Website Privacy Policy

Update Date: September 17, 2025

Effective Date: September 17, 2025

Privacy Policy

Welcome to Qiduoduo AI Story Early Education Official Website (hereinafter referred to as “this Website”). This Website is developed and operated by Zhuhai Boundless Ark Intelligent Technology Co., Ltd. (hereinafter referred to as “the Company” or “we”). We attach great importance to the protection of users’ privacy and personal information and strictly comply with applicable laws and regulations of the People’s Republic of China relating to privacy and personal information protection. When you use this Website, we will collect and use your relevant information in accordance with this Privacy Policy. This Privacy Policy aims to help you understand the following:

Table of Contents

I. How We Collect and Use Your Information

II. How We Share, Transfer, and Publicly Disclose Your Personal Information

III. How We Protect and Retain Your Personal Information (How We Store Your Personal Information)

IV. How You Can Manage Your Personal Information

V. Protection of Minors' Information

VI. Notification and Amendments

VII. Third-Party Service Statement

VIII. Basic Information About Us

IX. How to Contact Us

X. Definitions

This Privacy Policy is closely related to the webpages and service features you use. We collect, store, use, and provide your information externally in accordance with this Policy. Therefore, please read this Policy carefully and thoroughly, especially the sections in bold or underline, which have or may have a material impact on your rights and interests. By clicking “Agree” or performing actions that indicate your consent to this Privacy Policy, you acknowledge that you agree to our collection, storage, use, sharing, management, and external provision of your personal information in accordance with this Privacy Policy.

Special Notice: We strictly protect personal information; however, when you use third-party services, please remain aware of personal information collected by third parties (not by us) and their corresponding policies.

I. How We Collect and Use Your Information

We only collect and use your personal information for the purposes described below:

Channels Through Which We Collect Your Personal Information

You understand and agree that we may collect your personal information through the following means:

1. Information you provide directly:

This includes information you fill in and submit on the Website, written materials you provide (in physical or electronic form), information you publish during Website use (including but not limited to preference information and interactive content), information you provide when contacting us, and information about your activities and behaviors generated during your use of the Website.

2. Information we collect automatically:

When you register, log in, use our services, or when we process complaints or disputes, we will collect device information (computer, mobile phone, and other devices), information you authorize us to access, and log relevant device and usage information.

3. Information obtained from third parties:

With your consent, we may obtain relevant information from our affiliates, partners, or legally established third-party institutions that retain information about you.

How We Use Your Information

1. Circumstances in which you authorize us to collect and use personal information

To provide the Website’s core features, we may need to collect or use personal information necessary for such features. Without this information, we will be unable to offer the corresponding services.

Collection Scenario	What Personal Information We Collect	How We Use It	Our Role
Account Registration	Name Mobile Phone Number Email Address Company Name Company Homepage Your Position Company Type (startup / small business / medium-sized enterprise / large enterprise / state-owned enterprise / government department) Your Business Scenario Whether the scenario serves internal or external users Expected daily traffic level of the business	Create and maintain user accounts Display the email address while the user is logged in Send the latest information about our products and related promotional campaigns via email and mobile phone ; Provide necessary verification information to the relevant authorities Provide billing statements and complete service fee settlement for the services	Personal Information Processor
API Call	The data submitted for processing the authentication information submitted Group id Api key	Used for backend calculation to generate return data Retrieved in feedback to solve corresponding user problems	Personal Information Processor
When you make a service inquiry	Name Email Address Mailing Address Mobile Phone Number Content of your requests, requirements, claims, or complaints WeChat or QQ account information that you voluntarily provide	To solve corresponding technical problems for you and provide product support Delivery of response information after resolution	Personal Information Processor
Using experience functions on the website	Dialogue data submitted during the experience	Used for backend calculation to generate return data	Personal Information Processor
When our SDK is integrated into other application scenarios (not applicable to all users; if you use products where our enterprise users integrate our SDK, we will obtain and use your personal information as you enable the platform’s functions, in accordance with this provision)	The data submitted for processing the authentication information submitted Group id Api key	Used for backend computation generating returned data and retrieving information during issue diagnosis to resolve the corresponding user issues	Personal Information Entrusted Processor

Aside from the personal information essential for implementing these functions, we will not proactively request additional personal information. Please avoid disclosing unnecessary personal information in interactive dialogues. Otherwise, due to algorithmic mechanisms and objective service conditions, such personal information may be transmitted to our cloud servers for processing.

We do not link your dialogues with registration information. We also implement filtering methods to delete or prevent storage of personal information, especially sensitive information.

If you inadvertently provide personal information, you may contact us to request deletion or anonymization. Costs arising from such handling may be shared based on fairness. We are not responsible for information already output prior to your request.

2. Functions necessary for service security

To ensure system stability and security, and prevent unauthorized access or fraud, we may collect device model, login information (mobile number, verification codes), and URLs deemed risky. Device information may also be used for system diagnostics and risk mitigation. Without such information, we cannot ensure your account and service security.

3. Device permissions

Your browser—not us—may request permission for network access, file uploads, or other capabilities necessary for interaction. Enabling such permissions authorizes us to process related information; disabling them withdraws your authorization but does not affect previous processing.

4. Cookies

We may store necessary Cookies required for Website functionality (e.g., login security), which expire at the end of the session or after 15 days. Without consent to necessary Cookies, you cannot use the Website.

5. Combined use of information

Where permitted by law, we may combine information collected from different sources. Information that cannot identify a natural person is not considered personal information unless combined with other data to identify you.

We will seek your explicit consent before using your information for purposes outside those stated in this Policy.

Circumstances where consent is not required

We may collect and use personal information without your consent under the following conditions:

1. Directly related to national security or national defense

2. Directly related to public safety, public health, or major public interests

3. Directly related to crime investigation, prosecution, trial, or enforcement

4. Necessary to protect your or others’ vital legal interests when consent is difficult to obtain

5. Personal information you voluntarily make public

6. Information lawfully disclosed through other channels

7. Necessary for signing or performing a contract under your request

8. Necessary for maintaining Website security and stable operation

9. Academic research in public interest with de-identified results

10. Circumstances stipulated by laws and regulations

Obtaining your information from third parties

We may obtain information from third-party accounts you authorize to share. We will verify legality before use.

Other uses of your personal information

1. After de-identification, we may use such information for analysis and commercialization without identifying you.

2. We may generate statistical data on Website usage, which does not contain identifying information.

3. When displaying personal information, we will mask data through anonymization.

4. If we use your information for new purposes not covered by this Policy, we will obtain your consent in advance.

II. How We Share, Transfer, and Publicly Disclose Your Personal Information

Sharing

We generally do not share personal information with external parties except under circumstances including:

1. With your explicit authorization
2. Required by laws, regulations, administrative or judicial authorities
3. Necessary to protect Company, affiliates, users, or public safety
4. Necessary for core functionality, including cloud server processing
5. At your request to handle disputes
6. Based on agreements or applicable rules
7. Academic use
8. Public interest compliance

We may share information with affiliates only as necessary and consistent with this Policy, requiring renewed consent if purposes change.

We may share information with service partners (e.g., login services, cloud computing), who must comply with confidentiality and use restrictions.

Transfer

We will not transfer your personal information unless:

1. With your explicit consent
2. Required by laws or authorities
3. Based on agreements or applicable rules
4. During mergers, acquisitions, or asset transfers, where the new entity must follow this Policy or seek renewed consent

Public disclosure

We may publicly disclose your information only when:

1. With your explicit consent
2. Required by laws or authorities
3. Other circumstances permitted by laws

III. How We Protect and Retain Your Personal Information

Protection Measures

We adopt industry-standard technical and organizational measures including:

1. Encryption, access control, and secure data storage
2. Security training and expert audits
3. Incident handling — we will notify you and authorities as required in the event of data breaches Despite our protection efforts, no system is completely secure. If you suspect a data leak (especially account/password), contact us immediately.

Retention

1. Personal information collected within China is stored domestically. If cross-border transfer becomes necessary, we will notify you and obtain separate consent.
2. Information is stored for the shortest period necessary unless extended due to:

• legal compliance
• court or authority requirements
• contract enforcement
• safety or public interest needs

3. If services are terminated, we will notify you at least 30 days in advance and delete or anonymize personal information afterward.
4. Anonymized data may be retained and used without further consent.

IV. How You Manage Your Personal Information

You have the right to access, correct, delete, and withdraw consent regarding your personal information.

Access and Correction

Contact us anytime for access or correction, except information required for safety or legal compliance.

Deletion

You may request deletion in cases such as:

1. Unauthorized collection
2. Use without consent
3. Policy or agreement violations
4. You stop using services or cancel your account
5. We cease operations

We will notify relevant third parties to delete such data unless prohibited by law.

Changing or Withdrawing Consent

You may withdraw consent by disabling permissions or contacting us. Service functionality may be affected, but past processing remains valid.

Account Cancellation

Contact us to request account cancellation.

Responding to Requests

We may require identity verification and will respond within 30 working days.

We may refuse unreasonable, repetitive, technically burdensome, or harmful requests.

We cannot respond to requests involving:

• national security
• public safety
• crime investigation
• malicious intent
• harm to others’ lawful rights

V. Protection of Minors' Information

1. If you are under 18 (especially under 14), you must obtain guardian consent before using this Website.
2. We only use minors’ information with guardian consent or as required for protection.
3. Guardians may contact us for questions or deletion requests.

VI. Notification and Amendments

We may update this Privacy Policy due to legal, business, or service changes. Significant changes will be prominently notified.

VII. Third-Party Service Statement

Third-party services you use through this Website are governed by their own privacy policies. We encourage you to read them carefully.

VIII. Our Basic Information

Zhuhai Boundless Ark Intelligent Technology Co., Ltd. (Additional company information may be included according to regulatory requirements.)

IX. How to Contact Us

You may contact us through the channels provided on the Website for any personal-information-related inquiries, complaints, or deletion requests.

X. Definitions

This section provides definitions consistent with the Personal Information Protection Law and relevant regulations. (Definitions may include “personal information,” “sensitive personal information,” “de-identification,” “anonymization,” etc.)