Operator: Parason Enterprise Limited

Address: Unit No.G1, 17/F, Legend Tower, 7 Shing Yip Street, Kwun Tong, Kowloon, Hong Kong

Introduction

Thank you for using EpNova!

We understand the importance of your personal information and greatly value your trust. Parason Enterprise Limited (“we”, “us”, or “our”) has developed this EpNova Privacy Policy (“this Policy”) to help you fully understand how we collect, use, share, store, and protect your personal information when you use EpNova products and services, as well as how you can manage your personal information so that you may make appropriate choices.

Before you start using our products and services, please carefully read and understand all content of this Policy. Please use our services only after you fully understand and agree to this Policy. In addition to this Policy, in specific scenarios we will also explain the purpose, scope, and method of information collection through immediate notices (including pop-ups, page prompts, etc.) and feature update descriptions. Such content forms part of this Policy and has the same legal effect. If you have any questions, comments, or suggestions regarding this Policy, you may contact us using the contact information at the end of this Policy.

Please note:

Your agreement to this Privacy Policy signifies that you understand the functions provided by EpNova and the necessary personal information required for such functions to operate, and that you grant corresponding authorization for collection and use. This does not constitute your separate consent to enable additional functions or process non-essential personal information. For enabling additional functions, processing non-essential personal information, and processing sensitive personal information, we will seek your separate consent based on your actual usage.

If you do not agree with this Policy, please stop using EpNova.

If you have any questions or suggestions regarding this Policy or related matters, you may contact us through:

This Privacy Policy will help you understand the following:

1. Information We Collect

1.1 Information You Provide Voluntarily

Information provided when contacting customer service

When accessing customer service, you may provide contact information (email address), text/image/video information, user ID, and problem descriptions. We also collect communications you send to us through complaints, support requests, or feedback channels.

Account registration and login information

You may log in to EpNova by authorizing your Google or Apple account. When you choose to log in via a third-party account, we will obtain your nickname, Apple ID (iOS only), avatar, and email address from the relevant platform to create or log in to your EpNova account, provide services, and prevent security risks.

Clipboard Usage

The App only reads text from the clipboard when content matches specific formats (such as referral codes or activity links), and solely for ad attribution purposes. We do not access images, videos, or other unrelated content. Clipboard access is governed by iOS/Android system permissions, and you may manage or revoke this permission at any time in your device settings.

1.2 Automatically Collected Information

Usage Information

We collect data related to your interactions with EpNova, including clicks, likes, searches, saved favorites, browsing history, and transaction records, to analyze your preferences and personalize content recommendations.

Log Information

We collect operational and behavioral log information generated during your use of EpNova, including browsing history, sharing records, download records, and access dates.

Transaction Information

When you make purchases or transactions within EpNova, we collect related transaction service information including transaction amount, order time, order number, order status, payment method, and payment status.

Device Information

Device ID or other unique identifiers, device and software characteristics (type and configuration), system language, referrer URL, IP address, browser information, standard web server log data; iOS devices also include the Advertising Identifier (IDFA).

Advertising-Related Information

With your consent, we access the list of apps installed on your device for targeted advertising delivery. Our advertising partners may collect the following information through our services for ad display, click tracking, conversion attribution, and ad performance analysis:

You may limit such data collection by resetting your device’s advertising identifier or turning off personalized advertising in device settings:

Local Storage

We may collect and store information, including personal information, locally on your device through mechanisms such as app data caching.

Cookies

We use cookies and similar technologies (web beacons, Flash cookies, etc.) to automatically collect information for analyzing platform usage, improving experience, serving advertisements, and measuring advertising effectiveness. If required by law, we will obtain your consent prior to use.

Push Notifications

With your authorization, we may send push notifications via the mobile application, including content updates, account alerts, and other important service-related notices. You may turn off push notifications at any time in your device settings.

1.3 Information from Other Sources

Third-party account information

When logging in via Google or Apple accounts, we obtain your nickname, Apple ID (iOS only), avatar, and email address from the relevant platforms to create or log in to your EpNova account, provide services, and mitigate security risks.

Publicly available information

We may collect relevant information about you from government-published information and public content on social media platforms.

Information provided by others

We may receive information related to you when you are mentioned in private messages, complaints, appeals, requests, or feedback sent to us by others, or when others provide your contact information to us.

2. How We Use Information

2.1 Service Provision – Enter into and perform agreements with you; provide, process, and maintain services; create your account and profile.

2.2 Communication – Communicate with you regarding your use of EpNova, product announcements, software updates, and respond to your support requests.

2.3 Marketing & Advertising – Send marketing messages and special offers via inbox messages; deliver advertisements (including targeted ads); measure advertising effectiveness; promote in-app sales and purchases. If you no longer wish to receive such messages, you may notify us at any time using the contact information in this Policy or unsubscribe via links in relevant communications.

2.4 Experience Improvement – Personalize content displayed to you on EpNova and ensure content is presented optimally for you and your device.

2.5 Security & Integrity – Detect and combat abuse, harmful activity, fraud, spam, and illegal behavior; monitor and prevent security risks or technical issues; protect account and system security; improve the safety and reliability of EpNova services.

2.6 Legal Compliance – Comply with legal and regulatory obligations, including responding to litigation, claims, or investigations, and corporate matters such as mergers, acquisitions, asset transfers, bankruptcy, restructuring, and liquidation.

2.7 Technology Development & Research – Train and improve our technologies (such as algorithms); develop and analyze platform usage statistics to improve products and services.

2.8 Automated Decision-Making & Personalization – We use automated decision-making technologies (including algorithmic analysis and user profiling) to analyze your activity on EpNova (such as viewing history, saved content, search behavior, and interactions) and recommend content or services you may be interested in. Such automated processing is for personalization only and does not produce legal effects. You may manage or disable this feature at any time via the in-app “Personalized Recommendations” switch.

3. How We Share Information

3.1 Basic Principles for Sharing with Partners

When sharing data with partners, we adhere to the following principles:

3.2 Circumstances of Sharing

We do not share your personal information except as expressly stated in this Policy.

Sharing with your consent – Sharing information with third parties with your consent or authorization. For example, when you choose to share content via social media platforms, we disclose necessary information to such platforms in accordance with your settings.

Sharing with business partners:

SDK / Service

Purpose

Privacy Policy Link

Firebase Analytics

App usage analysis & performance monitoring

https://firebase.google.com/support/privacy

Firebase Crashlytics

Crash reporting & error diagnosis

https://firebase.google.com/support/privacy

Sign in with Apple

Third-party account login

https://www.apple.com/legal/privacy

Google Sign-In

Third-party account login

https://policies.google.com/privacy

Sharing in corporate transactions – In the event of a merger, financing, acquisition, restructuring, bankruptcy, or asset transfer, your personal information may be transferred to another entity. We will notify you and require the new holder to comply with all terms of this Privacy Policy. If the recipient changes the original purpose or manner of processing, we will seek your consent again.

Sharing for legal reasons – We may share your personal information with law enforcement agencies, government regulators, courts, and other public authorities when required by law or regulation, including: complying with legal obligations or processing requests; enforcing terms of service and other agreements; asserting or defending legal rights; detecting, preventing, or addressing security, fraud, or technical issues; protecting the rights, property, or safety of us, our users, third parties, or the public.

Handling in the event of cessation of operations – If we cease operations, we will promptly stop collecting your personal information, notify you individually or via public announcement, and delete or anonymize the personal information we hold.

4. Information Storage and Protection

4.1 Retention Period

We retain your personal information during the existence of your account and for as long as necessary to fulfill the purposes described above, or as required by law (generally not less than five years or as required by applicable mandatory laws). Retention periods vary by information type, usage purpose, and statutory requirements. Upon expiration of the retention period, we will delete or anonymize your personal information unless otherwise required by law.

You may delete your account directly via the settings page within the App. If you request that we cease using your information to provide services, please contact us using the contact information at the end of this Policy.

4.2 Security Measures

Technical measures: Transport-layer encryption to prevent information sniffing, eavesdropping, or interception; classified and graded data storage; strict data access control systems; multi-factor authentication; full lifecycle data monitoring and auditing to prevent unauthorized access, disclosure, use, alteration, or damage.

Management measures: Establish a dedicated personal information protection department; develop internal management systems with minimized employee authorization; conduct regular employee security training; lock personal information storage areas and restrict employee access.

Note: No electronic data transmission or storage system can be guaranteed absolutely secure, and we cannot ensure your personal information will remain secure at all times.

4.3 Account Security Risk Warning

When using EpNova, please properly protect your personal information, provide it to others only when necessary, and do not trust transactions conducted through unofficial channels. If you suspect your account information has been compromised, please immediately contact us using the information provided in this Policy so we may take appropriate measures.

4.4 Security Incident Response

If our physical, technical, or administrative protection facilities are compromised, resulting in unauthorized access, public disclosure, alteration, or destruction of your personal information, we will promptly activate an emergency plan and take reasonable and necessary measures to mitigate impact on you.

In the event of a personal information security incident, we will notify you via SMS, push notification, in-app message, or public announcement as required by laws and regulations, informing you of the basic situation and potential impact, measures we have taken or will take, recommendations for you to independently prevent and reduce risks, and remedial measures available to you. We will also report the handling of security incidents to regulators as required.

5. System Permissions We Obtain

To provide you with complete service functions, we may request the following device permissions:

Permission

Purpose

Network Permission

Data interaction with servers, loading content and images

Storage/Photos Permission

Image/video caching, accessing device photos, saving content and error logs

Camera Permission

Taking photos or recording video to support in-app features such as customer support media submission

Install Apps Permission

App version updates

Location Permission (optional)

Providing location-related services and content optimization (such as regional ad targeting)

You may enable or disable the above permissions at any time in your device settings. After disabling a permission, the corresponding function may not work properly, but this will not affect other basic services.

Regarding background data collection: When the App is idle or running in the background, information collected is limited to the minimum necessary to implement product functions. Advertising SDKs (such as AdMob) may collect device IP addresses while the App is in the background to optimize ad delivery effectiveness. We ensure such behavior complies with this Privacy Policy and applicable laws and regulations.

6. Your Rights and Choices

In accordance with applicable laws and regulations, you have the following rights:

How to Exercise Your Rights

To submit a request or encounter issues while exercising your rights, you may contact us:

We will respond within the time required by applicable law (usually 15 working days) after verifying your identity. We generally do not charge fees for reasonable requests; we may charge a fee for repeated or excessive requests.

Opting Out of Targeted Advertising

You may opt out of targeted advertising through:

Please note that opting out of targeted advertising does not mean you will no longer see advertisements, only that ads may be less relevant to your interests.

Regarding Do Not Track: There is no universal standard for Do Not Track signals across browsers and devices, and we do not currently respond to such signals. However, we provide multiple ways for you to manage your personal information and advertising preferences as described above.

7. Processing of Minors’ Information

EpNova is not intended for children under the age of 13 (or the minimum age specified by applicable law in your jurisdiction). We do not knowingly collect personal information from users below the minimum age. If we discover that such information has been collected, we will immediately delete it and terminate the relevant account.

Users who have reached the minimum age but are not yet adults must use EpNova under the supervision and guidance of a parent or legal guardian and may only submit relevant personal information after such guardian has agreed to this Privacy Policy.

8. Cross-Border Data Transfer

To provide you with services, your personal information may be transferred to our affiliated entities or third parties outside your jurisdiction for the purposes described in this Policy. The privacy and data protection laws in such regions may differ from those in your region (and may provide a lower level of protection in some cases). We will take appropriate safeguards to protect your personal information in accordance with this Privacy Policy and applicable laws and regulations, including signing standard contractual clauses approved by relevant authorities or other appropriate data transfer mechanisms where necessary.

9. Updates to the Privacy Policy

We may update this Privacy Policy from time to time in response to changes in laws, technology, or business developments. When updated, we will publish the revised version and update the “Last Updated” date at the top of the Policy.

The following constitute material changes, and we will notify you in advance via public announcement, push notification, pop-up, or email:

If consent is required by applicable law, we will seek your consent before the revised Policy applies to you.

10. Contact Us

After receiving your inquiry or request, we will respond within the period required by applicable law after verifying your identity.

11. Language

This Privacy Policy is drafted in English. Translations into other languages may be provided. In the event of any inconsistency between the English version and translations, the English version shall prevail.

12. California Resident Provisions (CCPA)

This section applies to California residents.

Categories of personal information we collected in the past 12 months:

Category

Details

Source

Identifiers

Email address, account name, device ID, IP address

Voluntarily provided & automatically collected

Commercial Information

Transaction history, points consumption records, order information

Automatically collected

Internet or electronic network activity

Click records, browsing history, search history, interaction data

Automatically collected

Inferred information

User preferences and characteristics inferred from above data

Automatically generated

Sensitive personal information

Account login credentials (combined with security verification codes)

Voluntarily provided & third-party sources

Sale or sharing: We do not sell your personal information. However, we may share certain technical or usage information (such as device identifiers, cookies, browsing data) with advertising or analytics partners for cross-context behavioral advertising. You may opt out of such sharing using the methods provided in Section 6 of this Policy. We do not sell or share the personal information of users under the age of 16.

Your California rights:

How to exercise your rights: Please send an email to kuaigeai@163.com stating your request. We will respond within 45 days (extendable to 90 days if necessary). You may submit up to two requests for information per 12-month period.

13. Provisions for Users in the EEA, UK, and Switzerland (GDPR)

This section applies to residents of the EEA, United Kingdom, and Switzerland. In the event of a conflict with other parts of this Policy, this section shall prevail.

Data Controller: StoryMatrix Pte. Ltd., Email: kuaigeai@163.com, Address: 29-03, Raffles City Tower, 250 North Bridge Road, Singapore 179101

Legal Bases for Processing

Purpose of Processing

Legal Basis

Providing services, creating accounts, performing contracts

Necessity for the performance of a contract

Personalized content recommendations, improving user experience

Legitimate interests / your consent

Marketing communications

Your consent

Security protection, fraud detection

Legitimate interests / legal compliance

Targeted advertising

Your consent

Compliance with legal obligations

Legal compliance

Corporate transactions (mergers, acquisitions, etc.)

Legitimate interests / legal compliance

Your rights under the GDPR:

International data transfer safeguards: When transferring your personal data to countries outside the EEA, UK, or Switzerland, we implement one of the following safeguards: European Commission adequacy decisions; Standard Contractual Clauses (SCCs); Binding Corporate Rules (BCRs); or other appropriate safeguards approved by regulators.

How to exercise your rights: Please send an email to kuaigeai@163.com. We will respond within one month (extendable to three months if necessary). If you are unsatisfied with our response, you have the right to lodge a complaint with the data protection authority in your country.

Appendix: Relevant Definitions

Personal Information: Any information recorded electronically or otherwise related to an identified or identifiable natural person, excluding anonymized information.

Sensitive Personal Information: Personal information that, if leaked or used illegally, is likely to harm the dignity of a natural person or endanger their personal or property safety, including account login credentials, biometric information, medical and health information, financial account information, etc.

De-identification: The process by which personal information is processed so that it cannot identify a specific natural person without the aid of additional information.

Anonymization: The process by which personal information is processed so that it cannot identify a specific natural person and cannot be restored.

Device Information: Includes device identifiers (such as device ID, IDFA, Android ID, MAC address, etc.), application information (app crash information, notification status, etc.), device parameters and system information (device type, model, operating system, and hardware-related information), and device network environment information (IP address, WiFi information, and other network-related information).

Service Log Information: Includes search and browsing records, follows, page views, IP address, language used, and access date and time.