Privacy Policy

1Scope

This Policy applies when you access or use our services through the Kiraify mobile app (including Android, iOS, HarmonyOS and other platforms).

Please read this Policy carefully and fully before using the App. By agreeing and using the App, you acknowledge and accept this Policy in full. If you do not agree with any part of this Policy, you should stop using the App immediately.

This Policy helps you understand:

• the types of personal information we collect and how they are used;
• how we entrust, share, transfer or publicly disclose your personal information;
• how we protect the security of your personal information;
• how we process your input and generated content when you use generative AI services;
• your rights with respect to your personal information and how to exercise them.

2Personal Information We Collect

We only collect the information necessary to deliver our services, following the principle of data minimization. Specifically:

2.1 Information You Provide

• Account registration & login: email address or phone number, password (stored encrypted), nickname, avatar;
• Business card content: name, job title, company, bio, contact details (phone, email, website, address), social media links, avatar and front/back background images of your card;
• Feedback & support: feedback, screenshots and contact details you voluntarily submit to us.

2.2 Information We Collect Automatically

• Device information: device model, operating system version, screen size and language settings, used to provide an adapted interface and service;
• Log information: access time, IP address, accessed pages, error logs, crash stacks, used to troubleshoot issues and improve the service;
• Usage data: feature usage frequency and operation paths, used to analyze service availability and improve the product experience.

2.3 Camera and Photo Library Permissions

When you use features such as scanning QR codes, taking a photo, photographing business cards, selecting photos from your library as card materials, or importing business cards, we may request camera and photo library access. This permission is authorized by you voluntarily; without authorization we will not access your camera or photo library. You may revoke this permission at any time in your system settings. After revocation, the related features will be unavailable, but other features will continue to work normally.

2.4 Information We Do Not Collect

We do not collect sensitive personal information such as your national ID number, bank account, biometrics, religion, medical health or financial account information, unless you voluntarily provide it to enable a specific feature and we inform you separately and obtain your explicit consent before collection.

3How We Use Your Personal Information

We use your personal information strictly in accordance with applicable laws and regulations, for the following purposes:

1. Account management: registration, login, identity verification, account security;
2. Business card services: creating, saving, displaying and sharing your digital business card, as well as matching and retrieval between cards;
3. AI design services: generating business card layouts using generative AI models based on your design requirements and current card information (see Section 7);
4. Improvement: analyzing usage data to optimize features, fix defects and improve performance;
5. Security: detecting abnormal behavior, preventing fraud, and safeguarding accounts and data;
6. Customer service: responding to your inquiries, feedback and complaints;
7. Compliance: fulfilling statutory obligations and cooperating with regulatory oversight.

Our processing is based on one or more of the following grounds: your consent; the necessity to perform a contract; the necessity to comply with a legal obligation; the necessity to respond to a public health emergency; the necessity to protect public interest in news reporting and public opinion supervision; or other circumstances provided by law.

4Entrustment, Sharing, Transfer and Disclosure

4.1 Entrustment

To deliver our services, we may engage processors for tasks such as cloud storage, push notifications and data analytics. We will sign strict confidentiality and data processing agreements with them, requiring them to process your personal information in accordance with our instructions, this Policy and applicable laws, and to delete or anonymize it upon completion.

4.2 Sharing

We share your personal information only under the following circumstances:

• with your explicit consent;
• to enable business card sharing by showing other users the card content you have chosen to make public;
• sharing necessary information with authorized partners to provide specific services (see Section 10 for third-party SDK details);
• when required by law or by administrative/judicial authorities in accordance with legal procedures.

4.3 Transfer

We do not transfer your personal information to any third party unless in connection with a merger, acquisition or asset transfer, in which case we will require the recipient to remain bound by this Policy. If the recipient changes the purpose of use, we will require it to obtain your consent again.

4.4 Public Disclosure

We only disclose your personal information publicly with your consent, or when required by laws, regulations, or mandatory requests from administrative or judicial authorities.

5How We Store Your Personal Information

• Location: within the territory of the People's Republic of China (excluding Hong Kong, Macao and Taiwan). For any cross-border transfer, we will carry out a data export security assessment or other statutory procedures as required.
• Duration: we retain personal information only for the shortest period necessary to fulfill the purpose of the service, unless otherwise provided by law. Account deletion follows a request-and-grace-period model: once your in-app deletion request passes identity verification, you enter a 24-hour grace period during which your information continues to be stored normally. To cancel the request, email info@kiraify.cn within 1 day and state the email address or phone number you registered with; after we verify your identity we will cancel it for you. After the grace period ends and we complete the deletion confirmation, we delete your personal information (account profile, cards, uploaded images and related records). Where deletion cannot be completed immediately due to a technical failure, it is completed within 15 working days at the latest, and the data is neither stored nor used in the meantime.
• Method: storage security is ensured through cryptographic techniques, access control, log auditing and other technical means.

6How We Protect Your Personal Information

We use industry-standard security measures to protect your personal information, including:

• HTTPS/TLS encrypted transmission;
• irreversibly encrypted storage of sensitive data (e.g., passwords);
• least-privilege access control;
• an emergency response mechanism for security incidents.

Despite these reasonable and feasible measures, the internet is not an absolutely secure environment. In the event of a personal information security incident, we will, as required by law, promptly inform you of the incident, our response measures and recommendations for your own protection.

7Special Notes on Generative AI ServicesAI

This App integrates generative AI services, primarily for AI business card layout & design. When you use these features, please read the following terms carefully:

7.1 Service Function

Generative AI services generate front/back card layout designs (including element positions, color schemes and typography) based on your design requirement text ("prompts"), current card information (including name, title, company, contact information, social media links, avatar and background images) and reference images you upload, using large language and multimodal models, and may automatically review and refine the results based on rendered previews.

7.2 Processing of Input Information

• To generate design results, we transmit your prompts, current card information, uploaded reference images and rendered previews to our servers and entrusted AI model providers;
• We will not use information that identifies you personally (such as your name, contact details or social media accounts) to train AI models without your explicit consent;
• The content you upload to the AI service must be content you are legally entitled to use. Please do not enter information involving the privacy of others, trade secrets, state secrets or content that violates applicable laws;
• Conversation history and generated results are cached locally on your device (up to 30 entries) for your review, and you may clear the cache at any time.

7.3 Training Data and Models

The generative AI models we use are trained on data from lawful sources and have undergone security assessments as required by applicable regulations. We continuously implement security governance on model output, including but not limited to:

• keyword libraries and classification models to filter illegal or harmful content in inputs and outputs;
• real-time monitoring of generated content with prompt handling of unlawful content;
• user feedback and reporting mechanisms (see Section 12).

7.4 Attributes and Identification of Generated Content

• AI-generated business card layouts are AI-generated content. When you use, share or publicly disseminate them, you should clearly mark such content as required by applicable regulations (e.g., note "contains AI-generated content" when sharing);
• For third-party intellectual property that may appear in AI-generated content (such as images, fonts or logos), you are responsible for confirming and obtaining the necessary licenses; we assume no liability for any IP defects in such content;
• AI-generated content is provided for your reference only. We do not guarantee its accuracy, completeness or suitability, and are not liable for any consequences arising from reliance on it.

7.5 Risk Notice

7.6 Service Interruption and Change

Generative AI services may be interrupted, changed or discontinued due to model upgrades, computing resource adjustments, compliance requirements and other reasons. We will provide advance notice within a reasonable scope. In such cases, your previously generated history remains viewable and usable, but new generation requests may not be completed.

8Your Rights

You have the following rights with respect to your personal information:

• Access and copy: you can view and export your account information and business card content on the "Me" page in the App;
• Rectification and supplementation: you can modify your personal information in the App at any time;
• Deletion: you can delete specific business cards, clear AI conversation caches, or delete your account to erase all of your personal information (see "Account deletion" below);
• Withdrawal of consent: you can turn off camera, photo library and other permissions in system settings, or disable features such as personalization in the App;
• Account deletion: you can submit a deletion request yourself in the App via "Settings - Profile - Delete Account" (that is, open your profile page and tap "Delete Account" under the "Manage" group at the very bottom of the page) — no need to contact customer service to request deletion. Before submission, the App shows you the list of data that will be deleted. You must type the email address or phone number bound to your account to confirm, and accounts with a password must also enter that password to verify your identity. After submission, your account will be deleted within 1 day: your profile, cards and uploaded images are permanently deleted and cannot be recovered. If you want to cancel the request, email info@kiraify.cn within 1 day and state the email address or phone number you registered with; after we verify your identity we will cancel it for you.
• Complaint and report: if you believe our processing of your personal information has harmed your legitimate rights, you can complain or report through the methods listed in Section 12.

To ensure security, we may need to verify your identity before you exercise the above rights. We will respond to your request within 15 working days of receipt.

9Protection of Minors

The App is primarily intended for adults. If you are a minor under the age of 14, please read this Policy and use the App under the supervision of a guardian, and only submit personal information with the guardian's consent.

In accordance with applicable regulations, we take the following measures to prevent minors from over-relying on or becoming addicted to generative AI services:

• we do not proactively push generative AI services to minors;
• for accounts suspected of belonging to minors, we limit the usage frequency of AI generation services;
• guardians may contact us to request the deletion of a minor's personal information or the cancellation of their account.

If you are a guardian and discover that a minor in your care has used the App or provided personal information without your consent, please contact us promptly to request deletion.

10Third-Party SDKs and Services

To provide specific features, the App integrates the following third-party SDKs or services. Relevant information is disclosed below:

In the table above, GoTrue Auth is self-hosted on servers located in mainland China, so your email, phone number and account data are never transferred to an overseas service. Alibaba Cloud SMS, DirectMail and the Bailian model service are all operated within mainland China and process only the information listed above to deliver their respective features. Google Fonts and YouTube are overseas services and may be unreachable on some networks; you can remove such links from your cards, or avoid the related assets, to prevent any request being sent to an overseas service.

The providers of the above third-party SDKs or services are independently responsible for the personal information they collect. We recommend that you also read their respective privacy policies.

11Updates to This Policy

We may revise this Policy from time to time. When material changes are made, we will notify you through in-app pop-ups, login prompts or push notifications. If you do not agree with the revised content, you may stop using the App; if you continue to use it, you will be deemed to have accepted the revised Policy.

Material changes include, but are not limited to:

• material changes to our service model;
• changes to the rules for collecting, using, entrusting, sharing, transferring or publicly disclosing personal information;
• changes to your rights or the way we fulfill our obligations;
• changes to the department responsible for personal information security or to our contact information;
• changes in applicable laws or regulatory requirements.

12Contact Us

If you have any questions, comments, suggestions or complaints regarding this Policy or personal information protection, you may contact us through the following channels:

• Operating Entity: Hangzhou Qixiao Technology Co., Ltd.
• Official Email: info@kiraify.cn
• Official Website: https://kiraify.com
• User Feedback: submit via "About - Feedback" in the App

We will respond to your request within 15 working days. If you are dissatisfied with our response, or believe that our processing of your personal information has harmed your legitimate rights, you may also complain or report to the relevant authorities.