Privacy Policy

1. Account registration and verification:When you register an account, you need to provide your mobile phone number. We collect this information to create your unique account, complete identity verification, keep your account secure, and send you notifications that are necessary and closely related to the service (such as security verification and feature updates).

2. Device connection and management:To provide the core smart toy connection and control features, we need to request and obtain device permissions such as Bluetooth and location (used only to discover and connect to nearby devices). We collect device identifiers for the smart toy (such as serial number and MAC address), connection status, firmware version and basic operating data in order to bind, pair, remotely control and synchronize the status of your device.

3. Interaction content processing:When you, or a child under your guardianship, use the voice interaction, image recognition or touch feedback features of the smart toy, the relevant data will be processed. We solemnly state and undertake that:

• Local processing first:To keep real-time interaction responsive with low latency, audio, image and other data involved in real-time analysis is processed locally on the smart toy hardware or on your mobile device, and is deleted once processing is complete. It is not uploaded to our servers.
• Minimal upload:Solely to deliver advanced features such as continuous learning (for example, improving the conversation model), personalized content recommendations and generated interaction reports (such as weekly activity summaries), we upload the necessary non-sensitive interaction logs — for example the type of interaction command, timestamps and content preference tags — after the information has been anonymized or de-identified.

4. Parental controls and safeguards:To help you carry out your parental responsibilities, we provide features such as usage time management, content access restrictions, rest reminders and access to interaction reports. To do this, we process the rules you set yourself and the anonymized interaction logs described in point 3 above.

5. Service security and optimization:To keep our services secure and stable and to prevent and resolve faults, we automatically collect device information (such as model and operating system version), app version number, network logs (IP address) and crash logs. This information is used for statistical analysis and is not used to identify a specific individual.

6. Exceptions to obtaining authorization and consent:Under the Personal Information Protection Law (《个人信息保护法》, "PIPL"), we may process your personal information without obtaining your authorization or consent in the following circumstances:

• Where necessary to enter into or perform a contract to which you are a party;
• Where necessary to perform a statutory duty or statutory obligation;
• Where necessary to respond to a public health emergency, or to protect the life, health or property of a natural person in an emergency;
• Where personal information is processed within a reasonable scope for news reporting, public opinion oversight or similar activities carried out in the public interest;
• Where personal information that you have made public yourself, or that has otherwise been lawfully made public, is processed within a reasonable scope in accordance with this Law;
• Other circumstances provided for by laws and administrative regulations.

1. Sharing:We will not share your personal information with any company, organization or individual, except in the following circumstances:

• After obtaining your explicit and separate consent.
• Where necessary to deliver a specific feature, we share information with our authorized partners within the scope required. For example, to provide content services or data analytics, we may share the necessary non-personal or anonymized data with service providers bound by strict contractual obligations. We share only the information required to achieve the purpose, and we ensure that it cannot be used to re-identify an individual.
• Where required by laws and regulations, where necessary to resolve a dispute in legal proceedings, or at the request of a competent administrative or judicial authority.

2. Transfer:We will not transfer your personal information to any other company, organization or individual, except in connection with a merger, acquisition or asset transfer, in which case we will require the new holder to remain bound by this policy.

3. Public disclosure:We will publicly disclose your personal information only with your explicit consent, or where required by law or by an order from a competent state authority.

4. Exceptions to obtaining prior authorization and consent when sharing, transferring or publicly disclosing personal information:Where one of the circumstances listed in item 6 of Section 1 applies, we may not need to obtain your prior consent.

1. Storage location:Personal information we collect and generate in the course of our operations within the People's Republic of China is stored within China.

2. Retention period:We retain your personal information only for the shortest period necessary to achieve the purposes described in this policy. Once the retention period expires, we will delete or anonymize the information as required by laws and regulations.

3. Security measures:We have adopted security safeguards that meet industry standards, including but not limited to:

• Technical safeguards:We use encryption to transmit and store sensitive data; we apply strict access control and permission management; and we carry out regular security audits and vulnerability scans.
• Management measures:We maintain internal controls covering the full lifecycle of personal information, from collection and storage through use and destruction; all employees receive mandatory privacy and security training and are required to observe confidentiality obligations.
• Incident response:We maintain an emergency response plan for personal information security incidents. In the unfortunate event of an incident, we will activate the plan promptly as required by law, take remedial measures, report to the competent authorities and notify you.

1. Access and correction:You can access and correct your personal information — such as your account details and preference settings — at any time from the "Me" or "Account settings" page in the app.

2. Deletion and withdrawal of consent:You may ask us to delete your personal information or withdraw a consent you have given in the following circumstances:

• The purpose of processing has been achieved, cannot be achieved, or is no longer necessary for that purpose;
• We stop providing the product or service, or the retention period has expired;
• You have withdrawn your consent;
• We process personal information in violation of laws, administrative regulations or our agreement with you.

You may withdraw a specific authorization at any time by turning off the relevant device permission or the feature switch in the app. Withdrawing your consent does not affect processing carried out on the basis of your authorization before the withdrawal.

3. Account deletion:You can request account deletion through the in-app instructions or by contacting customer support. Once your account is deleted, we will stop processing your personal information and will delete or anonymize it as required by law, except where laws or regulations provide otherwise.

4. Responding to your requests:For security purposes, we may ask you to submit a written request or to verify your identity. We will respond within 15 business days. In principle, we do not charge a fee for reasonable requests.