Updated Date: April 1, 2025

Effective Date: April 1, 2025

Dear User,

Your trust is of great importance to us. We are well aware of the significance of personal information to you. We will, in accordance with the requirements of laws and regulations, adopt corresponding security protection measures to make every effort to protect the security and controllability of your personal information. In view of this, the service provider of the Token Box APP (hereinafter referred to as "we") has formulated this "Privacy Policy" (hereinafter referred to as "this policy/this privacy policy") and reminds you that:

We respect and protect the personal privacy rights of all users who use our services. In order to provide you with more accurate and high-quality services, this application will legally use and disclose your personal information in accordance with the provisions of this privacy policy. Unless otherwise specified in this privacy policy, this application will not disclose such information externally or provide it to third parties without your prior permission. This application will update this privacy policy from time to time. Before using the services of the Token Box APP, please carefully read and thoroughly understand this policy, and start using the services only after confirming that you fully understand and agree to it. Your registration, login, and use of the services will be deemed as acceptance of this privacy policy and agreement to be bound by all the clauses of this privacy policy. If you do not agree with any content in this privacy policy, please immediately stop using or accessing our products and services.

I. Definitions

Token Box: Refers to the website and the Token Box client.

Personal Information: Refers to various information recorded electronically or by other means that can identify a specific natural person's identity alone or in combination with other information, or reflect the activities of a specific natural person.

Sensitive Personal Information: Refers to personal information including identity document numbers, personal biometric information, property information, whereabouts tracks, information of children under 14 years old (inclusive), etc.

Deletion of Personal Information: Refers to the act of removing personal information from the systems involved in realizing daily business functions, keeping it in a state where it cannot be retrieved or accessed.

Unless otherwise agreed, the definitions used in this policy have the same meanings as those in the "Token Box Platform Service Agreement".

II. Scope of Application

1. This privacy policy applies to all services provided by the Token Box platform and its affiliated parties, including the Token Box client, website, etc.

2. It should be particularly noted that this privacy policy does not apply to services provided by other third parties to you. This includes but is not limited to the following situations:

(1) Information collected by third-party services accessed through our products and services;

(2) Information collected by other companies or institutions that provide advertising services in our products and services. Please be aware that if you provide personal information when browsing third-party websites or using third-party products and services, your information shall be subject to the privacy policy of that third party, and we shall not bear any legal liability. Please carefully read the privacy policy of that third party and confirm whether you accept it.

3. The "Token Box" and related services described in this privacy policy may vary depending on factors such as the mobile phone model, system version, and software application version you use. The final products and services shall be subject to the "Token Box" software and related services you use.

4. If you have any questions, comments, or suggestions regarding the content of this privacy policy, you can contact us through the "Feedback" page in the "Token Box" client.

III. Information We Collect

In order to provide you with better, superior, and more personalized services and strive to improve your user experience, we will collect the following information about you according to the services you use:

1. Information You Provide to Us

We will collect information about your use of our products or services and the way you use them. This information includes:

Device Information: We will, according to the specific permissions you grant during software installation and/or use, receive and record device-related information you use (such as device model, operating system version, device settings, unique device identifier, device environment and other software and hardware characteristic information), and location-related information of the device (such as IP address, GPS location, and sensor information of WLAN access points, Bluetooth, base stations, etc. that can provide relevant information). If you refuse to grant us the corresponding permissions during installation and/or use, we will not record the corresponding information about you.

Service Log Information: When you use the products or services provided by our website or client, we will automatically collect detailed usage information of our services by you and save it as network logs. For example, search query content, IP address, browser type, telecommunications operator, language used, access date and time, and the web page records you access, etc.

Other Related Information: In order to help you use our products or services better, we will collect relevant information.

Please understand that device information, log information, etc. alone are information that cannot identify a specific natural person's identity. Unless such non-personal information is combined with other information to identify a specific natural person's identity, or combined with personal information for use, during the period of combined use, such non-personal information will be regarded as personal information, and we will anonymize and de-identify such personal information (except in cases where we obtain your authorization or as otherwise provided by laws and regulations).

When you contact us, in order to verify your identity and help you solve problems, we may record your conversation with us and collect other necessary information required to solve the problem.

2. Information We Obtain During Your Use of the Services

In order to improve service quality and user experience, we will retain information related to your use of the services and the way you use them. This type of information includes:

Your personal Internet browsing records. Including website browsing records, software usage records, click records, author information in the sharing and following functions. The above information of yours will be stored in our server so that you can use the above functions when logging in through multiple terminals. You can also delete this information at any time on any client.

Your clipboard. Copy the WeChat and QQ numbers of the official customer service through functions such as one-click copying.

3. Information from Third Parties

During your registration of our account and use of the services, with your authorization, we can obtain your personal information from affiliated parties, partners, and other independent third-party sources. This personal information includes but is not limited to your identity information, behavioral information, transaction information, device information, etc. We will summarize such information to help us provide you with better and more personalized services or better prevent Internet fraud.

The information we collect is stored in the servers we actually control or lease (such as Alibaba Cloud) servers.

Permissions related to the collection of personal information required during your use of the services:

1. READ_PHONE_STATE

Involved products: U-APP statistical analysis service, U-Share social sharing

Function description: Obtain the IMEI of the user's device and use the IMEI to uniquely identify the user to provide services.

2. WRITE_EXTERNAL_STORAGE

Involved products: U-Share social sharing

Function description: Used when sharing large images/multiple images or large files with one click between different Apps.

3. READ_EXTERNAL_STORAGE

Involved products: U-Share social sharing

Function description: Used when sharing large images/multiple images or large files with one click between different Apps.

IV. How We Use the Collected Information

We will use your personal information in strict compliance with the provisions of laws and regulations or with your authorization, and mainly use it for the following purposes:

1. Provide you with various products or services you use and maintain and improve these services.

2. When providing products or services, use it for identity verification, customer service, security prevention, fraud monitoring, archiving, and backup purposes to ensure the security of the products and services we provide to you;

3. Help us better understand your use of our products and services, so as to respond to your personalized needs and provide you with services, personalized content, and suggestions;

4. We may conduct de-identified research, statistical analysis, and prediction on the collected information to improve the content and layout of Token Box, provide support for commercial decisions regarding products or services, and improve our products and services (such as using anonymous data for machine learning or model algorithm training).

5. If we stop operating the Token Box products or services, we will promptly stop the activity of continuing to collect your personal information, notify you of the suspension of operations in the form of individual delivery or public announcement, and delete or anonymize the personal information we hold related to the discontinued business.

6. If we use the information for other purposes not specified in this policy, or use the information collected for a specific purpose for other purposes, we will obtain your consent in advance.

V. How We Share or Disclose Information

(I) Sharing

We will not share your personal information with companies, organizations, and individuals other than the service provider of Token Box, except in the following situations:

1. Sharing under statutory circumstances: We may share your personal information externally according to the provisions of laws and regulations, for the resolution of litigation disputes, or as required by administrative or judicial organs according to law.

2. Sharing with explicit consent: After obtaining your explicit consent, we will share your personal information with other parties.

3. Sharing when you actively choose: When you purchase goods or services through the Token Box platform, we will, according to your choice, share the necessary information related to the reward activities with the providers of relevant goods or services to meet your demand for reward services.

4. Sharing with [unspecified entity]: To facilitate us to provide products and services to you based on the Token Box platform account, recommend information that may interest you, identify abnormal platform accounts, and protect the personal and property safety of Token Box users or the public from infringement, your personal information may be shared with our [unspecified entity] and/or its designated service providers. We will only share necessary personal information and be bound by the purposes stated in this privacy policy. If we share your sensitive personal information or change the use and processing purposes of personal information, we will ask for your authorization and consent again.

5. Sharing with authorized partners: We may entrust authorized partners to provide certain services for you or perform functions on our behalf. We will only share your information for the legitimate, just, necessary, specific, and clear purposes stated in this privacy policy. Authorized partners can only access the information required for them to perform their duties and shall not use this information for any other purposes.

Currently, our authorized partners include the following types:

(1) Authorized partners for advertising and analysis services. Unless we obtain your permission, we will not share your personal identity information with partners providing advertising and analysis services. We will provide these partners with information about the coverage and effectiveness of their advertising, but we will not provide your personal identity information, or we will summarize this information so that it cannot identify you personally. Such partners may combine the above information with other data they legally obtain for advertising or decision-making suggestions.

(2) Suppliers, service providers, and other partners. We send information to suppliers, service providers, and other partners that support our business. This support includes providing technical infrastructure services, analyzing the way our services are used, measuring the effectiveness of advertising and services, providing customer service, facilitating payments, or conducting academic research and investigations.

We will stipulate strict data protection measures with them and require them to process personal information in accordance with our instructions, this privacy policy, and any other relevant confidentiality and security measures.

(II) Transfer

We will not transfer your personal information to any company, organization, or individual, except in the following situations:

1. Transfer with explicit consent: After obtaining your explicit consent, we will transfer your personal information to other parties;

2. In the case of merger, acquisition, or bankruptcy liquidation of the Ux m service provider, or other situations involving merger, acquisition, or bankruptcy liquidation, if personal information transfer is involved, we will require the new company or organization holding your personal information to continue to be bound by this policy. Otherwise, we will require that company, organization, or individual to re-consult you for authorization and consent.

(III) Public Disclosure

We will only publicly disclose your personal information in the following situations:

1. With your explicit consent or based on your active choice, we may publicly disclose your personal information;

2. If we determine that you have violated laws, regulations, or seriously violated the relevant agreements and rules of the Token Box platform, or to protect the personal and property safety of Token Box platform users or the public from infringement, we may disclose your personal information in accordance with laws and regulations or with your consent, including relevant violations and the measures taken by the Token Box platform against you. For example, if you seriously violate the Token Box platform rules due to fraud, we may publicly disclose your certified principal information and violation situation.

(IV) Exceptions to Prior Authorization and Consent for Sharing, Transfer, and Public Disclosure of Personal Information

In the following situations, sharing, transferring, and publicly disclosing your personal information do not require prior authorization and consent from you:

1. Related to national security and national defense security;

2. Related to public safety, public health, and major public interests;

3. Related to criminal investigation, prosecution, trial, and judgment execution and other judicial or administrative law enforcement;

4. To safeguard your or other individuals' major legitimate rights and interests such as life and property, but it is difficult to obtain your consent;

5. Personal information you publicly disclose on your own;

6. Personal information collected from legally publicly disclosed information, such as legal news reports, government information disclosure, etc.

Please be aware that according to applicable laws, if we process personal information by adopting technical measures and other necessary measures so that the data recipient cannot re-identify a specific individual and the data cannot be restored, the sharing, transfer, and public disclosure of such processed data do not require further notice to you and your consent. 2. We will not illegally sell or provide your information to others; we will not provide such information about you to any third party or use it for any other purpose, except in the following situations:

(1) Disclose to a third party with your prior consent;

(2) Disclose to a third party or an administrative or judicial institution according to relevant provisions of laws;

(3) When providing services, we may use your information for identity verification, customer service, security prevention, fraud monitoring, archiving, and backup purposes to prevent, detect, and investigate fraud, safety hazards, illegal acts, or acts in violation of our agreements, policies, or rules, to protect the legitimate rights and interests of you, other users, our affiliated companies, partners, and other trusted third-party suppliers, service providers, agents, and the public, and to ensure the security of the products and services we provide to you;

(4) We cooperate with third parties to provide you with relevant services of the Token Box platform or other network services, and such third parties agree to assume the same responsibility for protecting user privacy as we do;

(5) Other disclosures as required by laws, regulations, or policies.

VI. How We Use Technologies Such as Cookies and Web Beacons

(I) Cookies

To ensure the normal operation of the website, provide you with a more convenient access experience, and recommend content that may interest you, we will store Cookies, Flash Cookies, or other local storage (collectively referred to as "Cookies") provided by the browser (or associated application) on your computer or mobile device. With the help of Cookies, the website can store data such as your preferences or the goods in your shopping cart.

If allowed by your browser or browser add-on services, you can modify your acceptance of Cookies or reject our Cookies. For details, please refer to AboutCookies.org. However, if you do so, in some cases, it may affect your secure access to our website, and you may need to change the user settings every time you visit our website.

(II) Cookie Similar Technologies

In addition to Cookies, we will also use other similar technologies such as website beacons, pixel tags, and ETags on the website.

ETag (Entity Tag) is an HTTP protocol header transmitted between the Internet browser and the Internet server, which can replace Cookies. ETags can help us avoid unnecessary server loads, improve service efficiency, save resources and energy. At the same time, we may use ETags to record your identity so that we can have a deeper understanding and improve our products or services. Most browsers provide users with the function of clearing browser cache data, and you can perform corresponding data clearing operations in the browser settings function. However, please note that if you disable ETags, you may not enjoy a relatively better product or service experience.

VII. How You Manage Your Information

1. Access, Correct, and Delete Your Personal Information

You can manage your information through the following methods: After you complete the registration and login of the "Token Box" account and carry out reasonable and necessary identity verification, you can view, modify, and delete the personal information you submitted to the "Token Box" software and related services (including deleting the images, texts, and videos you have published, and modifying your nickname, avatar, etc.).

Generally, you can directly delete the content you have published, or click [My] at the lower right corner in the client application to enter the personal center, and you can browse, modify, and delete your edited personal information at any time. However, for the consideration of security and identity recognition, you may not be able to independently modify certain initial registration information submitted during registration; if you really need to modify such information, please contact us through the WeChat service account. The company will review the issues involved as soon as possible and reply to you in a timely manner after a dedicated person verifies your user identity.

2. Complaint and Report

You can file a complaint or report in accordance with the publicly announced system. If you believe that your personal information rights may be infringed, or you discover clues of infringement of personal information rights, you can click "Report" to enter the user feedback interface and contact us. We will feedback on your complaint and report within 30 days after verification.

3. Notification of Rights in Case of Stopping Operation

If we stop operating, we will promptly stop the activity of collecting your personal information, notify you of the suspension of operation in the form of individual delivery or public announcement, and delete or anonymize the personal information we hold about you.

VIII. How We Store Your Information

1. Place of Information Storage

In accordance with the provisions of laws and regulations, we will store the personal information of yours collected and generated during the operation within the territory of the People's Republic of China. Currently, we will not transmit the above information overseas. If we transmit it overseas, we will follow the provisions of laws and regulations and seek your explicit consent.

2. Storage Period

We will retain your personal information only for the period necessary for the purpose of providing the "Token Box" and its services. For example, the information such as the videos, images, and texts you publish, comments, likes, etc., will be retained during the period

XI. Revision of this Policy

In order to provide you with better services, our business will change from time to time, and this privacy policy will be adjusted accordingly. We will issue updated versions on our website and mobile terminal or remind you of relevant updates in other ways. Please also visit us to keep informed of the latest privacy policy in a timely manner. In the above situation, if you continue to use our services, it means that you agree to accept the modified policy and be bound by it.

If you have any questions about this privacy policy or regarding your personal information or privacy when using our services, please contact our customer service and provide a full description, and we will make every effort to solve the problem.