realme Link Privacy Notice

Last updated on: May 14, 2021

Realme Chongqing Mobile Telecommunications Corp., Ltd. and its affiliates ("realme", "we", "us", or "our") are committed to protecting and respecting your privacy. We are the controller of your data. This realme Link Privacy Notice (this "Privacy Notice") explains why and how we collect your personal information, what personal information we collect from you, your rights to your personal information, and how we protect the security of your personal information.

This Privacy Notice applies to information about you collected by the features and services of or relating to realme Link, including the features and services of the realme Link app and the products and services provided by realme that are connected to realme Link (collectively, "realme Link" or the "App"). Before using our products and services or submitting your personal information, please carefully read this Privacy Notice to understand our privacy practices.

In this Privacy Notice, personal information refers to any information that is recorded electronically or otherwise and can be used alone or in combination with other information to identify a natural person. This means that personal information is any information relating to an identified or identifiable natural person. Such personal information includes, but is not limited to, information about you and your device that you provide or upload.

This Privacy Notice will help you understand:

A. General Provisions

1. How We Collect and Use Your Personal Information

2. How We Retain Your Personal Information

3. How We Disclose Your Personal Information

4. How We Protect Your Personal Information

5. Your Rights to Your Personal Information

6. How We Process Children's Personal Information

7. Third-Party Services and Products

8. How Your Personal Information Is Transferred Globally

9. How This Privacy Notice Is Updated

10. Miscellaneous

11. Contact Us

B. Special Provisions Relating to the General Data Protection Regulation (GDPR)

1. Legal Grounds for Processing Personal Information

2. Global Transfers of Your Personal Information

3. Our Use of Cookies and Other Tracking Technologies

4. Your Rights to Your Personal Information

5. How to Contact Our EU Representative

C. Special Provisions for Data Uses in California

1. Information That We Collect

2. Your Rights to Your Personal Information

3. Contact Us

In addition to this Privacy Notice, some other privacy notices may also apply depending on the products or services you use. In each case, we will adequately inform you of the applicable privacy notices.

No matter where you are, the General Provisions in Part A apply universally. Part B only applies to users located in the European Union, Liechtenstein, Norway, the United Kingdom, or Switzerland ("Europe"). Part C only applies to users located in California, USA.

A. General Provisions

1. How We Collect and Use Your Personal Information

1.1 Information That We Collect

We collect your personal information based on the principles of lawfulness, reasonableness, and necessity. In order to provide you with our services, ensure the normal functioning and security of our products and services, and improve and optimize our products and services, we may collect the information provided by you, authorized by you, or generated when you sign in to or use our products and services.

The information we collect depends on the products and services you use, the environment in which you interact with us, and the choices you make, including your privacy settings and the products and features you use. Our products and functions include core service functions and value-added service functions. When we collect information, you are not obliged to provide your personal information. However, where personal information is necessary to provide core service functions, should you choose not to provide it, we may not be able to provide you with the related products or services, or respond to or solve any problems that you encounter. For value-added service functions, you can choose whether or not to agree to our collection of your personal information. If you do not agree, you may not be able to use relevant value-added service functions. This, however, does not affect your use of our core service functions. Please note that we usually consider the region that you select during your initial sign-in (or that you select subsequently through "Settings") as the actual place where the products and services are used and the jurisdiction whose laws and regulations we comply with, including those relating to data protection.

1. We may collect the following types of information:

(A) Account information and related personal information: You may sign in to your HeyTap Account to use the products and services that we provide. We need to obtain the list of apps already installed on your device (query phone packages) to ensure that your HeyTap Account can successfully sign in to all the apps and services that support sign-in with HeyTap Accounts and to determine whether your HeyTap Account has signed in to these apps. We may collect and sync the information relating to your HeyTap Account such as reward points and membership within the products and services provided by our affiliates or third parties that are accessible with your HeyTap Account to assist you in obtaining your user benefits. For the purpose of managing your workouts and health data, we need to collect your account's profile picture and display name as well as your sex, date of birth, height, and weight. We will display your account's profile picture and display name in the relevant app and offer you better fitness tips based on your sex, date of birth, height, and weight. If you do not provide such information, the calculation of your workout data will be inaccurate. Once signed in, your HeyTap Account will have its information (such as your name, phone number, and email address linked to the account) automatically collected. We may use the linked phone number or email address to push notifications, surveys, and activities to you, including app updates and installations. You may need to send us an SMS message to verify your phone number, which may incur carrier costs.

(B) After-sales and customer service information: When providing after-sales services and customer support to you, we may request and collect your personal information, such as your device information (e.g., the IMEI number), account information, order information, name, sex, phone number, email address, and postal address. We may also record the calls between you and our customer service representatives. We use the data to diagnose product issues, repair customers' devices, and provide other customer care and support services. We may also use the phone number or email address provided by you to perform identity verification or follow-up surveys. If you do not provide such information, we may not be able to effectively handle the issues that you report to us.

(C) Device and network information: For the purpose of managing your IoT devices (such as bands, watches, body fat scales, cameras, lighting fixtures, energy-saving devices, cleaning devices, and kitchen appliances), we need to collect your device and network information. Device information includes the app list, the hardware information (such as the IMEI number and serial number), the MAC address, device identifiers (Android ID, OpenUDID, and UDID), OpenID, device type, and device configurations. We collect this information for the purpose of establishing Bluetooth connections, managing device configurations, performing data upgrades, and displaying the source of the data. Network information includes the IP address, network type, and network connection status. We collect this information for the purpose of improving your network connection experience. If your device needs to connect to a Wi-Fi network, you need to complete relevant network settings using the realme Link app. During this process, you need to enter the name and password of the Wi-Fi network. This information is only used locally for connecting your device to the network. It will not be uploaded to our cloud server.

When connecting to an IoT device (such as your band or watch) through Bluetooth, the realme Link app needs to request the Bluetooth and Location permissions from your phone. After the IoT device is connected, the sex, date of birth, height, weight, and other personal information that you have entered or will enter in the App may be synced to the IoT device for more accurate data monitoring and usage statistics.

If you do not provide the above information, you will not be able to use the realme Link app to discover, control, or manage your IoT device or pair the IoT device with the App, or you may be restricted in using some functions of the App.

(D) Location information: We collect various information relating to your device or your location, such as the device's GPS signal or information about nearby Wi-Fi access points and cell towers, the device's location, the network service provider ID, area code, country code, city code, mobile network code, mobile device country code, cell ID, area name, latitude and longitude coordinates, and the time zone and language settings. We collect location information only for the purpose of providing specific services or in specific scenarios. For example, we need to collect this information to provide you with weather services, or when you attempt to pair your IoT device with the realme Link app, some third-party system/app on your phone such as the Android system may request your phone's "Location" permission for the purpose of discovering your IoT device. If you do not provide this information, you will not be able to pair your IoT device with the App, or you may be restricted in using some functions of the App. We will ask you whether to turn on the "Location" permission for location-based apps. You may open the "Settings" app to change the location settings on your phone, such as by changing or disabling the methods and servers used for location-based services to change the location information to be provided to us.

(E) Workout data: In order to record and manage your workouts, we need to collect the location of your device, motion trajectory, type and duration of exercise, step count, heart rate during exercise, and workout logs, of which the motion trajectory and location information are sensitive personal information. The purpose of collecting such information is to record and calculate your daily workouts and motion trajectories so as to provide you with personalized fitness services. If you do not provide such information, we will not be able to record and save your workout data.

(F) Health data: In order to manage your health data, we need to collect data about your sleep, heart rate, blood oxygen level, and personal physical condition. Health data is sensitive personal information. The purpose of collecting such information is to measure, record, and display your health-related data so as to provide you with personalized health services. If you do not provide such information, we will not be able to record and save your health data.

(G) Voice data: When you use the camera or voice communication feature in your IoT device, we need to collect your voice data to control and use the IoT device.

(H) When you use the Invite Family feature to invite your family members or use the Share Device feature to share you IoT device, you may need to provide their phone numbers or email addresses to us, so that we can send them an invitation or they can receive the IOT device information you share.

(I) Behavioral data: When you use the App, we need to obtain your behavioral data associated with the App, such as statistics on your use of its features, statistics on upgrading the App, site browsing data, tap events, and its performance data. We collect such information to optimize our product features and the logic of our user interface layout and to develop new product features so as to make our user interface layout and features more usable. The aforementioned information is unable to identify a specific natural person, and we will not relate our analysis data to your personal information.

(J) If you choose to participate in relevant lucky draws or competitions, participate in the promotional or marketing activities organized by us or our business partners, complete relevant surveys, or participate in user forums or blogs held by us or our business partners, you may need to provide us with your personal information such as display name, real name, picture, phone number, email address, and postal address (the information may vary depending on the actual activities). We may use the contact information you provide to conduct user research and follow-up surveys. Your failure to provide such information has no impact on your use of the App.

(K) When you take videos or photos using a paired IoT device, you may capture video clips or screenshots on realme Link. The video clips and screenshots will be stored in the "Photos" app on your phone and uploaded to our server so that you can view the videos and photos on both the IoT device and your phone. We will not use the video clips or screenshots for any other purposes, nor will we share them with any third party. If you do not agree to our collection of such data, you will not be able to view them on your phone that has the realme Link app.

(L) Log information: We collect information about your use of certain features of the App or paired IoT devices and your use of our mobile apps and websites, such as cookies and other anonymous identifier technologies, network request information, temporary message history, the time and duration of your use of our services, the search keywords entered by you via our services, standard system logs, and information about your device and software events (such as restarts, upgrades, errors, and crashes). We collect such information to verify your identity, analyze the efficiency of our business operations, and prevent fraud. The Android system was designed in such a way that your error or crash events will include the overall system status at the time of the event. We use such information only for error log analysis, and we will not use it for individual identification or any other purposes. We clear the logs we collect on a regular basis.

(M) If applicable laws and regulations in your country require real-name authentication, we will also collect your identity information such as your name and ID card number. If you refuse to provide such information, we may not be able to provide you with the products or services you request.

(N) Third-party services: (i) During your use of our products or services, you may tap "Pair device" to add certain products produced by our ecosystem service partners (or third-party manufacturers), such as watches, bands, body fat scales, and other similar products. When you use relevant features, the third-party manufacturers may also collect your personal information. Before using these features, you should carefully read the user agreement or privacy notice of the third-party manufacturers. We are not responsible for how the third-party manufacturers use the personal information they collect from you, nor can we control their use of such information. (ii) We will develop the "Third-Party Device Platform", through which we may collaborate with third-party service providers. If you have your third-party accounts linked to the realme Link app, we will obtain the following personal information from the third-party service providers: third-party account information (display name and profile picture); your list of certain devices added to the third-party apps; and device and network information (including the identifiers, MAC address, serial number, and configuration data of your device). If we need to process your personal information beyond the scope authorized by you to the third-party service providers, we will obtain your explicit consent before we process such data. In addition, we will strictly comply with relevant laws and regulations and require the third-party service providers to ensure the legality of the information that they provide to us. You may tap "Unpair device" in the App to withdraw your consent.

(O) Auxiliary functionality―realme Store services: When you order a product, apply for a return or refund, or use a paid service in realme Store, we may collect your device identifiers, delivery details, name, phone number address, bank account number, payment history, and other financial information to handle your order and provide you with after-sales services. If you do not provide the aforementioned information, you will not be able to order a product, apply for a return or refund, or use a paid service.

If the information that you provide contains the personal information of other users, you shall ensure that you have obtained legal authorization before providing such information to us.

Please be aware and understand that the features and services that we provide to you are constantly updated and developed. Depending on the characteristics of realme Link and its related products or services, we may also request and collect your personal information in other scenarios. If this is the case, we will inform you through this Privacy Notice, website notifications, or interactive processes in connection with the related products or services to obtain your consent.

2. App permissions that we may request from your phone

When you use realme Link, we may request certain permissions from your phone, such as Bluetooth, Access the network, Contacts, Phone (Read phone state, Make phone calls, and Answer phone calls), SMS, Camera, Microphone, Storage, Photos, Location, Body sensors, activity recognition (Access motion and fitness data), Health, and query phone packages, so that we can collect your relevant personal information and provide you with corresponding service functions or services.

When a permission is turned on, you may open the "Settings" app on your phone at any time to turn it off. (The ways of displaying or turning off permissions may vary for different devices.) After the permission is turned off, the corresponding product function may not work properly.

Please note that by turning on the permissions, you authorize us to collect and use the related personal information to provide you with the corresponding functions. By turning off the permissions, you withdraw your authorization, and we will no longer be able to collect or use the related personal information about you, nor will we be able to provide you with the corresponding functions. However, turning off the permissions shall not affect the lawfulness of data processing based on the authorization before its withdrawal.

Please note that we may work with third-party service providers to provide relevant functions or services. Such providers may receive and store some of your personal information, but they will not use such information for any other purposes.

Depending on the characteristics of certain realme products or services and where permissible by law, we may obtain data about you from public or commercial sources and combine that information with other information that we have received or that relates to you. If you choose to sign in to your account operated by any of our affiliates or partners (such as HeyTap or Facebook) to use our services, we may also obtain your information such as your username and profile picture from these services.

1.2 How Your Personal Information May Be Used

We collect your personal information to provide you with products and/or services, deliver a better product experience to you through our improved services, and ensure that our products or services function properly and securely. We will process your personal information in compliance with applicable laws and regulations as well as our agreement with you after we obtain your consent or when we need to fulfill our obligations to you under the user agreement and/or service contract, or when we are bound by legal obligations, or when, after evaluation, we deem it necessary to protect our legitimate interests or those of a third party.

You hereby agree that we can process your personal information for the purposes set forth in this Privacy Notice and disclose your personal information to our affiliates (in relation to communications, social media, technology, and cloud services) and third-party service providers (as defined below).

We may use your personal information for the following purposes:

· To provide, process, maintain, improve, and develop our products and/or services as well as the services provided through connected devices or realme Link.

· To communicate with you, provide customer support to you, or notify you through push services. We will communicate with you about your devices, services, or any general inquiries (concerning updates, device firmware/software upgrades, customer queries and support, relevant information, and notifications) by methods such as notifications and customer service follow-ups.

· To improve products and the user experience. We will perform statistical analysis on collected information about the use of our products and services to improve and develop our products and services, improve the user experience of our products, and enhance their performance. You may go to the Settings section of the App to exit our User Experience Program. After you exit the Program, we will delete or anonymize all Program-related data that we collect from your device.

· To provide you with personalized services and carry out marketing activities. We may use your personal information for profiling and behavioral analysis so as to show and push to you more suitable information, products, or services, or to better implement safeguards. For example, we will provide your app download and uninstallation history to the App Market so that it can recommend products that may interest you. In addition, we may combine your personal information collected via our various services to provide you with an optimal user experience as a whole.

· To provide direct marketing services. We may use your contact information (such as your phone number and email address), account number, and IMEI number to provide you with promotional information about our products and services or those of our affiliates or partners (in relation to networking, mobile apps, and cloud products and services). We strictly comply with the requirements of data protection laws in your jurisdiction. We will use your data only after obtaining explicit prior consent from you or through a clear affirmative action to confirm that you have expressed no objection. If you no longer wish to receive certain types of emails, you may unsubscribe through appropriate settings.

· To conduct analyses and audits and prevent fraud. We may use the data you provide to verify your identity, analyze our business efficiency, review user transactions, and prevent fraud. We only use statistical data for these purposes, and the use of such data will not be associated with you.

· To conduct promotional activities. If you participate in the lucky draws, competitions, or other similar promotional activities held by us, we will use the personal information that you provide to manage such activities.

· To keep and maintain records of information relating to you. We may use such information in our operations or to fulfill our legal obligations.

· To fulfill other purposes as authorized by you.

Where our use of your information goes beyond the purposes set forth in this Privacy Notice or the purposes notified at the time of collection but has a direct or reasonable connection with those purposes, we will ask for your consent in advance. Without your consent, we will not provide your personal information or behavioral data to any third party, except as otherwise specified by laws and regulations.

1.3 We May Collect or Use Your Personal Information Without Your Authorization or Consent

You are fully aware that under applicable laws, we may collect and use your personal information without your authorization or consent in the following circumstances:

(A) as necessary to fulfill any of our obligations under laws and regulations;

(B) as necessary to protect national security or national defense;

(D) as necessary for criminal investigations, prosecution, trials, or the enforcement of judgments;

(E) as necessary to safeguard the significant legitimate rights and interests (such as life and property) of you or others, but it is difficult to obtain your authorization or consent;

(F) the personal information involved is made public by you;

(G) as necessary to enter into a contract with you or perform a contract entered into between you and us;

(H) the personal information is collected from legally publicly-disclosed information, such as legal news reports and government information disclosures;

(I) as necessary for us to maintain the secure and stable operation of realme Link, such as identifying or handling product or service faults;

(J) as necessary for a news agency to deliver a legal news report;

(K) as necessary for an academic or research institution to produce statistics or conduct academic research based on public interests, and the personal information contained in the results is de-identified before the results are published.

2. How We Retain Your Personal Information

In general, we retain your personal information only for a minimum period needed to fulfill the purposes stated in this Privacy Notice or the purposes notified at the time of collection, unless a longer retention period is required by laws. When the minimum or required retention period expires, we will delete or anonymize your personal information.

If we stop some or all of our products or services for any special reason, we will promptly inform you and stop the collection and processing of your personal information in connection with such products or services, and delete or anonymize your personal information we hold that relates to the products or services, unless otherwise specified by laws and regulations.

3. How We Disclose Your Personal Information

We will not share or transfer your personal information with or to any other company, organization, or individual outside realme, except in the following cases:

3.1 Where you provide your consent. We may share your personal information with third parties with your prior consent.

3.2 For the purpose of external data processing. In certain circumstances, we will appoint a third party to process your personal information on our behalf. For example, companies that send SMS messages or emails or that provide technical support on our behalf are allowed to use your personal information only to provide you with the relevant services.

3.3 For the provision of products or services. From time to time, realme may share certain personal information with our affiliates and strategic partners to provide the products or services you request. We will not share your personal information with any third party for their own marketing or business purposes.

(A) Sharing with our affiliates: We may share your personal information with our affiliates. We will only share the necessary personal information, subject to the purposes stated in this Privacy Notice. If we or our affiliates intend to change the purpose for which your personal information is used and processed, we will obtain your authorization or consent again.

(B) Sharing with our authorized partners: Some of our services will be provided by our authorized partners only for the purposes stated in this Privacy Notice. We may share some of your personal information with our partners in order to provide you with better services and a better user experience. Our authorized partners include but are not limited to carriers, our regional agents, logistics companies, cloud service providers, and technical service providers. For example, when you use the "Weather" app, we may need to provide your location information to the professional third-party service provider for the purpose of providing you with more accurate weather forecasts. When analyzing your error logs, we may provide your log data to the relevant service provider or a professional technical service provider.

(C) In the event of a merger, acquisition, bankruptcy, or liquidation, if we need to transfer your personal information, we will request the new company or organization to which your personal information will be transferred to continue to be bound by this Privacy Notice; otherwise, we will request such a company or organization to obtain your authorization or consent again. If there is no need to transfer your personal information, we will adequately inform you and delete or anonymize all your personal information controlled by us.

We will require abovementioned third parties to take proper confidentiality and security measures during their processing of your personal information by means of agreements or other appropriate measures.

3.4 For legal reasons. We may disclose your personal information to third parties if we believe, in good faith, that it is necessary to access, use, retain, or disclose your personal information for the following purposes:

(A) To ensure compliance with applicable laws and regulations or mandatory government requirements;

(B) To respond to subpoenas, judgments, rulings, or other legal procedures, litigations, or requirements;

(D) To implement related service agreements or safeguard the public interest;

(E) To take reasonable and necessary actions to protect the personal safety, property, and other legitimate rights and interests of you, us, our customers, our affiliates, our employees, or other users, to the extent required or permitted by law;

(F) For any other purposes required or permitted by law.

4. How We Protect Your Personal Information

4.1 We adopt technical and organizational measures that are reasonable and actionable to protect the security of the information collected in connection with our services. Please note that although we take reasonable measures to protect your information, no websites, Internet transfers, computer systems, or Wi-Fi connections are absolutely secure.

4.2 We have introduced safeguards up to industry standards to protect the personal information provided by you from unauthorized access, disclosure, use, or alteration, or from damage or loss. We take all reasonable and actionable measures to protect your personal information. For example:

(A) We use technical measures such as SSL to encrypt many of our services. We regularly review our practices regarding information collection, storage, and processing (including physical security measures) to protect our systems from unauthorized access.

(B) We only grant access permissions to our employees and those of an authorized service provider who need access to personal information in order to help us process such information. These employees are subject to strict contractual confidentiality obligations. If they fail to perform these obligations, they may be held legally liable or be terminated.

(C) The security of your information is very important to us. Therefore, we will continue our efforts to ensure the security of your personal information and implement safeguards such as encrypting stored data and using end-to-end encryption during transmission to protect your information from unauthorized access, use, or disclosure. In addition, certain encrypted data is inaccessible to anyone other than the user.

(D) When transmitting and storing your personal information of special types, we will use security measures such as encryption. Before storing your personal biometric information, we will take technical measures to process it, such as only storing a summary of your personal biometric information.

(E) We carefully select business partners and service providers and include our requirements for personal information protection in our business contracts, audits, or assessments.

(F) We conduct security and privacy protection training, tests, and publicity activities to raise our employees' awareness of the importance of personal information protection.

(G) We use international and industry-recognized standards to protect your personal information and actively acquire certifications of security and privacy protection.

4.3 In the event of any security breach of your personal information, we will, pursuant to applicable laws and regulations, promptly notify you of the particulars and possible impact of such breach, the measures taken or to be taken by us, suggestions on how you can prevent and reduce risks, and remedies available to you. We will promptly inform you of the information about such breach by email, letter, phone, or push notification. When it is difficult to inform the personal information subjects concerned one by one, we will publish an announcement in a reasonable and effective manner. We will also report the handling of the event in accordance with the requirements of regulatory authorities.

5. Your Rights to Your Personal Information

realme respects your rights to your personal information. The following lists your rights under the law and explains how we will protect your rights. Please note that for security reasons, we may verify your identity before handling your request. In general, we do not charge a fee for handling your reasonable requests. However, we may charge the cost of handling unreasonably repeated requests depending on the actual situation. We may reject unreasonably repeated requests, requests that require excessive technical means (such as developing a new system or fundamentally changing existing practices), requests that present a risk to the legitimate rights and interests of others, or very unrealistic requests. In addition, we may not respond to your request if it directly involves any issues that directly concern public interests such as national security, national defense, public health, and criminal investigations, or if it may result in serious damage to the legitimate rights and interests of you or any other individual or organization.

5.1 Right to be informed: We inform you of how we process your personal information by publishing this Privacy Notice. We are committed to staying transparent about how we use your personal information.

5.2 Right of access: You may directly search for or access your personal information in the user interfaces of our products or services. For example, you may, at any time, sign in to your account to browse your information on realme Link or on a device accessed through realme Link. If you are unable to search for or access your personal information, or if you encounter any problems when accessing your personal information, you may contact us by email at privacy@realme.com to request access to your personal information.

5.3 Right to rectification: If you find that any of your personal information processed by us is inaccurate or incomplete, you have the right to request us to correct or complete it. You can directly correct and modify parts of your personal information on the relevant product or service page. For any personal information that you are unable to modify, you can contact us by email at privacy@realme.com to have such personal information corrected or completed.

5.4 Right to erasure: You may choose to delete some of the personal information you have submitted to us. You can delete such information directly on the relevant product or service page. If you find that we have collected or used your personal information in violation of relevant laws, administrative regulations, or this Privacy Notice, you have the right to have such information deleted. You may contact us by email at privacy@realme.com to request us to delete or anonymize the personal information provided by you. We might not delete your personal information from our backup system immediately after you have such information deleted from our products or services, but we will delete it when our backup system is updated.

5.5 Right to withdraw consent: The performance of each service function or the provision of a specific service requires certain basic personal information (see the "How We Collect and Use Your Personal Information" section of this Privacy Notice). You may grant or withdraw your consent to our collection and use of your additional personal information at any time. If you withdraw your consent, we will no longer be able to provide you with the related services.

After you withdraw your consent, we will no longer process related personal information, but the withdrawal of consent shall not affect the lawfulness of data processing based on consent before its withdrawal. You can change the scope of the personal information you authorize us to collect or withdraw your authorization by deleting your information, turning off device functions, or by other means.

5.6 Right to delete your account: We grant you the right to delete your HeyTap Account. (1) You may directly go to the relevant product or service page to submit an account deletion request; or (2) You may go to https://id.heytap.com/index.html?language=en-US. After signing in to your account, you can select "Personal Data Management", tap "Delete Account", and then submit an account deletion request as instructed. After you submit an account deletion request, we may need to manually review your request in order to make sure that you satisfy the conditions for deleting your account. We will assist you with the deletion of your account within fifteen (15) workdays (or within the time limit specified in your jurisdiction) after you submit your request. After your request is approved, we will delete or anonymize all your personal information in your HeyTap Account, unless otherwise specified by laws or regulations. After your HeyTap Account is deleted, we will no longer be able to provide you with products or services that are only accessible with a HeyTap Account. (3) You may also contact us by email at privacy@realme.com to request us to delete your HeyTap Account.

5.7 Right to get a copy of your personal information: You may contact us by email at privacy@realme.com to request a copy of your personal information that we store.

5.8 Right to lodge a complaint: You have the right to contact our online service agents or directly contact us by email at privacy@realme.com to lodge a complaint. We will respond within fifteen (15) workdays (or within a longer period of time permitted by law in your jurisdiction) from the date we receive your complaint. If you are not satisfied with our reply, particularly if the processing of your personal information by us damages your legitimate rights and interests, you can also file a complaint or report it to regulatory authorities in your jurisdiction, or file a lawsuit with the court with jurisdiction.

In addition, when designing the App, we have included settings that make it easier for you to manage your personal information and rights. You may sign in to your account from your device to view your personal information associated with realme Link and make changes.

The realme Link app may access certain features of your device, such as the Wi-Fi network status. Such information is necessary to ensure the normal functioning of the App and to allow you to interact with it. You may close the App at any time to withdraw your authorization.

6. How We Process Children's Personal Information

Our products, websites, and services are mainly intended for adults. Children (we regard people under the age of 14 or under a similar minimum age defined in the relevant jurisdiction as children) may not use our products without the consent of their parent or guardian. Children's personal information, collected with the consent of their parent or guardian, will be used or disclosed only when permitted by law and with the express consent of their parent or guardian, or when it is necessary to protect the children.

If we find that we have collected children's personal information without having obtained express and verifiable parental consent, we will try to delete the relevant data at the earliest possible time.

7. Third-Party Services and Products

This Privacy Notice does not apply to products or services provided by third parties. realme products and services may contain third-party products and services as well as links to third-party websites. We have no control over third-party privacy and data protection policies as such third parties are not bound by this Privacy Notice. Your information may also be collected when you use third-party products or services. Therefore, we strongly recommend that you read and understand the privacy protection policies of the third parties before providing your personal information to them. We are not responsible for how third parties use the personal information they collect from you, nor can we control their use of such information. Our Privacy Notice does not apply to third-party websites linked through our services.

When you use extended services for certain products on the realme Link platform, the terms and privacy policies of the relevant third parties will apply, and it will be deemed that you agree to the terms of these services.

7.1 If you use realme Link on a mobile phone produced by a specific manufacturer (such as Xiaomi, Huawei, vivo, or OPPO), the Push SDK of that manufacturer, which is contained in realme Link, will collect the unique identifiers (such as the IMEI number) of the phone. The SDK may also collect the phone's model, OS type, OS version, screen dimensions, and other parameters for the purpose of pushing our product information to you. For more details, please refer to the privacy policy or relevant statements of the SDK provider.

7.2 Social media features and widgets: The realme Link app may contain certain social media features, including Facebook buttons and widgets, such as the "Like" and "Share" buttons. These features may collect your IP address and the pages you browsed on our website and may set cookies in order to function properly. Social media features and widgets are hosted either by third parties or directly on our website. Your interactions with these features are governed by the privacy policy of the companies that provide them.

7.3 Single sign-on: Depending on your jurisdiction, you may sign in to our website through the authentication service provided by Facebook Connect or OpenID Connect. The service will verify your identity and let you choose whether to share certain personal information with us (such as your name and email address) so that the information can be automatically populated in our registration form. Facebook Connect or other similar services allow you to choose whether to sync information about your personal activity from the authentication site to your profile page for sharing with others on the Internet.

The App may have integrated with certain software development kits (SDKs) or other similar applications from our authorized partners to enable you to use related services contained in the App. We carefully review the purposes for which the SDK providers use your personal information, assess their security capabilities, and bind them to a legal cooperation agreement. We implement strict security monitoring to protect data security. To secure your information to the maximum extent, we strongly recommend that you read the privacy terms for any third-party SDKs before using the services provided by such SDKs. If you find any risks associated with such SDKs or other similar applications, we recommend that you immediately stop using them and promptly contact us.

We may also have integrated certain SDKs as tools into the App to implement specific product or service features. Please be aware that such SDKs do not collect any personal information or require any sensitive app permissions. For example, we have integrated OkHttp3 for making network requests, Glide for providing the image loading functionality, and JSON for formatting.

However, some other SDKs from certain service providers will request sensitive app permissions or collect and process your personal information. For example, the RYEEX, iDO, and Lifesense SDKs will request the Bluetooth permission from your phone to connect the App to relevant IoT devices. The Zxing SDK will request the Network, Camera, and Storage permissions for the purpose of scanning QR codes. The Firebase SDK will request the Network and Storage permissions for the purposes of data statistics analysis. You may go to the SDK providers' official websites to view their privacy policies.

When you use Google Fit on the realme Link platform, Google will collect and process your personal information, such as the heart rate, physical activity data (for example steps, calorie, sleep), location data, body measurements. The terms and privacy policies of Google will apply. Google Fit SDK User data policy: https://developers.google.com/fit/policy . Google privacy policy: https://policies.google.com/privacy .

8. How Your Personal Information Is Transferred Globally

As a company headquartered in China and operating globally, we provide products and services through our resources and servers distributed around the world. We have built data centers in countries such as China, France, Singapore, and India. This means that pursuant to local applicable laws and regulations, your personal information may be transferred to or accessed from a jurisdiction outside the country or region where you use the relevant product or service. In principle, personal information collected and generated within the People's Republic of China will be stored in the data center located in the People's Republic of China, while personal information collected and generated within the EU will be stored in the data center located in the EU.

You understand that there are different risks under different data protection laws. We will take measures to ensure that the data collected by us is processed in accordance with this Privacy Notice and applicable laws, and that your personal information is as equally protected as in the country or region where you use the relevant product or service. For example, we will obtain your consent to the cross-border transfer of your personal information or take security measures such as encryption, de-identification, or entering into a necessary data transfer/sharing agreement with the recipient of your data before transferring such data across borders.

9. How This Privacy Notice Is Updated

We will update and revise this Privacy Notice from time to time. We may send you update notices through different channels or methods. We will notify you of any material changes to this Privacy Notice using the email address provided by you, by posting a notification on our website, or by pushing notifications to you through realme Link, so that you can understand what types of information we collect and how we use such information. This Privacy Notice is subject to adjustments, but without your express consent, we will not diminish your rights under this Privacy Notice.

realme products and services stated in this Privacy Notice may vary depending on the model and OS version of your phone or local laws and regulations. Please refer to your phone and OS version for their actual products and services.

10. Miscellaneous

How We Use Cookies and Similar Technologies

10.1 What Are Cookies

A cookie is a small file that our websites, applications, or services transmit and store on your device. Our websites, online services, interactive apps, emails, and advertisements may use cookies and other similar technologies, such as pixel tags and web beacons. Cookies may be stored on your computer for a short period of time (such as only when your browser is launched) or a long period of time, or even for years. We cannot access cookies that are not set by us.

10.2 Our Use of Cookies

(A) We and our partners use cookies or similar tracking technologies to better understand the usage of mobile apps on your device and how often you use an app, the events that occurred within the app, the accumulated usage of the app, its performance data, and where you downloaded it. We will not link the information stored within analytics software to any personal information submitted by you in any mobile app.

(B) We and our partners use cookies or similar tracking technologies to analyze trends, manage websites, track user behaviors on the websites, and collect aggregate demographic information from our user base.

(C) Many web browsers have a Do Not Track feature which sends a Do Not Track request to a website. If you enable the Do Not Track feature in your browser, we will respect your choice, and your browsing experience on all of our websites will not be tracked.

(D) Like most websites, we automatically collect certain information to analyze cumulative trends and manage our websites. Such information may include the Internet Protocol (IP) address, browser type, Internet service provider (ISP), referring/exit pages, files viewed by you on our websites (such as HTML pages and graphics), operating system, date/time stamp, and/or clickstream data.

(E) We work with third parties to display advertisements on our websites or to manage our advertisements on other websites. Our third-party partners may use cookies or similar tracking technologies to provide you with advertisements based on your browsing activity and interests. If you want to opt out of receiving interest-based advertising, you may refer to the "Clearing/Disabling Cookies" section below to manage cookies and cookie preferences. Please note that you will continue to receive general advertising that is not personally targeted when you visit the aforementioned websites.

10.3 Clearing/Disabling Cookies

You can manage cookies and cookie preferences in your browser. Here are guides to show you how to do this in popular browsers:

• Microsoft Internet Explorer

• Microsoft Edge

• Mozilla Firefox

• Google Chrome

• Safari for macOS

• Safari for iOS

10.4 More Information about Cookies

For more information about cookies and instructions on how to configure your browser to accept, delete, or disable cookies, please go to www.allaboutcookies.org.

11. Contact Us

11.1 If you have any questions or concerns about this Privacy Notice, or if you have any questions about our collection, use, or disclosure of your personal information, please contact us using the following physical or email address:

Realme Chongqing Mobile Telecommunications Corp., Ltd.

No. 178 Yulong Avenue, Yufengshan, Yubei District, Chongqing, P.R. China

Email: privacy@realme.com

11.2 If you are domiciled in the EU, you may contact our EU Representative using the following physical or email address:

Baradine Invest, S.L.U.

calle Príncipe de Vergara, 112, 1, 28002, Madrid (Spain)

Email: privacy@realmeeu.com

11.3 If you are domiciled in India, you may contact our India Specialist using the following physical or email address:

Realme Mobile Telecommunications (India) Private Limited

3rd Floor, Tower B, Building Number 8, DLF Cyber City, Gurugram-122002, Haryana, India

Email: privacy.in@realme.com

B. Special Provisions Relating to the General Data Protection Regulation (GDPR)

The provisions described below only apply to users domiciled in Europe.

1. Legal Grounds for Processing Personal Information

The processing of your personal information described in the "How We Collect and Use Your Personal Information" section in Part A is lawful only if and to the extent that at least one of the following conditions applies:

1.1 You have given consent to our processing of your personal information. In particular, we may ask for your consent to our promotional activities, such as sending you promotional messages, inviting you to participate in our "User Experience Program", and providing you with specific services including the services requiring your location information. You have the right not to give consent, or to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of our use of your personal information based on consent before its withdrawal. If you have given consent to our use of your personal information, we will use your information only for the purposes stated in the consent. Please note that our data processing is based on your consent. If you refuse to give your consent or if you withdraw your consent, we may not be able to provide you with related services. In addition, your refusal to give consent or the withdrawal of consent will not bring any negative consequences to you.

1.2 Data processing is necessary for the performance of our contract with you or for us to enter into a contract with you.

Below are some examples of the legal grounds for our data processing:

• Providing realme services to you or performing our contract with you;

• Activating the services you have purchased, your warranty services and specific software licenses, and providing app update notices;

• Diagnosing product issues or providing other customer care and support services.

1.3 Data processing is necessary for compliance with our legal obligations. realme may be obliged to process personal information in order to fulfill our legal obligations. For example, we are required to retain personal data for compliance with tax laws or for business purposes.

1.4 Data processing is necessary to protect our legitimate interests. In particular, we may process your personal information for the following purposes:

• To conduct customer surveys to understand your user experience;

• To analyze the customer market based on the country where you use our services, including the number of users that our product marketing and promotions have reached;

• To analyze the efficiency of our business operations;

• To analyze error logs so as to improve our service quality and app features;

• To provide you with personalized services and recommend and display the content and ads tailored for you through our services;

• To communicate with you in any form and respond to the questions or comments you submit to us;

• To ensure the functionality and security of our services;

• To verify your identity;

• To conduct internal audits to prevent and investigate fraud, cybersecurity threats, or other improper uses of your personal information;

• To improve and develop our services including security features, such as improving the user experience, user-friendliness, performance, functionality, and design of our products;

• To pursue legal support or defense of legal claims.

When data processing is necessary for the above purposes, we will do so only after we fully evaluate and balance our interests and your privacy rights.

2. Global Transfers of Your Personal Information

If it is necessary to transfer your personal information to a jurisdiction outside Europe, we will ensure that we have put in place proper safeguards. For example:

2.1. We will ensure that the recipient is located in a country sufficiently recognized by the European Commission.

2.2. We will ensure that the recipient has signed a contract in accordance with the "Standard Contractual Clauses" issued by the European Commission, requiring them to protect your personal information.

2.3. Or in the absence of the above safeguards, we will ask for your express consent to cross-border transfers of your personal information, or we will take other generally-recognized and adequate protection measures to protect your personal information.

To learn more about the safeguards we use in the transfer of personal information from an EU country to a non-EU country, please submit your request by sending us an email at privacy@realme.com.

3. Our Use of Cookies and Other Tracking Technologies

To understand our use of cookies and other tracking technologies in detail, please tap here.

4. Your Rights to Your Personal Information

According to the GDPR, you have the following rights:

• Right of access: You may access your personal information that we hold.

• Right to rectification: If you find that your personal information processed by us is inaccurate or incomplete, you have the right to request us to promptly rectify the inaccurate personal information, and, when appropriate, have the incomplete information completed.

• Right to erasure: You may request us to erase your personal information. In certain cases (such as when we have no legal reason to continue to process your personal information under applicable laws and regulations), we have the obligation to promptly erase your personal information. Please note that the erasure of all your personal information from your realme devices does not mean that it will erase all the data relating to you that we have collected or processed. Therefore, we encourage you to submit a data deletion request to us by sending an email to privacy@realme.com.

• Right to restrict processing: In certain cases, when you contest the accuracy of your personal information, you have the right to request us to restrict the way we process your personal information for a period of time, so that we can verify the accuracy of the personal information. We will only retain sufficient data or process the necessary data to ensure that your right to restrict processing will be honored in the future.

• Right to object: You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal information based on our legitimate interests. Should you decide to object to the processing, we will stop processing the personal information concerning you, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of our establishment, exercise or defense of legal claims. You also have the right to object at any time to our processing of your personal information for direct marketing purposes.

• Right to data portability: You have the right to get a copy of your personal information in a structured, commonly used and machine-readable format and to transmit such data to another service provider. In certain cases, you have the right to have your personal information transmitted directly from us to any other service provider.

• Right to withdraw consent: If you have given consent to our processing of your personal information but later changed your mind, you have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of our use of your personal information based on consent before its withdrawal. If you want to withdraw your consent to the receipt of promotional messages, you may choose to unsubscribe in the manner described therein. If you withdraw your consent, we may not be able to provide you with related services.

• Right to lodge a complaint: You have the right to lodge a complaint with the competent supervisory authority on our processing or the way we process your personal information, or file a lawsuit in a court with jurisdiction. For information on how to contact the local data protection supervisory authority, please tap here.

5. How to Contact Our EU Representative

If you have any questions or concerns about this Privacy Notice or our privacy practices, please contact us using the physical or email address below:

Baradine Invest, S.L.U.

calle Príncipe de Vergara, 112, 1, 28002, Madrid (Spain)

Email: privacy@realmeeu.com

C. Special Provisions for Data Uses in California

The provisions described below only apply to users domiciled in California, USA.

1. Information That We Collect

According to California law, we must describe the information we collect from California residents. Over the past 12 months, we may have collected some of your personal information. For details, please refer to article "Information that we collect" in section "How We Collect and Use Your Personal Information" of "Part A. General Provisions".

2. Your Rights to Your Personal Information

If you are a resident in California, you are entitled to the following rights:

(A) The right to know and access the categories and specific pieces of personal information about you that we collect, the sources of the information we collect, the purposes for our collection of such information, and the personal information that we share with third parties.

(B) Section 1798.83 of the Civil Code of California permits users of realme apps and software that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes.

(D) The right to opt out of the sale of your personal information to a third party. Please note that we do not sell any personal information, including that of teenagers under 16.

(E) The right to non-discrimination for exercising any of the above rights.

If you wish to exercise any of your rights set out above, please contact us by email at privacy@realme.com, and include "California Consumer Privacy Act" in the subject line of your request email. We will respond within thirty (30) days from the date we receive your request.

In response to your request, we will match the identification information you provide with the personal information we have stored. If we are unable to verify your identity from the information we have stored, we may ask you to provide additional information. You may delegate an authorized agent registered with the Secretary of State of California to make the request on your behalf. If the authorized agent is unable to provide evidence of authorization to act on your behalf, we may reject the request.

3. Contact Us

If you have any questions or concerns about this Privacy Notice, or if you have any questions about our collection, use, or disclosure of your personal information, please contact us using the following physical or email address:

Realme Chongqing Mobile Telecommunications Corp., Ltd.

No. 178 Yulong Avenue, Yufengshan, Yubei District, Chongqing, P.R. China

Email: privacy@realme.com