Privacy Policy for Viken APP

Preface

Viken APP (hereinafter referred to as the “APP” or “Application”) is a mobileapp product provided by Guangzhou Viken Communication Technology Co., Ltd. (hereinafter referred to as “we” or “our Company”).

We attach great importance to user privacy. When you use our products and services, we may collect and process your relevant information. Through this Privacy Policy, we aim to explain how we collect, use, store and protect such information when you use our services, as well as the means available for you to access, update, control and safeguard your information.

This Privacy Policy is closely related to the services you receive from our Company. Please read it carefully prior to using the APP, and use our products and services only after you fully understand and consent to its contents. By commencing use of our products or services, you are deemed to have fully understood and accepted this Policy.

I. How We Collect and Use Your Information

1.1 Information You Provide to Us

We collect necessary personal information respectively in accordance with the minimumnecessity principle when you use different business functions, as detailed below:

· Upon registration or login: We collect information you actively provide such as mobilephone number, email address and password for account creation and management.

· When using the receivingaddress management function: We collect recipient name, contact number, region and detailed delivery address provided by you.

· When using thirdpartyaccount login or sharing functions: We collect necessary information returned upon thirdparty authorization, including nickname, avatar and OpenID.

· When using log diagnosis and crashreporting features: We collect device model, system version, crash logs and error logs.

· For functions involving camera shooting, audio recording, photoalbum access, WiFi and similar capabilities: We access relevant information only after you grant corresponding permissions.

We will not collect personal information irrelevant to the services we provide. We adopt compliant technical measures to encrypt and store information for which you have given explicit consent, so as to protect the security of your personal information.

1.2 Purposes of Information Obtained During Your Use of Services

We collect information generated from your service usage for the purposes specified below:

Log Information

When you use our services, we will automatically collect certain information and store it in server logs or write it to your mobile device’s external storage. Such information includes:

When errors, exceptions or application crashes occur during runtime, error logs will be written to external storage. You may choose whether or not to submit such logs to us.

II. How We Store Your Personal Information

Pursuant to applicable laws and regulations, personal information collected within mainland China shall be stored domestically. We will not transmit your personal information overseas unless required by law or with your separate explicit consent.

We retain your personal information only for the period necessary to fulfil the purposes stated in this Privacy Policy and within retention periods prescribed by laws and regulations. We deploy various security technologies and procedures to prevent information loss, misuse, unauthorised access or disclosure. For instance, certain services employ encryption technologies such as SSL to protect your personal information. Please note that due to technical limitations and potential malicious attacks prevalent in the internet industry, 100 % absolute information security cannot always be guaranteed even with maximum security safeguards in place.

III. Sharing, Transfer and Public Disclosure of Your Personal Information

Sharing

· We will not share your personal information with any company, organisation or individual, except under the following circumstances:

1. We share your personal information with thirdparties upon obtaining your explicit consent.

2. We may share your personal information pursuant to laws and regulations, for disputeresolution needs, or in response to lawful requests from administrative or judicial authorities.

3. To the extent permitted by law, sharing is necessary to protect the interests, property or safety of our affiliates, partners, you, other users or the general public from damage.

4. Intraaffiliate sharing: When our affiliates provide services to you or to us, we may share your personal information with such affiliates. Only necessary personal information will be shared, and affiliates shall process your information subject to this Policy. If an affiliate intends to change the purpose of processing your personal information, renewed authorisation and consent will be obtained from you.

5. Sharing with partners: Subject to legitimate, proper, necessary, specific and clearlystated purposes described in this Policy and upon your explicit authorisation and consent, we share necessary personal information (or SMS / incomingcall numbers you report) with our suppliers, service providers, consultants, agents, thirdparty advertisers, application developers, openplatform operators and other partners. We may also share aggregated, anonymised or otherwise nonidentifiable information that cannot trace back to you personally (for example, we may inform application developers how many users have installed their applications), to improve customer service and user experience. Such suppliers, service providers and agents may deliver technical infrastructure services, analyse serviceusage patterns, measure the effectiveness of advertisements and services, provide customer support and payment services, conduct academic research and surveys, or offer legal, financial and technical consulting services. For example, we may periodically invite you to participate in prize draws. If you win a prize, we will provide your personal information to logisticsservice providers for prize delivery or arrange for partners to perform relevant services. None of our partners may use shared personal information for purposes unrelated to our products and services.

6. We enter into strict dataprotection agreements with companies, organisations and individuals receiving shared personal information, requiring them to process personal information in accordance with our instructions, this Policy and other applicable confidentiality and security measures.

Transfer

· We will not transfer your personal information to any company, organisation or individual, except under the following circumstances:

1. As our business evolves, we and our affiliates may conduct mergers, acquisitions, asset transfers or comparable transactions. If such transactions involve transfer of your personal information, we will require the new holder of your personal information to remain bound by this Policy; otherwise, such entity shall obtain renewed authorisation and consent from you.

2. To satisfy statutory requirements, legal procedures, mandatory government orders or judicial rulings.

3. Transfer upon your explicit consent: we will transfer your collected personal information to thirdparties after obtaining your explicit consent.

Public Disclosure

· We publicly disclose your personal information only under the following conditions:

1. Your explicit consent has been obtained.

2. We may publicly disclose your personal information in response to laws, legal proceedings, litigation or mandatory requirements issued by competent government authorities.

3. To the extent permitted by law, disclosure is necessary to protect the interests, property or safety of our affiliates, partners, you, other users or the general public from damage.

4. Other circumstances stipulated by laws and regulations.

5. Pursuant to law, sharing or transfer of deidentified personal information shall not constitute external sharing, transfer or public disclosure of personal information, provided that recipients cannot restore and reidentify the data subject. No further notice or consent is required for storage and processing of such data.

IV. Explanation of APP Permissions

To guarantee normal operation of application functions and effectively protect your personalinformation security, usage scenarios for location, camera, audiorecording and readwritestorage permissions are specified below:

1. Location Permission: This permission is mainly required for older Android devices to complete Bluetooth device discovery.

2. Camera Permission: Used exclusively for userinitiated operations: taking or selecting images for profilephoto updates, capturing or selecting screenshots for feedback submission, helping you complete personalinformation edits and report issues.

3. AudioRecording Permission: Dedicated to translation functions. It captures your voice input, translates it into your target language and plays translation results to support voicetranslation features.

4. ReadWriteStorage Permission: Used for three core scenarios: reading image files from device storage for upload; saving local logs generated during app runtime for troubleshooting and service optimisation; supporting firmware download and upgrade for proper function updates of the APP and connected hardware.

5. Phone Permission: Reads phone call status. Certain features cannot run during an active call. The APP detects call status before executing these functions and prompts you to end ongoing calls; otherwise feature malfunctions may impair user experience.

Permissionuse Principle: All permissions above are requested only when you invoke corresponding functions. Permissions are active solely during function execution in strict compliance with the principle of ondemand use, revocation upon completion. No permissions will be misused. You may review, enable or revoke any permission at any time in your device system settings. Revoking a permission only disables associated features and will not affect other basic APP functions.

V. How to Withdraw Consent for PersonalInformation Collection

Under the Personal Information Protection Law of the People’s Republic of China, you have the right to withdraw your consent for personalinformation collection. Convenient withdrawal channels are provided as follows:

1. Withdrawal via systemlevel settings: Locate this APP in your device system settings, enter the permissionmanagement page and review, enable or disable individual permissions to withdraw consent for corresponding data collection.

2. InAPP withdrawal: Open the APP, go to Me – About Us, locate the PersonalInformation Authorisation Management option and withdraw your consent for personalinformation collection.

After consent withdrawal, only relevant functions will be affected; basic APP functions will continue to operate normally. Withdrawal shall not invalidate prior personalinformationprocessing activities performed with your consent. We will cease further collection of your relevant personal information and handle alreadycollected data in accordance with this Privacy Policy, without unauthorised retention, use or disclosure.

VI. ThirdParty SDK Information

表格

VII. Processing of Minors’ Personal Information

We attach great importance to the protection of minors’ personal information. Provision of our products and services does not rely on age identification. Nevertheless, our products and services are intended for adults with full civil capacity. If you are a child or a minor under 18 years of age, please ask your parents or other legal guardians to read this Privacy Policy carefully. You may use our services or submit personal information only with their consent and under their supervision. If you collect or submit personal information of minors through our products and services for purposes such as interacting with children, you must ensure prior authorisation and consent have been obtained from their legal guardians.

VIII. Amendments and Revisions to the Privacy Policy

This Privacy Policy may be revised. Without your explicit consent, we will not restrict your rights conferred under this Privacy Policy.

For material revisions to this Privacy Policy, prominent notifications will be provided (e.g. popup alerts triggered upon APP upgrade or your next login).

IX. Correction, Deletion and Account Cancellation

You have the right to correct, supplement or delete your personal information or cancel your account at any time. You may navigate within the APP via Me – Settings – Personal Information or Account & Security to edit onlinemodifiable items including avatar, nickname and mobilephone number. If operations cannot be completed withinAPP or you need to delete data beyond inAPP functions, submit a request via the contact email specified under “How to Contact Us”. Upon identity verification, we will process your application promptly, normally within fifteen (15) working days. For accountcancellation requests, verification and processing will be completed after your confirmation; manualreview cases will also be finalised within fifteen (15) working days. We will not impose irrelevant additional conditions, nor will we deny corefeature access because you exercise these rights.

X. How to Contact Us

If you have any questions, comments, suggestions, complaints or reports regarding this Privacy Policy or our processing of your personal information, please reach us via the channel below. We will verify your feedback and reply promptly, normally within fifteen (15) working days.

Contact Email: huanyu@viken.cn

XI. Effective Date of the Privacy Policy

Version Update Date: 24 August 2026. This Privacy Policy shall take effect on 24 August 2026.