Effective Date: April 7, 2025

At SophosAI Inc. ("SophosAI," "we," "us," or "our"), your privacy is a top priority. This Privacy Policy outlines how we gather, use, share, and safeguard your personal information when you interact with our apps, games, websites, and associated services (collectively referred to as the "Services").

Who We Are SophosAI, serves as the data controller, operating from 8 The Green Ste A, Dover, DE 19901, United States.

We may update this Privacy Policy occasionally. When we do, we will revise the "Effective Date" accordingly and encourage you to check this policy regularly. Continued use of our Services after updates means you agree to the new terms.

1. Information We Collect Depending on how you use our Services, we may collect the following information:

• Account & Personal Data: Includes your name, email address, and password when you create an account to save progress or sync across devices.

• Device Details: Such as device model, OS version, app version, device ID, advertising ID, language preferences, time zone, and IP address.

• Usage Behavior: Includes crash reports, in-app purchases, location details, and usage patterns.

• Permissions Access: Some app features may request location or camera access, which can be managed via your device settings.

• Third-Party Data: Information from partners integrated into our Services, detailed in Appendix B.

• Social Media Logins: Data shared when you use services like Facebook or Google to sign in, including your profile name, image, and language preferences.

• User Contributions: Data you submit during contests, surveys, or events.

• Tracking Technologies: Cookies, SDKs, and other trackers may be used by us or our partners for analytics and advertising (see Appendix A).

2. How We Use This Information Your data is used to:

• Operate and maintain our Services

• Provide customer support

• Prevent fraud and ensure security

• Analyze and improve performance

• Notify users about updates and features

• Deliver personalized advertisements (with user consent in certain regions)

• Fulfill legal obligations

3. Data Retention We only retain your personal data as long as needed for the purposes stated in this policy or as required by law. Accounts inactive for 14 months or more may be deleted. Once deleted, data access or recovery is no longer possible.

4. Your Rights You have the right to:

• Access and update your data

• Request deletion of personal information

• Limit how we process or share your data

• Withdraw consent for specific data collection (e.g., location, camera)

• Opt out of targeted advertising (see device-specific instructions below)

Ad Opt-Out Instructions:

• iOS: Go to Settings > Privacy > Advertising or Tracking

• Android: Go to Settings > Google > Ads > Opt out of Ads Personalization

Note: Even after opting out, non-personalized ads may still appear.

5. Data Sharing We may share your data with:

• Cloud and hosting providers (e.g., U.S.-based servers)

• Third-party service providers for analytics, support, or marketing

• Advertising networks (see Appendix A)

• Our affiliated entities

• Legal authorities, if required

• Business acquirers, in case of a company merger or acquisition

We will always seek your consent before sharing data beyond these purposes.

6. Children's Privacy Our Services are not designed for children under 16. We do not knowingly collect information from minors. If a child has shared personal data, please contact us to remove it.

7. External Links Our Services may link to external websites with separate privacy policies. We are not responsible for the practices of these sites.

8. California Privacy Rights Residents of California can view our CCPA disclosure for details on their rights.

9. Policy Updates We may revise this policy from time to time. Please refer to the "Effective Date" for the most recent version.

10. Contact Questions? Contact us at: [email protected]

Appendix A - Advertising Partners We partner with advertising networks that may collect device information and identifiers to serve personalized ads. If you're located in the EEA, some networks will ask for consent. You may opt out via their respective privacy policy links. Some partners act as data processors and only follow our instructions.

Notable Partners:

• Google AdMob, Facebook Audience Network, AppLovin, Unity Ads, Chartboost, etc.

Appendix B - Analytics & Service Providers To analyze usage, improve performance, and maintain our Services, we work with third-party tools such as:

• Firebase, Adjust, AWS, Facebook Analytics, Google reCAPTCHA, etc.

Refer to each provider's privacy policy for more on their data use and opt-out options.