Privacy Agreement

1. Company Information And Contact

Data Controller and Service Operator: Henan Yuanrui Network Technology Co., Ltd.

Office Address: No. 1210, 12th Floor, Unit 3, No. 76 Zhengbian Road, Guancheng Hui District, Zhengzhou, 450000, CN.

Website: henanyuanrui.com

Business Support Email: support@henanyuanrui.com

Key Accounts Email: liupengtong1@henanyuanrui.com

2. Scope Of This Agreement

This Agreement covers data processing in connection with network technology services, technical consulting, technical service, technical promotion, software development and sales, information technology consulting, information system integration, graphic design, image and text production, advertising design and agency services, advertising publication, marketing planning, enterprise management consulting, e-commerce services, and sales operations for computer software and hardware, electronic products, daily necessities, household goods, clothing, shoes and hats, and office supplies.

This Agreement also covers mobile management applications and applications distributed through app stores including Google Play and Apple App Store.

3. Information We Collect

3.1 Information You Provide

• Contact details such as name, email address, phone number, business role, and organization details.
• Account credentials and profile details for supported products.
• Messages, attachments, requests, and project information submitted through support channels.

3.2 Information Collected Automatically

• Device identifiers, IP address, browser type, operating system, language settings, app version, and crash diagnostics.
• Usage events such as page views, app sessions, feature interactions, conversion events, and retention data.
• Security logs including fraud prevention and abuse monitoring records.

3.3 Advertising And Monetization Data

• Advertising identifiers (for example AAID, IDFA where available and permitted).
• Ad request and response metadata, impression records, click events, and ad fraud signals.
• Consent status values and privacy preference signals required for targeted or non-targeted advertising decisions.

4. Why We Process Information

• To provide, maintain, and improve websites, software systems, and mobile applications.
• To deliver consulting, integration, promotion, and support services.
• To publish and operate apps on Google Play, App Store, and approved distribution channels.
• To support ad monetization including app open ads, rewarded video ads, interstitial ads, and banner ads.
• To comply with legal obligations and applicable platform policies.
• To secure systems, prevent fraud, and investigate abuse.

5. Legal Bases For Processing

Depending on your jurisdiction, we process personal information based on one or more of the following legal bases: consent, contract performance, legal obligations, vital interests, public interest where required by law, and legitimate interests balanced against user rights.

6. Application Store Compliance

6.1 Google Play

For Android distributions, we follow Google Play Developer Program Policies, including Data Safety disclosures, user data minimization, secure transmission, prominent disclosure and consent where required, and advertising policy controls.

6.2 Apple App Store

For iOS distributions, we follow Apple App Store Review Guidelines, privacy nutrition label requirements, App Tracking Transparency (ATT) rules, and platform-specific children and age rating standards.

6.3 Additional Store Requirements

Where apps are distributed through additional stores, we map their local policy requirements to consent capture, age compliance, disclosures, and security controls.

7. Country And Region Policy Adaptation

We adapt this Agreement and operational controls to applicable laws and updates, including but not limited to:

• European Union and EEA: GDPR, ePrivacy requirements, IAB Europe TCF where applicable.
• United Kingdom: UK GDPR and Data Protection Act 2018.
• Switzerland: FADP requirements.
• United States: CCPA/CPRA, VCDPA, CPA, CTDPA, UCPA and other state privacy acts as enacted.
• Canada: PIPEDA and provincial privacy requirements where applicable.
• Brazil: LGPD.
• Mexico and Latin America jurisdictions with local data protection obligations.
• Australia: Privacy Act and Australian Privacy Principles.
• New Zealand: Privacy Act 2020.
• Singapore: PDPA.
• South Korea: PIPA.
• Japan: APPI.
• Mainland China: PIPL, CSL, and Data Security Law where applicable to processing context.
• Middle East and other regions where local laws require region-specific notices or consent procedures.

8. Children And Age-Related Protections

Our services are not directed to children where prohibited by law. We enforce age-appropriate controls based on market and product context, including:

• COPPA considerations for users under 13 in the United States.
• GDPR-K age-of-consent requirements in EEA member states.
• UK children code and relevant age-appropriate design requirements.
• App store age ratings and restricted data processing for underage users.

If we discover unauthorized collection from children under applicable age thresholds, we will take prompt deletion and remediation actions.

9. Advertising Platform Compliance

When monetization features are activated, apps may integrate one or more advertising and mediation providers. Potential providers include Google AdMob, Google Ad Manager, Meta Audience Network, AppLovin MAX, Unity Ads, ironSource, Mintegral, Pangle, Chartboost, InMobi, Liftoff Monetize, Vungle, Smaato, Start.io, Amazon Publisher Services, Yandex Ads, and other approved partners.

Compliance controls include:

• Consent collection before personalized ads where required.
• Support for non-personalized ads and limited data processing modes where required.
• Publisher declarations, privacy disclosures, and SDK inventory transparency.
• Age screening and child-directed treatment flags when applicable.
• Ad fraud and invalid traffic detection controls.
• Regional opt-out and rights handling aligned to local laws.

10. Cookies, SDKs, And Similar Technologies

Our web and app products may use cookies, local storage, SDKs, APIs, and equivalent technologies for authentication, analytics, personalization, diagnostics, fraud prevention, and ad delivery. Users can control cookies and tracking permissions through browser settings, device settings, and in-product privacy options where available.

11. Information Sharing And Disclosure

We may share information with:

• Service providers and infrastructure vendors under contractual confidentiality and security obligations.
• Advertising and analytics partners for monetization and performance measurement where legally permitted.
• Legal and regulatory authorities when required by law, legal process, or enforceable requests.
• Professional advisors and transaction parties in legitimate corporate transactions, subject to safeguards.

12. International Data Transfers

Where data transfers occur across borders, we apply appropriate safeguards such as standard contractual clauses, transfer impact assessments, encryption, and contractual controls as required by applicable law.

13. Data Retention

We retain personal information only for as long as necessary for contractual, operational, legal, accounting, auditing, and dispute-resolution purposes. Retention periods depend on data category, legal obligations, and service context.

14. Security Controls

We apply technical and organizational controls that can include encrypted transport, access controls, least-privilege policies, logging, backup routines, vulnerability management, and incident response workflows. No security measure is absolute; users should also protect account credentials and devices.

15. Your Privacy Rights

Depending on local law, you may have rights to access, correct, delete, export, restrict, object, withdraw consent, and appeal decisions regarding your personal information. To exercise rights, contact us through the emails listed in Section 1.

16. Do Not Sell / Share And Targeted Advertising Choices

Where regional law grants rights related to sale, sharing, or targeted advertising, users may submit requests to opt out. We will process requests in accordance with applicable legal timelines and verification rules.

17. Third-Party Services And Links

Our services may include links to third-party platforms, SDKs, and tools. Their policies and practices are governed by their own legal terms and notices. Users should review those policies directly.

18. Policy Updates

We may update this Privacy Agreement to reflect service changes, legal updates, and policy requirements from app stores or regulators. Updated versions will be published with a revised effective date.

19. Contact And Complaints

Privacy and compliance requests can be sent to support@henanyuanrui.com. Key-account compliance coordination can be sent to liupengtong1@henanyuanrui.com.

20. Rights Request Handling Process

To protect users and prevent unauthorized disclosure, rights requests may require identity verification. We may request supplemental details necessary to locate records and validate authority, including account identifiers, market region, and relationship to the data subject.

Where legal exceptions apply, we may limit or deny specific requests and will provide an explanation in accordance with applicable law.

21. Data Processing Roles

Depending on the product and contract, we may act as data controller, joint controller, or processor/service provider. For enterprise clients, role allocation and processing instructions may be further governed by data processing agreements.

Clients remain responsible for obtaining lawful grounds and notices for data they instruct us to process on their behalf.

22. Sensitive Data And Restricted Processing

Unless explicitly required for a lawful and documented purpose, we do not intentionally request or process sensitive personal data categories. If sensitive data is required, additional legal safeguards, security controls, and access restrictions are applied.

Users should avoid submitting unnecessary sensitive information through public or unsecured channels.

23. Language And Interpretation

This Privacy Agreement is drafted in English for international use. If translated versions are provided for convenience, the English version controls to the extent permitted by law in case of inconsistency.