Full Privacy Policy

Introduction

The "Longto App Privacy Policy" (hereinafter referred to as "this Privacy Policy") stipulates how Suzhou Longto Technology Co., Ltd. and its affiliates (hereinafter referred to as "Longto Technology" or "We") collect, use, disclose, share, transfer, store, and protect your personal information, as well as the rights you enjoy. We deeply understand the importance of personal information to you and will comply with legal and regulatory requirements, implement corresponding security protection measures, and do our utmost to protect the security and management of your personal information.

This Privacy Policy applies only when you use the Longto App (hereinafter referred to as the "App"), an online application accompanying Longto smart devices (hereinafter referred to as "Devices"), and we process your personal information. It does not apply to any other Longto Technology products, services, websites, features, or content that have independent privacy policies. For example, the processing of personal information when using a Device is governed by the corresponding privacy policy for that Device.

Please note that our products and services may contain third-party products, services, and links to third-party websites. When you use these products and services or access third-party websites via links, third parties may also collect your personal information. This Privacy Policy does not apply to the personal information processing activities of any third-party provided products, services, or other third-party websites accessed via App links, and we assume no responsibility for any third party's personal information processing activities. We strongly recommend that you carefully read the third party's privacy protection policy so you can make an informed decision.

This Privacy Policy will help you understand the following:
I. How We Collect and Use Your Personal Information
II. How We Entrust Processing, Share, Transfer, and Disclose Your Personal Information
III. How We Store and Protect Your Personal Information
IV. Your Rights
V. Protection of Minors
VI. Updates to This Privacy Policy
VII. How to Contact Us

I. How We Collect and Use Your Personal Information

(I) Collection and Use of Personal Information Necessary for Providing Basic Functions

To provide App-related services, we collect and use the personal information necessary to provide the basic functions of the App. You are not legally obligated to provide the following personal information, but if you do not provide it, we may be unable to provide the basic functions of the App.

1. Longto Account Creation and Login

To smoothly complete the creation of a Longto account, you need to provide an email address and set a password for the Longto account.

When logging into your Longto account, we collect your account authentication information, including: (1) Account name, password, email address and verification code, email address (for identity verification); (2) Token (login token) for maintaining login status. Additionally, when creating or logging into a Longto account, we collect the region and country code you selected to assist in determining the data center to which your Device and mobile device connect.

If you use a third-party account (such as National Network Identity Authentication credentials, WeChat account, Apple ID, etc.) to log into the App, we will collect your third-party account information, specifically in accordance with the scope you authorize.

Since the email address is crucial information for logging into the App, this information is always stored within the mobile device running the App. If you wish to delete this Longto account information, you can choose to delete the Longto account using the method described in Chapter IV below. After deleting the Longto account, if you also wish to delete the local cache, you need to delete the App from your mobile device.

2. Maintaining Longto Account Information

To assist you in managing and maintaining your Longto account, you can set your profile picture and nickname yourself, and choose to bind other account information beyond the registration information (mobile phone number, email address, or third-party accounts like National Network Identity Authentication, WeChat account, Apple ID).

Your profile picture is only used for display on the profile page and member center. When uploading/changing your profile picture, we will request access to your album, external storage read permission, and collect the image information you upload/change. If you refuse these permissions, you will not be able to set your own profile picture, but this will not affect your use of other functions of our products and/or services.

You can fill in basic personal profile information and home environment information yourself. If you fill in your birthday information, we will provide you with birthday exclusive benefits. If you fill in provincial/municipal information, we will provide location-related functions based on this. For example, when connecting to a voice-controlled cleaning device and asking about the weather, we will call up the filled provincial/municipal information to provide local weather conditions.

We may also push corresponding questionnaires to different user groups based on the filled personal profile, but we do not perform user profiling based on this. Choosing not to fill in the personal profile will not affect your use of other functions of our products and/or services.

3. Device Network Connection and Binding

If you need to use the Device under network connection, to support you in securely connecting and operating the Device via the App, you need to connect your Longto account, mobile device, and the Device to your WiFi network for network configuration and bind the Device within the App. During this process, we collect:

• (1) Longto account information;
• (2) Mobile device information: including device model, device identifier (Android ID/OAID/GUID/IDFV/OPEN UDID), network card (Mac) address, operating system and its version;
• (3) Your Device information: including device model, serial number (SN), network card (Mac) address;
• (4) Timezone setting information for executing cloud timer tasks and realizing smart scenes;
• (5) WiFi network information: including the currently connected WiFi name, WiFi mode (local network mode, remote mode), IP address, received WiFi signal strength indicator (Device RSSI), and the WiFi password you proactively provide. Your password information is only stored on the Device terminal and is not uploaded to our backend servers. You can clear the WiFi name and password at any time by deleting the Device and uninstalling the App.

4. Display of Device Information

To help you better understand the status of your Devices, we display the device name you edited yourself and the device status information on the App. For details about such Device information we collect, please refer to the privacy policy corresponding to each Device you bind.

5. Device Firmware Upgrade

We may collect the firmware version information, device model, and binding status of Devices bound to the App and Longto account to provide the device firmware version upgrade function. If you choose to turn on the automatic update function, we will select an update time based on your region to complete the update during nighttime hours that do not cause disturbance.

6. Maintaining App Operational Stability and Security

During the use of the App, to maintain its operational stability and security, we need to collect App crash information and mobile device-related information, including the mobile device's system version, language settings, mobile device model, and connected device models.

7. Use of Devices

When using Devices bound to your Longto account, Longto Devices (such as vacuum cleaners, subject to what you actually purchased) collect image data of the surrounding environment to provide cleaning services. Such image data is only stored on your Device terminal and is not uploaded. For details, please see the device privacy policy displayed when using the Device.

When using the smart speaker control function, you need to add our Device to a third-party platform. Under such circumstances, we collect the user ID, robot device nickname, device ID, and device model information and provide it to the third party. The relevant third parties are Xiao Ai Tongxue, Xiao Du Smart Speaker, and Tmall Genie mentioned in "Third-Party Partners".

(II) Collection and Use of Personal Information Necessary for Providing Additional Functions

To provide more convenient and high-quality services and enhance your App usage experience, we may collect and use your personal information when providing the following additional services. If you choose not to provide the information required for additional services, you can still use the basic functions of the App mentioned above, but you may be unable to use these additional functions that bring higher quality services.

1. Device Sharing

To support you in sharing specific Devices with others for joint control and use, if you choose to share a specific Device with others, we collect your account (email address), recipient account, and shared device information to realize the device sharing function and display the sharing status on the device list page. You can cancel the sharing via "Me > Device Sharing" in the App.

2. Customer Service

To provide product and service-related support services, if further human assistance is needed, the smart assistant will automatically transfer to a third-party service provider entrusted by us, who will help connect your request to human customer service.

During communication with customer service (including smart assistant and human customer service), we collect the information you proactively provide to better resolve your issues. Depending on the type of after-sales service you select, we may use UID, order information, corresponding serial number (SN), and personal information you proactively fill in (including recipient name, delivery address, recipient contact phone number, problem description). When adding or taking photos/videos, we will seek your consent to enable camera, album access permission, and external storage read permission.

Please note: To better provide services, when using the self-service smart Q&A service, we anonymize your conversation records and use them to train the smart assistant algorithm model without being able to identify your identity. During the use of the smart assistant, we will prompt you through clear display not to input privacy information you do not wish to provide to us.

3. Problem and Feedback Submission

Your feedback is very important for service improvement and helping resolve issues encountered during App and Device use. To track and process the feedback you provide, we collect the UID, feedback information (including text, images), device identifier, mobile device model name, and system version that you proactively provide. Additionally, if problems occur during App use, you can choose to upload App log information to help resolve daily usage issues.

4. User Care & Survey Activities and Information Push

To improve our products and services and further enhance user experience, we may push information that may be of interest to you and invite you to participate in product free trial activities, beta service experience activities, or other user care and survey activities. After you explicitly grant consent, we use region, device type, and activation time information for information push.

Depending on the specific circumstances of the activity, we may collect name, gender, mobile phone number, delivery address, Longto account information, and other information required for the activity (subject to the specific activity you participate in) via questionnaire. If you successfully participate in the activity, this information will help us contact you and ship test products or gifts.

5. Widget Function and Self-Startup

When using the App desktop widget, to enable you to receive and understand device status information in a timely manner, the App performs self-startup actions at a certain frequency. This action is necessary to realize the widget function. If you are not using the App desktop widget, the App will not self-start.

6. Information Display and Push

We may send device notifications and system notification messages within the App. For this purpose, we collect and use Longto account information, device ID, mobile device system information, and device model. You can contact us using the method described in Chapter 7 of this Privacy Policy to request stopping information push.

7. User Experience Improvement Program

To continuously improve our products and services and enhance the service experience, we specially invite you to participate in the Longto Technology "User Experience Improvement Program". If you agree to and participate in this activity, we collect device attribute information, operation information, setting information, and special event information. You can check the specific situation via "Me > About Us > User Experience Improvement Program".

8. Others

• 8.1 If the information provided includes personal information of other subjects, you need to ensure that you have obtained legal authorization before providing these personal information to us.
• 8.2 If Longto Technology needs to use your personal information for other purposes or uses not stated in this Policy, we will separately seek your consent before conducting the relevant processing, unless otherwise stipulated by laws and regulations.
• 8.3 If we cease operation of this product, we will immediately stop collecting your personal information, notify you of the cessation of operation individually or by announcement, and delete or anonymize the personal information we hold.
• 8.4 In addition to the above personal information collection scenarios, in accordance with applicable laws, after taking technical measures and other necessary measures to ensure that the data cannot be re-identified to a specific individual and cannot be restored, we use such data for statistical analysis, data mining processing, product improvement, and business decision-making. This includes using the anonymized data from the smart customer service scenario mentioned above for algorithm model training.

(III) Mobile Device Permission Invocation Situations

To provide specific service functions, when the relevant business function is triggered, we will seek your consent to invoke the relevant permissions and obtain your personal information (if applicable). You can refuse to authorize this permission or withdraw it at any time. This may result in your inability to use the corresponding service function, but it will not affect the normal use of other functions of the App. The situations of mobile device permissions that the App may invoke are as follows:

Device Permission	Purpose of Use	Whether Confirmation is Required	Whether it Can Be Turned Off
Location Information	For device network setup, discovering nearby devices, obtaining the WiFi information the mobile device is currently connected to, and assisting users in quickly entering delivery addresses	Yes	Yes
Camera Permission	For scanning the device's QR code during device network setup to facilitate quick device connection; for uploading user feedback information	Yes	Yes
Album Permission	For changing user profile pictures, uploading user feedback information; for some devices supporting real-scene photo download, real-time video screenshot/recording, for saving photos or videos	Yes	Yes
Microphone Permission	For some devices supporting video call function, to realize video calls or voice transmission	Yes	Yes
WLAN Permission	During device network setup, to connect to the WiFi emitted by the device and perform device communication to connect the device	Yes	Yes
Bluetooth Permission	During device network setup, to connect to the Bluetooth emitted by the device and perform device communication to connect the device	Yes	Yes
Notification Permission	For sending device notifications and system notification messages	Yes	Yes
Local Network Permission	On iOS terminals, to enable the local network, connect to the WiFi emitted by the device during device network setup, and perform device communication to connect the device	Yes	Yes
Siri & Search Permission	On iOS terminals, to open Siri settings and, based on shortcut commands previously set on the mobile device, perform Siri voice interaction to control device startup or movement	Yes	Yes

(IV) Exceptions to Obtaining Consent

Please fully understand that in the following circumstances, we do not need to seek your authorized consent to collect and use personal information:

• 1. When it is related to our fulfillment of obligations as stipulated by laws and regulations.
• 2. When it is directly related to national security and national defense security.
• 3. When it is directly related to public security, public health, and major public interests.
• 4. When it is directly related to criminal investigation, prosecution, trial, and execution of judgments, etc.
• 5. When it is necessary to protect the life, property, and other major legitimate rights and interests of the personal information subject or another individual, but it is difficult to obtain the consent of the individual.
• 6. When the relevant personal information has been disclosed to the public by yourself.
• 7. When collecting personal information from legally disclosed information (including through lawful news reporting, government information disclosure, and other channels).
• 8. When it is necessary to conclude and perform a contract as requested by you.
• 9. When it is necessary to maintain the safe and stable operation of the provided products or services (such as discovering and handling product or service failures).
• 10. When it is within the legal scope of engaging in news reporting and personal information is reasonably used.
• 11. Other circumstances permitted by laws and regulations.

II. How We Entrust Processing, Share, Transfer, and Disclose Your Personal Information

(I) Entrusted Processing

We entrust some business functions to external entrusted parties, who process your personal information in accordance with our instructions. We enter into entrusted processing agreements specifying the purpose, duration, method, and type of personal information, etc. We supervise the personal information protection activities of the entrusted parties and ensure their compliance with laws, administrative regulations, and the entrusted processing agreements.

(II) Sharing

We do not share your personal information with any third parties, except in the following circumstances:

• 1. Sharing with your prior explicit consent or authorization.
• 2. When it is necessary to comply with laws, legal procedures, litigation, or mandatory requirements of government authorities.
• 3. When it is necessary to disclose in accordance with the provisions of relevant laws, or in accordance with our product and service terms and other relevant agreements and rules.
• 4. When it is necessary to maintain and protect litigation dispute resolution within the scope of the law.
• 5. In emergency situations, when it is necessary to protect the life and property safety of you or other individuals or the public, but it is difficult to obtain the consent of the individual.
• 6. When the personal information subject has disclosed personal information to the public, and disclosure is made in accordance with legal provisions.
• 7. When collecting personal information from legally disclosed information (including through lawful news reporting, government information disclosure, and other channels).

(III) Transfer

We will not transfer personal information to any third party, including but not limited to transfers due to mergers, divisions, acquisitions, or asset transfers, unless the transferee company or organization commits to continuing to protect in accordance with this Privacy Policy or meets other standards required by law. Otherwise, we will not transfer personal information to a third party.

(IV) Public Disclosure

We conduct impact assessments for disclosed personal information. If the impact on personal information protection is high, we seek the opinion of the personal information protection responsible department and take measures required by law, such as obtaining prior consent if required by law. We also maintain records of disclosure and keep them for the period required by law.

(V) Third-Party Partners

Our products and services may incorporate third-party software development kits (SDKs). We strive to regulate third parties' processing of your personal information and ensure that third parties fulfill their legal obligations to protect your personal information.

III. How We Store and Protect Your Personal Information

(I) Storage of Personal Information

We store your personal information for the period required by law or the period necessary to achieve the purposes informed at the time of collection. Upon expiration of the storage period, we will delete or anonymize personal information.

Our products and services are deployed in mainland China. In accordance with the laws of the People's Republic of China, we store data in mainland China.

(II) Protection of Personal Information

We attach great importance to the security of your information and take administrative, technical, and physical security measures to protect it from unauthorized access, disclosure, use, modification, damage, or loss. For example, we use encryption technology to protect personal information, provide reliable protection mechanisms to prevent unauthorized access, set up internal permission management mechanisms so that only authorized personnel can access personal information, and conduct regular employee training to enhance employees' awareness of personal information protection.

In the event of a personal information leak, tampering, or loss, we will take measures as required by law, report to the relevant supervisory departments, and notify you as required by law.

IV. Your Rights

In accordance with the law, you enjoy the following rights:

• (I) Access, Correction, and Copying of Personal Information
• You can request to access, correct, and obtain a copy of your personal information within the App or by contacting us using the method described in Chapter 7 of this Privacy Policy.
• (II) Deletion of Personal Information
• If any of the following circumstances apply, we will take measures as required by law (including but not limited to deletion or anonymization of personal information):
  (1) If the processing purpose has been achieved, cannot be achieved, or is no longer necessary to achieve the processing purpose;
  (2) If we have stopped providing the product or service, or the storage period has expired;
  (3) If you have withdrawn your consent;
  (4) If we have processed personal information in violation of laws and administrative regulations;
  (5) Other circumstances stipulated by laws and administrative regulations.
• (III) Withdrawal of Consent
• Each business function relies on your consent for the collection and use of personal information. You can withdraw your consent by turning off permissions in your mobile device's operating system. However, the withdrawal of consent does not affect the validity of personal information processing carried out prior to the withdrawal.
• (IV) Account Deletion
• You can apply to delete your account within the App. After deleting the account, we will delete your account information and you will no longer be able to use our services.
• (V) Response to Restricted Processing
• If any of the following circumstances apply, you can request us to restrict the processing of personal information:
  (1) If you dispute the accuracy of the personal information;
  (2) If our processing is unlawful;
  (3) If we no longer need the personal information for the processing purpose, but you require it for the exercise of legal claims;
  (4) If you have withdrawn your consent.
• (VI) Portability of Personal Information
• If the conditions required by law are met, you can request us to transfer the personal information we provide to another personal information processor designated by you.
• (VII) Response
• Where required by law, we will respond to your request. If there are justifiable reasons for being unable to respond, we will explain the reasons. If you have objections to personal information processing activities, you have the right to complain to the supervisory department.

When exercising the above rights, we may need to verify your identity. We will respond to the request within the time period required by law.

V. Protection of Minors

We attach great importance to the security of minors' personal information. Our products and services are primarily intended for adults. Minors should not provide personal information without the consent of their parents or guardians. If a parent or guardian discovers that your minor child has provided us with personal information, please contact us using the method described in Chapter 7 of this Privacy Policy, and we will require the immediate deletion of such information.

VI. Updates to This Privacy Policy

This Privacy Policy may be updated from time to time. When providing an updated Privacy Policy, we will notify you via App notification or other methods and update the effective date. The updated Privacy Policy can be viewed on the App or our website. If you do not agree with the content of the updated Privacy Policy, you can delete your account. After the updated Privacy Policy takes effect, if you continue to use our products and services, you are deemed to have agreed to its content.

VII. How to Contact Us

If you have any questions, comments, or suggestions regarding this Privacy Policy and our personal information protection practices, please contact us using the following methods:

We will answer your questions within the time period required by law.