NovisKit Privacy Policy Effective Date: June 17, 2026 1. Introduction NovisKit ("we," "us," or "our") prioritizes user privacy and data security. This Privacy Policy elaborates on how we collect, utilize, disclose and protect user information when you access and use our NovisKit image toolkit mobile application and all affiliated functional services (collectively referred to as the "Service"). By downloading, registering or using NovisKit, you fully consent to the information collection and usage rules stated in this Privacy Policy. If you disagree with any clauses herein, please stop using all services of this application immediately. Key Audit Compliance Statement: NovisKit adopts self-developed local image processing algorithms.We DO NOT transmit, share, disclose or send any user personal data, uploaded images, portrait biometric data or edited content to any external third-party AI service providers, third-party AI platforms or AI algorithm institutions. All image editing tasks run on our exclusive private server without third-party AI data participation. 2. Information We Collect 2.1 Information You Voluntarily Provide - Account Information: When you register and bind an account, you may provide your email address, nickname and custom profile avatar information. - Payment Information: All in-app payment transactions are independently processed by official platform payment channels (Apple App Store, Google Play Store). We will not collect, store or obtain your bank card number, billing address and private payment credentials in any form. - User Image Content: Original photos, local pictures and image files you actively upload for in-kit editing, including watermark adding, format conversion, image cropping and sharpness adjustment operations. 2.2 Information Collected Automatically - Device Information: Mobile device model, system version, exclusive device identification code, network access type and basic device operating parameters. - Usage Behavior Data: Record of used editing tools, image operation history, function click logs and in-app interactive behaviors. - System Log Data: App operation logs, crash feedback data, service operation performance data for internal maintenance optimization only. 2.3 Local Image Processing Data - Uploaded original images for watermark embedding, format transcoding, frame cropping, definition enhancement processing; - Finished edited images exported by users; - Local editing parameter data set by users (watermark size, picture ratio, sharpness value, target format). 3. How We Use Your Collected Information We only use collected user information for the following legitimate service purposes, and will not expand usage scope without user authorization: 1. Provide, maintain, optimize and upgrade core image toolkit services (image watermarking, format conversion, cropping, sharpness adjustment); 2. Complete user local and private cloud image editing processing requests; 3. Manage user account status, member validity and in-app functional permission configuration; 4. Complete platform order verification and purchased functional permission activation via official payment channels; 5. Push service upgrade notices, function optimization reminders and account security alerts; 6. Reply to user consultation, complaint and technical support requests; 7. Detect, fix and prevent App system bugs, abnormal access and security risks; 8. Perform statutory obligations and comply with local network data supervision regulations. 4. Image Processing Rules & Data Retention Rules 4.1 Processing Mode Explanation NovisKit supports dual processing modes: local offline image processing + exclusive private cloud processing. No third-party AI interface, third-party AI algorithm or third-party AI server is invoked during the whole editing process. All image computation and editing logic belong to our independent self-developed toolkit system. 4.2 Uniform Data Retention Cycle 1. Uploaded Original Images: All uploaded original pictures will be permanently deleted from our private cloud server within 30 days after editing processing is completed; offline edited images will not be uploaded to any server at all. 2. User Edited Images: Finished edited pictures will be reserved in user personal cloud album for 90 days for user secondary editing. Users can manually delete finished images at any time. We suggest users back up edited files locally in advance. 3. Account Personal Data: Account bound information will be reserved until users submit account deletion application. All account data will be cleared irrecoverably after account cancellation. 4. Biometric Facial Data Special Rule: If uploaded images contain facial portrait information, facial feature and biometric data will be automatically erased completely within 72 hours after image editing. We never store, extract, analyze or share any user facial biometric information permanently. 4.3 User Content Ownership Users retain complete ownership and intellectual property rights of all uploaded original images and self-edited finished images. You grant us a limited non-commercial exclusive license only to process your images to deliver editing services, and this license cannot be transferred to any third-party institution. 4.4 Third-Party AI Data Sharing Absolute Exclusion (Audit Core Clause) NovisKit has no cooperative relationship with any third-party AI service provider, third-party AI model institution or external AI processing platform. The App will not collect, call, transmit, upload or share user personal information, original images, portrait data, editing records to any third-party AI service. No user data will be sent to external AI institutions under any circumstance, and no related data sharing user consent is required. 5. Information Sharing and Disclosure Scope We will never sell, trade, rent or commercialize your personal information and image data to any third party. We only share minimal necessary data under the following limited scenarios, and these cooperative parties are non-AI service institutions: 1. Authorized Non-AI Service Vendors: We share basic device operation data with trusted cloud hosting, data security maintenance and official statistical service providers. All cooperative vendors sign equal-level data confidentiality agreements, and cannot use user data for AI training, image analysis and algorithm derivation. 2. Legal Mandatory Requirements: We may disclose specified user data when required by valid local law, court judgment or official government regulatory order. 3. Company Business Transaction: In case of platform merger, asset acquisition or business transfer, user data will be transferred as business asset together, and the successor shall abide by the same privacy protection standard. 4. User Explicit Authorization: We only share your data with third parties when you confirm and give written in-app authorization voluntarily. 6. Information Security Protection Measures We adopt industry-standard technical and management protection measures to safeguard user data security: - Adopt TLS/SSL end-to-end encryption for all network transmission image data; - Deploy isolated private cloud server, add multi-layer access identity verification; - Carry out regular server security inspection, vulnerability repair and data audit; - Set internal staff data access permission and confidentiality management rules. Please note that no internet transmission or electronic storage mode can achieve absolute security. We will try our best to protect your user information security. 7. User Legal Rights Based on local data protection laws, you enjoy the following data rights: 1. Right of Access: Apply to obtain a copy of your reserved personal account data; 2. Right of Correction: Apply to modify incorrect personal account information; 3. Right of Deletion: Apply to delete personal account, bound data and cloud image files; 4. Right of Data Portability: Apply to export your image and account data in readable format; 5. Right of Opt-out: Turn off non-essential data collection and behavior tracking permission in device settings. To exercise above rights, please contact our official support email. We will reply and complete relevant processing within 30 working days. 8. Minor User Privacy Protection This service is applicable for users aged 13 and above. We do not purposely collect personal information and private image data from users under 13 years old. If we confirm we have unintentionally obtained minor user data, we will delete relevant information and image files immediately without delay. 9. Third-Party Non-AI Services Explanation This App only accesses official platform payment channels and system auxiliary service interfaces, without embedding any third-party AI editing tools, AI analysis modules or AI image processing services. We are not responsible for the privacy rules of official third-party payment services, and users shall check third-party payment privacy policies independently. 10. Cross-Border Data Transmission User image data and personal information will be stored and processed in designated regional secure servers. If cross-border data transmission is required in special cases, we will sign standard contractual clauses to ensure the receiving party provides equivalent privacy protection level. 11. Policy Revision Notice We may update this Privacy Policy according to legal revision and service iteration. Material policy updates will be posted on App [Settings - Privacy Policy] page with updated effective date. Your continued use of NovisKit after revision means acceptance of the updated privacy clauses. 12. Contact Information For privacy consultation, data right application and problem feedback, please contact us via official email: Support Email: canomiti1991@icloud.com