PRIVACY POLICY

Welcome to Paruu Applications and Services

OVERVIEW

This application is operated by Paruu. Throughout this application, the terms "we," "us," and "our" refer to Paruu. By accessing or using this application, including all information, tools, and services available herein, you acknowledge and agree to be bound by all terms, conditions, policies, and notices stated here.

Your use of our application, including visiting our application or making any purchase, constitutes engagement with our "Service" and signifies your agreement to be bound by these Terms of Service ("Terms"), together with any additional terms, conditions, and policies referenced herein or accessible via hyperlink. These Terms apply to all users of the application, including without limitation browsers, vendors, customers, merchants, and contributors of content.

Please read these Terms of Service carefully before accessing or using any part of this application. By proceeding to access or use the application, you fully accept and agree to comply with these Terms. If you do not agree to all terms and conditions set forth herein, you may not access this application or use any associated services. To the extent these Terms are considered an offer, your acceptance is expressly limited to these Terms of Service.

PRIVACY NOTICE

Last Updated/Effective Date: May 1, 2026

Linhejiacheng (Shenzhen) E-commerce Co., Ltd. and its affiliates and subsidiaries ("Paruu," "we," "us," or "our") are committed to protecting your privacy. This Privacy Notice describes how we process Personal Information (as defined below) that is provided, collected, or shared on our websites, mobile applications, social media pages, and other platforms linked to this Privacy Notice (collectively, the "Site"). It also outlines your choices regarding the collection, sharing, and use of your Personal Information.

We may update this Privacy Notice at any time. Any changes will become effective immediately upon posting on the Site. Material changes will be prominently displayed on the Site or communicated to you directly.

1. Personal Information We Collect

We may collect various types of Personal Information. For purposes of this notice, "Personal Information" means any information that can uniquely identify, relate to, describe, or be reasonably associated with you.

The categories of Personal Information we may collect include:

• Contact Information – When you submit an inquiry, register an account, or otherwise provide information on our Site, we may collect your contact details, such as name, address, email address, demographic information, and telephone number.
• Commercial Information – This includes details regarding your purchases, subscription history, interest in products or services, payment processing data, and other commercial interactions.
• Location Data – While using our Site, your mobile device or browser may share location information via Wi‑Fi or GPS, subject to your device and browser settings.
• Usage Information – When you access our Site, our servers may automatically record data such as your IP address, browser type, referring URLs, domain names associated with your internet service provider, and other details related to your interaction with the Site.
• Communication Information – We may collect the contents of your communications with us, whether by email, chat, social media, telephone, or other means, as well as inferences drawn from other Personal Information we collect. Where permitted by law, we may record and retain calls, chats, and messages exchanged with our agents, representatives, or employees.
• Inferences – We may analyze the information we collect about you to develop a profile reflecting your preferences, characteristics, and behavior.
• Sensitive Personal Information – This may include health-related data (such as lactation stage and milk volume) and precise geolocation when you enable features like “find nearby pump.” We process such data only with your explicit consent or as otherwise permitted by applicable law.
• Device and Service Information – When you use our connected devices and related services, we may collect information such as device serial number (SN), model name, firmware version, usage data (e.g., frequency and duration of use), device identifiers (such as MAC address, IMEI, IMSI, Android ID, IDFA, OAID, ICCID, MEID, and GUID) and error logs to enable functionality, perform troubleshooting, and provide customer support.
• Customer Service Information – When you contact our customer support or use after-sales service features (including online chat or feedback tools), we collect the contents of your communications (such as questions, feedback, images, and videos), your contact details (such as email address), and relevant device or product information (such as hardware type and model). We may associate them with your contact details, account information, and device data (including Device Serial Number) to effectively address your inquiries.

2. How We Collect Your Personal Information

• Directly From You – We collect Personal Information when you voluntarily provide it, such as when you contact us, request information, or purchase products or services.
• From Third Parties – We may also receive Personal Information from business partners, subcontractors, analytics providers, and other third parties who are authorized to share such information with us.
• Through Online Tracking Technologies – We and our service providers may use cookies to collect usage and browser information about your interactions with the Site. The information obtained through these technologies, which may include or be combined with Personal Information, is used to operate certain features of the Site, personalize your experience, and better understand which aspects of the Site are most relevant to you and other users.
• Through Customer Support Interactions – When you contact our customer support team, we collect information directly from you as part of these interactions.

3. Cookies

Information gathered through these technologies, which may include or be combined with Personal Information, is processed to support the operation of certain Site features, enhance your experience through personalization, and help us better understand which Site features are of greatest interest to you and other users.

We collect certain information through cookies, which are small data files stored directly on the device you are using. Cookies allow us to gather data such as your browser type, time spent on the Site, pages visited, referring URLs, language preferences, and other aggregated traffic information. This data is used for security purposes, to facilitate navigation, improve content display, generate statistical insights, personalize your experience while using the Site, and recognize your device to assist in your use of the Site. We also analyze statistical information about Site usage to continually enhance design and functionality, understand user interactions, and help resolve operational or user questions.

4. How We Use Personal Information

To the extent permitted by applicable law, we may use Personal Information for the following purposes:

• Operate the Site, fulfill customer requests, complete purchases, and support our business functions;
• Protect against criminal activity, claims, and other liabilities;
• Ensure the security and integrity of the Site;
• Meet our contractual obligations;
• Comply with applicable legal and regulatory requirements, as well as our internal policies;
• Conduct short‑term transient activities, such as displaying non‑personalized advertisements during your interaction with the Site;
• Carry out internal research for technological development and demonstration purposes;
• Verify or maintain the quality or safety of our products, services, or devices;
• Support and personalize the App and our advertising efforts, which may involve automated decision-making or profiling;
• Use the information for any other lawful purpose consistent with the reason for which it was collected;

5. Disclosure of Personal Information

We may disclose your Personal Information under the following circumstances:

• Within Our Corporate Group – We may share Personal Information among Paruu affiliates and subsidiaries for business and marketing purposes, including to inform you about products or services we believe may interest you.
• To Service Providers – When engaging service providers to assist in operating the Site or our business, we may provide necessary access to Personal Information to enable them to perform services on our behalf. This includes providers that manage our Site, deliver communications, administer promotions or provide analytics and crash reporting services (e.g., Firebase Crashlytics).Such analytics and crash reporting services are used to monitor and analyze application crashes and errors, identify the root causes of such issues, and improve the stability and performance of our services.
• For Legal Compliance or Safety Purposes – We may disclose Personal Information when we reasonably believe it is necessary to: (a) comply with applicable laws, regulations, legal processes, or enforceable governmental requests; (b) investigate or enforce potential violations of our Terms of Use; (c) detect, prevent, or address fraud, security, or technical issues; (d) support auditing and compliance functions; or (e) protect the rights, property, or safety of Paruu, our users, or the public.
• In Connection with Business Transfers – If Paruu is involved in a merger, acquisition, sale of assets, bankruptcy, or similar transaction, Personal Information may be transferred as part of the business assets. Where legally required, we will provide advance notice and, if you have a legal right to object, an opportunity to do so.

6. Retention of Personal Information

We retain your Personal Information only for as long as necessary to fulfill the purposes outlined in this Privacy Notice or as required by applicable law. California residents may refer to the “Notice to California Residents” section below for further details regarding data retention periods specific to your region.

We utilize algorithmic models to recommend products or discounts based on your usage patterns. These models are not used to make automated decisions that produce legal or similarly significant effects. In the event we implement fully automated decisions impacting your legal rights (e.g., account suspension), we will conduct a Data Protection Impact Assessment (DPIA), provide clear information regarding the underlying logic, and ensure the availability of human review.

7. Protection of Personal Information

We employ commercially reasonable technical and organizational measures to protect the confidentiality and security of the Personal Information we process. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee the absolute security of your Personal Information. While we strive to safeguard your data, we cannot ensure that unauthorized third parties will not circumvent our security measures or access your Personal Information without authorization.

8. Your Rights and Controls

Depending on your jurisdiction, you may have certain rights regarding your Personal Information, which may include:

• Access – The right to request access to and obtain a copy of the Personal Information we hold about you.
• Data Portability – The right to receive your Personal Information in a structured, commonly used, and machine-readable format, and to request its transfer to another controller where feasible.
• Deletion – The right to request the deletion of your Personal Information, subject to legal or legitimate business exceptions.
• Correction – The right to request correction of inaccurate or incomplete Personal Information.
• Restriction of Processing – The right to request restriction of processing where you contest the accuracy of your data, object to its processing, or where retention is necessary for legal claims.
• Right to Object – You may object at any time to processing of your Personal Information that is based on our legitimate interests, including direct marketing. Unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, we will cease processing for such purposes upon your objection.
• Right to Withdraw Consent – Where processing is based on your consent, you may withdraw your consent at any time through Settings > Paruu APP. Withdrawal does not affect the lawfulness of processing conducted prior to your withdrawal.

To exercise any of these rights available to you, see Section 16 below.

To opt out of marketing emails, you may contact us at Support@paruulife.com. Please note that even if you unsubscribe from promotional communications, we may still send you important transactional or administrative messages as permitted by law. If you withdraw consent, object to processing, or choose not to provide certain Personal Information, we may be unable to provide some or all of our services to you.

9. Children's Privacy

We do not knowingly collect or solicit Personal Information from individuals under the age of 16. If we become aware that we have inadvertently collected Personal Information from a child under 16, we will take prompt steps to delete such information. If you are a parent or legal guardian and believe your child has provided Personal Information to us without your consent, please contact us using the details provided in Section 18. Notwithstanding the foregoing, we may process information related to infant or child care (such as feeding volume and feeding frequency) through an account registered and controlled by a parent or legal guardian. In such cases, any Personal Information relating to a child is provided by, and processed under the direction of, the parent or legal guardian, and is based on their consent and actions.

10. Data Storage and International Transfers

We operate servers in multiple jurisdictions to support our global services. If you are located in the United States or other regions outside the European Economic Area (“EEA”) or the United Kingdom (“UK”), your Personal Information will be stored and processed on servers located in the United States.If you are located in the EEA or the UK, your Personal Information will be stored and processed on servers located within the EEA. In certain circumstances, your Personal Information may be accessed or processed from other jurisdictions where our affiliates or service providers are located, strictly for the purposes described in this Privacy Policy.

Where Personal Information is transferred across borders, we implement appropriate safeguards in accordance with applicable data protection laws, including but not limited to the use of standard contractual clauses or other lawful transfer mechanisms.

We are not responsible for the privacy practices, content, or services of any third‑party websites or platforms linked to or from our Site. We encourage you to review the privacy policies and terms of such third parties before disclosing any Personal Information, as any information you provide to them will be governed by their respective policies.

12. Notice to California Residents

This section applies to residents of California and supplements the information provided in the rest of this Privacy Notice, in accordance with the California Consumer Privacy Act of 2018 and its implementing regulations, as amended by the California Privacy Rights Act (“CCPA”). Terms used in this section have the meanings ascribed to them under the CCPA.

Here we describe (1) the categories of Personal Information we collect and disclose, (2) your rights under the CCPA, and (3) how you may exercise those rights.

We make the following disclosures regarding the Personal Information we have collected within the 12-month period preceding the Effective Date of this Privacy Policy:

Sources of Personal Information
We collect Personal Information from the sources detailed in Section 2, namely: (i) directly from you; (ii) automatically via tracking technologies; and (iii) from third parties.

Use of Personal Information
We use Personal Information for the business and commercial purposes outlined in Section 4.

Disclosure of Personal Information
We do not sell Personal Information. We do not share Personal Information for cross-context behavioral advertising purposes as defined under the CCPA/CPRA.

We will retain each category of your Personal Information for as long as necessary to fulfill the purposes described in Section 4, unless otherwise required by applicable laws. Criteria we will use to determine how long we will retain your Personal Information include whether: we need your Personal Information to provide you with products or services you have requested; we continue to have a relationship with you; you have requested information, products, or services from us; we have a legal right or obligation to continue to retain your information; we have an obligation to a third party that involves your information; our retention or recordkeeping policies and obligations dictate that we retain your information; we have an interest in providing you with information about our products or services; and we have another business purpose for retaining your information.

Subject to certain exceptions, if you are a resident of California, you may have the following rights:

Only you, or an authorized agent that you authorize to act on your behalf, may make a request related to your Personal Information. You may also make a request on behalf of your minor child.

You may only make a request for access or data portability twice within a 12-month period. The request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

Other California Privacy Rights. Under California Civil Code Section 1798.83, individual customers who reside in California and who have an existing business relationship with us may request information about our disclosure of certain categories of personal information to third parties for direct marketing purposes. To make such a request, please contact us using the information in the Contact Us section below. Please be aware that not all information sharing is covered by these California privacy rights requirements and only information on covered sharing will be included in our response. This request may be made no more than once per calendar year.

13. Notice to Residents of the European Economic Area and United Kingdom

If you are subject to the privacy and data protection laws of any of the member countries of the EEA or the UK, the following information applies in addition to the details provided in the general sections of this Privacy Notice:

International Data Transfers

We may transfer personal data collected in the EEA or the UK to recipients located in countries outside the EEA or the UK, including to our affiliated companies and trusted service providers.

Where personal data is transferred outside the EEA or the UK, we ensure that appropriate safeguards are implemented in accordance with applicable data protection laws.

Such safeguards may include:

• transfers to countries that have been recognized by the European Commission or the UK Government as providing an adequate level of protection (“Adequacy Decision”);

• the use of Standard Contractual Clauses approved by the European Commission, or other appropriate safeguards recognized under UK data protection law; and

• other lawful transfer mechanisms permitted under applicable law.

Purposes of Processing and Legal Bases

The table below summarizes the categories of Personal Information we process, the purposes of processing, and the applicable legal bases under the EEA and UK data protection laws.

Privacy Right

The EU General Data Protection Regulation and the UK General Data Protection Regulation provides certain rights (where applicable) regarding how Paruu, as a data controller, processes your Personal Information. You have the following rights:

14. NOTICE TO CANADIAN RESIDENTS

We have prepared this section specifically for users residing in Canada. As a Canadian resident, you have certain privacy rights under Canadian law, including the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation (such as Quebec’s Law 25). Paruu’s privacy principles and the privacy controls we offer to all users are designed to align with these laws.

Privacy Right

You may exercise your rights of access and rectification as described in Section 8(Your Rights and Controls)of this Privacy Notice, or by contacting our Privacy Officer using the contact information provided below.

Depending on your province of residence, you may have additional rights, including:

• The Right to Withdraw Consent: You may withdraw your consent to our processing of your information at any time. Please note that withdrawing consent may limit our ability to provide certain services or features to you.
• The Right to Portability: The right to receive your personal information in a structured, commonly used format.
• The Right to De-indexing: The right to request that we stop disseminating your personal information or de-index any hyperlink attached to your name.

International Data Transfers

To provide our services, Paruu may collect, transfer, store, and process your personal information in the United States and other jurisdictions outside your country or region of residence. Such processing may involve our affiliates and trusted third-party service providers that perform functions on our behalf as described in this Privacy Policy.

Where personal information is transferred outside your country or region of residence, we implement appropriate safeguards and take reasonable measures to ensure that such transfers comply with applicable data protection laws and that your personal information remains adequately protected.

When your personal information is processed in another jurisdiction, it may be subject to the laws of that jurisdiction and may be accessible to governments, courts, law enforcement authorities, or regulatory agencies in accordance with applicable laws.

Complaints or Inquiries

We want you to know that you can submit any inquiries or complaints regarding our privacy practices to our privacy support team at Support@paruulife.com. You also have the right to lodge a formal complaint with the Office of the Privacy Commissioner of Canada or your applicable provincial privacy commissioner.

15. NOTICE TO VIETNAMESE RESIDENTS

By accepting the Privacy Policy, you expressly agree and authorize us to collect, use, store, and process your Personal Information, including, lawfully disclosing and transferring it to third parties.

We maintain international standards and security practices for data protection. When your Personal Information is transferred within or outside your jurisdiction of residence, it will be subject to the same or higher levels of security practices and data protection by the recipient entity as adhered to by us.

Where we permit any third parties to collect and use your Personal Information, we shall take reasonable measures to ensure that the third parties do not further disclose the Personal Information.

Your Personal Information, if required to be disclosed to the competent law enforcement agencies, public authorities or other judicial bodies and organisations, will be disclosed upon receipt of written request from such organisations.
Where required by the law and regulatory requirements of your jurisdiction from time to time, we may retain all or part of your Personal Information for a period longer than described in the Privacy Policy.

You have the right to access, correct, and erase the Personal Information we hold about you. You also have the right to withdraw your consent to collect, store, process, use and disclose your Personal Information and to request us to stop processing or providing your Personal Information to a third party.

16. Exercising Your Privacy Rights

You will not be discriminated against for exercising any of your rights under applicable data protection laws. This means we will not deny you goods or services, charge you different prices or rates, or provide a different level or quality of goods or services based on your exercise of these rights.

To submit a request regarding your Personal Information, you may contact us via:

• Email: Support@paruulife.com

Verification Process
We are required to verify your identity before responding to your request. If we are unable to initially verify your identity, we may ask for additional information solely for the purpose of completing verification. If you are an authorized agent acting on behalf of a consumer, we may also require proof of your authorization, such as written permission or a power of attorney.

Response Timeline
We strive to respond to requests within the timeframe required by applicable law. If additional time is needed, we will notify you in writing of the reason and the anticipated extension.

Fees
We do not charge a fee to process or respond to your request unless it is excessive, repetitive, or manifestly unfounded. Should a fee apply, we will explain the basis for the charge and provide a cost estimate before proceeding.

Scope of Response
If we are unable to verify your identity or confirm that the requested information relates to you, we may not be able to fulfill your request. Submitting a verifiable request does not require you to create an account with us. In certain circumstances permitted or required by law, we may deny a request or fulfill it only in part. For example, if you request deletion, we may retain Personal Information necessary for legal compliance or other lawful purposes.

Appeals
If you are not satisfied with the resolution of your request and have a right to appeal, we will include information about our appeal process in our response to you.

17. Changes to This Privacy Notice

We may update this Privacy Notice periodically. Material changes will be communicated as required by law. Unless otherwise stated, changes become effective upon posting on the Site.

18. Contact Us

If you have questions about our privacy practices or this Privacy Notice, please contact us at Support@paruulife.com.