Legal Notice and Privacy Policy Effective Date: June 1, 2026 Operator: Guangdong Amos Intelligent Equipment Co., Ltd. ================================================================ [Table of Contents] I. Introduction II. Definitions III. Information Collection and Use IV. Information Sharing, Disclosure, and Sale V. Your Rights and Choices VI. Information Security Measures VII. Protection of Minors VIII. Cross-Border Data Transfers and Data Storage IX. Policy Updates X. Contact Us XI. Legal Notice ================================================================ I. Introduction Thank you for using the ScentOS App (hereinafter referred to as "this Application"). This Application is operated by Guangdong Amos Intelligent Equipment Co., Ltd. (hereinafter referred to as "we", "us", or "our"). Your trust is very important to us. We take the security of your personal information seriously and adopt appropriate technical and organizational measures to protect it. This Privacy Policy describes how we collect, use, store, share, and protect your personal information. It applies to all users of this Application. If you are a resident of the United States, this Policy is intended to comply with applicable U.S. state privacy laws, including but not limited to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, "CCPA/CPRA"), the Virginia Consumer Data Protection Act ("VCDPA"), the Colorado Privacy Act ("CPA"), and the Connecticut Data Protection Act ("CTDPA"). If you have any questions about this Policy, please contact us using the information in Section X (Contact Us). By using this Application, you acknowledge that you have read and understood this Privacy Policy. ================================================================ II. Definitions 1. **Personal Information** means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. This includes, but is not limited to: identifiers such as name, telephone number, email address, postal address, online identifier, IP address, device ID; commercial information such as transaction records; internet or other electronic network activity information; geolocation data; and inferences drawn from any of the above used to create a profile about a consumer. Personal Information does not include de-identified or aggregated data, or publicly available information. 2. **Sensitive Personal Information** includes precise geolocation, and any other categories designated as sensitive under applicable laws. 3. **Business Data** means data that you upload, download, store, or process when using our services. 4. **Sale** means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer's personal information by the business to a third party for monetary or other valuable consideration. We do not sell personal information as defined under the CCPA or any other applicable law. 5. **Service Provider** means a third party that processes personal information on our behalf and pursuant to a written contract that prohibits the service provider from retaining, using, or disclosing the personal information for any purpose other than performing the services specified in the contract. ================================================================ III. Information Collection and Use 1. **Collection Scenarios and Purposes** (1) **Account Registration**: We collect your phone number or email address to create and maintain your account. (2) **Device Binding**: With your authorization, we collect your device's location information (Bluetooth/WiFi-based geolocation) and facilitate Bluetooth pairing to connect your Smart Fragrance device. (3) **Device Binding (Camera/Photo Access)**: With your authorization, we may access your camera and photo album to scan a QR code for device binding purposes. (4) **Technical Information**: We may automatically collect certain technical information when you use the Application, such as device model, operating system version, unique device identifiers, IP address, app usage statistics, and crash logs. This information is used for app functionality, troubleshooting, and service improvement. 2. **Use of Information** We use the collected information for the following purposes: - To create and manage your account; - To enable device pairing and control of your Smart Fragrance device; - To provide customer support and respond to your inquiries; - To improve and optimize the Application's performance and user experience; - To comply with legal obligations. 3. **Cookies and Similar Technologies** This Application does not use cookies or similar tracking technologies for advertising or behavioral profiling purposes. Standard technical identifiers (e.g., device ID, IP address) are used strictly for operational purposes such as device connectivity, app functionality, and analytics to improve performance. ================================================================ IV. Information Sharing, Disclosure, and Sale We respect your privacy and limit the sharing of your personal information. We do NOT sell your personal information to third parties, nor do we share it for cross-context behavioral advertising purposes. **(I) When We May Share Your Information** We may share your personal information only in the following circumstances: 1. **With Your Consent**: We will share your information with third parties when we have obtained your explicit consent. 2. **Service Providers**: We may share necessary personal information with third-party service providers who perform services on our behalf (e.g., cloud hosting, customer support, analytics). These providers are contractually bound to process your information only as instructed by us and in compliance with this Policy and applicable law. 3. **Affiliated Companies**: We may share your information with our affiliated companies, who will be bound by the same level of protection described in this Policy. 4. **Legal Compliance**: We may disclose your information if required to do so by law or in response to valid legal process (e.g., a court order, subpoena, or government demand). 5. **Protection of Rights and Safety**: We may disclose your information when we believe in good faith that disclosure is necessary to protect the rights, property, or personal safety of our users, our company, or the public. 6. **Business Transfers**: In the event of a merger, acquisition, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will require the acquiring entity to honor the commitments in this Policy, or notify you before your information becomes subject to a different policy. **(II) No Sale of Personal Information** We do not and will not sell your personal information to third parties for monetary or other valuable consideration. Because we do not sell your personal information, we do not offer an opt-out from the sale of personal information. However, you still have the right to request that we not sell your personal information (even though we do not do so). **(III) Exceptions** We may also use or disclose your information without your consent where required or permitted by applicable law, including to: - comply with legal obligations; - cooperate with law enforcement or government agencies; - protect against fraud or security threats; - exercise or defend legal claims. ================================================================ V. Your Rights and Choices Depending on your state of residence (e.g., California, Virginia, Colorado, Connecticut), you may have the following rights under applicable U.S. privacy laws. We will process your requests in accordance with applicable law. **1. Right to Know** You have the right to request that we disclose the following information about our collection and use of your personal information over the past 12 months: - The categories of personal information we have collected about you; - The categories of sources from which we collected the personal information; - The business or commercial purpose for collecting your personal information; - The categories of third parties with whom we shared your personal information; - The specific pieces of personal information we have collected about you. **2. Right to Delete** You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (e.g., to complete a transaction, detect security incidents, comply with legal obligations). **3. Right to Correct** You have the right to request that we correct inaccurate personal information that we maintain about you. **4. Right to Data Portability** You have the right to request a copy of your personal information in a structured, commonly used, and machine-readable format, to the extent technically feasible. **5. Right to Opt-Out of Sale or Sharing** You have the right to opt out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising. As stated in Section IV, **we do not sell your personal information**, and we do not engage in such sharing. **6. Right to Non-Discrimination** We will not discriminate against you for exercising any of your privacy rights. This means we will not: deny you goods or services, charge you different prices or rates, or provide you a different level of quality of services. **7. Account Information Inquiry** You may view your account information at any time by navigating to "My" within the Application. **8. Account Cancellation** You have the right to cancel your account at any time. After cancellation: (1) You will no longer be able to log in to this Application using that account. (2) Your personal data, history records, and data (such as order information, usage records, etc.) will be permanently deleted or anonymized. (3) You will lose all rights and benefits associated with that account. (4) You will not be able to recover deleted data or reactivate a canceled account. - **Steps**: 1) Log in to your account and go to the "My" page. 2) Find "About Us" and select "Delete Account and Log Out." 3) Follow the prompts to complete the cancellation process. - **Data Retention**: Transaction records will be retained for 3 years (as required by applicable law). **9. Revocation of Cancellation** Before the cancellation process is completed, you may withdraw your cancellation request at any time. Once completed, the account cannot be recovered. **10. Authorized Agent** You may designate an authorized agent to submit a privacy rights request on your behalf. We may require the agent to provide proof of your written authorization and verify their identity. **How to Exercise Your Rights** To exercise any of the rights described above, please submit a verifiable consumer request to us using the contact information in Section X (Contact Us). We will confirm receipt of your request within 10 business days and respond substantively within 45 days, or inform you if we need additional time (up to a total of 90 days). We may need to verify your identity before processing your request. ================================================================ VI. Information Security Measures 1. We implement reasonable physical, electronic, and administrative security measures to protect your personal information from unauthorized access, disclosure, use, modification, damage, or loss. These include encryption of data in transit, access controls that limit data access to authorized personnel only, and regular security training for employees. 2. We retain your personal information only for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. After the retention period, we will delete or anonymize your personal information. 3. In the event of a data security incident (breach, leak, or loss), we will notify you and any applicable regulatory authorities as required by law. Notification will be provided without unreasonable delay and, where required by law, within 30 days of discovery of the breach. We will inform you of the nature of the breach, the types of information involved, steps we have taken or will take to address it, and recommendations to mitigate potential harm. 4. In the event our services cease operations, we will take reasonable measures to protect your information, including ceasing further collection, notifying users, and deleting or anonymizing held personal information. 5. Before using your information for a purpose materially different from that stated at the time of collection, we will notify you and obtain your consent where required by law. ================================================================ VII. Protection of Minors This Application is not directed at or intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child under 13 has provided us with personal information, please contact us immediately. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete such information promptly. ================================================================ VIII. Cross-Border Data Transfers and Data Storage Your personal information is primarily stored and processed on servers located in Hong Kong, China. By using this Application, you understand that your information will be transferred to and stored in Hong Kong, China. We take appropriate safeguards to protect your personal information during cross-border data transfers, including entering into data processing agreements that require the recipient to maintain a level of data protection consistent with applicable laws. ================================================================ IX. Policy Updates 1. We may update this Privacy Policy from time to time. 2. If we make material changes, we will notify you by posting the updated policy on this page and, where appropriate, through in-app notification or other prominent means. Material changes include, but are not limited to: - Changes in the categories of personal information we collect; - Changes in the purposes for which we use personal information; - Changes in how we share personal information with third parties; - Changes in your rights under this Policy. 3. The "Effective Date" at the top of this page indicates when this Policy was last revised. ================================================================ X. Contact Us If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: - Email: yangjunjie@amosaroma.com - Privacy Requests Email: yangjunjie@amosaroma.com (please include "Privacy Request" in the subject line) - Response Time: We will acknowledge receipt of your request within 10 business days and respond substantively within 45 days. ================================================================ XI. Legal Notice 1. **Intellectual Property**: All content of this Application—including but not limited to our logo, brand names, text, graphics, images, audio, video, icons, layout designs, and electronic documents—is owned by or licensed to Guangdong Amos Intelligent Equipment Co., Ltd. and is protected by applicable intellectual property laws. Unless otherwise stated, you may not reproduce, distribute, modify, display, or create derivative works of any content without our prior written permission. 2. **Disclaimer**: You are responsible for complying with all applicable laws when using this Application. We are not liable for any damages arising from your use of the Application to the maximum extent permitted by applicable law. The Application is provided "as is" without warranties of any kind, either express or implied. 3. **Intellectual Property Protection**: We respect the intellectual property rights of others. If you believe that any content available through this Application infringes your intellectual property rights, please notify us at the contact information provided in Section X. We will review and respond to valid infringement notices in accordance with applicable law. ================================================================