Privacy Protection Policy

Last Updated: April 2, 2026 Effective Date: April 2, 2026

Introduction

This Privacy Protection Policy (hereinafter referred to as "the Policy") aims to explain how we collect, use, store, and protect your personal information. We are committed to respecting your privacy rights and taking reasonable measures to protect the security of your personal information. Please read this Policy carefully to understand how we handle your personal information. The key points are as follows:

1. We will explain the types of your personal information we collect and their corresponding purposes one by one, so that you can understand the specific categories, purposes of use, and collection methods of personal information we collect for a particular function.

2. When you use certain functions, we will collect your sensitive personal information after obtaining your consent. Unless collection is required by relevant laws and regulations, refusing to provide such information will only prevent you from using the relevant specific functions but will not affect your normal use of other functions.

3. We will not actively share or transfer your personal information to third parties outside of Ksuser. If there are circumstances where we need to share or transfer your personal information, or where you need us to share or transfer your personal information to third parties outside of Ksuser, we will directly obtain or confirm that the third party has obtained your explicit consent for the above actions, except where otherwise provided by laws and regulations or where necessary to protect user rights and interests or ecological security. In addition, we will conduct risk assessments for the act of providing information externally.

4. We will not actively obtain your personal information from third parties outside of Ksuser. If it is necessary for business development to obtain your personal information from third parties, we will verify the legality of the source in accordance with the law, or clearly inform you of the source, type, and scope of use of your personal information before obtaining it. If the personal information processing activities required for business operations exceed the scope of authorized consent you originally gave when providing personal information to the third party, we will obtain your explicit consent before processing such personal information. In addition, we will strictly comply with the provisions of relevant laws and regulations and require third parties to guarantee the legality of the information they provide.

5. You can access, correct, copy, and delete your personal information through the channels and methods listed in this Policy. You can also withdraw consent, cancel your account, file complaints and reports, and set personalized advertising and other privacy functions.

6. In order to collect your information under this Policy, or to provide services to you, optimize our services, and ensure the security of your account, we will need to request relevant permissions from you; among them, sensitive permissions such as address book, location, camera, microphone, photo album, etc., will not be enabled by default and will only be called or used within the scope of your consent after your explicit consent. For these permissions that you have authorized to us, you can also check the types of system permissions we have called or used, the purposes of use, and conduct unified management in "Me — Settings — Personal Information and Permissions — System Permission Management."

It should be particularly noted that our obtaining a specific sensitive permission does not necessarily mean that we will collect your relevant information; even if we have obtained the sensitive permission, we will only collect your relevant information within the necessary scope and during your use of the relevant services or functions in accordance with this Policy.

1. Types of Personal Information We Collect and Their Corresponding Purposes

During your use of the services, we will collect and use the information you actively provide or the information generated due to your use of the services in the following ways:

1.1 When you register for the Ksuser Passport service, we will collect and use your nickname and email. This information is collected to help you complete registration and other functions and to protect the security of your account. If you do not provide this information, you may not be able to use our services normally. You may also choose to fill in information such as gender and region based on your own needs.

1.2 When you use the services, to ensure your normal use of our services, maintain the normal operation of our services, improve and optimize our service experience, and protect the security of your account, we will collect and use log information such as your device model, operating system, device identifiers (such as AndroidID/OAID for Android, IDFA before iOS 14.5 for iOS), login IP address, software version number, method, type, and status of network access (such as SSID and BSSID), network quality data, device accelerators (such as gravity sensing devices), operation logs, service log information (such as records of your search and viewing operations, service fault information, referral URLs, and other information).

To ensure platform operations and user account security, during your registration/use of a Ksuser account, if your Ksuser account (including the email registered/bound to the account) is identified as having security risks, we may, in accordance with relevant laws and regulations, collect your ID card number for real-name verification.

1.3 When you use our favorites feature to store various types of information, such information will be uploaded and stored on our servers so that you can use such information when logging into Ksuser on other devices. This is necessary to implement the favorites feature. We will store the information you have favorited in encrypted form, and you can also delete the information you have favorited at any time. Unless you voluntarily choose to do so or to comply with relevant laws and regulations, we will not provide the above information externally or use it for purposes other than this function.

1.4 You can fill in your gender, region, personal signature, address, etc., in your personal information section. This information will be uploaded and stored on our servers so that you can use such information when logging into Ksuser on other devices. You can also modify or delete such information at any time.

1.5 Third-party services within the service are provided by external third-party entities, and Ksuser cannot obtain the information generated when you use such third-party services. However, if you have explicitly agreed that the third party may obtain your location information, the third party will obtain the relevant information through the Ksuser interface. Refusing to provide this information will only prevent you from using the above third-party services but will not affect your normal use of Ksuser's functions.

1.6 If you contact our customer service, we may need you to provide necessary personal information for identity verification to ensure the security of your account. To provide services according to your demands, upon your authorization, human customer service personnel need to query or verify your relevant information within the scope of your authorization. We will adopt technical and management measures to the extent possible to ensure the security and confidentiality of your information and use it within the necessary scope. We may also retain your contact information (mobile phone number, WeChat ID, QQ number, or other contact methods that you use or voluntarily provide), your communication records and content with us, and other necessary information to provide and record customer service for you.

1.7 In addition, according to relevant laws, regulations, and national standards, we may process your relevant personal information without seeking your authorized consent in the following circumstances:

• Where necessary for the personal information processor to fulfill statutory duties or obligations;
• Where necessary for the conclusion or performance of a contract to which you are a party;
• Where necessary to respond to a public health emergency, or to protect the life, health, and property safety of natural persons in an emergency;
• Where processing, within a reasonable scope in accordance with the law, personal information that you have disclosed yourself or that has otherwise been lawfully disclosed;
• Other circumstances provided for by laws and administrative regulations.

1.8 To ensure the security of the services and help us better understand the operational status of our applications, we may record relevant information, such as the frequency of your application use, crash data, overall usage, performance data, and the source of the application. We will not combine or process the information stored in our analytics software with any personally identifiable information you provide in the application.

1.9 When you copy and paste information in Ksuser web pages or applications, we will request to use your clipboard. We only identify clipboard content locally and will not upload your clipboard information to our servers.

1.10 If we use your personal information beyond the scope of your authorized purposes and their directly or reasonably related purposes, we will inform you again and obtain your explicit consent before using your personal information.

1.11 Please note that currently we do not actively obtain your personal information from third parties outside of Ksuser. If in the future it is necessary for business development to indirectly obtain your personal information from third parties, we will clearly inform you of the source, type, and scope of use of your personal information before obtaining it. If the personal information processing activities required for business operations exceed the scope of your original authorized consent when you provided personal information to the third party, we will obtain your explicit consent before processing such personal information.

In addition, we will strictly comply with the provisions of relevant laws and regulations and require third parties to guarantee the legality of the information they provide.

2. Information Storage

2.1 Information Storage Location

We will store users' personal information collected within the territory of China in accordance with laws and regulations. If the storage location of your personal information is transferred from within China to overseas, we will strictly comply with legal provisions.

2.2 Information Storage Period

Generally, we will retain your personal information only for the time necessary to achieve the purposes and within the retention periods prescribed by laws and administrative regulations. For example:

Email: Whether you register via mobile phone number or use an existing Ksuser account to assist in registering a new Ksuser account, if you need to use Ksuser services, we need to retain your email (including the initial registration email and bound email, etc.) at all times to ensure your normal use of the services. When you cancel your Ksuser account, we will delete the corresponding information in accordance with the law;

When our products or services cease operations, we will notify you through push notifications, announcements, and other forms and will delete your personal information or perform anonymization processing within a reasonable period. ("Anonymization processing" in this Policy refers to the technical processing of personal information such that the subject of the personal information cannot be identified and the processed information cannot be restored. Information that has undergone anonymization processing is not considered personal information.)

3. Information Security

We strive to ensure the security of user information to prevent loss, improper use, tampering, or unauthorized access or disclosure.

We will use various security protection measures within a reasonable level of security to ensure the security of information. For example, we will use encryption technology (e.g., SSL), de-identification, anonymization processing, and other means to protect your personal information.

We continuously enhance the security capabilities of the software installed on your device through evolving technical means to prevent the leakage of your personal information. For example, we complete partial information encryption work locally on your device for secure transmission; to prevent viruses, trojans, or other malicious programs or websites, we may learn about the application information installed on your device, running process information, or data residing in device memory; to prevent fraud, account theft, impersonation of others, and other illegal acts, and to conduct security checks, we may analyze and use data such as device identifiers (OAID), login IP addresses, operation logs, location information, etc., to take security measures or provide security alerts.

We have established dedicated management systems, operating procedures, and organizations to ensure the security of information. For example, we strictly limit the scope of personnel who can access information, require them to comply with confidentiality obligations, and conduct audits.

If a security incident such as personal information leakage occurs, we will activate contingency plans and remedial measures to prevent the expansion of the security incident and fulfill relevant reporting and notification obligations in accordance with the law.

We will do our best to protect your personal information. We also ask you to understand that no security measure is completely foolproof.

4. Information Sharing

4.1 We will not share information that can be used to identify your personal identity with partners unless you explicitly authorize it.

4.2 When you use the Ksuser login feature on websites or applications operated by third-party entities, we will provide your personal information to such third-party entities. The specific scope of external provision shall be based on what you confirm on the interactive page. Except as provided above, we will not provide your personal information to such third-party entities without obtaining your explicit consent. You can view the list of applications you have authorized and manage or revoke your authorized information through "Me — Settings — Personal Information and Permissions — Authorization Management."

4.3 To ensure the implementation of certain independent functions and enable you to use and enjoy more services and functions, we may embed third-party SDKs in the application. We will prudently evaluate the purposes of using such SDKs. To learn more about the purposes, methods, and scope of personal information processing by SDKs, please see the Third-Party Information Sharing List.

As our business continues to develop, we may engage in transactions such as mergers and spin-offs. If such transactions involve the transfer of personal information, we will inform you of the relevant circumstances and continue to protect your personal information or require the new processor to continue to protect your personal information in accordance with laws, regulations, and standards not lower than those required by this Policy.

5. Your Rights

During your use, to make it more convenient for you to access, copy, correct, and delete your personal information, while also safeguarding your rights to withdraw consent for personal information processing and to cancel your account, we have provided corresponding operational settings in the product design. You can refer to the guidance below for operations. In addition, we have set up channels for complaints, reports, and requests for explanations. Your opinions and requests will be handled promptly.

Please note that there may be differences in operational settings between different operating systems and different versions of the software; furthermore, to optimize your user experience, we may also adjust the operational settings. Therefore, the following guidance is for reference only. If you still have any questions about the methods and channels for exercising the relevant rights, you can contact us through the methods disclosed in Article 9 of this Policy.

6. Changes

We may revise this Policy from time to time. When there are significant changes to the provisions of this Policy, we will display the revised Policy when you log in and upon version updates through push notifications, pop-up windows, or other appropriate forms that meet legal requirements.

7. Protection of Minors

We attach great importance to the protection of minors' personal information. According to the provisions of relevant laws and regulations, if you are a minor under the age of 18, you should obtain the written consent of your parent or legal guardian before using the services. If you are the guardian of a minor and have questions about the personal information of the minor under your guardianship, please contact us through the contact methods in Article 9.

8. Miscellaneous

8.1 Under certain specific services or functions, we may separately inform you of the purposes, methods, or scope of personal information processing through interactive text, product interfaces, pop-up windows, and other means. If the separately informed content is inconsistent with this Policy, the separately informed content shall prevail.

9. Contact Us

We have established a dedicated personal information protection team and a personal information protection officer. If you have any questions, complaints, or suggestions regarding this Privacy Policy or matters related to personal information protection, you may contact us through any of the following methods:

1. Email: privacy@ksuser.cn
2. WeChat: KsuserKqy

We will review the issues involved as soon as possible and respond within fifteen working days of receiving your complaint or feedback.

Ksuser