Last updated: Oct 30, 2024 Effective date: November 16, 2022 Dear Huafon ESS users (hereinafter referred to as "you"), in order to facilitate your use of Huafon ESS (hereinafter referred to as "the Application"), the owner of the Application, Zhejiang the Application Technology Co., Ltd. ("we") will collect, use, store and provide your personal information to the public as agreed in the Huafon ESS User Privacy Policy ("the Policy"). This Policy applies to your access to and use of this application by any means. Please read this policy carefully and make sure you understand the rules of our handling of your personal information. If you have any questions, please contact our official service hotline at 400-8815-686. If you click "Agree" and confirm to submit and use the Application or continue to use the Application after we update this Policy (we will notify you of the update), you agree to the content of this Policy (including the updated version) and agree to our collection, use, storage and provision of your personal information in accordance with this Agreement. You can read the appropriate sections of our Privacy Policy in further detail by following the index below: I. How we collect and use your personal information II. How we share, transfer and publicly disclose your personal information III. How we store your personal information IV. How you manage your personal information V. How we protect your personal information VI. How we protect the information of minors VII. How to update this policy VIII. How to contact us I. How we collect and use your personal information (i)Collection of information In order to ensure the safety of your use of this application and to improve your experience, we collect, use and store the following information related to you. If you do not provide the relevant information, you will not be able to enjoy the following corresponding services provided by us. 1. When you register for the Application, you need to authorize us to obtain or you actively enter your cell phone number, SMS verification code. 2.When you log in to the Application, you need to authorize us to obtain or you voluntarily enter your user name/mobile phone number/SMS verification code. If you do not provide the above information, we will not be able to provide you with data monitoring, analysis, viewing and other services that require login. 3. When you reset your login password for the Application, you need to authorize us to obtain or actively enter your user name, cell phone number and SMS verification code information, and agree to our verification of the validity of the relevant information provided by you. 4. When you download the App for the first time and enter the App, you need to authorize us to use your location information, wireless/data network, access to photos, media content and files on your device, device information (IMEI/MAC/Android ID/IDFA/IDFV/Open UDID/GUID/SIM card IMSI information/Android serial number) for the App. Serial Number) permissions for location services, service usage and message notification services in the app. However, these permissions are not enabled by default and will only be used for specific functions or services with your explicit authorization, which can also be withdrawn. In particular, even if we obtain these sensitive permissions with your authorization, we will not collect your information when it is not needed for the relevant function or service. 5. After you login your account, you can further improve your information to modify your nickname, avatar and background photo, if you choose to change your avatar and background photo, you need to provide your cell phone album information. 6.When you use the Application to connect our product devices, we will collect your location information, Wi-Fi list information, Bluetooth information to help you realize the connection between your cell phone and the device, as well as the control of your cell phone to the device. After connection you can monitor the operation status of your device through the Application and control it remotely. This is the core business function of Huafon products and services, if you choose not to provide the above information, you will not be able to use this core function. 7. During your use of the Application, we will obtain information about your mobile device, including: Mac address, CPU information, memory information, SD card information, operating system version. This is used to collect abnormal information of the application and report errors when the application goes wrong to ensure the stability and safety of the system operation. 8. In order to use the application service more conveniently, you can choose whether to authorize us to collect and use your personal information in the following cases: (1) Camera (camera) based related functions/services: you can use the service of sweeping to identify the serial number of the device. (2) Camera (photo gallery) based related functions/services: you can use services such as photo uploading and editing. (3) Functions based on geographic location: You can enable location services for location inquiries, etc. (4) Functions based on network communication: You can open the network communication function of this application in order to obtain various services provided by APP server system through our client. 9. When you use the Services we may collect the following information that you have authorized to obtain or filled out on your own initiative: (1) Log information, which refers to technical information that may be automatically collected by the system when you use our services, including: Device or software information, such as configuration information provided by your use of our product devices, or other programs used to access our Services, your IP address and the version and device identifier used by your mobile device. Information (metadata) contained in the content you share through our Services, such as the date, time or location of shared photos or videos taken or uploaded. (2) Location information, which refers to the information collected about your location when you turn on the location function of your device and use the related services provided by us based on your location, including: The geographic location information of your device collected by GPS or WiFi and other means when you use our product equipment with location function is used to provide location information for the application. Real-time information provided by you or other users containing your geographical location, such as information about your location contained in the account information you provided. You can stop the collection of your geolocation information by turning off the location feature. (ii) Use of Information 1. You authorize us to collect information from you on an ongoing basis during the period in which we provide our services to you. Subject to relevant laws and regulations, we may use the information we collect for the following purposes: (1) To provide you with the Services (e.g., the cell phone number used to receive the verification code, which is a prerequisite for continued access to the Services). (2) Service optimization and development. For example, we may optimize our services based on information generated by the Application in response to your needs, but this information will not contain any identifying information about you. 2. After collecting your personal information, we will use technical means to de-identify, encrypt, or anonymize your information, and your specific information subject identity will not be identified through such de-identified, encrypted, or anonymized information. 3. You authorize to agree and other uses as required by laws and regulations and regulatory requirements. (iii) Exceptions to Authorized Consent According to relevant laws and regulations, regulatory requirements and national standards, we may collect and use your relevant personal information without seeking your authorized consent separately in the following cases: 1. directly related to national security or national defense security. 2. directly related to public safety, public health, and significant public interest. 3. directly related to crime investigation, prosecution, trial and execution of judgments, etc. 4. for the purpose of safeguarding your or other individuals' life, property and other significant legitimate rights and interests but for which it is difficult to obtain your own consent. 5. where the personal information collected is disclosed by you to the public at your own discretion. 6. where the personal information is collected from legitimate public disclosures, such as legitimate news reports, government information disclosure and other channels. 7. necessary for the conclusion and performance of a contract at your request. 8. necessary for maintaining the safe and stable operation of the products or services provided by us, such as the detection and disposal of product or service failures, fraud or theft. 9. related to obligations under laws and regulations, regulatory requirements and relevant provisions of industry authorities. (iv) Application Privilege Description

1、iOS Operating System Application Privileges List

Permission Name	Permission Function Description	Scenario or purpose of use
Bluetooth Always Usage Description Bluetooth Peripheral Usage Description Bluetooth Permission	Add or bind devices	For application functions only. Used to scan and connect to nearby Bluetooth so that you can add or bind the appropriate device.
Camera Usage Description Camera Permission	Modify user avatar	Used for application function only. Used for scanning QR code to bind the device and taking photos to upload to modify the user's avatar.
Photo Library Usage Description Album Permission	Modify user avatar	Used for application functions only. Used to select a photo from an album to upload to modify the user's avatar.
Location When In Use Usage Description Location Always and When In Use Usage Description Location Permission	Add or bind devices	For application functions only. Used to accurately scan and connect to Bluetooth devices in your neighborhood when location permissions are turned on so you can add or bind to the appropriate device.

2、Android Operating System Application Privileges List

Permission Name	Permission Function Description	Scenario or purpose of use
CAMERA CAMERA Permission	Modify user avatar	Used for application function only. Used for scanning QR code to bind the device and taking photos to upload to modify the user's avatar.
READ_EXTERNAL_STORAGE WRITE_EXTERNAL_STORAGE Storage Permission	Modify user avatar	Used for application functions only. Used to select a photo from an album to upload to modify the user's avatar.
READ_MEDIA_IMAGES Album Permissions	Modify user avatar	Used for application functions only. Used to select a photo from an album to upload to modify the user's avatar.
BODY_SENSORS SENSORS	Device landscape or portrait orientation	Used for application functions only. Used to change device screen orientation.
BLUETOOTH BLUETOOTH_ADMIN BLUETOOTH_SCAN BLUETOOTH_CONNECT Bluetooth Permission	Add or bind devices	For application functions only. Used to scan and connect to nearby Bluetooth so that you can add or bind the appropriate device.
ACCESS_FINE_LOCATION ACCESS_COARSE_LOCATION Location Permission	Add or bind devices	For application functions only. Used to accurately scan and connect to Bluetooth devices in your neighborhood when location permissions are turned on so you can add or bind to the appropriate device.
ACCESS_WIFI_STATE CHANGE_WIFI_STATE NEARBY_WIFI_DEVICES WIFI Permission	Add or bind devices	For application functions only. Used to access and set up the current Wi-Fi so you can provision, add, or bind devices.

II. How we share, transfer and publicly disclose your personal information (i) Sharing We will not share your personal information with companies, organizations and individuals outside of us, except in the following cases: 1. sharing with explicit consent: we will share your user information with other parties after obtaining your explicit consent. 2. Sharing under legal circumstances: We may share your personal information externally in accordance with laws and regulations, regulatory requirements, the need for litigation dispute resolution, or as requested by administrative or judicial authorities in accordance with the law. 3. In order to facilitate the processing of services or to assist in the resolution of disputes, in some cases your user information may only be shared in order to facilitate the processing or handling of disputes or controversies between you and others. 4. Sharing with our affiliates: We may share your information with our affiliates as permitted by law in order to provide Huafon products and services to you. We will only share personal information that is necessary and subject to the purposes stated in this Privacy Policy. If an affiliate wishes to change the purpose for which personal information is processed, your authorized consent will be sought again. 5. Sharing with Authorized Partners: Some of our services will be provided by authorized partners only to fulfill the purposes stated in this policy. We may share some of your personal information with our partners in order to provide better customer service and user experience. We will only share your personal information for purposes that are legal, legitimate, necessary, specific, and explicit, and only as much personal information as is necessary to provide the services. Our partners do not have the right to use the personal information shared for any other purpose. Generally, our partners are: (1) Third party service providers: provide us with payment facilitation, package shipping, application development, electronic message processing and other services. (2) Third-party SDK service providers: To ensure the stable operation and function realization of the application, so that you can use and enjoy more services and functions, we will embed the third-party SDK in the application. 6. Third-party SDK description: Alibaba Cloud push SDK Types of personal information involved: device information (including operating system and device model), IP address, and carrier information Purpose of use: Push messages Usage scenario: When pushing messages from Android mobile terminals (such as VIVO, OPPO, Huawei, etc.) Third party: Alibaba Cloud Computing Co. Ltd. Website links: https://www.aliyun.com/ Privacy Policy: https://terms.aliyun.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud202112071754_83380.html?spm=a2c4g.434803.0.0.66db646ds7yAAU Huawei HMS SDK Types of personal information involved: Application information, device information (hardware information of the device, basic system information and system Settings) Purpose of use: Push messages Application scenario: This parameter is used when a Huawei mobile phone pushes messages Third party: HUAWEI Software Technology Co., Ltd. Website links: https://developer.huawei.com/consumer/cn/ Privacy Policy: https://developer.huawei.com/consumer/cn/doc/development/HMSCore-Guides/sdk-data-security-0000001050042177 Honor Push SDK Types of personal information involved: Application Anonymous Identity (AAID), Application Token Purpose of use: Push messages Usage scenario: It is used when Honor mobile phone terminals push messages Third party: Honor Device Co., Ltd. Website links: https://developer.hihonor.com/cn/ Privacy Policy: https://developer.hihonor.com/cn/kitdoc/?category=%E5%9F%BA%E7%A1%80%E6%9C%8D%E5%8A%A1&kitId=11002&navigation=guides&docId=sdk-data-security.md OPPO pushes SDK Type of personal information involved: Basic application information (MCS application package name, application version number, OPUSH SDK version number), in-app device identifier (RegistraterID, appKey, appSecret) Purpose of use: Push messages Usage scenario: Used when OPPO mobile terminals push messages Third party: Guangdong Huantai Technology Co., Ltd. Website links: https://open.oppomobile.com/ Privacy Policy: https://open.oppomobile.com/new/developmentDoc/info?id=11228 vivo push SDK Type of personal information involved: basic application information, device identifier in application, device hardware information, and basic system information Purpose: To provide push message service and statistics on the success rate of push SDK interface invocation Usage scenario: Used when vivo mobile phone terminals push messages Third party: Vivo Mobile Communications Co., Ltd. Website links: https://dev.vivo.com.cn/promote/pushNews Privacy Policy: https://dev.vivo.com.cn/documentCenter/doc/652#w1-12075822 Xiaomi Push SDK Types of personal information involved: Device identifier OAID and encrypted Android ID, as well as application information such as package name, version number, and operating status, device-related information such as manufacturer, model, memory, operating system version, Xiaomi Push SDK version, device location (country or region), SIM card operator name, current network type, and WiFi status. Among these, the current network type and SIM card operator name are only read locally on the device and are not uploaded to Xiaomi servers. Purpose of use: For message push on Xiaomi phones Usage scenario: Used when pushing messages on Xiaomi mobile terminals Third-party entity: Beijing Xiaomi Mobile Software Co., Ltd. Official website link: https://dev.mi.com/xiaomihyperos Privacy policy: https://dev.mi.com/console/doc/detail?pId=1822 (ii) Transfer We will not transfer your personal information to any company, organization or individual. Except for the following cases: 1. with your prior consent. 2. provided in accordance with applicable laws and regulations, the requirements of legal procedures, and mandatory administrative or judicial requirements as necessary. (iii) Public Disclosure We will disclose your personal information publicly only if we 1. we may disclose your personal information publicly with your express consent or based on your voluntary choice. 2. if we determine that you have violated laws or regulations or seriously violated our rules of the relevant agreement, or to protect us or the public from infringement of personal and property safety, we may publicly disclose your personal information in accordance with laws and regulations, in compliance with court judgments, rulings or other legal procedures, in compliance with requests from relevant governmental or other authorities with authority or our rules of the relevant agreement, including relevant violations and the measures we have taken against you. 3. In accordance with national policy arrangements or legal requirements, we and relevant government agencies may carry out organizational restructuring, asset allocation, transfer or similar transactions, and your information may be transferred as part of them. We will comply with the requirements of relevant laws and regulations, notify you before the transfer, ensure the confidentiality of the information at the time of transfer, and continue to fulfill the corresponding responsibilities and obligations after the change. (iv) Exceptions to obtaining prior authorized consent for sharing, transferring, or publicly disclosing personal information In the following cases, prior authorized consent is not required for sharing, transferring, or publicly disclosing your personal information: 1. related to national security or national defense security 2. related to public safety, public health, or significant public interest 3. related to crime investigation, prosecution, trial and execution of judgments, etc. 4. for the purpose of safeguarding your or other individuals' life, property and other significant legitimate rights and interests but where it is difficult to obtain your consent 5. personal information that you disclose to the public on your own. 6. personal information collected from lawful public disclosures, such as lawful news reports, government information disclosure and other channels. 7. other circumstances related to our fulfillment of obligations stipulated by laws and regulations, regulatory requirements and industry authorities. III. How we store your personal information 1. The personal information we collect and generate in the People's Republic of China will be stored in the People's Republic of China. We will only store your personal information for as long as necessary for the purposes described in this policy and within the time limits set by laws, regulations, and supervision, after which we will anonymize the collected information. 2. We will continue to store your personal information for you for the duration of your use of the Application. After you cancel your account on the Application, we will retain your personal information only for the period required by laws and regulations, regulatory requirements, and for as long as necessary to achieve the purposes of this policy statement. After such retention period, we will delete or anonymize your personal information. IV. How you manage your personal information (i) View and modify your personal information 1. After you log in the application, you can view or modify your user information and reserved identity information in "Personal Center-My Information". 2. You can reset your login password in "Personal Center - Settings - Change Password". 3. Correction or supplementation of your personal information: If you find that there is an error in your personal information processed by the application, you have the right to request the application to make corrections or supplements. (ii) Change the scope of your authorized consent or withdraw your authorization 1. You may withdraw all your privacy authorization by canceling your account, deleting all user information in the application, or uninstalling the application, and we will no longer collect, use or provide personal information related to the account, but the information you provide or generate during the use of our services will still be kept anonymously for the time required by regulation, and the authorities will still have the right to The information may also be accessed by you through the following methods. 2. You may also change some of the scope of the personal information you authorize us to continue collecting by modifying the privacy settings in your mobile operating system or revoke your authorization. 3. When you withdraw your consent or authorization, we will not be able to continue to provide you with the convenient services to which you have withdrawn your consent or authorization. However, your decision to withdraw your consent or authorization will not affect the use, storage and provision of your personal information to the public based on your authorization. (iii) Cancellation of user management 1. You can cancel your previously registered account at any time, you can do so through the cancellation function in the Application's "Personal Center", or you can contact us for cancellation through the means provided in this Privacy Policy, we will reply to you as soon as possible after receiving your cancellation application and within 15 working days after verifying your user identity. We will reply to you as soon as possible after receiving your cancellation request and verifying your user identity within 15 working days. 2. After you voluntarily cancel your account, we will stop providing products or services to you and delete or anonymize your personal information, except as otherwise provided by laws and regulations or otherwise required by regulatory authorities. (iv) Responding to your request above For security purposes, you may be required to provide a written request or otherwise prove your identity. We may ask you to verify your identity before processing your request. Please understand that we may refuse requests that are unwarrantedly repetitive, require excessive technical means, pose a risk to the legal rights of others, or are highly impractical. Notwithstanding the above agreement, we may not be able to respond to your request if, in accordance with legal and regulatory requirements, it involves: 1. related to national security or national defense security. 2. related to public safety, public health, or significant public interest. 3. related to crime investigation, prosecution, trial and execution of judgments, etc. 4. where there is sufficient evidence that you have subjective malice or abuse of rights. 5. responding to your request will lead to serious damage to your or other individuals' or organizations' legitimate rights and interests. 6. where commercial secrets are involved. 7. for the purpose of fulfilling anti-money laundering and sanction provisions. V. How we protect your personal information We strive to protect the security of users' personal information against loss, improper use, unauthorized access or public disclosure. 1. We guarantee that personal information collected and generated in our operations in the People's Republic of China will be stored in the territory of China. We will not transfer your personal information out of China without your express authorization, the express provisions of laws and regulations, and/or the requirements of the relevant competent authorities. 2. We will store your personal information only for as long as is necessary to provide you with the products and services for the purposes for which they are intended and for the retention period specified by law and regulation. After the above storage period, we will delete or anonymize your personal information. 3. We establish special management systems, processes and organizations to ensure the security of information, strictly limit the scope of persons accessing information, require them to comply with confidentiality obligations, and conduct audits. 4. If all or part of the convenient services provided by us are discontinued, we will inform you through message notifications, pop-up boxes, etc., and at the same time stop the collection of your personal information by the relevant services and other operations to protect the security of your personal information. If all or part of the convenience services are unavailable due to technical failures, network attacks, natural disasters and accidents, human factors, etc., we will take emergency handling and recovery measures to respond and restore the services as soon as possible. 5. The Internet environment is not 100% secure, and we will do our best to ensure the security of your personal information. If our physical, technical, or administrative protection facilities are damaged, resulting in unauthorized access, public disclosure, tampering, or destruction of information and other personal information leakage security incidents, we will initiate emergency response plans to prevent the expansion of the security incident and inform you of the relevant situation in the form of a message notification. At the same time, we will also report the disposition of personal information security incidents in accordance with regulatory requirements. 6. We will take all reasonable and feasible measures to ensure that no personal information not related to the business you are handling is collected. VI. How we protect information about minors 1. We expect parents or guardians to guide minors in using our services. We will protect the confidentiality and security of minors' information in accordance with relevant national laws and regulations. 2. If you are a minor, please ask your parent or guardian to read this policy carefully and use our services or provide us with information with the consent of your parent or guardian. If your guardian does not consent to your use of our Services or provision of information to us in accordance with this Policy, please terminate your use of our Services immediately and notify us promptly so that we can take appropriate action. 3. In cases where we collect personal information from minors with the consent of their parents or legal guardians, we will only use or publicly disclose this information as permitted by law, with the express consent of the parents or legal guardians, or as necessary to protect the minor. If a parent or guardian discovers that we have collected personal information from a minor without the parent's or guardian's consent, please contact us via our customer service hotline for feedback and we will attempt to delete the data as soon as possible. 4. The real-name authentication information of minors is managed by the real-name authentication management agency, and the real-name authentication of minors may not be approved due to the risk control of the management agency, in which case we will not be able to provide the corresponding services. VII. How to update this policy 1. In order to provide you with better services, we will continue to improve our products and services, and this privacy policy will be updated from time to time. We will not reduce your rights under this Privacy Policy without your express consent. We will post any changes to this policy on this page. We will also provide more prominent notice of material changes (including, but not limited to, emails, text messages, or special notices on the pages you visit to explain the specific changes to the Privacy Policy). 2. Material changes to this policy include, but are not limited to: (1) Significant changes in our service model. For example, the purpose of processing personal information, the type of personal information processed, the way personal information is used, etc. (2) Significant changes in our ownership structure, organizational structure, etc. such as change of ownership caused by business restructuring, bankruptcy and merger, etc. (3)Changes in the primary recipients of personal information sharing, transfer or public disclosure. (4) Significant changes in your rights to participate in the processing of personal information and the manner in which they are exercised. (5) Changes in the department responsible for handling personal information security, contact information and complaint channels. (6) When the personal information security impact assessment report indicates that there is a high risk. VIII. How to Contact Us If you have any questions, comments or suggestions regarding this Privacy Policy, you may contact us in any of the following ways Email: service-ess@huafeng.com Contact Address: 3F, Huafeng International Business Building, 200 Xinye Road, Shangcheng District, Hangzhou, Zhejiang, China Customer service number: 400-8815-686 We will review the issue as soon as possible and reply within 15 working days after verifying your user identity. If you are not satisfied with our reply, especially you think our personal information processing behavior has damaged your legitimate rights and interests, you can also seek a solution by filing a lawsuit to the court with jurisdiction over the defendant's residence. Zhejiang Huafon ESS Technology Co., Ltd.