KISMISS VIDEO PRIVACY POLICY

1. INTRODUCTION

KisMiss Video ("we", "us", "our") is dedicated to safeguarding the privacy and security of your personal information. This Privacy Policy (Version 2.1, effective January 27, 2026) outlines our practices regarding the collection, utilization, disclosure, potential sale, retention, and protection of your information when you access or use our mobile application and related services (collectively referred to as the "Service"). By engaging with the Service, you acknowledge and consent to the data practices described in this document, which complies with global privacy regulations including GDPR, CCPA, VCDPA, PIPA (South Korea), and CPA (Canada).

We maintain a strict update schedule for this Privacy Policy: we formally review and update this policy at least twice per calendar year (in January and July), with interim updates as needed to address regulatory changes, new service features, or security enhancements. Our most recent full review and update was completed on January 27, 2026 (Version 2.1), following our July 15, 2025 update (Version 2.0). By using the Services, you acknowledge that you have read and understood this Privacy Policy and consent to our collection and use of your personal information as described herein. If you do not agree with our practices, please do not use the Services.

2. DATA CONTROLLER INFORMATION

For the purposes of applicable data protection laws (including GDPR, CCPA, VCDPA, PIPA, CPA and others), the data controller responsible for processing your personal information is:

The data controller is responsible for determining the purposes and means of processing your personal data, ensuring compliance with applicable privacy laws, and responding to data subject requests related to your information. As part of our formal update process, the Data Protection Officer conducts a full review of our data controller information and privacy practices every six months (January and July), with the most recent review completed on January 27, 2026, confirming all contact and registration details remain accurate and up-to-date.

3. INFORMATION WE COLLECT

We gather information to deliver and enhance the Service, improve user experience, and ensure platform safety. The information we collect falls into the following categories:

3.1 Phone Number Collection Disclosure

We collect phone number data from users for the following legitimate business purposes:

• Account verification and security: To confirm the authenticity of your account and prevent unauthorized access, identity theft, or fraudulent account creation;
• Communication: To send important service notifications (e.g., account recovery codes, security alerts) via SMS;
• User matching (optional): To facilitate connections with contacts who also use KisMiss Video (only with your explicit consent);
• Customer support: To respond to your inquiries and resolve account-related issues efficiently.

Your phone number is encrypted during collection and storage, and will never be displayed publicly on your profile or shared with other users without your express permission. This section was last reviewed and confirmed as accurate on January 27, 2026, as part of our biannual policy update process.

3.2 Device ID Collection Disclosure

We automatically collect unique Device ID information (including but not limited to IDFA, AAID, UDID, IMEI, MAC address, and other device-specific identifiers) for the following purposes:

• Device authentication: To verify the legitimacy of devices accessing the Service and prevent account hijacking;
• Service optimization: To identify and fix technical issues, improve app performance, and tailor the Service to your device’s capabilities;
• Fraud prevention: To detect and block suspicious activities (e.g., multiple accounts on a single device, automated bot access);
• Analytics: To analyze usage patterns (in anonymized form) to enhance the overall user experience.

Device ID data is collected only when you install and launch the KisMiss Video app, and is linked to your account only for security purposes. You may limit Device ID collection by adjusting your device’s privacy settings (e.g., disabling ad tracking), though this may affect certain Service features. This section was updated on January 27, 2026, to reflect changes in mobile device identifier regulations under iOS 18 and Android 15.

3.3 Other Personal Information You Provide Voluntarily

This includes information you actively share with us when using the Services:

• Account Registration Information: When creating an account (including via quick login), you may provide your email address, or information from third-party authentication services (e.g., name, email associated with Google/Apple accounts);
• Profile Information: Information you add to your profile, such as your name (or username), age, gender, hobbies, interests, travel preferences, profile picture, biography, and any other details you choose to share to help with matching;
• Communication Content: Content you share during video chats, such as audio, video, and text messages exchanged with other Users (we do not store this content by default unless required by law or to address violations);
• Payment information (if applicable): If purchasing premium features, processed securely by third-party payment providers, not stored by KisMiss Video;
• Feedback & Support Information: Information you provide when contacting our support team (e.g., via webclimax8@gmail.com), including your questions, complaints, and feedback.

3.4 Automatically Collected Usage Information

When you use the Services, we automatically collect certain information about your device, usage, and interactions with the Services:

• Usage metrics: Information about how you use the Services, such as the date and time you access the Services, the features you use (e.g., swiping for matches, initiating video calls), the duration of your sessions, the number of matches and calls, search history, swipe and interaction patterns;
• Location Information: With your explicit consent, we may collect your approximate or precise location (based on your IP address or device GPS) to help match you with Users in your region. You can disable location permissions at any time in your device settings, but this may limit the accuracy of our matching algorithm;
• Log data: IP address, access timestamps, operating system type, referral sources, screen resolution, battery level;
• Technical Data: Information about your network connection, such as signal strength, Wi-Fi status, and data usage, to optimize video chat quality.

3.5 Third-Party Information

We may collect information about you from third-party sources, including:

• Third-Party Authentication Services: If you use quick login via Google, Apple, or another third-party service, we receive information from that service as authorized by you (e.g., your email address, name) in compliance with the platform’s privacy rules;
• Service Providers: Our third-party service providers (e.g., cloud storage providers, analytics tools, fraud detection services) may share anonymized or pseudonymized activity data with us to help us operate and improve the platform.

4. HOW WE USE YOUR INFORMATION

We use the collected information only for lawful and legitimate purposes, in compliance with applicable law:

• Service operation and maintenance: To create and manage your account, facilitate video chats, process your requests, process payments (if applicable), provide customer support, and ensure the Services function properly (e.g., optimizing video quality based on your device and network);
• Personalization and improvement: To customize your experience, develop new features, refine the matching algorithm based on your preferences, and analyze usage trends to identify areas for improvement;
• Communication: To send you important updates about the Services (e.g., changes to this Privacy Policy, account notifications, security alerts), respond to your inquiries, provide customer support, and send optional promotional offers (you may opt out of marketing communications);
• Safety and security: To detect and prevent fraudulent activity, unauthorized access, harassment, and violations of our User Agreement (e.g., monitoring for inappropriate content), and to protect the safety of our Users and the Services;
• Legal compliance: To respond to lawful requests from government authorities, comply with court orders, subpoenas, and fulfill other legal requirements.

This section was fully reviewed and updated on January 27, 2026, to align with new CCPA amendments effective January 1, 2026, and GDPR Article 6 updates for legitimate interest assessments.

5. DATA SHARING & SALE

5.1 Right to Know About Data Sharing

You have the unconditional right to know whether and how your personal data is shared with third parties. KisMiss Video is fully transparent about data sharing practices, and this section outlines all scenarios where your personal information may be disclosed to external parties. You may request a detailed breakdown of data sharing activities (including the names of third-party recipients, purpose of sharing, and data categories) by contacting our Data Protection Officer at any time (see Section 11). As part of our biannual policy update process, we published our 2025 H2 Data Sharing Transparency Report on January 27, 2026, which is available upon request to all users.

5.2 Circumstances for Data Sharing

We do not sell your personal information to third parties for commercial purposes. We may share your information only in the following limited circumstances:

• With Service Providers: We engage trusted third-party vendors (e.g., cloud hosting providers, analytics firms, payment processors, security providers) to perform services on our behalf. These vendors are contractually obligated to protect your data, use it only for the specified purposes, and not to disclose it to other third parties;
• With Other Users: To facilitate connections, we share certain public profile information (e.g., your username, hobbies, interests, profile picture) with other Users who match with you. We do not share your personal contact information (e.g., mobile number, email) with other Users unless you choose to disclose it voluntarily;
• For Legal Protection: We may share your information if required to do so by law, or if we believe in good faith that such disclosure is necessary to: (1) comply with a court order, subpoena, or other legal process; (2) protect the rights, property, or safety of KisMiss Video, our Users, or the public; (3) investigate or address violations of our User Agreement; or (4) respond to emergencies involving the potential risk of harm to any person;
• Business Transfers: If KisMiss Video is involved in a merger, acquisition, bankruptcy, or the sale of all or part of its assets, your personal information may be transferred as part of the transaction (subject to privacy laws, and the acquirer will be bound by this Privacy Policy). We will notify you via email or in-app notification if your information is transferred and becomes subject to a different privacy policy;
• With Your Consent: We may share your data with third parties if you provide explicit written consent (e.g., sharing with integrated third-party apps).

This section was updated on January 27, 2026, to remove references to discontinued third-party service providers and add new compliance requirements for cross-border data transfers under VCDPA.

5.3 Data Sale Practices

KisMiss Video does not currently sell any personal data (defined as exchanging personal information for monetary consideration) to third parties for commercial purposes. If our data sale practices change in the future, we will:

• Update this Privacy Policy at least 30 days prior to the change (consistent with our biannual update schedule);
• Send a prominent notification to all users via the app and registered email;
• Provide a clear and easy opt-out mechanism (no opt-out required for non-California/Virginia users under applicable law);
• File the required notifications with the California Attorney General and Virginia DPOR as mandated by state privacy laws.

5.4 Opt-Out of Data Sale/Targeted Ads

If we ever engage in data sales (as defined by CCPA/VCDPA), or if you wish to opt out of targeted advertising based on your data, you may exercise your opt-out rights through the following methods:

5.4.1 Opt-Out of Data Sale (If Applicable)

To opt out of data sale (if we begin selling personal data), you can use any of the following methods:

• Method 1: Submit a written request to our Data Protection Officer at webclimax8@gmail.com (include your registered email/phone number for identity verification);
• Method 2: Use the "Data Privacy Settings" in your KisMiss Video account (Settings > Privacy > Opt-Out of Data Sale);
• Method 3: Send a physical request to our registered address (see Section 2) with a copy of your government-issued ID.

We will process your opt-out request within 15 business days and confirm completion via email. Opting out of data sale will not affect your use of free Service features, and we will not discriminate against you for exercising this right (per CCPA/VCDPA requirements). This opt-out process was updated on January 27, 2026, to add in-app opt-out functionality as required by CCPA Section 1798.120.

5.4.2 Opt-Out of Targeted Advertising

To opt out of targeted advertising based on your usage data, you can use any of the following methods:

• Within KisMiss Video: Navigate to Settings > Privacy > Advertising Preferences > Disable "Personalized Ads";
• Device-Level: Adjust ad tracking settings on your mobile device (e.g., iOS: Settings > Privacy & Security > Tracking; Android: Settings > Privacy > Ads > Opt out of Ads Personalization);
• Third-Party Ad Networks: Visit the Digital Advertising Alliance (DAA) opt-out page (https://optout.aboutads.info/) to opt out of targeted ads from participating networks;
• Contact Us: Email webclimax8@gmail.com to request removal from our advertising audiences.

Note: Opting out of targeted advertising will not stop ads from appearing, but ads will no longer be personalized based on your usage data. This section was updated on January 27, 2026, to reflect new ad tracking requirements under iOS 18 and Android 15.

6. DATA RETENTION

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law. Specifically:

• Active accounts: Data is retained while your account is active (indefinitely, unless you request deletion);
• Account deletion: Profile information, communication content, phone number and Device ID data are permanently deleted within 30 days of account deletion (except data retained for legal compliance);
• Anonymized data: Aggregated, non-identifiable data (e.g., usage trends, device type statistics) may be retained indefinitely for analytical and business improvement purposes;
• Legal retention: Data may be retained for up to 7 years if required by tax, audit, or legal obligations;
• Usage data and device information: Retained for up to 12 months after your last use of the Services, or longer if needed to improve the Services or comply with legal obligations.

Our data retention policies were fully reviewed and confirmed on January 27, 2026, as part of our biannual privacy policy update process, with no material changes from our July 15, 2025 review. We maintain a data retention schedule that is updated annually and available to users upon request.

7. USER PRIVACY RIGHTS (GLOBAL COMPLIANCE)

Depending on your jurisdiction, you may have the following privacy rights under applicable regulations (GDPR, CCPA, VCDPA, PIPA, CPA). To exercise these rights, please contact us at webclimax8@gmail.com with your full name, account details, and a description of your request. This section was updated on January 27, 2026, to include new privacy rights under the 2026 amendments to South Korea’s PIPA and Canada’s CPA.

7.5 General Rights (All Users)

• Access and Correction: The right to access and update your profile information at any time through the Services’ settings. To correct other personal information, please contact our support team;
• Withdraw Consent: The right to withdraw your consent for certain data collection (e.g., location information) by adjusting your device or app settings. Note that withdrawing consent may limit certain features of the Services;
• Account Deletion: The right to delete your account, which will result in the deletion of most of your personal information (we may retain some information for legal or business purposes as described in Section 6).

7.6 How to Exercise Your Rights

To exercise your privacy rights, you can use any of the following methods:

• Email: Send a request to webclimax8@gmail.com (include your registered email/phone number for verification);
• Account Portal: Use the "Privacy Rights Request" form in Settings > Privacy > Data Rights;
• Mail: Send a written request to KisMiss Video Technology Inc., Attn: Privacy & Legal Department, 789 Connection Avenue, Suite 800, Los Angeles, CA 90001, USA (attn: Data Protection Officer).

7.7 Verifying Your Identity

To protect your privacy, we may require you to verify your identity (matching your request details to your account) before fulfilling your request. We will respond to valid requests within 45 days of receipt (or 60 days for complex requests, with written notice of extension). If we need more time, we will notify you and extend the response period by up to 45 days. Our identity verification process was updated on January 27, 2026, to comply with new NIST digital identity guidelines.

8. DATA SECURITY

We take the security of your personal information seriously and implement industry-standard technical, administrative, and physical safeguards to protect it from unauthorized access, use, disclosure, alteration, or destruction. These safeguards include:

• End-to-end encryption for sensitive data (phone number, Device ID) and encryption of data in transit (using TLS 1.3) and at rest;
• Secure authentication protocols for account access and secure socket layer (SSL) technology for data transmission;
• Regular security audits and vulnerability assessments (conducted quarterly, with the most recent audit completed on January 10, 2026);
• Role-based access control, restricting access to personal information to authorized employees and service providers who need it to perform their duties;
• Employee privacy training and strict data handling policies (all employees complete annual privacy training, with refresher training in July 2025 and January 2026);
• Secure data centers with access controls and backup systems for data recovery.

Our data security measures were fully reviewed and enhanced on January 27, 2026, as part of our biannual policy update process, including the implementation of new encryption standards for video chat data. However, no electronic storage or transmission method is 100% secure. We cannot guarantee the absolute security of your information, and you acknowledge that you use the Services at your own risk. You are responsible for maintaining the confidentiality of your account credentials (password, verification codes). If we become aware of a data breach that affects your personal information, we will notify you and relevant authorities in accordance with applicable law. Notify us immediately at webclimax8@gmail.com if you suspect unauthorized access to your account.

9. CHILDREN’S PRIVACY

The KisMiss Video Service is not intended for individuals under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect, use, or disclose personal information from children under this age. For users under 13 years of age (COPPA compliance):

• We do not knowingly collect personal information from children under 13;
• If we become aware that we have collected personal information from a child under 13 without parental consent, we will immediately delete such information;
• If you believe we have collected information from a child under 13, please contact us at webclimax8@gmail.com.

For children between 13 and 18 years of age, we require parental or legal guardian consent to collect and use their personal information. By allowing a child in this age group to use the Services, you confirm that you are their parent or legal guardian and consent to our data practices. If we become aware that we have collected data from a child without parental/guardian consent, we will delete such data within 72 hours. Parents/guardians may contact us at webclimax8@gmail.com to report suspected child data collection.

This section was updated on January 27, 2026, to reflect new COPPA enforcement guidelines issued by the FTC in December 2025. Our children’s privacy compliance program is reviewed quarterly, with the most recent review completed on January 5, 2026.