which means that the servers we use to process your information may not be located in your country or region. In such cases, we will take measures to ensure that the data we collect is processed in accordance with this Policy and applicable law. Your email address, password, nationality, age, guardian email address, gender, nickname, date of birth, voice command information, text input information, conversation records, login IP address, device model, system version, app software version, desktop software version, device firmware version, log information, device identifier, order information, subscription status, facial feature information, and other information necessary to realize relevant functions will be stored in locations selected in a manner that best protects your rights and interests. The above personal information collected and processed within the People’s Republic of China will be stored within the People’s Republic of China. The above personal information collected and processed within the European Union will be stored within the European Union. 2.2 Retention Period In general, we will retain your personal information only for the period necessary to achieve the purposes for which it was collected and for the retention periods required by laws and administrative regulations. For example: - Email address: If you need to use Loona Deskmate products or services, we need to retain your email address in order to ensure your normal use of the products or services. After you cancel your account, we will delete the relevant information in accordance with applicable law, unless a longer retention period is required for compliance with legal obligations. - Basic account information and device-binding information: During your use of the products and services, we will retain relevant information to ensure continuity of account and device services. When you cancel your account, unbind a device, or the relevant services cease operation, we will delete or anonymize the relevant information in accordance with applicable law. - Facial feature information: While the relevant function is enabled, we will retain such information for the period necessary to realize identity recognition, synchronization, restoration, and continuity of experience. When you delete such data, disable the relevant function, unbind the device, or cancel your account, we will delete or anonymize it in accordance with applicable law. - Computer information transfer content: We will retain such information only for the period necessary to complete the transfer, collaboration, or processing purpose that you actively initiate. After that period, it will be deleted or anonymized. - Order information and purchase records: We will retain such information for the period necessary to complete transactions, after-sales processing, financial reconciliation, and fulfillment of legal and regulatory obligations. - Log information and fault information: For log information and fault information that you actively authorize and upload, we will retain such information only for the period necessary to conduct troubleshooting, technical support, service security, and operation and maintenance, and will delete or anonymize it after that period expires. If our products or services cease operation, we will notify you by push notification, public announcement, or other appropriate means and will delete or anonymize your personal information within a reasonable period. 3. How We Protect Your Personal Information We strive to provide security for your information to prevent loss, misuse, alteration, unauthorized access, or unauthorized disclosure. We will use a variety of security measures within a reasonable security level to safeguard information security. For example, we use measures such as encryption, de-identification, and anonymization to protect your personal information. We have established dedicated management systems, operational procedures, and organizational measures to protect information security. For example, we strictly limit the scope of personnel who may access such information and require them to fulfill confidentiality obligations. For facial feature information, transaction information, account information, and other sensitive information, we will adopt stricter access controls, security audits, and necessary encryption protections. If a personal information security incident occurs, such as a data breach, we will activate emergency response plans and remedial measures to prevent the incident from escalating and will fulfill reporting and notification obligations in accordance with applicable law. We will do our best to protect your personal information. At the same time, please understand that no security measure is absolutely foolproof. 4. How We Share Your Personal Information We will never sell any of your information to anyone. In addition, we require our partners and third parties to comply with rules governing how the information we provide to them may and may not be used and disclosed. Specifically, we may share your information with third parties in the following circumstances: 4.1 Third-Party SDKs, Technical Service Providers, or Cloud Service Partners To ensure a better user experience, we may embed third-party SDKs in our apps or services, or integrate third-party technical services, such as push notifications, speech recognition, cloud computing services, payment capabilities, crash analysis, analytics, identity verification, large model services, content transmission services, or other necessary service components. For integrated third parties, we will conduct necessary assessments in accordance with applicable law and, through contractual arrangements, interface controls, permission controls, or other reasonable measures, require them to process your personal information only for the agreed purposes and within the minimum scope necessary. However, we do not control how such third parties process information. You may refer to the Third-Party Information Sharing List to learn more about the purposes, methods, and scope of personal information processing by such SDKs or third-party services. 4.2 Payment and Transaction Partners When you use paid features, subscription services, or purchase related goods, we may share information necessary to complete the transaction with payment institutions, order processing service providers, after-sales service partners, or financial processing support providers, such as order number, order amount, payment status, transaction identifier, and after-sales status. We will share such information only to the extent necessary to complete transactions, after-sales processing, compliance, and risk control. 4.3 Business Transactions As our business continues to develop, we may engage in mergers, divisions, acquisitions, asset transfers, or similar transactions. If such transactions involve the transfer of personal information, we will notify you of the relevant circumstances and continue to protect your personal information in accordance with applicable laws and regulations and to standards no lower than those required under this Policy, or require any new processor to continue to do so. 4.4 Legal Requirements or Protection of Legitimate Rights and Interests We may share your relevant information as required by laws and regulations, for the resolution of litigation or disputes, at the lawful request of administrative or judicial authorities, or where necessary to protect our legitimate rights and interests or those of users or the public, including personal and property safety. 5. Your Rights Where required by applicable law, when we process your personal information based on your consent, you have the right to withdraw that consent at any time. However, withdrawal of consent will not affect the lawfulness or validity of our processing based on your consent before such withdrawal, nor will it affect our processing based on other lawful grounds. 5.1 Right of Access You have the right to request a copy of your data. You may also review the list of personal data we collect, or review the permissions you may have enabled for use of Loona Deskmate products or services, and modify enabled permissions in accordance with the instructions provided. 5.2 Right to Rectification You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete. 5.3 Right to Erasure Under certain conditions, you have the right to request that we delete your data. 5.4 Right to Restrict Processing Under certain circumstances, you have the right to request that we restrict the processing of your data. 5.5 Right to Object to Processing Under certain conditions, you have the right to object to our processing of your data. 5.6 Right to Data Portability Under certain conditions, you have the right to request that the data we collect be transferred to another organization or directly to you. 5.7 Right to Account Cancellation You may cancel your previously registered account at any time through Settings - Account - Delete Account. After you cancel your account, we will stop providing products or services to you and, unless otherwise provided by laws and regulations, delete your personal information in accordance with your request. If you submit a request, we will respond within 15 business days. If you wish to exercise any of these rights, please contact us by email at: dataprivacy@keyirobot.com. In principle, we do not charge fees for reasonable requests. However, for repeated requests or requests that exceed reasonable limits, we may charge a reasonable cost fee as appropriate. We may refuse requests that are unfounded, repetitive, require excessive technical means, pose risks to the legitimate rights and interests of others, or are otherwise impractical. 6. Protection of Minors’ Personal Information Loona Deskmate products and services are intended only for users aged 16 and above and are not directed to minors under the age of 16. If you are under 16 years of age, please do not register for, log in to, or use Loona Deskmate products or services. If we discover that a minor under the age of 16 has registered for, used, or provided personal information to Loona Deskmate products or services without guardian consent, we will take measures in accordance with applicable law to delete the relevant personal information as soon as possible or anonymize it to the extent permitted by applicable law. If you are a guardian and discover that a minor under your guardianship has provided personal information to us without authorization, please contact us promptly at dataprivacy@keyirobot.com. After verification, we will handle the matter in accordance with applicable law as soon as possible and will respond within 15 business days. 7. How This Policy Is Updated We may revise this Privacy Policy from time to time. If material changes are made to this Privacy Policy, we will present the updated Privacy Policy to you through push notifications, pop-up notices, or other appropriate means required by law when you log in, first use new relevant functions, or update the version. We will also archive prior versions of this Policy for your reference. 8. How to Contact Us If you have any questions, complaints, or suggestions regarding this Policy, the data we hold about you, or if you wish to exercise your rights, please contact us at any time, and we will respond within 15 business days. - Email: dataprivacy@keyirobot.com - Address: 5/F, LIGONG International Education Exchange Building, North Xisanhuan Road, Haidian District, Beijing 100191, People’s Republic of China If you wish to make a complaint, or if you believe we have not addressed your concern satisfactorily, you may also contact your local data protection authority.