LoveGPT Privacy Policy Effective Date: March 1, 2023 Please read this Privacy Policy (“Policy”) carefully. It explains the categories of personal information that Kodrak Inc. (“LoveGPT,” “we,” “us,” or “our”) collects when you (the “User” or “You”) use LoveGPT through its website (the “Website”) and its mobile application (the “Application”) (collectively, the Website and Application are the “Services”), how that information is used, with whom it may be shared, and your privacy choices. 1. Data Controller and Representative The Data Controller for the LoveGPT Services is Kodrak Inc. You can contact the Data Controller by emailing tbaram2@gmail.com, or LoveGPT’s Data Protection Officer by emailing CDO at tbaram2@gmail.com. 2. Data Collection and Processing by LoveGPT When you visit our Website, purchase the Application or Services (whether through the Website, within the Application, or through a third-party app store), or use the Application or Services, LoveGPT may collect and use personal data as follows: Personal Data Collected Information You Provide to Us We may ask you to provide certain information when you set up an account or profile on our Website, order our Application, or contact us (through the Website or Application) for information or support. This information may include: Your email address, account name, or other personal identifier Order information, purchase token The products you purchase, date and amount of the order, expiration date, currency code, country code Information We Automatically Collect When You Visit Our Website This may include: Your IP address (or other unique device identifier, including one we may assign) Browser details, operating system, hardware information Location information (if available) The URL that referred you to our Website Activities on our Website (including your preferences) Other logging information such as the date and time of your visit If you visit our Website from a mobile device, we may also collect additional information such as your device identifier and information about your mobile network. Information We Get from Your Use of Our Products We collect data about the products you use, how you use them, and your local device information. This may include: Device information (e.g., phone model and brand) Operating system (system version, ID, and language) IP address Log information (access time, usage time, click operations, crash reports) Third-Party Tracking Technologies Third parties may use tracking technologies in connection with our Service, which may include the collection of information about your online activities over time and across third-party websites. This Policy does not apply to these third-party technologies because we do not control them and are not responsible for them. Do Not Track is a technology that enables users to opt out of tracking by websites they do not visit. Currently, we do not monitor or take any action with respect to Do Not Track technology. 3. Purpose and Legal Basis of Processing LoveGPT uses the information we collect about you for the following purposes: Identification and Authentication We use your data to verify you when you access your account (if available) for the Services. Operating Our Services We use your data to provide our Services, process and fulfill orders, provide customer support, and otherwise comply with our contractual obligations to you. We (and/or our third-party vendors) use your financial information to process your purchases. Communicating With You We use your data when we communicate with you (e.g., in response to customer support inquiries). Improving Our Services We use your data to understand how our Services are being used and how we can improve them. In general, we analyze aggregated data rather than specific user data. However, we may need to analyze specific cases to address particular problems (e.g., a bug affecting only a few accounts). Marketing and Advertising We use your data to show you ads on third-party sites and to send you offers. We may also use your data in delivering third-party advertisements to you, including “targeted ads” based on your activities. Exercising Our Rights Where reasonably necessary, we use your data to exercise our legal rights and prevent abuse of our Services. For example, we may use your data to detect and prevent fraud, spam, or content that violates our Terms of Service. Legal Compliance We use your data where we are legally required to do so. For example, we may need to gather your data to respond to subpoenas or court orders. Protecting Your Information Where appropriate, we may anonymize, back up, or delete certain data. To the extent you are a resident of a European Union member state or the United Kingdom—or the EU General Data Protection Regulation (GDPR) or UK GDPR otherwise applies—whenever we process your data for one of the above purposes, one or more of the following lawful bases applies: Compliance with a legal obligation Performance of a contract Legitimate commercial interest In the event that none of the above lawful bases applies, we will not process your personal information for that purpose without first receiving your voluntary consent. 4. Sharing of Personal Information With Third Parties We may share your personal information with companies that help us run our business by processing personal information on our behalf for the purposes identified above. Such companies may include providers of payment processing, server services, data analysis, fraud monitoring and prevention, email delivery, social media, and marketing platforms. We use reasonable efforts to vet these vendors for their privacy and data security practices and require that they protect your data in accordance with this Policy. Specifically, LoveGPT may use third-party tracking tools (such as Google Firebase Analytics) to track and store usage information on how users interact with our products and website. These tools may send data analysis reports to LoveGPT for the purposes outlined above. Such third-party tools include but are not limited to: Firebase SDK (by Google), which may collect: IP address Usernames Email addresses iOS UDIDs Secure Android IDs Passwords Phone numbers User agents Instance IDs Crash traces Breakpad minidump formatted data (for NDK crashes only) Device specifications (e.g., iOS version) This information is used to uniquely identify the user and provide analytics and data analysis services. Cutout.pro In order to provide higher-quality service (e.g., image processing), our partner cutout.pro may collect images from you only with your permission. Your images are secure and treated confidentially. Within about 7 days after upload, both the uploaded image and the result image are deleted. This information is used only to provide high-quality picture processing services. LoveGPT may store collected information on servers leased from third-party server providers. Additionally, LoveGPT may disclose your data to third parties in the following circumstances: If we are under a duty to disclose or share personal data to comply with any legal obligation or to protect the rights, property, or safety of our business, our customers, or others. In response to official requests (e.g., court orders, subpoenas, search warrants, or national security requests) from government authorities or parties to legal proceedings. Where we reasonably believe someone’s life is at risk (for example, if we are made aware of a person threatening self-harm). In situations involving legal claims against us or one of our users. If you challenge such a notice, we may share your response with the complainant. With potential transaction partners, advisors, or others in the event our company is, in whole or in part, acquired by a third party. In such a case, we use reasonable efforts to require the acquiring entity to comply with this Policy. 5. Transfer of Personal Data Your personal information may be stored on servers located in, and accessed by employees and contractors of, LoveGPT (Kodrak Inc.) in one or more countries outside your country of residence. By using our Application, Services, or Website, you consent to the transfer of your information to countries that may have data protection laws different from those in your country of residence. If you object to having your information transferred or used as described in this Policy, please refrain from using our Application, Services, or Website and delete all Applications from your devices. 6. Protection of Personal Information LoveGPT uses commercially reasonable, industry-standard security technologies and safeguards to protect your personal data against unauthorized access, loss, destruction, unlawful processing, or any processing inconsistent with the purposes set out in this Policy. We also expect our service providers to protect information to the same standard. However, no data transmission over the Internet, mobile networks, wireless transmission, or electronic storage can be guaranteed to be 100% secure. Thus, we cannot guarantee the security of any information you transmit to us. 7. Duration of Storage LoveGPT seeks to minimize the personal information it collects and maintains. We will delete personal data once it is no longer needed for the purpose for which it was collected. Generally, LoveGPT stores collected personal data for the duration of the contract and 60 days after its termination. Unless you request the deletion of your information sooner, we use the following criteria to determine how long we keep your data: Our contractual obligations and rights related to the information Legal obligations under applicable laws and regulations (which may require data retention for a certain period) Statutes of limitations under applicable laws Our legitimate business purposes 8. Your Rights Depending on the laws of your jurisdiction, you may have one or more of the rights listed below regarding your personal data. Before exercising these rights, please consult with legal counsel if you are unsure of local legal requirements. You may submit any of these requests by contacting tbaram2@gmail.com. Right to be Informed You have the right to clear, transparent, and easily understandable information about how we collect and use your personal data, as set out in this Policy. Right of Access You have the right to request access to your personal data and certain related information (such as that provided in this Policy). Right to Rectification If your personal data is inaccurate or incomplete, you have the right to have it corrected. Right to Erasure or Deletion (“Right to be Forgotten”) You can request the deletion or removal of your personal data where there is no compelling reason for us to keep using it (subject to certain exceptions). Right to Restrict Processing Under certain circumstances, you have the right to block or suppress the further use of your personal data. Right to Opt Out of the Sale of Personal Information You may have the right to opt out of the sale of your personal information to third parties (as applicable by law). Right to Data Portability You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and the right to transmit that data to another controller. Right to Object to Processing You have the right to object—on grounds relating to your particular situation—at any time to the processing of your personal data. Right to Lodge a Complaint You have the right to lodge a complaint with your national supervisory authority regarding how we handle or process your personal data. Right to Withdraw Consent If you have given consent for a specific processing activity, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing that occurred based on consent before its withdrawal. Right to Define Instructions Upon Death You have the right to define instructions regarding the storage, deletion, and use of your personal data after your death, where applicable by law. 9. Children’s Privacy We do not knowingly collect personal information from individuals under the minimum required ages specified herein. You must be at least 14 years of age or the age of majority in your jurisdiction (whichever is greater) to use our Services. Individuals under the applicable age may use our Services only through a parent or legal guardian’s account and with their involvement. In accordance with the U.S. Children’s Online Privacy Protection Act (COPPA), if we learn that we have collected personal information from a child under age 13 without verified parental consent, we will delete that information as quickly as possible. If you believe that LoveGPT (Kodrak Inc.) may have collected personal information regarding your child, you may request deletion of such information by contacting us at tbaram2@gmail.com. 10. Revisions to This Privacy Policy From time to time, we may update this Privacy Policy (or related documents). If we make changes, the link to the Policy on our Website will indicate that the Policy has been revised. For new users, the changes become effective upon posting. For existing users, if the change is significant, it takes effect after posting (we may also notify you of significant changes). We encourage you to review this Policy periodically for the latest information on our privacy practices. 11. Contacting LoveGPT If you have any questions, concerns, or requests regarding this Privacy Policy—or if you wish to exercise any of your data protection rights—please contact: Email: tbaram2@gmail.com We will make reasonable efforts to respond promptly and address your concerns. Kodrak Inc. All rights reserved.