PrimiLab Privacy Policy

This Policy applies to all scenarios in which you use PrimiLab products and services (including but not limited to the "Micca" app) via mobile clients, our official website or other channels. Third-party products or services (including third-party pages they link to) have their own privacy policies; this Policy does not apply to services provided by third parties.

We collect and use your personal information only for the purposes described in this Policy. To provide the following functions, we may need you to authorize or actively provide the relevant information:

1. 1.Account registration and login: phone number or third-party account, nickname and avatar. Used to create your account, verify your identity and protect account security.
2. 2.Sticker creation and upload: images you actively select, optional capture location (latitude/longitude) and place name, and camera/album access permissions. Used to display and share your content in collections.
3. 3.Collections and social interaction: the collections you create/join, invitation codes, following relationships and interaction records. Used to enable collection co-building and social features.
4. 4.Device and log information: device model, operating system version, unique device identifier, IP address, network type, and crash and performance logs. Used to keep the Service running stably, troubleshoot faults and prevent fraud.
5. 5.Customer support: the issue descriptions, contact details and communication records you actively submit to us. Used to respond to and follow up on your requests.

Where a function requires sensitive personal information (such as location), we will request your authorization separately via means such as a system prompt. You may choose not to authorize it, which will only affect the related function and not your use of other functions that do not rely on that information.

To provide the corresponding functions, we may request the following device permissions when you actively take an action. You can turn off authorization in your system settings at any time:

• •Camera permission: to take photos for creating stickers;
• •Album/media library permission: to read and save images;
• •Location permission: to record capture location in stickers (you choose precise or approximate location);
• •Notification permission: to push notifications such as account security, collection interactions and system messages;
• •Network access permission: to complete data upload and download.

This website may use technologies such as cookies and local storage to record information such as your preferences and login status, in order to improve your experience and safeguard service security. You can reject or delete cookies through your browser settings, but this may affect the normal use of some functions.

We do not sell your personal information to third parties. Except in the following circumstances, we also do not share your personal information with any third party:

• •With your prior explicit consent or authorization;
• •Where necessary to provide the core functions of the Service or functions you actively choose, sharing with entrusted processors such as object storage services (to store the images you upload), message push services, SMS verification-code services and map services. We sign strict data-processing agreements with such processors requiring them to handle personal information in accordance with this Policy and relevant confidentiality measures;
• •In transactions such as mergers, acquisitions or asset transfers, where the transferee must continue to perform the obligations under this Policy;
• •As required by laws, regulations, regulators or government-authorized agencies;
• •Where necessary to protect the lawful rights and interests of us or the public and consistent with applicable laws and regulations.

To provide basic capabilities such as login, message reach and content storage, we have integrated the following third-party SDKs into the app. Third-party SDKs are operated independently by their providers, and their personal-information processing is governed by their officially published privacy policies.

1. 1.Tencent Weixin Open Platform mobile SDK (via the fluwx plugin): invoked when you choose "Log in with WeChat", to launch the WeChat client, obtain a one-time authorization code, and exchange it with WeChat for public profile data such as OpenID, UnionID, nickname, avatar, gender and region to create/identify your account. The SDK is provided by Tencent Technology (Shenzhen) Co., Ltd.; processing rules are set out in the Weixin Open Platform Developer Agreement and the WeChat privacy policy.
2. 2.Volcengine Object Storage (TOS): used to store the images and sticker files you actively upload.
3. 3.Volcengine SMS service: used to send verification-code SMS when you choose phone-number login; your phone number is passed to the carrier.

We provide data to third-party SDKs only within a reasonable and necessary scope and assess and supervise their data-processing activities. You have the right to refuse the function corresponding to any SDK, but the related function may become unavailable as a result.

• •Storage location: your personal information is by default stored on servers within the territory of the People's Republic of China. Where cross-border provision is genuinely necessary, we will separately obtain your consent and fulfil assessment obligations in accordance with the law.
• •Retention period: we retain your personal information only for the shortest period necessary for the purposes described in this Policy, except as otherwise provided by laws and regulations. After your account is cancelled or your personal information is deleted, we will stop using and delete your related information, unless otherwise required by law.

We adopt industry-standard security measures to protect your personal information, including but not limited to transport-layer encryption, access minimization, key and credential management, operation auditing and security drills. We also continuously upgrade our security capabilities to help prevent personal information from being leaked, damaged or lost.

Nevertheless, the internet environment is not absolutely secure. In the unfortunate event of a personal-information security incident, we will, as required by law, promptly inform you of the basic situation of the incident, its potential impact, the measures taken or to be taken, advice on how you can protect yourself and reduce risk, and report to the relevant regulators.

Subject to applicable laws and regulations, you may exercise the following rights through in-app settings or the contact information at the end of this Policy:

• •Access and copy your personal information;
• •Correct or supplement inaccurate or incomplete personal information;
• •Delete your personal information (including cancelling your account);
• •Withdraw consent previously given;
• •Restrict the processing of specific personal information;
• •Inquire about and understand the rules by which we process your personal information;
• •Obtain personal-information portability where conditions are met.

We will verify your identity upon receiving your request and respond within a reasonable period. For requests that are manifestly unreasonable or repetitive, we may decline them or charge a reasonable cost.

We attach great importance to protecting minors' personal information. If you are a child under the age of 14, please read this Policy with your guardian and use the Service and submit personal information only after obtaining your guardian's consent. We do not proactively collect personal information from children under 14 that is unrelated to the services provided.

If a guardian discovers that we have collected a child's personal information without valid consent, please contact us promptly via the contact information at the end of this Policy, and we will delete the relevant information as soon as possible.

We may revise this Policy in response to changes in laws and regulations, business adjustments or the security situation. The revised version will be published on this page with the update date noted. Where your material rights and interests are affected, we will notify you prominently via in-app notice, push, website announcement and the like. Please review this Policy regularly to stay informed of the latest content.

If you have any questions, comments, suggestions or complaints about this Policy, the processing of your personal information or the exercise of your rights, you may contact our personal-information protection officer via:

• •Email: privacy@primilab.com
• •We will respond within 15 business days after receiving your request and verifying your identity.