User Privacy Policy

I. Introduction

1) By using the services we provide, you agree to allow us to collect, store, use, disclose, and protect your personal information in accordance with the User User Privacy Policy published on our platform. We hope to clearly explain to you how we handle your personal information through this User User Privacy Policy, and we recommend that you read the User User Privacy Policy in its entirety to better protect your privacy.

2) In certain scenarios, you may proactively provide us with personal information to gain access to more comprehensive features. In such cases, we will provide an entry point for submitting information within the relevant feature and explain the purpose of collecting such information. If you choose not to provide this information, you can still use our related services normally, but some additional features may not be available.

3) When using our products and services, you may need to grant our application certain access permissions on your device (if supported by your device/operating system). You can independently decide whether to enable or disable the aforementioned permissions at any time.

Please note that once you enable relevant permissions or submit related information, it is deemed that you have authorized us to collect and use the aforementioned information. If you disable relevant permissions, it means you have revoked these authorizations, and we will no longer collect or use your personal information. Your decision to disable permissions will not affect the processing of your personal information based on your prior authorization.

4) In accordance with legal and regulatory requirements, if a network product or service has the function of collecting user information, its provider must clearly inform users and obtain their consent. Through this User Privacy Policy, we explicitly inform you of the purpose, methods, and scope of collecting and using user personal information, the channels for querying and correcting information, and the consequences of refusing to provide information.

5) Before using any products or services on our platform, please carefully read and thoroughly understand this policy. Only after confirming that you fully understand and agree to it should you use the relevant products or services. If you do not agree with any content of this User Privacy Policy, you should immediately stop using our platform services.

6) You need to understand that only after you confirm and agree to the revised 'science can bot User User Privacy Policy' will we collect, use, process, and store your personal information in accordance with the revised User Privacy Policy. You have the right to refuse to agree to the revised User Privacy Policy. However, please be aware that once you refuse to agree to the revised User Privacy Policy, you may not be able to or may not be able to fully use the relevant services and features of science can bot, or the service effects we aim to achieve may not be realized.

II. How We Collect and Use Your Personal Information

To assist you in using services such as voice control of devices, scanning and identifying devices, etc. (There is no targeted push or precision advertising functionality), we will collect the following information based on the services you use:

1. Information You Provide to Us

1.1 Scanning QR codes, taking photos, recording videos, capturing audio, accessing device albums, and Bluetooth connections

When you use our services, such as voice control or scanning to identify device models, we need your authorization to access your device's camera and album permissions. This allows us to collect the image and video information you upload after scanning QR codes, taking photos, or recording videos. If you refuse to grant these permissions or provide this content, you will be unable to use this feature, but it will not affect your normal use of other functions of the product or service. At any time, you can also enable or disable these permissions through your device's system settings. Enabling these permissions indicates that you authorize us to collect and use such information. Disabling these permissions means that we will no longer collect this information and will be unable to provide the corresponding services. However, unless you delete your personal information in accordance with legal requirements, disabling permissions will not affect the processing and storage of your personal information conducted based on your prior authorization.

1.2 Your Device Storage Permission

When you use the app to control products, certain features require saving settings for your hardware device. In such cases, we need your authorization to access this permission. If you refuse to grant this permission, these features will not function, but it will not affect your use of other core functions.

1.3 Your Device Sensor Permission

When you use the app to control products, we need your sensor permission to enable features that control hardware device actions through angle sensors.

1.4 Exceptions to Obtaining Authorized Consent

You fully understand and agree that we may collect and use your personal information without your authorized consent in the following circumstances, and we may not respond to your requests for correction/modification, deletion, cancellation, withdrawal of consent, or access to information:

• (1) When related to national security or national defense;
• (2) When related to public security, public health, or significant public interest;
• (3) When related to judicial or administrative enforcement actions such as criminal investigation, prosecution, trial, and execution of judgments;
• (4) When necessary to protect your vital interests or those of another individual, such as life or property, but obtaining your consent is difficult;
• (5) When the personal information has been voluntarily disclosed to the public by you;
• (6) When necessary for the execution and performance of relevant agreements or other written documents entered into with you;
• (7) When necessary to maintain the secure and stable operation of the products and/or services provided, such as detecting and resolving faults in the products and/or services;
• (8) When necessary for legitimate news reporting;
• (9) When necessary for academic research institutions to conduct statistics or academic research based on public interest, and when the results of such academic research or descriptions are provided externally, the personal information contained in the results is de-identified;
• (10) Other circumstances as prescribed by laws and regulations.

If you do not agree to us providing your personal information to third parties in accordance with the above terms, please immediately stop using our platform services.

III. Anonymized Use of Personal Information

After collecting your personal information, we will anonymize the data through technical means, rendering the anonymized information unable to identify the individual. You understand and agree that, under such circumstances, we have the right to use the anonymized information. Additionally, without disclosing your personal information, we have the right to analyze the user database and utilize it for commercial purposes.

IV. Protection of Minors' Information

We place great importance on the protection of minors' personal information. If you are a minor under the age of 18, you should have your parents or guardian read this policy. Before obtaining explicit or written consent from your parents or guardian regarding the contents of this User Privacy Policy, you should cease using our products and/or services. If your parents or guardian do not consent to you using our products and/or services or providing information to us in accordance with this policy, please immediately discontinue the use of our products and/or services and notify us promptly so that we may take appropriate measures.

V. How We Use Technologies Such as Cookies and Beacons

When you use our products and/or services, we may identify you through data files. These one or more data files sent to your device are unique and can only be read and used by our servers. These data files may be Cookies/Flash Cookies or other similar technologies. The purpose of sending such data files is to simplify your login process, store your relevant preferences, assist in determining your login status, and protect your account and data security.

You can manage or delete such data files according to your preferences or the settings of your browser or operating system. For example, you can clear cookies saved on your computer or set your browser to reject cookies. Once you perform this 'clear' operation, you may, in certain situations, be repeatedly required to verify your identity, or it may affect your secure access to our products and/or services.

Additionally, our products and/or services may contain special electronic images (referred to as Beacons). We use Beacons to collect information about your activities while browsing our web pages, such as the page addresses you visit and certain basic parameters of your browser.

VI. How We Share, Transfer, and Publicly Disclose Your Personal Information

We are committed to maintaining the confidentiality of your personal information. Except as described in this policy or as otherwise agreed upon in separate contracts with you, we will only share your necessary information with third parties in the following circumstances:

• 1) To provide you with our products and/or services;
• 2) When we have obtained your explicit consent or authorization;
• 3) When required by state authorities, competent departments, or administrative/judicial requests;
• 4) When necessary to handle disputes or conflicts with others at your request;
• 5) To achieve the purposes outlined in the section 'How We Use Your Personal Information';
• 6) If you participate in lotteries, contests, or similar marketing activities, we will use the information you provide to manage such activities. If the activity is co-organized with a third party, we may share with them the personal information necessary to complete the activity, such as winner lists and contact details, so that the third party can award prizes or provide products/services to you;
• 7) To comply with laws, regulations, and industry practices. If we plan to merge with other companies, engage in other capital market activities, or undergo due diligence by other entities in other scenarios, we may provide your information to relevant parties;
• 8) When you engage in transactions with other users based on our products and/or services, to ensure transaction security or confirm transactions, you and your counterparty may see partial information or anonymized information about each other during or after the transaction;
• 9) When you proactively enter into contracts with other users, institutions, or partners through our products and/or services, we will provide necessary personal information (such as your real name, ID number, contact details, etc.) to all relevant parties involved in the contract;
• 10) When necessary within the scope permitted by laws and regulations to protect the interests, property, or safety of science can bot, its affiliates, partners, you, other science can bot users, or the public from harm.

VII. How We Store and Protect Personal Information

1) Unless otherwise agreed or required by law, personal information collected and generated by us within the territory of the People's Republic of China will be stored within the territory of the People's Republic of China. Personal information collected and generated outside the territory of the People's Republic of China will be stored in accordance with laws, regulations, international rules, or practices recognized as effective by the People's Republic of China.

2) We promise you that we will use the following measures to ensure that information security protection reaches a reasonable level:

7.1 Technical Measures

We will adopt security protection measures that meet industry standards, including the use of encryption technologies such as Transport Layer Security (TLS) protocols for network services to ensure the security of user data during transmission, and the use of isolation technologies to isolate stored data.

In certain scenarios where your personal information is used (e.g., displaying personal information, confirming personal information), we will employ various data masking technologies, including content replacement and one-way hashing, to enhance the security of your personal information during use.

We also strictly enforce access control, multi-factor authentication, and other technologies to protect your personal information and prevent unauthorized data access.

7.2 Access Specifications

We have established information security policies, data classification management specifications, security/development guidelines, and other institutional frameworks to manage the storage, access, and use of your personal information.

We require individuals with access to your information to sign confidentiality agreements and implement access logs, behavioral monitoring, and specialized audit measures to comprehensively control data access.

7.3 Other Protection Measures

To cultivate employee security awareness, we regularly conduct security- and privacy-related training, seminars, and assessments.

Only employees and partners of Topbright Animations Corporation and its affiliates who need to know this information are permitted to access and handle personal information, and they are subject to all the technical measures and specifications mentioned above. We require such personnel to fulfill relevant confidentiality obligations. Failure to meet these obligations may result in termination of employment or partnership and could lead to legal liability.

The internet is not an entirely secure environment. Communications you have with other users through various means cannot be guaranteed to be adequately protected. We recommend that you take care to protect your personal information when using other communication tools, avoid disclosing personal information or private account details, and enable complex passwords on relevant tools.

Please understand that due to technological limitations and potential malicious methods, issues may arise from factors beyond our control. In accordance with legal and regulatory requirements, in the unfortunate event of a personal information security incident, we will promptly inform you of: the basic details and potential impact of the incident; the measures we have taken or will take; recommendations for you to independently prevent or mitigate risks; and remedial actions for you. We will also notify you of incident-related information via email, letter, phone, push notifications, or in-site messages. If it is difficult to notify individual data subjects one by one, we will issue a public announcement in a reasonable and effective manner. Additionally, we will report the handling of personal information security incidents to regulatory authorities as required.

7.4 Information Storage Period

We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. The criteria we use to determine the aforementioned retention period include:

• 1) Completing service objectives related to you, maintaining corresponding services and business records, and addressing potential inquiries or complaints from you;
• 2) Ensuring the security and quality of the services we provide to you;
• 3) Whether you consent to a longer retention period;
• 4) Whether there are other special agreements regarding the retention period.

Once your personal information exceeds the retention period, we will delete or anonymize it in accordance with applicable legal requirements.

5) Information Deletion and Anonymization: If our platform decides to cease operations, we will stop collecting your personal information after the relevant services cease. We will notify you of the cessation of operations through a public announcement. Any personal information already held about you will be deleted or anonymized.

7.5 Sensitive Information and Password Protection Tips:

• 1) Attention to Personal Sensitive Information Protection: Information you voluntarily share or even publicly disclose while using our services may involve your or others' personal information, including sensitive personal information, such as uploading profile pictures or images containing personal information. Please carefully consider whether to share or publicly disclose such information while using our services.
• 2) Please use complex passwords to help us ensure the security of your account. We will make every effort to secure any information you send to us. If our physical, technical, or administrative safeguards are compromised, resulting in unauthorized access, public disclosure, alteration, or destruction of information, causing damage to your legitimate rights and interests, we will bear corresponding legal responsibility.
• 3) Your account is protected by security features. Please keep your account and password information safe. We will ensure your information is not lost, misused, or altered through measures such as backing up data to other servers and encrypting user passwords. Despite these security measures, please understand that there is no 'perfect security' on information networks.

7.6 Information Disclosure Tips and Password Leak Handling: Please note that the internet is not an absolutely secure environment. Please protect your personal information appropriately and only provide it to others when necessary. If you discover that your personal information has been leaked, especially your account and password, please contact our customer service immediately so that we can take appropriate measures.

7.7 Information Security Incident Handling: In the unfortunate event of a personal information security incident, we will inform you in accordance with legal and regulatory requirements of: the basic details and potential impact of the incident; the measures we have taken or will take; recommendations for you to independently prevent or mitigate risks; and remedial actions for you. We will notify you of incident-related information via email, phone, push notifications, etc. If it is difficult to notify individual data subjects one by one, we will issue a public announcement in a reasonable and effective manner. Additionally, we will report the handling of personal information security incidents to regulatory authorities as required.

VIII. How You Manage Your Personal Information

8.1 We will make every effort to protect your rights to access, update, and correct your personal information. Except as otherwise provided by laws and regulations, you have the right to exercise this right at any time.

8.2 You may request that we delete your personal information under any of the following circumstances:

• 1) If our processing of your personal information violates laws or regulations;
• 2) If our processing of your personal information violates our agreement with you;
• 3) If we terminate our services and operations.

8.3 In certain scenarios, you can proactively authorize or revoke authorization for us to access your personal information through your device or operating system settings. Please understand that when you withdraw your authorization or choose not to authorize us to access this part of your personal information, we will no longer be able to provide you with the corresponding services that require this information. However, your decision to withdraw authorization will not affect the processing of personal information previously carried out based on your authorization.

8.4 We may not be able to respond to your request under the following circumstances:

• 1) When related to national security or national defense;
• 2) When related to public security, public health, or significant public interest;
• 3) When related to criminal investigation, prosecution, or trial;
• 4) When there is sufficient evidence to prove that you have acted with malicious intent or abused your rights;
• 5) When responding to your request would cause serious harm to the legitimate rights and interests of other individuals or organizations;
• 6) When required by competent state authorities;
• 7) Other circumstances as prescribed by laws and regulations.

IX. Application and Revision of This Policy

This User Privacy Policy is the unified User Privacy Policy adopted by science can bot and applies to all products and/or services offered by science can bot. Certain products and/or services within science can bot may have their own specific privacy policies, which will provide more detailed explanations of how we use your information in those contexts. These specific privacy policies are an integral part of this Policy. In the event of any inconsistency between the specific privacy policies of such products and/or services and this Policy, the specific User Privacy Policy of that product or service shall prevail.

As science can bot's business evolves, our products and/or services may undergo upgrades and adjustments. We may revise this Policy from time to time to reflect functional adjustments, changes in usage rules, updates to applicable laws and regulations, or changes in regulatory requirements.

Once we make revisions to this Policy, we will notify you of the updates through our products and/or services. At the same time, we encourage you to monitor us regularly to stay informed of the latest User Privacy Policy. If you continue to use our products and/or services after this Policy has been revised, it signifies that you have fully read, understood, and accepted the revised User Privacy Policy.

X. Protection of Minors' Information

We place great importance on the protection of minors' personal information. If you are a minor under the age of 18, you should have your parents or guardian read this policy. Before obtaining explicit or written consent from your parents or guardian regarding the contents of this User Privacy Policy, you should cease using our products and/or services. If your parents or guardian do not consent to you using our products and/or services or providing information to us in accordance with this policy, please immediately discontinue the use of our products and/or services and notify us promptly so that we may take appropriate measures.

XI. Dispute Resolution

1. This User Privacy Policy and the relationship between parents/guardians and children with Topbright Animations Corporation are governed by the laws of the mainland region of the People's Republic of China, excluding its conflict of laws principles. Parents/guardians and Topbright Animations Corporation agree to submit to the jurisdiction of the courts located in Aoguang Optronics Co., Ltd.'s place of incorporation.

2. The headings in this User Privacy Policy are provided for convenience and readability only and shall not affect the meaning or interpretation of any provision herein.

XII. Definition of Terms

12.1 In this Policy, 'science can bot' ('we', 'us', 'our') refers to Topbright Animations Corporation.

12.2 In this Policy, 'personal information' mainly includes:

• 1) Basic personal information (including name, date of birth, gender, address, telephone number, email address);
• 2) Personal identification information (information from valid documents such as ID cards);
• 3) Online identity identification information (including system account, IP address, email address, and related passwords, passcodes, security questions and answers, etc.);
• 4) Personal property information (transaction records, consumption records, virtual property information such as science coins, vouchers, enrolled courses, etc.);
• 5) Personal online activity records (website browsing history, software usage records, click records, etc.);
• 6) Personal device information (commonly used device information including hardware model, device hardware parameters, operating system type and basic information, App Unique Identifier, SIM card information, etc.);
• 7) Personal location information (including location data, etc.).

12.3 In this Policy, 'information anonymization' refers to:

The process of technically processing personal information so that the data subject cannot be identified, and the processed information cannot be restored.

XIII. How to Contact Us

1. If you have any questions, comments, or suggestions regarding the content of this policy, you can contact us by calling our customer service hotline: 15990143811. We will respond to and address your issue within 15 working days.

XIV. Address

Office Address: Topbright Animations Corporation, 16th Floor, Taihao Digital Plaza, No. 332 Qiutao North Road, Shangcheng District, Hangzhou City, Zhejiang Province