Privacy Poıicy

Version Release Date: November 27, 2025

 Shenzhen  Ruilitan  Technology Co., Ltd. (After collectively referred to as "we" or "Ruilitan") is committed to protecting your personal privacy and taking measures to ensure that your personal data is protected when using our services. Below is our information on how we use, process, and protect your personal data in this Privacy Notice.

Pri vacy  Policy  Core  Summary

(Based  on  the  Ruilitan  Technology  Pri vacy  Poli cy  effecti ve  as  of    December    20,  2025)

1 .  Who  We  Are

Company:  Shenzhen Ruilitan Technology Co., Ltd.

Products and Services: We primarily provide the DOUDOU PET smart home control application and related IoT platform services, used to connect and control Bluetooth/Wi-Fi-enabled smart devices (such as smart appliances, lighting, pet devices, etc.).

2.  What  Personal  Informati on  We  Collect

2.1   Informati on  You  Voluntarily  Provide

Account  Informati on :  Phone  number,  email,  password,  ni ckname,  profile  pi cture,  etc .

Devi ce  and  Home  Informati on :  Wi-Fi   name   (SSID) ,  home/room  names,  locati on,  family  members, etc.

Feedback  Content :  Contact  email,  phone  number, problem description, and related images/videos.

2.2   Devi ce  Permi ssi on s  and  Additi onal  Informati on   (Requi re  Your  Authorizati on)

Locati on  Informati on : Used for device pairing, weather services, etc.

Camera/Photo  Album : Used for scanning QR codes to add devices, uploading profile pictures, or feedback images.

Mi crophone : Used for two-way communication with specific devices (e.g., visual feeders).

Bluetooth/Local  Network/Wi Fi   Informati on : Used to discover and connect smart devices.

Storage/Devi ce  Status/Floating  Wi ndow : Used for stable app operation, log analysis, and quick controls.

2.3  Automati cally  Collected  Informati on

Devi ce  Informati on : Device model, unique identifiers (e.g., device ID), IP address, OS version, logs, etc.

Smart  Devi ce  Data : Device status (e.g., on/off, brightness, feeding records), online status, firmware version, etc.

Interacti on  Data : App usage records, message history, etc.

3.  How  We  Use  Your  Informati on

Core Services: Provide account registration, device control, home management, status synchronization, etc.

Service Improvement: Analyze device status and optimize product experience.

Communication and Notifications: Send necessary notifications about service changes, security alerts, etc. (Marketing messages can be unsubscribed).

Compliance and Security: Comply with laws and regulations, respond to government requests, and prevent fraud or misuse.

4.  How  We  Share  and  Di sclose  Your  Informati on

Sharing with Third-Party Service Providers: Such as voice service providers, cloud hosting, data analytics partners (bound by contracts).

Affiliates: Shared within the group for business purposes.

Legal Disclosure: Information may be provided to regulators or third parties when required by law or to protect rights, property, or safety.

Business Transfers: In the event of mergers, acquisitions, etc., your information may be transferred as part of the assets (we will notify you).

Third-Party SDKs: Our product includes third-party SDKs (e.g., for login, maps, push notifications), and their data processing is governed by their own privacy policies. For details, please refer to the Third- Party Information Sharing and SDK Services List.

5.  Your  Rights

You have the right to manage your personal information in the following ways:

Access and Obtain Copies: Request a copy of your personal information via email at dpo@Ruilitan.hk.

Correct Information: Edit directly in the App under “Me – Profile/Home Management” or contact us via the above email.

Delete Information: Remove devices or home information in the App, or delete your account (which permanently deletes all data).

Withdraw Consent: Withdraw consent to the privacy policy under “Me  – Settings  – About” in the App, or disable relevant permissions in device settings (may affect related functions).

Deceased User Information Handling: Close relatives may apply to access, correct, or delete the deceased user’s information by providing supporting documents via email.

Complaints and Reports: Contact us via “Me  – Feedback” in the App or email support@doudoupet.ai(we will respond within 15 working days).

Right to Lodge a Complaint with a Supervisory Authority: If you believe that our processing of your personal information infringes applicable data protection laws, particularly the laws of your place of residence or country (such as the GDPR in the European Union), you have the right to lodge a complaint with a competent data protection supervisory authority. You can inquire about the complaint channels through the official website of the respective authority. Our primary supervisory authority is the Cyberspace Administration of China. For users in the EU, a list of the data protection authorities in your Member State can be found on the European Commission's website.

6.  How  We  Protect  Your  Informati on

We use encryption transmission, dynamic keys, and other technical measures to protect data during transmission.

Internal management systems are in place to restrict personnel access.

If you discover a security issue, please notify us immediately at support@doudoupet.ai.

7.  Informati on  Storage  and  Cross-Border  Transfers

Personal information is stored by default within mainland China.

When cross-border transfers are necessary for business purposes, we ensure data security through legal mechanisms such as contracts and comply with the laws of the destination country/region.

8.  Protecti on  of  Mi nors

We do not provide services to children under the age of 14.

If you are a minor, please ensure you use our services with the consent of a guardian. Guardians can contact us via email to manage the minor’s information.

9.  Poli cy  Update s  and  Servi ce  Termi nati on

When the policy is updated, we will notify you via email, App notifications, etc.

If we cease operations, we will stop collecting information and will delete or anonymize your data in accordance with the law, or inform you of the subsequent handling method.

10.  Contact  Us

If you have any questions about this privacy policy, please contact us via:

If you have any questions about our practices or this policy, please contact us below.

Company name: Shenzhen Ruilitan Technology Co., Ltd

Address: Room 516&517, Building B, Xintang Smart Park, No. 11, Zhongxing Road, Ma'antangCommunity, Bantian Subdistrict, Longgang District, Shenzhen, Guangdong, China

Email: support@doudoupet.ai

Table  of  Contents:

1 .Scope  of  Servi ces  and  Appli cati ons  Related  to  Personal  Data

2.Defi niti ons

3.How  We  Collect  and  Use  Your  Personal  Informati on

4.Purposes  and  Legal  Basi s  for  Processi ng  Personal  Informati on

5.How  We  Share,  Transfer,  and  Publi cly  Di sclose  Your  Personal  Informati on

6.Your  Data  Subject  Rights

7.How  We  Protect  Your  Personal  Informati on

8.Storage  and  Retenti on  of  Informati on

9.Protecti on  of  Mi nors'  Personal  Informati on

10.Handli ng  of  Personal  Informati on  After  We  Cease  Operati ons

11 .Updates  to  Thi s  Poli cy

12  User  Complai nts  and  Reports

13  Our  Contact  Informati on

Servi ces  and  scope  of  appli cati ons  related  to  personal  data

We believe that your privacy is very important and highly value your right to privacy. In this Privacy Notice, we explain how we collect, receive, use, store, share and process your information. In this privacy statement, the relevant application is the DOUDOU PET mobile application, which was developed by us to help users remotely control smart terminal devices and connect to our IoT platform; Our website and our IoT platform are collectively referred to as the Website. The App and Website and any services related to one or more of the foregoing businesses are collectively referred to as the "Services".

Our Services may contain connections to other websites or online services operated and maintained by third parties that are not controlled or maintained by us. This Statement does not apply to how third parties collect, use, disclose or retain information. We encourage you to review the privacy policies of those third-party websites or services.

For mobile applications of other brands supported by us, it is up to our customers to decide what personal information they collect through our products, so this Privacy Policy does not apply to the principles of other brands collecting or processing personal information. We collect information at the request of our customers, and the processing of such information is limited to the provision of the services agreed between the customer and us. If you are a user of one of our customers and you do not wish to be contacted by customers who use our services, please contact that customer directly and inform them of your requirements.

defi niti on

In this policy:

Personal Information: Information recorded electronically or otherwise that can be used alone or in combination with other information that can identify an individual or reflect the activities of a specific individual.

Sensitive personal data: i ncluding  personal  bi ometri c  data,  communi cati on  records  and  content,  health  i nformati on,  transacti on  i nformati on,  and  preci se  locati on  i nformati on .  When we provide you with specific products or services, when it comes to the collection of sensitive personal data, we will obtain your consent through a prominent and clear notice before collecting sensitive personal data about you.

Smart devices: refers to non-standard computing devices produced or manufactured by hardware manufacturers that have a human-machine interface and can transmit information through wireless networks, i ncluding smart  home  appli ances,  smart  wearable  devi ces,  smart  ai r  purifi cati on  devi ces,  etc .

App: means a mobile application developed by us that enables end users to remotely control smart devices and connect to our IoT platform.

Description of Business Functions and Personal  Information Collection Scope

To protect your right to know and your right to choose, we have categorized our services into Core  Business  Functions  and Additional  Business  Functions. We adhere to the principles of "Purpose Specification, Choice and Consent, and Data Minimization" and will clearly explain each function and the corresponding personal information we collect.

What  personal  data  we  collect

In order to use the services we provide, we will ask you to provide personal information necessary for such services. The use of such personal information must be your consent and voluntary, and if you do not agree, we will not take automatic policy processing and may not be able to provide you with our services.

In order to provide you with our services, we will ask you to provide personal information necessary for such services. If you do not provide personal information, we may not be able to provide you with our products or services.

Informati on  you  voluntarily  provide  to  us

Account or Profile Information: When you register for an  account,  we  may  collect  your  name  and  contact  details,  specifi cally  your  email  address,  phone  number,  username,  and  logi n  credenti als . Duri ng  your   i nteracti ons  with  our  products , we may further collect information associated with your account,  i ncluding  ni ckname,  profile  pi cture,   country   code,   language  preference,   or   ti me zone  i nformati on .

If you choose to authorize login through a third-party account, we will obtain the account   i nformati on  you have shared (i ncluding  profile  pi cture,  ni ckname,  regi on,  email  address,  and  gender) from the third party and bind it to your Ruilitan Smart Account for streamlined login. We will use your personal information in accordance with our agreements with third parties, the personal information sharing terms outlined in their published privacy policies, and in compliance with applicable regulations.

• Feedback: When you use the feedback and suggestion function in our products, we will collect your email  address,  mobile  phone  number,   feedback   content   to deal with your problems and equipment failures in a timely manner.

1) Additional services based on location information: When you enable the  locati on   functi on    of  your  mobile   devi ce    and use location-based services through system authorization, we will collect and use your location  1) Location-Based Additional Services: When you enable the location function on your mobile device through system authorization and use our location-based services, we will collect and use your location information to allow you to use the DOUDOU PET app for smart device network pairing. Additionally, when you use specific products or services (weather services and sunrise/sunset information), based on your consent, we will collect real-time precise or non-precise geolocation information about you. You can disable the location service in your mobile device's settings at any time to stop us from collecting your location information.

2) Camera-Based Additional Services: When you grant  camera  permi ssi on , you can use this feature to take photos for uploading  profile  pi ctures,   submit   i mages  for  feedback,  and   scan  QR  codes    to add devices you have purchased. Please note that even after you have granted camera access, we will only use the camera to obtain information when you actively choose to scan codes or take photos.You can turn off the camera permission in your mobile device's system settings to stop us from accessing your camera information.

3)  Photo/Video Library Access & Upload Services:If you grant access to your  photo/video   library, you may upload  photos/images/videos    to: scan QR codes for adding purchased devices, update your profile avatar, or provide visual evidence when reporting device issues. Please note that when using these features, we do not identify or process the content of your media for other purposes. However, if you submit a device issue report, we will utilize the  uploaded  photos/images   solely  to  di agnose  and  resolve  the   specifi c  problem  you  have  described.You can revoke the photo and video permission in your mobile device's system settings to stop us from accessing your photo album.

4) Storage Permission-Based Additional Services: We request access to your  devi ce' s   storage    to ensure the stable operation of the application. After you grant us permission to  read/write   to  your  devi ce storage, we may access or  save   i mages,   files,   and   crash   log   i nformati on    from/to your device storage. This is solely for the purposes of enabling content publishing features and locally  recording crash  logs    for troubleshooting and stability improvements.You can turn off the storage permission in your mobile device's system settings to stop us from reading and writing your system files.

5) SMS-Based Additional Services: During account registration, password recovery, or password change processes, we will  send  an  SMS  verifi cati on  code    to your provided mobile number to verify your identity. You may grant our application permission to read this SMS content for the sole purpose of automatically populating the verification code. Please note that we do not collect or store any content from your SMS

messages.

6) Microphone-Based Additional Services: You can enable mi crophone    access to use  two-way   audi o   communi cati on   with   compatible   smart   devi ces      (visual pet feeders and interactive pet robots) and for  short  audi o  recording   features . Please note that even if you have granted microphone permission, we will only access audio information when you actively enter the device control interface and use the intercom function.You can turn off the microphone permission in your mobile device's system settings to stop us from accessing your microphone.

7) Household Information: You can create households through the Me - Household Management - Create Household function by providing details such as household   name,   locati on,   and   room   i nformati on . This facilitates home-level and room-level management of your automated devices. Please note that you may modify your household and room information at any time. You can disable the location service in your mobile device's system to stop our collection of your location information.You can disable location services in your mobile device's system settings to stop us from collecting your location information.

8) Bluetooth Permission-Based Additional Services：The Android version of DOUDOU PET App requires  Bluetooth  permi ssi ons    to control and support Bluetooth smart devices. These permissions are used to search for, pair with, and connect to  nearby   Bluetooth   devi ces , and to enable data communication for remote control, status synchronization, and firmware updates. Similarly, the iOS version requires access to your

Bluetooth to connect and control Bluetooth smart devices. This permission is used solely for establishing connections and communicating with authorized devices and will not be used for any other purposes.You can turn off the Bluetooth switch and Bluetooth permission in your mobile device's system settings to stop us from using your Bluetooth hardware.

9) Device Status Permission-Based Additional Services：The primary purpose of requesting this permission is to  obtai n  the  devi ce' s  unique   identifi er . This is used to identify the user's device, enable log information analysis, and improve the stability and robustness of the App.You can turn off the permission to read call status and mobile network information in your mobile device's system settings to stop us from collecting device status.

10) Overlay Window Permission-Based Additional Services：The Android version requests this permission to allow DOUDOU PET App to display  mi ni   overlay  wi ndows    above other applications. This feature is designed to provide a convenient multitasking experience, allowing you to quickly check the status of smart devices or perform quick controls while using other applications. You can disable this permission at any time in your system settings.You can disable this permission at any time in the system settings for the floating window permission.

11) Local Network Permission-Based Additional Services：When you need to use the iOS version of DOUDOU PET App to control smart devices on the same Wi-Fi network as your home, we require local network permission. This permission is used to discover smart devices within the  local  area  network  and   establi sh   stable , low-latency connections with them for local control, thereby improving device response speed. We will not use this permission to probe other devices on the network or for any unrelated data collection.You can turn off the local network permission in your mobile device's system settings to stop us from accessing local network information.

12 ） Additional Services Based on Wi Fi    Informati on : When you enable relevant permissions through system authorization and use services based on WiFi networks, we collect and use  Wi Fi    network i nformati on    to allow the DOUDOU PET App to discover and manage smart devices, enabling functions such as device provisioning and control. This includes obtaining currently  connected  Wi Fi   i nformati on     (SSID, BSSID,  and   signal  strength) and scanning to retrieve a  li st   of   surrounding  Wi Fi   networks . You can turn off the WIFI switch in your mobile device's system to stop us from accessing surrounding  WIFI- related  i nformati on .

You understand and agree that the aforementioned additional services require you to enable access permissions for  locati on   (geographi c   locati on) ,   camera,  mi crophone,  photo   library,   devi ce  status, Bluetooth,  overlay  wi ndows,   local  network  on  your  devi ce,    and    Wi Fi   i nformati on . This enables the collection and use of information related to these permissions. You can check the status of each permission in your device settings and decide at any time whether to enable or disable them.

Please note that if you open any permission, you authorize us to collect and use relevant personal information to provide you with corresponding services, once you close any permission, it means that you cancel the authorization, we will no longer continue to collect and use relevant personal information based on the corresponding permission, and we cannot provide you with the services corresponding to the permission. However, your decision to close permissions will not affect the collection and use of information previously based on your authorization.

Informati on  We  Collect  Automati cally :

obile Device Information:When you interact with compatible smart terminal products, we automatically collect the following data: devi ce   model,   unique   devi ce   identifi er   (a   stri ng  programmed   i nto  the devi ce  by  the  manufacturer  to  serve  as   its  unique   identity), Android  ID,  logi n  IP  address,  fi rmware  versi on  number,  log  data,  wi reless  connecti on  details,  mobile  network   i nformati on, operati ng  system  type,  and  operati ng  system  versi on .

Smart Terminal Status Information:When you interact with connected terminal devices through our services, we may collect specific operational data, including: devi ce   acti vati on   ti me,   devi ce   name,  devi ce ID,  connecti on  durati on,  upgrade  records,  onli ne/offli ne  status,  and  operati onal  parameters  for  specifi c  devi ce  categori es .  For  lighti ng  devi ces,  thi s  i ncludes  on/off  state,  brightness level,  color  value,  and  color  temperature ;  for  smart  pet  feeders,  thi s  i ncludes  power  status  and  feeding  event  records .

Location Information: When you enable the location functionality through system authorization and use locati on-based   servi ces , we collect and use your locati on   i nformati on  to facilitate the network configuration process between the DOUDOU PET App and your smart devices. Additionally, when you use specific products or services (including weather services and sunrise/sunset information), we may collect   real- ti me  preci se  or  non-preci se  geo locati on  data  related to your device.

Data Interaction Information: During your interactions with our services, we automatically collect relevant  data  access  records, sent/recei ved  messages, and other  i nteracti on-related  data .

Log Information: When engaging with our services, corresponding i nteracti on   logs  are retained to assist us in analyzing potential operational issues.

Auto-start and Associated Startup Description

•  To ensure the application can properly receive push  notifi cati on s  and broadcast  messages  while closed or running in the background, the auto- start  capability   i s  requi red. The system may periodically send broadcasts to wake up the application for auto- start  or  associ ated  startup. This behavior is necessary for core functionality and service delivery.

•  When you tap push notifications containing DOUDOU PET app content, the application will launch and display the relevant content only after obtaining your explicit consent. Without your consent, no associated startup will occur.

•  When you open files downloaded through the DOUDOU PET application, third-party applications may be activated to handle these files.

Informati on  about  smart  devi ces

• Smart device basic information: When you use smart devices connected to our products or services, we may collect basic information about smart devices,  i ncluding  devi ce  name,  devi ce   ID,  onli ne   status, acti vati on  ti me,  fi rmware  versi on  and  upgrade  i nformati on .

• Smart Device Report Information: Depending on the different smart devices you choose to connect with our products or services, we may collect information from your smart device reports. For example, a   smart scale  or  fitness  tracker  might  report  your  height,  weight,  body  fat  content   (BFM) ,  body  mass  i ndex   (BMI) ,  and  skeletal  muscle  content   (SMM) .

Purposes and legal basis for processing personal data

We  process  your  i nformati on  for  the  followi ng  purposes :

To provide you with services: We process your  account  and  profile   i nformati on,  devi ce   i nformati on,  usage   i nformati on,  locati on   i nformati on,  and  smart  devi ce-related   i nformati on  to  provide the  products  and  servi ces  you  request. The legal basis for such processing is the performance of our contract with you in accordance with our Terms of Use.

Improve services: We collect your account   i nformati on   and   data  for the purpose of managing users' devices and presenting a better experience to users; We collect devi ce   i nformati on   i n   order  to display this information to users, and analyze the status of equipment to provide better services to users. The legal basis for such processing is our performance of the relevant service agreement with you in accordance with the contract.

Non-marketing communications: We may process your personal data to send you information about the Services when there are material changes to the terms, conditions, and policies of the Services. Because this information is important, you may not be able to opt out of receiving such messages. The legal basis for such processing is our contractual performance of the relevant terms of use with you. Product service communication: Product support changes and related service information of our services may be sent to you related service information through the processing of your personal data. Each message with such

information contains instructions that allow you to opt out of receiving such messages. The legal basis for such processing is our contractual performance of the relevant terms of use with you Compliance: We process  your personal data where we deem it necessary  or appropriate:

● Comply with applicable laws and regulations

● Compliance with legal process

● Enforce our terms and conditions

● Respond to requests from public and government agencies if necessary

● Protect our operations, business, systems

● Protect our rights, privacy, safety, or property and/or that of other users, including you

● Seek remedies to reduce the losses we may sustain

We may also use the personal information we collect about you in other ways, where we provide specific notice and obtain your consent as required by applicable law. If there is any change in the purpose for which your personal information is processed, we will notify you of such change by email and/or a prominent notice on our website and inform you of your choices regarding your personal information.

The specific legal bases for our different processing purposes are detailed in the table below.

Additional Explanations:

1. Distinction between "Contract" and "Consent": Processing for core business functions (account, device control) is a prerequisite for service provision and cannot be refused. Extended functions (e.g., personalized weather, marketing) are based entirely on your voluntary choice.

2. Balancing "Legitimate Interests": We only invoke this legal basis for purposes such as ensuring security or improving our products, and after assessment confirms minimal impact on your rights.

3. Changes to Legal Basis: If the purpose or legal basis for processing changes in the future, we will notify you by updating this policy and re-obtaining consent (where applicable).

Who  we  share  your  personal  data  with share

RuilitanTechnology may share personal data with companies that cooperate with  RuilitanTechnology, and the sharing of personal data will be shared in a way that you know.

We may share your personal data in several ways:

● Share your personal data with third-party service providers that cooperate with  RuilitanTechnology,i ncluding   voi ce   servi ce   providers,   customer   support   servi ces,   email   sending   servi ces,   data analysi s,  website  hosting,  payment  processi ng  and other si milar  thi rd-party  servi ce  providers . thus enabling them to provide services to us.

● Sharing your personal data with other customers and other business partners who use our services.

● To share your personal information with subsidiaries or affiliates of the Company for regular business activities.

● In addition to the above third parties, we will only disclose your personal information to other third parties with your consent.

We will share necessary data with third parties through application program i nterfaces   (APIs) ,   software   tool   development   kits   (SDK) ,   different   versi ons   of   thi rd-party   SDK s  will be different, generally including thi rd-party  account   logi n   class,  map  navigati on   class,  manufacturer  push   class,   etc ., we will conduct strict security testing and agree on data protection measures for third parties.