HomeMuse AI Mobile Application Privacy Agreement

Formulated by: Anguo City Nizhaihan Technology Co., Ltd.

Contact Address: No. 227 Tuanjie Road, Zhengzhuang Village, Mingguandian Township, Anguo City, Hebei Province

Contact Email: jordanmanfarrehilp@gmail.com

Effective Date: [March 18, 2026]

Scope of Application: All users of the HomeMuse AI mobile application (hereinafter referred to as the "Application"), which is only provided to natural persons aged 18 and above.

This Privacy Agreement (hereinafter referred to as the "Agreement") is intended to inform you of the relevant rules regarding the collection, use, storage, sharing, and protection of your personal data by Anguo City Nizhaihan Technology Co., Ltd. (hereinafter referred to as "we" or "the Company") when you use the Application, as well as the personal data rights you enjoy. This Agreement is formulated in accordance with data protection laws and regulations in various jurisdictions around the world, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), Virginia Consumer Data Protection Act (VCDPA), Lei Geral de Proteção de Dados (LGPD) of Brazil, and Federal Data Protection Act (FADP) of the United Arab Emirates, and also complies with the privacy policy requirements of the Google Play App Store.

When you start the Application for the first time, you confirm your acceptance of all terms of this Agreement by checking the "Agree" button, which means you agree to our processing of your personal data in accordance with the provisions of this Agreement. If you do not agree to this Agreement, please do not use the Application. The Application has no registration or login function; you can use it directly after checking to agree to this Agreement and the User Terms, and your checking act shall be deemed as your confirmation that you are at least 18 years old.

I. Data Controller and Data Protection Officer (DPO)

1. Data Controller: Anguo City Nizhaihan Technology Co., Ltd., as the sole controller of personal data of all users of the Application, independently determines the purpose, method, and scope of personal data processing.

2. Data Protection Officer (DPO): We have appointed a full-time Data Protection Officer to be responsible for personal data protection related work of the Application. You may communicate with the Data Protection Officer regarding personal data issues through the above-mentioned contact email, and we will respond within [15] working days after receiving your communication request.

II. Scope and Methods of Personal Data Collection

The Application collects your personal data in accordance with the principle of minimum necessity, only collecting information necessary to realize the core functions of the Application and ensure the normal operation of services, and does not collect irrelevant personal data. All data collection activities are conducted after your authorization; you may withdraw the corresponding authorization at any time through the system settings of your mobile device. After withdrawing the authorization, we will stop collecting the corresponding data, but this will not affect the legal data processing activities carried out based on your prior authorization.

(I) Personal Data Collected Based on Application Permissions

1. Camera Permission: After your authorization, we will collect image data taken by you through the camera, which is only used for avatar setting and AI design drawing generation (such as taking a residential structure drawing and uploading it to the Application for decoration style design). We will not collect video or audio data taken by the camera, nor will we start the camera in the background.

2. Album (Image) Permission: After your authorization, we will collect image data you select and upload from the album, which is only used for avatar setting and AI design drawing generation (such as uploading residential structure drawings, reference images, etc.). We will not access, collect, or store other unuploaded images in your album, nor will we obtain the access records of the album.

3. Microphone Permission: After your authorization, we will collect audio data you actively record in the feedback interface, which is only used to receive your service feedback and optimize product experience. We will not start the microphone in the background, nor will we collect any audio data outside the feedback interface.

4. External Storage Permission: After your authorization, we will read/write data generated by the Application, such as design drawings and cache files, to the external storage of your device, which is only used to realize local saving of design drawings and normal caching of application data. We will not access, read, or modify other data in your external storage that is not related to the Application.

5. Application Information Reading Permission: After your authorization, we will collect basic information such as your device's application installation list and application version, which is only used to ensure the compatibility between the Application and your device system and troubleshoot application operation failures. We will not collect application usage records, data caches, or other information.

6. Advertising Identifier Permission: After your authorization, we will collect your device's advertising identifier (such as Android ID, AAID), which is only used for personalized advertising delivery and advertising effect statistics. You may turn off the advertising identifier through your device's system settings; after turning it off, we will stop collecting this data, and this will not affect the use of the core functions of the Application.

(II) Non-Identifiable Data Automatically Collected During Application Use

When you use the Application, we will automatically collect the following device and usage data that cannot individually identify your personal identity, which is used to optimize application performance and analyze user usage behavior:

1. Basic Device Information: Device model, operating system version, screen resolution, network type (WiFi/mobile network), device language;

2. Application Usage Information: Startup time, usage duration, function click records, and design drawing generation request records of the Application;

3. Log Data: Error logs and crash logs during the operation of the Application, which are only used for troubleshooting and application repair.

(III) Personal Data You Voluntarily Provide

Text, audio, and other feedback information you actively provide to us when using the feedback function of the Application or communicating with our customer service, as well as other relevant information you actively provide to solve problems.

III. Purposes of Personal Data Collection and Use

We collect your personal data only for the following legitimate purposes. Without your separate written consent, we will not use personal data for any purposes other than those agreed in this Agreement:

1. Realize the core functions of the Application: Image data collected based on camera and album permissions is used for avatar setting and AI residential design drawing generation to meet your creative needs for residential decoration design; external storage permission is used to realize local saving of design drawings and ensure the retention of your achievements.

2. Optimize product experience and customer service: Feedback audio data collected based on microphone permission and feedback information you voluntarily provide are used to receive your opinions and suggestions and handle your problems in a timely manner; application information reading permission, log data, and basic device information are used to troubleshoot application operation failures, optimize application performance, and improve service stability.

3. Personalized advertising delivery and effect statistics: Relevant data collected based on advertising identifiers is used to push personalized advertisements related to residential design and decoration to you, and at the same time, statistics on advertising display and click effects are made to optimize advertising delivery strategies.

4. Ensure the safe operation of the Application: Collected basic device information and application usage information are used to identify abnormal access, prevent malicious attacks, and ensure the network security of the Application and your usage safety.

5. Comply with legal obligations: Collect and store necessary personal data in accordance with the requirements of relevant laws and regulations, and cooperate with investigations, audits, and other law enforcement actions of regulatory authorities.

IV. Storage of Personal Data

1. Storage Location: We store your personal data on servers in [Asia/Europe/Americas]. All storage servers are equipped with comprehensive security protection measures to prevent data leakage, loss, and tampering.

2. Storage Period: We follow the principle of the shortest storage period and only store your personal data for the period necessary to achieve the use purposes agreed in this Agreement:

• Image data uploaded by camera or album: If you do not manually save it, it will be deleted within [7] natural days after you exit the Application; if you manually save it locally, the backup data on the server will be deleted within [30] natural days;

• Feedback audio data recorded by microphone and voluntarily provided feedback information: Deleted within [30] natural days after processing;

• Basic device information, application usage information, and log data: Saved until [90] natural days after your last use of the Application, and automatically anonymized after the expiration;

• Advertising identifier data: Continuously stored during your authorization period; immediately deleted after you turn off the advertising identifier or withdraw the authorization.

3. Storage Security: We adopt multiple security technical measures such as encrypted storage, access permission control, and firewall protection to ensure the security of your personal data during storage; at the same time, we conduct strict permission management and confidentiality training for employees who have access to personal data, and sign confidentiality agreements to prevent employees from disclosing or misusing personal data.

V. Sharing and Transfer of Personal Data

We strictly protect your personal data and will not sell, rent, or lend your personal data to any third party. We will only share your personal data with third parties in the following limited circumstances, with your separate consent or as permitted by laws and regulations. All sharing activities will be accompanied by a data protection agreement signed with the third party, requiring the third party to process personal data in accordance with the provisions of this Agreement and relevant laws and regulations:

1. To realize the core functions of the Application: Share the image data you uploaded with partners providing AI image generation technology, which is only used to generate residential design drawings for you, and the partners shall not use the data for any other purposes;

2. To optimize advertising delivery: Share your advertising identifier data and non-identifiable usage behavior data with advertising delivery platforms and advertisers, and all shared data has been anonymized and cannot individually identify your personal identity;

3. To comply with legal obligations or protect legitimate rights and interests: Provide your personal data to relevant competent authorities in cases required by laws and regulations, regulatory investigations, judicial litigation, etc.; share personal data within a reasonable and necessary scope to protect the personal and property safety of us, users, or third parties;

4. Enterprise merger, acquisition, or asset transfer: In the event of commercial activities such as enterprise merger, acquisition, or asset transfer, your personal data will be transferred as part of the enterprise assets. We will notify you through in-app pop-ups, announcements, and other means before the transfer, and the transferee will continue to process your personal data in accordance with the provisions of this Agreement.

Special Note: The term "sale" of personal data as used in this Agreement refers to the act of transferring personal data to a third party for the purpose of obtaining economic benefits. We have never had and will never have any act of selling your personal data, so you do not need to worry about your personal data being used for sale.

VI. Your Personal Data Rights

In accordance with data protection laws and regulations in various jurisdictions around the world such as GDPR, CCPA, CPRA, VCDPA, LGPD, and FADP, as the subject of personal data, you enjoy the following personal data rights, and we will provide convenient ways for you to exercise your rights in accordance with the requirements of relevant laws and regulations:

(I) General Rights

1. Right to Know: You have the right to know the specific rules for us to collect, use, store, and share your personal data, i.e., all contents specified in this Agreement;

2. Right of Access: You have the right to request us to provide a copy of your personal data that has been collected;

3. Right to Rectification: If you find that the personal data of yours collected and stored by us is incorrect or incomplete, you have the right to request us to rectify and supplement it;

4. Right to Erasure: You have the right to request us to delete your personal data in the following circumstances:

• The purpose for which we collect and use personal data has been achieved, cannot be achieved, or is no longer necessary;

• You have withdrawn all relevant authorizations;

• We stop providing services of the Application;

• Other circumstances where deletion is required by laws and regulations.

5. Right to Withdraw Consent: You may withdraw your authorization for various permissions of the Application through the system settings of your mobile device at any time, or notify us to withdraw your consent to personal data processing through the contact email. After withdrawing consent, we will stop the corresponding data processing activities;

6. Right to Complain: If you believe that our personal data processing activities violate this Agreement or relevant laws and regulations, you have the right to file a complaint with the local data protection regulatory authority, and we will actively cooperate with the investigation and handling of the regulatory authority.

(II) Additional Rights in Specific Jurisdictions

1. California Consumers (CCPA/CPRA): You have the right to request us to disclose the detailed information on the collection, use, and sharing of your personal data within the past 12 months; you have the right to choose not to allow your personal data to be used for "sharing" beyond the scope agreed in this Agreement (such as joint marketing with third parties); you have the right to request us to delete your personal data, and we shall not discriminate against you for exercising this right (such as increasing service prices or reducing service quality);

2. Virginia Consumers (VCDPA): You have the right to request us to perform data portability processing on your personal data, i.e., provide your personal data to you or a third party designated by you in a structured, common, and machine-readable format; you have the right to restrict our processing of your sensitive personal data;

3. EU/UK Consumers (GDPR): You have the right to request us to perform data portability processing on your personal data; in specific circumstances, you have the right to request us to restrict the processing of your personal data; you have the right to file a complaint with the data protection regulatory authority;

4. Brazilian Consumers (LGPD): You have the right to request us to perform data portability processing on your personal data; you have the right to object to our processing of your personal data for marketing purposes; you have the right to request us to explain the processing activities of personal data;

5. UAE Consumers (FADP): You have the right to request us to rectify, delete, or seal your personal data; you have the right to request us to provide records of personal data processing; you have the right to object to our use of personal data for advertising and marketing purposes.

(III) Methods of Exercising Rights

You may exercise the above personal data rights by sending a written request to us through the contact email specified in this Agreement. To ensure the security of your personal data, we will conduct reasonable verification of your identity after receiving your request (the verification method will be notified to you via email reply). After verification, we will process and reply within the time limit specified by the laws and regulations of each jurisdiction (e.g., 1 month under GDPR, 45 days under CCPA).

Special Note: If you wish to opt out of the sharing or sale of personal data (the Application has no sales behavior, only for sharing), you may directly send a request of "Opt out of data sharing + your device identifier (optional)" through the contact email. We will complete the processing within [7] working days after receiving the request and feedback the processing result to you.

VII. Personal Data Protection Measures

We attach great importance to the security of your personal data and adopt multiple security protection measures including technical, management, and physical measures to comprehensively ensure that your personal data is not leaked, lost, tampered with, or misused:

1. Technical Protection Measures: Adopt end-to-end encryption technology for the transmission and storage of your personal data; desensitize sensitive data such as images and audio; set encrypted permissions for data access, so that only authorized personnel can access relevant data;

2. Management Protection Measures: Establish a sound personal data protection management system to clarify the responsibilities of each link of data processing; conduct strict background checks and confidentiality training for employees who have access to personal data, sign confidentiality agreements, and set hierarchical permissions for data access; regularly conduct compliance inspections on personal data protection to timely identify and rectify potential security hazards;

3. Physical Protection Measures: Provide 24-hour physical security for the server computer room storing personal data, set up access control, monitoring, fire protection, and other facilities to prevent servers from being illegally accessed or damaged;

4. Emergency Handling Measures: Formulate emergency plans for security incidents such as personal data leakage and loss. In the event of a security incident, we will immediately take remedial measures to prevent the expansion of losses, and promptly notify affected users and local regulatory authorities in accordance with the requirements of relevant laws and regulations.

VIII. Third-Party Services

The Application may contain SDKs (Software Development Kits) developed by third parties and third-party links, and third parties may collect your relevant data, as follows:

1. Third-Party SDKs: The advertising delivery SDKs, statistical analysis SDKs, and AI image generation SDKs integrated in the Application will collect your relevant data in accordance with their own privacy policies. We have conducted strict reviews on all integrated SDKs, requiring them to collect data in accordance with the principle of minimum necessity and ensure data security; you may query their privacy policies through the official websites of each SDK provider;

2. Third-Party Links: The Application may contain third-party website and application links related to residential design and decoration. Clicking such links will redirect you to third-party platforms. The personal data processing behaviors of third-party platforms have no connection with us, and we shall not bear any responsibility. It is recommended that you carefully read the privacy policies of third-party platforms.

IX. Modification and Update of the Agreement

We have the right to modify and update this Agreement in accordance with the update of laws and regulations and the adjustment of the functions of the Application. After the modification of this Agreement, we will notify you through prominent means such as in-app pop-ups and announcements, and the modified Agreement will take effect on the effective date specified in the notice. If you continue to use the Application, it means you agree to accept the modified Agreement; if you do not agree, you should stop using the Application immediately.

X. Legal Basis and Jurisdiction

1. Legal Basis for Data Processing: The legal bases for us to process your personal data include:

• Your explicit consent: Such as your authorization of camera, album, microphone, and other permissions, and checking to agree to this Agreement;

• To perform the contract: Necessary personal data that must be processed to provide you with the core services of the Application;

• To comply with legal obligations: Such as cooperating with regulatory investigations, judicial litigation, etc.;

• To protect legitimate rights and interests: Process personal data within a reasonable and necessary scope to protect the personal and property safety of us, users, or third parties.

2. Governing Law: The conclusion, performance, interpretation, and dispute resolution of this Agreement shall all be governed by the laws of [Singapore/Hong Kong/UK] (which can be adjusted according to actual needs). If any dispute arises between you and us due to this Agreement, it shall first be resolved through friendly negotiation; if negotiation fails, either party has the right to file a lawsuit with the competent court of [Singapore/Hong Kong/UK].

XI. Other Terms

1. This Agreement is a supplementary agreement to the User Terms of the HomeMuse AI Application and has the same legal effect as the User Terms. If there is any conflict between this Agreement and the User Terms, this Agreement shall prevail;

2. If any term in this Agreement is deemed invalid, voidable, or unenforceable, it shall not affect the validity, voidability, and enforceability of other terms;

3. Your use of the Application shall be deemed as your full understanding and acceptance of all contents of this Agreement, including subsequent modifications and updates.

Anguo City Nizhaihan Technology Co., Ltd. reserves the final interpretation right of this Agreement.