LAVA+ Privacy Policy  

（Effective: September 5, 2023)

Reading Tips

Please carefully read and fully understand the complete text of the "LAVA+ Privacy Policy" before using/continuing to use the products and/or services of LAVA+. Unless otherwise stated, if you do not agree to the "LAVA+ Privacy Policy" or its updates (we will promptly notify you of such updates), it may affect your normal use or continued normal use of some of our products and/or services.

Introduction

Thank you for trusting and using the products and services of LAVA+!

LAVA+ (i.e., Guangzhou LAVA MUSIC Information Technology Co., Ltd. (registered at Room 01, 13th Floor, 28 Guangming Road, Yuexiu District, Guangzhou, hereinafter referred to as "we") is well aware of the importance of personal information to you and will do its best to protect the security and reliability of your personal information. Before using our products or services, please read and fully understand the following terms, especially the bolded terms in this privacy policy (which may have a significant relationship with your rights and interests and involve the handling of personal sensitive information). If you do not agree to this privacy policy, you may not be able to use our products and services normally.

All our products and services, including but not limited to various products, PC, App (including but not limited to iOS and Android versions), iPad, and Mini Program(小程序）, as well as all future software products, are subject to this privacy policy. However, if a product or service has a separate privacy clause or privacy agreement, the separate privacy clause or privacy agreement shall apply first. For content not mentioned in the separate privacy policy/privacy agreement, this privacy policy shall apply. Please note that this privacy policy only applies to the personal information we collect from you and does not apply to any third-party collection of your personal information or any third-party services or information usage rules. We also do not assume any responsibility for any third-party collection, storage, and use of your personal information within the legally permissible scope. Therefore, when using third-party services, please pay attention and carefully read the relevant user agreements and privacy policies displayed by the third party, and properly protect and cautiously provide your personal information.

By agreeing to this privacy policy, you acknowledge and agree that in relevant scenarios, we will process your related personal information to achieve the functionality. However, this does not mean that as long as you start using our products and/or services, we will process all the personal information involved in this privacy policy. Only when you use specific features will we process your related personal information based on the "minimum necessary" principle to achieve the purpose of providing you with services.

In addition to this privacy policy, in specific scenarios, we will inform you separately of the corresponding information processing purposes, methods, scope, and other rules through timely notification methods (including but not limited to updating this privacy policy, re-signing documents, page prompts, pop-ups, site messages, emails, website announcements, or other methods that make it easy for you to be aware).

Notice to Users in the European Economic Area ("EEA"):

If you reside in the EEA, you have certain rights under European data protection laws and in particular the General Data Protection Regulation. These rights include rights of access; the right to rectification; the right to erasure; the right to restrict processing; the right to data portability; and the right to object to processing. Please skip the first sections below as they do not apply to you and you can view the Privacy Policy for EEA Users (9 Appendix Four) below.

This privacy policy mainly explains the following information to you:

1.How we collect and use your personal information

2.How we use cookies and similar technologies

3.How we share, transfer, and publicly disclose your personal information

4.Do Not Sell My Personal Information

5.How you can understand and control your personal information

6.How we store and protect your personal information

7.How we protect the personal information of minors

8.How this privacy policy is updated

9.How to contact us

10.Additional Information for California Consumers

11.Other matters.

1 How We Collect and Use Your Personal Information

To help you quickly understand the main aspects of our collection and use of your personal information, we have provided an explanation in a list format. You can click to view Appendix One: "LAVA+ Personal Information Collection List."

The types of personal information we collect and use may vary depending on the content of the products/services, and are subject to the actual products/services provided. In order to provide a comprehensive experience, we will continually improve our products and services and may therefore need to collect and use new personal information or change the purposes or methods of using personal information. If a feature or scenario requiring the collection and use of your personal information is not explained in this privacy policy, or if we go beyond the purposes and directly or reasonably related scope stated when collecting your personal information, we will inform you again and obtain your consent in accordance with relevant legal and regulatory requirements.

Please understand that the acquisition or collection of certain personal information requires you to grant us specific system permissions. You can view Appendix Two: "LAVA+ Application Permissions Description" to understand the information details we collect based on the system permissions you grant. To avoid cumbersome wording, the application for permission will not be reiterated when discussing the relevant personal information collection rules below. Location, camera, album (storage), microphone, calendar, and other system permissions will not be enabled by default. Only when you trigger relevant business functions will we apply for relevant permissions and obtain corresponding information (if applicable). Rest assured that the permissions we apply for access are limited to those necessary for specific functions, and you can revoke the authorization of system permissions at any time. You can manage the corresponding permissions through the device settings page. At the same time, you can also enable/cancel the corresponding permissions through the "My Page - Left Sidebar - Settings - System Permissions." When you enable this permission, it is deemed that you authorize us to access, obtain, collect, and use your corresponding personal information; after you cancel this authorization, we will no longer collect and use such information, nor can we provide you with the corresponding services; however, unless you delete your personal information in accordance with the provisions of the law, your cancellation action will not affect our processing and storage of personal information based on your previous authorization. If you refuse or revoke the authorization of system permissions, you will not be able to use the corresponding functions, but it will not affect your normal use of other functions of the product and/or service.

Generally, we will collect and use your personal information in the following scenarios:

1.1 Account Registration, Login, and Binding

1.1.1 When you use a mobile phone number to log in to our product, we will collect your mobile phone number to create a LAVA+ account bound to that mobile phone number. The mobile phone number is necessary information required by national laws and regulations on real-name registration (Internet user account real identity information authentication). If you refuse to provide a mobile phone number for registration or login, we may not be able to provide you with information publishing functions (including publishing text, audio-visual, comments, etc.), but it will not affect your use of browsing and other functions.

1.1.2 Based on our cooperation with communication operators, when you use the one-click login function, with your consent, we will use the operator-provided function to identify the mobile phone number on your device and create a LAVA+ account bound to that mobile phone number, thus allowing you to avoid password or dynamic verification code verification and provide you with fast registration and login services.

1.1.3 You understand and agree that due to the binding relationship between the phone number, third-party account used for login, and the "LAVA+" account, in order to provide you with consistent services across different products, maintain the safety of the platform and other users, and to provide you with a smoother and more targeted user experience, we will jointly collect your personal information while logging in and using products associated with the "LAVA+" account system (including HILAVA, LAVA+, LAVA+ and other related products). We may display or share the following information under the same "LAVA+" account (depending on the specific features and functions of different products, the content displayed may vary):

(1) Your profile photo, username, musical instrument equipment status, and basic information you provide according to your need (including profile, gender, birthday, region, etc., as detailed in Article 1.3 of this Privacy Policy);

(2) Your real name, ID number (including ID card, Mainland Travel Permit for Hong Kong and Macau Residents, passport, Mainland Travel Permit for Taiwan Residents), and phone number. ID numbers are considered sensitive personal information and will only be shared or used for identity verification in specific scenarios (based on legal requirements or requests from authorized administrative or judicial authorities to provide your real-name authentication information when using products under the “LAVA+" account system);

(3) Your content interaction records (including published content, browsing records, comment records, like records, collection records, download records, playback records), your follow relationships (including follow lists, fan lists, blacklists), your recharge records and balance, and other information related to your login and use of the account, in order to provide you with a smoother and more targeted user experience.

1.2 Real-name Authentication

1.2.1 To comply with relevant legal and regulatory requirements, ensure the authenticity of user identities, achieve anti-fraud and other risk control, protect your or other users' safety, or maintain the security and stability of features/services and facilitate your participation in exclusive promotions or use of exclusive features and services, we need to collect your real identity information, including real name, ID  documents and their numbers (ID card, Mainland Travel Permit for Hong Kong and Macau Residents, passport or Mainland Travel Permitfor Taiwan Residents), and phone number to complete real-name authentication. This information is only for the purpose of completing real-name authentication or other uses specified by laws and regulations and will not be used for other purposes without your explicit authorization. If you refuse to provide this information, you may not be able to use functions or related services that require real-name authentication, but it will not affect your use of other functions and services. After your real-name or identity authentication is successful, if there is no legitimate reason, the real-name information cannot be modified; if modification is necessary, please contact us according to the contact information in Article 8 of this Privacy Policy.

1.3 Account Profile Maintenance

1.3.1 We will create a "LAVA+" account for you when you log in. You can voluntarily complete your personal information by filling in your username, profile photo, gender, region, birthday, self-introduction, and playing level. This information will help us better understand you and provide you with better services. If you do not fill in or subsequently delete/change this information, it will affect the content we provide based on your user profile but will not affect your normal use of the "LAVA+" account and services.

1.3.2 You may apply for special identity or professional certification (such as college student, teacher, etc., specific criteria are subject to our product function page), as well as musician, LAVA+ talent, and video talent certification. In addition to completing real-name authentication as prompted on the application page, we also need to collect the information and proof documents required for your certification, including your name, school name, year of enrollment, mobile phone number, teaching subject, work unit, position, identity documents and ID numbers (ID card, Hong Kong and Macao residents' travel permit, passport or Taiwan residents' mainland travel permit), student ID card, professional documents or other documents and related information that can prove your identity, profession, or skills, as well as a brief introduction, profile picture, QQ, email address, address, gender, region, genre/style, education level, school attended, and graduation time.

1.3.3 Your personal information will be displayed publicly on your LAVA+ account's personal page, including your LAVA+ ID, playing duration, recent activity, consecutive playing, practice data, gender, location, age, and personalized signature. Your playing duration is generated based on the time you play on your registered device daily, and your playing level is determined according to the platform's rules based on your selection. Your medals, popularity, followers list, subscribers list, your publicly published works, comments, and activities will be displayed on your account's personal page. You can choose to not allow other users to view your gender information, age information, region information, and playing duration by navigating to [My] page - [Left Sidebar]-[Settings]-[Privacy Settings].

1.3.4 If you have activated a membership service, you may view your membership status, validity period, and vouchers (including gift cards, coupons, etc.); to verify your membership identity, we will collect information on your membership status, membership duration, and records of VIP activation and renewal.

1.3.5 When we publish notices of penalties for violations, we will disclose information such as the violator's account username.

1.4  Browsing/Searching/Playing Service Content

1.4.1 Browsing/Playing Service Content: When using our audio and video content browsing and playback features, in order to provide a continuous and consistent user experience, we need to collect your device information and personal internet usage records. The aforementioned personal internet usage records include: browsing/clicking/playing history, favorites/following, likes/shares/posts records, visit date/time/duration, and interaction frequency.

1.4.2 Service Content Search: When using the search function, we will automatically collect some information about you, including the following personal information: search content, browsing history and time, search time, and interaction frequency with them. To provide efficient search services, some of the aforementioned information will be temporarily stored on your local device and your search history will be displayed to you.

1.5 Image, Video Information Creation, Posting, and Interaction Features

1.5.1 When using our device to play, create, upload, post, livestream, interact, like, comment, and share services/features within some of our products or services, in addition to registering a login account, you may voluntarily provide relevant image/video content and interaction information (songs played, posts, likes, comments, shares, and interaction information). We will automatically collect the  aforementioned information and display your username, profile photo, and posted content. Please be aware that the information you post may contain personal information of others; be sure to obtain their legal authorization to avoid illegally disclosing their personal information. If you do not agree with our collection of the  aforementioned information, you will not be able to use our information posting feature, but it will not affect your use of our other products and services.

1.5.2 When using Bluetooth devices or smart hardware products with Bluetooth capabilities to connect or interact with our products or services, enabling driving mode, or using Bluetooth song transfer features, we need to access your device's Bluetooth permissions to enable these features.

1.5.3 Additionally, our interaction with you may occur through push notifications, internal messages, phone calls, text messages, or emails.   You acknowledge and agree that during the course of using our products or services, we may send various notifications to one or more contact methods you provide (email, phone number, mailing address) for user notification, identity verification, security verification, and user surveys. You can select the message notification reception mechanism within our products or services, and you can control whether you receive message notifications and the specific types of notifications received by going to [My] page -[Left Sidebar] - [Settings] -  [Interaction Settings] - [Allow Notification Permissions]; in addition, you can unsubscribe through the methods provided on your phone or email.

1.6 Placing Orders and Delivery

1.6.1 When purchasing goods or services through our products or services, we need to collect information about your transaction based on the type of goods or services, recipient information (recipient's name, shipping address, and contact number), transaction amount, payment account, order time, order merchant, order number, order status, payment method, payment status, and the name and identification number of the viewer (some performances require real-name authentication, identification refers to ID card, Hong Kong and Macau residents' travel permit to the mainland, passport or Taiwan residents' travel permit to the mainland), with specific information collected based on the corresponding scenario settings. We collect this information to help you complete transactions smoothly, ensure transaction safety, inquire about order information, and provide customer service.

1.6.2 After you successfully place an order, if the goods are provided by a third-party seller or require third-party delivery, we need to share your relevant shipping information (including recipient's name, shipping address, and contact number) with the seller and third-party delivery company to ensure smooth, safe, and accurate delivery and shipping. We promise to do our utmost to protect your personal information; we will strictly require sellers and third-party delivery companies to keep your personal information confidential, only use it for delivery purposes, and not disclose it or use it for any other purposes.

1.6.3 If you use membership benefits to activate services, we will collect your recharge, transaction, and balance information. Recharge, transaction, and balance information are considered sensitive personal information, and we will use encryption technology to collect, transmit, and store them.

1.7 Participation in Activities

When you participate in activities, if personal information collection is involved, we will explain it in the activity rules. Specifically, if mailing is involved for prizes or activity-related physical items, we need to collect your shipping information (shipping address, contact name, and contact phone number) and share it with third-party logistics partners to facilitate the delivery of prizes or other physical items; when you receive red envelopes, bonuses, or other rewards, the law requires us to withhold and remit personal income tax on your behalf, so we need to collect your name and identification information (ID card, Hong Kong and Macau residents' travel permit to the mainland, passport, or Taiwan residents' travel permit to the mainland) in accordance with the law. We may use the information obtained through activities for research and development, improving products and services, integrated statistics, data analysis or processing, or other purposes with your consent.

1.8 Customer Service and Other User Response Features

When you interact with our customer service or use other user response features (online submission of feedback, communication with online/artificial customer service, submitting after-sales requests for our products or services, exercising your personal information control rights, and other customer complaints and needs), to ensure your account and system security, we need you to provide account information first and match it with your previous personal information to verify your user identity. When using customer service or other user response features, we will also collect the following personal information based on scenario requirements: contact information (phone number/email/QQ number used when contacting us or other contact methods voluntarily provided by you), and communication information in the form of text, images, audio, video, and call records (sensitive personal information). We collect this information to investigate facts and help you resolve issues; refusing to provide it may result in you being unable to use our customer service and other user response mechanisms.

1.9 Product Security Features

1.9.1 When you use functions or services such as registration and login, content publishing, online song playback or collection, membership purchase, and real-name authentication in our products, we need to collect your personal information to ensure the security of your account and system when using our products or services, and to help improve the security and reliability of our product services to prevent any behavior harmful to users, our platform, or society. Specific personal information includes your mobile phone number, account login location, device information, in-app usage information, Bluetooth information, sensor information (rotation vector sensor, magnetic field sensor, acceleration sensor, linear acceleration sensor information), login IP address, product version number, language mode, browsing history, internet usage habits, service failure information, network logs, personal internet records, transaction information, and real-name  authentication information. Device information includes hardware model, device MAC address/network device identifier (WiFi MAC address, Bluetooth MAC address), IMEI, IMSI, MEID, AndroidID, hardware serial number, IDFA, OAID, DeviceID, ICCID, and openUDID. Log information refers to the operation logs automatically collected  and generated when you use our products or services (including your browsing history, likes, shares, comments, search terms and search history, interaction records, collections, follows, download records, playback records, playback duration, visit dates and times, operation records of smart speakers and other external smart devices), and your service logs (including but not limited to information about installed applications or running processes, overall application operation, usage and frequency, application crashes, overall installation and usage, performance data, application sources, etc.).

1.9.2 We will use the above information to comprehensively judge your account, account and transaction risks, conduct identity verification,  customer service, detect and prevent security events, fraud monitoring, archiving, and backup purposes, and take necessary records, audits, analysis, and disposal measures in accordance with the law. Once we detect the existence or suspected existence of account security risks, we will use the relevant information for security verification and risk elimination to ensure the security of the products and services we provide to you, in order to protect your rights from infringement. At the same time, when account or system security issues occur, we will collect this information to optimize our products and services.

1.9.3 To ensure the security of your device operating environment and prevent malicious programs and anti-cheating, we will collect the necessary software list information (including software package name and software name) of the installed or running software on your device, or the process information of running applications after you agree to this privacy policy and need to call or activate third-party applications. Please be aware that standalone software list information cannot identify your specific identity.

1.10 Necessary for Service Content Recommendation (Personalized Content Recommendation), Maintenance/Improvement of Our Products or Services

1.10.1  In some of our products or services, we recommend videos, sheet music, music themes, music, and other service content to you based on recent hotspots, platform popular recommendations, and other actors. These recommendations are made according to our platform operation strategy. At the same time, in order to provide you with real-time, high-quality, and more interesting service content, and to give you a better product or service experience or for other purposes you agree to, we also personalize content recommendations based on your relevant personal information and user profiles. During this process, we collect your birthday, gender, region, occupation, device identifier, as well as your search records, playback history, browsing frequency of service content, and interaction behavior information with them,  likes/shares/comments/interaction information, collection records, playback duration, order information, IP address, visit dates and times, your online behavior preferences, interests, device information, and necessary software list in one of our products or services. We use these data for comprehensive statistics and analysis, either alone or in combination with certain information from other services, to create recommendation algorithm models, user behavior analysis, and user profiles, which help us better understand how you use our products or services, maintain and improve our products or services, or provide you with personalized services/targeted pushes, including providing you with relevant personalized information (our personalized information may be generated through automated decision-making mechanisms, including information systems and algorithms). With your consent, we may also share information with our partners so they can send you information about their products and services. Automated decision-making refers to activities that analyze and evaluate individual behavior habits and interests through computer programs and make decisions accordingly.

1.10.2 We have a personalized recommendation self-management feature in our products. You can manage this by going to the [My] page - [Left Sidebar] - [Settings] - [Privacy Settings] - [Receive Personalized Content Recommendations].

1.10.3   You authorize us to have the right to share indirect user profiles formed by our use of your relevant information, which cannot identify your personal identity information, de-identified device information, or anonymized analysis and statistical information with our partners who have entrusted us to carry out personalized information promotion (see Appendix Three: "Third-Party Information Sharing List"). This helps them make personalized recommendations or decision suggestions, improve the effective reach rate of personalized recommendations, and measure the effectiveness of related services without identifying your personal identity.

1.11 Your Personal Information Indirectly Collected from External Third Parties

1.11.1 You acknowledge and agree that we cannot obtain personal information you provide to external third parties (excluding those related to LAVA+), or personal information collected by external third parties. We will not use unconventional methods (such as malicious interference with the third party's App data) to obtain your personal information without permission. If it is necessary for business development to indirectly collect your personal information from third parties, and we directly or jointly provide products or services to you, we (or the third party) will inform you of the source, type, purpose, method, and business functions of your personal information, as well as the scope of authorization and consent (if the usage and scope exceed the original authorization scope at the third party, we will obtain your authorization and consent again) before collecting. This scenario  includes when you directly log in to our products or services through a third-party account, and we obtain the account information you authorized to share with us (profile photo, username), when some of our products/services are provided by business partners or jointly provided with business partners, we indirectly collect some of your information from some business partners for the smooth progress of necessary/reasonable business, and content related to you (comments, statuses, pictures, photos, videos) published by others when using our products or services.

1.11.2 In addition, before indirectly collecting your personal information, we will explicitly require in written form (such as agreements, commitment letters) that the third party informs you of the content of the information shared and obtains your explicit consent before we indirectly collect your personal information. In cases involving your sensitive personal information, we require the third party to obtain your reconfirmation before providing it to us and to commit to the legality and compliance of the personal information source at the agreement level. If the third party violates any rules, we will explicitly require them to bear the corresponding legal responsibility. We will protect the personal information indirectly collected using protection measures no lowerthan those applied to directly collected user personal information.

1.11.3 Self-launch and Associated Launch Explanation

(1) To ensure that this application can receive client push notifications normally when closed or running in the background, this application must use (self-launch) capability, which involves certain frequency broadcasting by the system to awaken this application for self-launch or associated launch behavior, as necessary for functionality and services.

(2) When you open content-based push notifications, with your explicit consent, you will be redirected to the related content. Without your consent, there will be no self-launch or associated launch.

(3) When you open a file downloaded within this App, it will associate-launch a third-party App.The following is information about the main third-party service providers we access:

Name of third-party SDK: JiGuang Push SDK

Third-Party Entity: Shenzhen Hexun Huagu Information Technology Co., Ltd.

SDK Purpose: Provides information push services for APP users.

Types of Personal Information Collected:

* Device Parameters and System Information (Device Type, Device Model, System Version, and Related Hardware Information): Used to identify the user's device type, model, system version, etc., ensuring accurate message delivery.

* Device Identifiers (IMEI, IDFA, Android ID, GID, MAC, OAID, VAID, AAID, IMSI, MEID, UAID, Hardware Serial Number Information, ICCID, SIM Information): Used to identify unique users, ensuring precise message delivery and accurate statistics of push notifications.

* Network Information (IP Address, WiFi Information, Base Station Information, DNS Address, DHCP Address, SSID, BSSID) and Location Information (Latitude and Longitude): Used to optimize the SDK's network connection requests to Jiguang servers, ensuring service stability and continuity, and enabling regional push functionality.

* Application List Information (Application Crash Information, Notification Switch Status, APP Application List and Active Status, APP Application Page Information, APP Functional Event-Related Information): When a device has multiple APP push channels simultaneously active, we use channel merging technology to randomly merge them into one channel to save users' electricity and data traffic.

* Data Processing Method: De-identification, encrypted transmission, and other secure methods.

* Official Website Link: https://www.jiguang.cn/push

* Privacy Policy Link: https://www.jiguang.cn/license/privacy

Name of third-party SDK: Umeng Push SDK

Third-Party Entity: Umeng Tongxin (Beijing) Technology Co., Ltd.

SDK Purpose: Access the user's mobile application list to facilitate seamless social sharing.

Types of Personal Information Collected:

* Device Parameters and System Information (Device Type, Device Model, System Version, and Related Hardware Information): Used to identify the user's device type, model, system version, etc., ensuring accurate message delivery.

* Device Identifiers (IMEI, IDFA, Android ID, GID, MAC, OAID, VAID, AAID, IMSI, MEID, UAID, Hardware Serial Number Information, ICCID, SIM Information): Used to identify unique users, ensuring precise message delivery and accurate statistics of push notifications.

* Application List Information (Application Crash Information, Notification Switch Status, APP Application List and Active Status, APP Application Page Information, APP Functional Event-Related Information): When a device has multiple APP push channels simultaneously active, we use channel merging technology to randomly merge them into one channel to save users' electricity and data traffic.

* Official Website Link: https://www.umeng.com/

* Privacy Policy Link: https://www.umeng.com/page/policy

1.12 Others

1.12.1 When you use our products, due to regional restrictions on song copyright authorization, we will analyze your approximate geographic location through your IP address. If the analysis result shows that you are located outside Mainland China, we need to request your location permission and obtain your precise geographic location information through your GPS information, WLAN and other network location information (including nearby WiFi), Bluetooth, and base station ID (cellID) after your authorization to determine whether you are in the authorized copyright area. Precise geographic location information is sensitive personal information. If you do not provide it, you may not be able to continue using the song playback function, but it will not affect your use of our other functions and services.

1.12.2 When you use the link recognition function, receive shared information, participate in activities, etc., LAVA+ client needs to access your clipboard locally to read the text, links, and command codes contained therein. The LAVA+ client will only upload this content to our server after locally recognizing that the clipboard content belongs to song recognition links, shared information, event interactions, and other instructions, in order to provide you with relevant feedback. Apart from this, the LAVA+ client will not upload any other information from your clipboard to our server. We will collect this information only when you confirm the aforementioned information in the search box and click search to implement the search function. Some device systems may prompt that the application (App) is reading the clipboard, but the system prompt cannot distinguish between local processing and uploading, and due to statistical differences, there is a possibility of false alarms. If you find similar prompts and have questions, please contact us so that we can locate the issue.

1.12.3 In accordance with the regulatory requirements of relevant laws and regulations on Internet account management, in order to maintain network security and a good network content ecology, we will display your IP attribution location (domestic IP addresses displayed to the city/autonomous region/municipality, overseas IP addresses displayed to the country/region, specific information based on network operator data) within your personal homepage and under the content you post.

1.12.4 Other users' comments, replies, photos, audio, and videos may contain your information, and such information may be collected or used by us due to the publication or upload by other users. If you believe that your personal information has been infringed, please contact us for processing through the complaint method and contact information in Article 8 below.

1.12.5 We may collect specific information about your use of our products or services for some other reasonable purposes, including: survey responses, operational activities, information obtained when you interact with LAVA+/our partners, for research and development and improvement, comprehensive statistics, data analysis or processing, other purposes agreed or authorized by you, compliance with legal requirements, or other reasonable purposes.

1.13 Exceptions

According to the provisions of the Personal Information Protection Law, in the following circumstances, we may collect and use your personal information without obtaining your prior consent:

1.13.1 Necessary for the conclusion and performance of a contract to which you are a party;

1.13.2 Necessary for the fulfillment of statutory duties or legal obligations;

1.13.3 Necessary for responding to sudden public health incidents or for protecting the life, health, and property safety of natural persons in emergency situations;

1.13.4 Engaging in news reporting or public opinion supervision for public interests, and processing personal information within a reasonable scope;

1.13.5 Processing personal information that has been publicly disclosed by the individual themselves or that has been legally disclosed by others, in accordance with the provisions of the Personal Information Protection Law and within a reasonable scope;

1.13.6 Other circumstances stipulated by laws and administrative regulations.

1.14 Please understand that the features and services we provide to you are constantly being updated and developed. If a particular feature or service is not mentioned in the preceding descriptions and involves the collection of your personal information, we will separately inform you of the content, scope, and purpose of the information collection through means such as updating this privacy policy, initiating or browsing interface prompts, pop-ups, website announcements, in-app messages, interactive processes, or website notices. During this process, if you have any doubts or concerns about related matters, you can contact us through the methods provided in Article 8 of this Privacy Policy, and we will respond to your inquiries as soon as possible.

2   How We Use Cookies and Similar Technologies

Cookies and similar technologies are commonly used on the internet. When you use our app and related services, we may use these technologies to collect your information. We use cookies and similar technologies mainly to achieve the following functions or services:

2.1 Ensure the security and efficient operation of our products and services: We may set authentication and security cookies or anonymous identifiers to confirm whether you are securely logged into the service, or if you have encountered theft, fraud, or other illegal activities. These technologies also help us improve service efficiency and enhance login and response speeds.

2.2 Help you enjoy a more convenient browsing experience: Using these technologies can save you from having to repeatedly enter your personal information or search queries (e.g., filling out forms).

2.3 Recommend, display, and push content that you may be interested in: We may use cookies and similar technologies to understand your preferences and usage habits, conduct data analysis to improve our products and services, recommend information or features that users are interested in, and optimize your content selection. You can refuse or manage the use of cookies and similar technologies through your browser settings; however, please note that if you disable cookies, you may not enjoy the best service experience, and some services may not function properly.

3 How We Share, Transfer, and Publicly Disclose Your Personal Information

3.1 Sharing

We share your personal information based on the principles of "legitimate, minimal necessity, and clear purpose". When entrusting a third party to process your personal information, we will agree with the trustee on the purpose, duration, processing method, types of personal information, protective measures, and rights and obligations of both parties, and supervise the trustee's personal information processing activities. If we jointly decide on the purpose and method of processing your personal information with a third-party personal information processor, we will agree with the partner on our respective rights and obligations. This agreement does not affect your right to exercise your rights with any personal information processor. If our actions infringe upon your personal information rights and cause damage, we will assume legal responsibility. We will conduct a personal information protection impact assessment in advance for personal information sharing activities and adopt effective technical protective measures for output formats, circulation, and usage. At the cooperation agreement level, we strictly require partners to assume information protection obligations and responsibilities and sign data security protection agreements with business partners before cooperation. We have developed a "Third-Party Information Sharing List" to clearly and concisely introduce our embedded SDK list and information sharing with third parties through interfaces (APIs) and other methods in partnership with business partners.

The situations in which we share personal information with third parties are:

3.1.1 Sharing under legally required circumstances: We may share your personal information with relevant administrative and judicial authorities according to legal and regulatory requirements, litigation, and dispute resolution needs or as required by administrative and judicial authorities in accordance with the law.

3.1.2 Sharing with separate consent: After obtaining your consent and/or your parents' or guardians' consent, we will share your personal information with other parties.

3.1.3 Sharing between associated apps: To facilitate our provision of consistent services based on a unified account system, improve personalized recommendations, implement security risk control, and provide customer service, our app products or services will use a unified account system. Associated apps using the unified account system will synchronize some personal information when you register, log in, and use our products and/or services, which may include some or all of the following information:

(1) Your device information;

(2) Your basic profile information, including username, profile photo,  birthday, gender, and location;

(3) Your personal internet usage records, including browsing / searching / playing / posting / interaction records;

(4) Transaction records, order records, etc.;

(5) Rights/assets information;

(6) User profile.

The aforementioned information will be displayed interactively within the associated apps, and you can use the related rights/assets within the associated apps (if applicable).

3.1.4 Sharing with business partners: You understand and agree that for the necessary and reasonable development of our business, to fulfill ourobligations under relevant user agreements or this Privacy Policy, exercise our rights or comply with legal requirements, we may need to share some of your information with certain business partners. However, we promise to share only necessary personal information. If we share your sensitive personal information or change the purpose of using and processing personal information, we will you’re your authorization and consent again. Specifically, certain modules or functions in our products and services may be provided by business partners' application programming interfaces (APIs), software development kits (SDKs), or our products and services may be linked to business partners through their APIs and SDKs. Regardless of the type of business partner and cooperation, we will conduct strict security access assessments and monitor the SDKs and APIs of business partners to ensure that they process your personal information in accordance with this Privacy Policy and appropriate confidentiality and security measures. Click here to view the "Third-Party Information Sharing List" and learn about our information sharing with third parties through embedded SDKs and API interfaces in our products.

3.1.5 Sharing with partners who jointly provide a service with us: When we jointly launch membership services or other paid services with a third party, to resolve refunds, disputes, etc., between us, the third party, and you, you agree that we can share your relevant order information with the third party. When we jointly conduct marketing activities with partners, we will obtain your authorization separately, and after obtaining your authorization, we will synchronize your relevant information (specifically based on the content of your authorization) with the partner.

3.1.6 Sharing with partners entrusted by us to provide a specific service: When we carry out customer service, user surveys, prize distribution for activities, or other businesses that require the engagement of a third party, we may need to share your necessary personal information with the partner to complete the aforementioned matters. In this case, we will obtain your consent in an appropriate manner before sharing; meanwhile, we will strictly screen the partners and require them to process your personal information in accordance with this Privacy Policy and appropriate confidentiality and security measures.

3.2 Transfer of personal information

We will not transfer your personal information to any company, organization, or individual, except in the following circumstances:

3.2.1 We will transfer your personal information to others with your explicit consent;

3.2.2 If it is necessary to transfer your personal information due to reasons such as merger, division, dissolution, bankruptcy, etc., we will inform you of the name or full name and contact information of the recipient, and require the new company or organization holding your personal information to continue to be bound by this policy, otherwise, we will require the company or organization to seek your consent again.

3.3 Public disclosure

We will not publicly disclose the collected personal information; if it is necessary to disclose publicly, we will inform you of the purpose of this public disclosure, the type of information to be disclosed, and any sensitive information that may be involved, and obtain your separate consent.

3.4 Exceptions to obtaining authorization consent in advance when sharing, transferring, and publicly disclosing personal information

According to the provisions of the Personal Information Protection Law, in the following circumstances, we may share, transfer, and publicly disclose your personal information without obtaining your consent in advance:

3.4.1 It is necessary for the conclusion and performance of a contract in which you are a party;

3.4.2 It is necessary to fulfill statutory responsibilities or legal obligations;

3.4.3 It is necessary to respond to sudden public health incidents or to protect the life, health, and property safety of natural persons in emergency situations;

3.4.4 To carry out news reporting, public opinion supervision, and other actions for the public interest, processing personal information within a reasonable scope;

3.4.5 To process personal information that has been voluntarily disclosed by individuals or has been legally disclosed by others within a reasonable scope, in accordance with the provisions of the Personal Information Protection Law;

3.4.6 Other circumstances prescribed by laws and administrative regulations.

4   Do Not Sell My Personal Information

California law requires that we maintain a separate webpage that allows you to opt out of the sale of your personal information, which can be accessed by clicking the link below:

 Appendix Five: Cookie Notice

5 How to understand and control your personal information

We will make every effort to adopt appropriate technical means to ensure your control over your personal information, including: You can access, correct/modify, delete your personal information, and withdraw your previous consent to your personal information. You can also cancel your LAVA+ account. To facilitate your exercise of these control rights, we provide operation guidance and settings on the relevant function pages of our products for you to operate on your own. If you have doubts or difficulties during the operation, or if you cannot exercise your personal information rights through the above channels and methods, you can contact us through the method provided in Article 8 of this Privacy Policy, and we will handle it for you in accordance with the provisions of laws and regulations. When understanding, updating, correcting, and deleting the above information, we may require you to verify your identity to ensure account security. In general, you can modify the information you submitted at any time, but for security and i dentification purposes, you may not be able to modify certain initial registration information, verification information, and authentication information provided at the time of registration.

5.1 Accessing personal information

5.1.1 After entering LAVA+, you can view your profile photo, username, gender, birthday, region, playing level, self-introduction, university student certification information (if any), etc., in [My] - [profile photo] - upper right corner [Profile Edit]; you can also view your registered mobile number, change your password and replace your mobile number, etc., by [My] - [Left Sidebar] - [Settings] - [LAVA ID].

5.1.2 After entering LAVA+, you can click on the left sidebar in the [My] page to view your drafts, favorites, likes, member information, effect templates, recorded audio, photo albums, device information, and settings, etc.

5.1.3 After entering LAVA+, you can click [Fans/Following] next to your profile photo in the [My] page to enter your fans/following list and view your following and fans information by clicking on the respective following and fans buttons.

5.1.4 After entering LAVA+, you can view your playing data, playing duration, recent activity, continuous playing, and practice statistics, etc., in the past 30 days through the [My] page - [Overview].

5.1.5 After entering LAVA+, you can view your published content, publishing time, interaction records, templates used, etc., through the [My] page - [Creations], share the content on third-party platforms through the share button below the works, and choose to like or favorite the works.

5.2 Deleting personal information

In general, we will only keep your personal information for the period required by laws and regulations or for the shortest necessary period. To facilitate your exercise of your right to delete, we provide you with two methods: online self-deletion and submitting a deletion request to us.

5.2.1 For some of your personal information, we provide operation guidance and settings on the relevant function pages of our products, and you can delete it directly. Once you delete it, we will delete or anonymize such information, unless otherwise provided by laws and regulations. You can independently delete your personal information through the following methods:

(1) After entering LAVA+, you can click [Creations] in the [My] page to set your local music, videos, and produced audio, private music cloud drive, and recently played information to private or delete them.

(2) After entering LAVA+, you can follow or unfollow friends or fans by clicking [Follow/Unfollow] in the [Fans/Following].

5.2.2 In the following situations, you can directly request us to delete your personal information according to the contact information stipulated in Article 8 of this privacy policy, except for data that has been anonymized or as otherwise provided by laws and regulations:

(1) If we violate laws and regulations by collecting and using your personal information;

(2) If we breach the agreement with you by collecting and using your personal information;

(3) If you withdraw your consent after agreeing to our collection and use of your personal information;

(4) If our processing of personal information violates the agreement with you;

(5) If you no longer use our products or services, or you cancel your account;

(6) If we no longer provide products or services to you;

(7) If the purpose of processing your personal information has been achieved, cannot be achieved, or is no longer necessary for achieving the purpose;

(8) If the retention period of your personal information has expired.

(9) Other circumstances as stipulated by laws and regulations.

5.2.3 Regarding our processing of your personal information after you no longer use our products or services and cancel your LAVA+ account, and after we terminate some or all products or services, we will provide you with detailed explanations in other dedicated clauses of this privacy policy.

5.2.4 You understand and agree that when you delete information from our products or services, we may not immediately delete the corresponding information from the backup system, but will delete this information when the backup is updated.

5.2.5  Message Settings

(1) iPhone message settings require you to change notification permissions in the device settings.

(2) Interaction settings: If you do not want to see comments, mentions, likes, follows, favorites, and replies, you can close them by going to LAVA+ [My] - [Left Sidebar] - [Settings] - [Interaction/Push Settings] and clicking on the Invite, New Friends, Likes, Comments, Replies, and Mentions buttons respectively.

(3) Blacklist settings: You can set up a blacklist by entering the LAVA+ app, going to the [My] - [Left Sidebar] - [Settings] - [Privacy Settings] - [Blacklist Management]. If you remove a user from the blacklist, they will be able to chat with you, follow you, or apply to be your friend after removal.

5.3 Correction or supplementation of personal information

5.3.1 When you find that the personal information we process is inaccurate or incomplete, you have the right to request us to correct or supplement it. You can correct or supplement your personal information by following these steps:

(1) After entering LAVA+, you can go to the [My] page and click on [Edit Profile] to correct or modify your profile photo, username, gender, birthday, region, playing level, self-introduction, and other information.

(2)  You can also contact us through the contact information provided in Article 8 below. After verifying your personal information, we will promptly correct or supplement your personal information.

5.4 Withdrawal of consent

You can change or withdraw the scope of your authorization for us to process your personal information through the following methods:

5.4.1 System permission settings: We provide system permission settings in our products. For example, you can manage the system permissions (including camera, photo album, location, contacts, etc.) used by our products in LAVA+ [My] page - [Left Sidebar] - [Settings] - [System Permissions]. After revoking the authorization, we will no longer collect information related to these permissions, but it will not affect he personal information processing we previously carried out based on your authorization. You can read "LAVA+ Application Permission Description" to understand the application and use of system permissions by LAVA+.

5.4.2 Content recommendation management: You can independently select your favorite audio, video, and other content and adjust your content preferences. For example, in LAVA+ [My] page - [Left Sidebar] - [Settings] - [Privacy Settings] - [Receive Personalized Content Recommendations], you can set whether to allow us to recommend audio, video, and other content based on your browsing history and other personal information.

5.4.3 Other privacy settings

(1) The specific functions of other privacy settings are subject to the actual products provided.

5.5 Complaints and reports

5.5.1 If you have problems with app crashes, delays, account issues, activation issues, function issues, product experience, or other product-related issues, you can contact us by entering LAVA+ [My] page - [Left Sidebar] - [Settings] - [Help and Feedback] – click on [My Device] and access the feedback page.

5.5.2 If you believe that your personal information rights may be infringed or discover clues of personal information rights infringement, you can contact us by entering LAVA+ [My] page - [Left Sidebar] - [Settings] - [Help and Feedback] - [Online Customer Service] and be redirected to WeChat. You can also contact us through the contact information provided in Article 8 below.

5.6 Account Cancellation

If you decide not to use our products and services anymore, you can cancel your account by going to the [My] page - [Left Sidebar] - [Settings] - [LAVA ID] - click on [Phone Number] - at the bottom, click on [Cancel Account]. Before canceling your account, to protect account security and ensure that the account cancellation action is carried out by you, we will verify your persona identity, commonly used devices, and other information. We will also ask you to carefully read the precautions for [Applying for Account Cancellation]. You need to click on [I have read the above precautions in detail] and unbind the hardware device before you can cancel the account. We would like to emphasize that account cancellation is an irreversible action. Once you cancel your account, we will delete or anonymize information related to your account (unless otherwise provided by laws and regulations or required by regulatory authorities).

5.7 Restriction on Automated Decision-making by Information Systems

In certain business functions, we may only make decisions based on non-human automatic decision-making mechanisms, such as information systems and algorithms. If these decisions significantly affect your legitimate rights and interests, you can contact us through the contact information provided in Article 8 of this Privacy Policy to request an explanation and refuse our decision-making based solely on automated methods.

5.8 Protection of personal information of deceased users

In the unfortunate event of a user's death, their close relatives can exercise the rights to access, copy, correct, and delete the deceased user's personal information as stipulated in this Privacy Policy for their own legitimate and rightful interests, unless the deceased user made other arrangements before their death. In individual cases, we may need to verify the identity of close relatives before cooperating with related requests, in which case we will inform them in advance and obtain their consent.

5.9 If we terminate our services or product operations, we will notify you at least 30 days in advance through announcements or other reasonable and effective methods, and delete or anonymize your information after the termination of services or operations (unless otherwise provided by laws and regulations or required by regulatory authorities).

5.10 Please understand and acknowledge that, according to laws, regulations, and other provisions, in the following cases, we may not respond to your requests for inquiries, corrections/modifications, deletions, withdrawal of consent, account cancellation, or obtaining personal information copies:

5.10.1 Related to our fulfillment of legal and regulatory obligations;

5.10.2 Directly related to national security and defense security;

5.10.3 Directly related to public safety, public health, and major public interests;

5.10.4 Directly related to criminal investigation, prosecution, trial, and execution of judgments;

5.10.5 We have sufficient evidence to show that you have malicious intent or are abusing your rights;

5.10.6 To protect the life, property, and other significant legal rights and interests of you or other individuals when it is difficult to obtain your consent;

5.10.7 Responding to your request would cause serious damage to the legal rights and interests of you or other individuals or organizations;

5.10.8 Involving trade secrets;

5.10.9 Other circumstances stipulated by laws and regulations.

6 How We Store and Protect Your Personal Information

6.1 Storage of Personal Information

6.1.1 Storage Location

In compliance with applicable laws and regulations, we store user personal information collected and generated within the operation in the People's Republic of China within the territory of China. Currently, we do not have scenarios involving the provision of your personal information to foreign countries.

If it becomes necessary for us to provide personal information to a foreign country due to business needs, we will comply with legal requirements (such as undergoing a security assessment organized by the national cyber administration department or signing a contract with the foreign recipient in accordance with the standard contracts established by the national cyber administration department, outlining the rights and obligations of both parties), and inform you of the name or identity, contact information, processing purpose, processing method, type of personal information, and the means and procedures for you to exercise your personal information rights with the foreign recipient, and obtain your separate consent. We will take necessary measures to ensure that the foreign recipient's processing of personal information meets the personal information protection standards required by Chinese law.

6.1.2 Storage Duration

In general, we will store your personal information for the minimumtime necessary to achieve the purpose of processing your personal information. For example, when you use our account registration and login function, we need to collect your phone number and keep it for the duration you use this function to provide the service normally and ensure the security of your account and system.

After you voluntarily delete personal information, cancel your account or exceed the necessary storage period, we will delete or anonymize your personal information, unless otherwise stipulated by laws and regulations (for example, the E-commerce Law stipulates that product and service information and transaction information should be retained for no less than three years from the date of transaction completion).

We mainly determine the necessary storage period of personal information based on the following criteria:

(1) To maintain transaction and business records in response to          possible inquiries or complaints;

(2) To ensure the safety and quality of the services we provide;

(3) Whether you agree to a longer retention period.

In the event that our products or services cease operation, we will notify you using appropriate methods (such as push notifications, in-app messages, announcements, etc.) and delete or anonymize your personal information within a reasonable period, except as otherwise provided by law or regulation.

6.2 Information Security Measures

6.2.1 To ensure the security of your personal information, we employ various security measures within a reasonable level of security to protect your information from unauthorized access, disclosure, use, modification, damage, or loss. For example, we use encryption technologies (such as SSL) and anonymization techniques to protect your personal information. In addition, we constantly strengthen the security capabilities of the software installed on your devices. For example, we perform encryption on your device locally to strengthen secure transmission; we monitor the applications installed and processes running on your device to prevent viruses, trojans, and other malicious programs.

6.2.2 We establish dedicated management systems, approval processes, and organizations to ensure information security. For example, we strictly limit the personnel who can access the information, require them to comply with confidentiality obligations, and conduct reviews.

6.2.3 We encourage our staff to learn about information security, raise awareness of personal information protection, and regularly or irregularly train our staff in information security.

6.2.4 In the unfortunate event of a security incident, such as a personal information breach, we will, in accordance with legal requirements, activate our emergency response plan to prevent the incident from escalating and promptly inform you of the basic details of the security incident, possible impacts, measures we have taken or will take, suggestions for you to independently safeguard and mitigate risks, and remedial actions for you. We will promptly notify you of the incident-related information via email, letter, phone call, push notification, or other means. If it is difficult to notify users individually, we will adopt reasonable and effective means to issue a public announcement. At the same time, we will also proactively report the handling of personal information security incidents to the regulatory authorities as required.

6.2.5 The internet environment is not 100% secure. We shall not be held responsible for any damages resulting from information leakage caused by the following circumstances not due to our fault:

(1) Any personal information leakage, loss, theft, or tampering caused by force majeure events affecting the normal operation of the internet, such as hacker attacks, computer virus intrusion or outbreak, or temporary closures due to government regulation.

(2) Personal information leakage and any resulting legal disputes and consequences caused by linking to other websites or accepting services from third parties while using our services.

(3) If you voluntarily disclose, upload, publish, or provide your personal information to third parties while using our services (e.g., leaving comments), other users may collect your personal information.

(4) Content published by other users containing your or you minor's (child) portrait, voice, name, age, or other material information.

If you disagree with our displaying the aforementioned content in our products and services, please contact us through the contact information provided in Article 8.

7 How we protect minors' personal information

7.1 If you are under 18 years of age, you should obtain consent from your parents or guardians before registering or using our products or services, and use our services under the guidance of your parents or guardians.

7.2 If you are a child under 14 years of age, please inform your parents or guardians to read this privacy policy and the LAVA+ Children's Privacy Policy together with you, and obtain their consent and guidance before registering, logging in, using our products or services, and submitting personal information.

8 How this privacy policy is updated

8.1 As our service scope expands, we will update the terms of this privacy policy in a timely manner. The updated content constitutes part of this privacy policy. If the updated privacy policy results in a substantial change to your rights, we will notify you in advance through prominent prompts or push notifications, red dot reminders, or other means. If you continue to use our services, you agree to be bound by the updated privacy policy. To avoid not being promptly informed of updates, please frequently review this privacy policy. You can view the updated Privacy Policy in the [My] page - [Left Sidebar] - [Settings] - [About Us] - [Privacy Policy].

8.2 The updated LAVA+ Privacy Policy will take effect on the date of update and supersede the previous LAVA+ Privacy Policy.

9 How to contact us

If you have questions, comments, or suggestions about this privacy policy, or if you want to file a complaint or report related to user personal information security, you can contact us via written letter (address: Legal Department, phone: 020-83328691, zip code: 519000) or email (email: legal@lavamusic.com). We will respond within 15 days after receiving your letter or email.

10  Additional Information for California Consumers

The California Consumer Privacy Act ("CCPA") provides California residents, referred to in the law as "consumers," with rights to receive certain disclosures regarding the collection, use, and sharing of personal information, as well as rights to access and control personal information. Certain information that we collect may be exempt from the CCPA because it is considered public information (because it is made available by a government entity) or covered by another federal privacy law, such as the Gramm-Leach-Bliley Act, the Health Insurance Portability and Accountability Act, or the Fair Credit Reporting Act.

To the extent that we collect personal information about you that is subject to the CCPA, that information, our practices, and your rights are described below.

Right to information regarding the categories of personal information collected, sold, and disclosed: You have the right to obtain information regarding the categories of personal information we collect, sell, or disclose. That information is provided in this Privacy Policy.

11 Other

This privacy policy is an important part of the Lava+ User Service Agreement and related agreements. The definitions of terms in this privacy policy refer to the Lava+ User Service Agreement and apply to Lava+ related services. This policy is written in both Chinese and English. In case of any conflict between the Chinese and English versions, the Chinese version shall prevail.

Appendix One：LAVA+ Personal Information Collection List

Appendix Two: "LAVA+" App Permission Usage Instructions

Android side

1 Device storage/album permission

Permission name: STORAGE

Usage scenario/purpose: Upload/update account avatar, image/text/video creation and publishing, downloading

Ask permission: Yes

Can be turned off: Yes

2 Camera permission

Permission name: CAMERA

Usage scenario/purpose: Scan, feedback issues, video shooting, creation

Ask permission: Yes

Can be turned off: Yes

3 Microphone permission

Permission name: MICROPHONE

Usage scenario/purpose: Sound recording

Ask permission: Yes

Can be turned off: Yes

4 Location permission

Permission name: LOCATION

Usage scenario/purpose: Search audio files based on location, use location features when posting dynamic content

Ask permission: Yes

Can be turned off: Yes

5 Notification bar permission

Permission name: BIND_NOTIFICATION_LISTENER_SERVICE

Usage scenario/purpose: Allow notification permission, interactive push notifications within the app

Ask permission: Yes

Can be turned off: Yes

Users can turn off the above permissions through the settings function of their device, or through the privacy settings function within our product client. The specific path is [Me] - [Left sidebar] - [Settings] - [System Permissions/Push Settings/Privacy] Settings.

iOS side

1 Device storage/album permission

Permission name: NSPhotoLibraryAddUsageDescription,

NSPhotoLibraryUsageDescription

Usage scenario/purpose: Upload/update account avatar, image/text/video creation and publishing, downloading

Ask permission: Yes

Can be turned off: Yes

2 Camera permission

Permission name: NSCameraUsageDescription

Usage scenario/purpose: Scan, feedback issues, video shooting, creation

Ask permission: Yes

Can be turned off: Yes

3 Microphone permission

Permission name: NSMicrophoneUsageDescription

Usage scenario/purpose: Sound recording

Ask permission: Yes

Can be turned off: Yes

4 Location permission

Permission name:

NSLocationAlwaysAndWhenInUseUsageDescription, NSLocationAlwaysUsageDescription, NSLocationWhenInUseUsageDescription

Usage scenario/purpose: Search audio files based on location, use location features when posting dynamic content

Ask permission: Yes

Can be turned off: Yes

5 Notification bar permission

Permission name: UNAuthorizationOptionBadge, UNAuthorizationOptionSound,

UNAuthorizationOptionAlert, UNAuthorizationOptionCarPlay

Usage scenario/purpose: Allow notification permission, interactive push notifications within the app

Ask permission: Yes

Can be turned off: Yes

Users can turn off the above permissions through the settings function of their device, or through the privacy settings function within our product client. The specific path is [Me] - [Left sidebar] -[Settings] - [System Permissions/Push Settings/Privacy] Settings.

Appendix Three: Third-Party Information Sharing List

Appendix Four：Privacy Policy for Users in the EEA

1. About this Notice

1.1 This Privacy Policy ("Notice") explains how we (as defined below) collect, share and use any information that, alone or in combination with other information, relates to you ("Personal Data") when you ("you" and "your") use our website lavamusic.com (the "Website") and related mobile apps (the " Apps"). Our Website and Apps make available various services, including music-related tools and content (the " Service").

1.2 This Notice also sets out the rights that you have in relation to the Personal Data that we process about you and how you can exercise them.

1.3 Lava+ treats compliance with its privacy obligations seriously. This is why we have developed this Notice, which describes the standards that Lava+ applies to protect Personal Data.

1.4 For the purposes of this Notice, Room 01, 13th Floor, 28 Guangming Road, Yuexiu District, Guangzhou ("Lava+", " us", "we", or "our") acts as the data controller for the Personal Data that is collected via the Website and the Apps and through the Service. As a data controller, Lava+ is responsible for ensuring that the processing of Personal Data complies with applicable data protection law, and specifically with the General Data Protection Regulation.

1.5 Please take the time to read this Notice carefully. If you have any questions or comments, please contact us via legal@lavamusic.com.

2. What Personal Data does Lava+ collect and why?

2.1 The types of Personal Data that we may collect about you, and the reasons why we process it are set out in "Appendix One: LAVA+ Personal Information Collection List".

2.2 We also collect certain information automatically from your device. Specifically, the information we collect automatically may include information like your IP address, device type, unique device identification numbers, browser-type, broad geographic location and other technical information. We may also collect information about how your device has interacted with our Website or Apps, including the pages accessed and links clicked.

Collecting this information facilitates our online operations and ensures an efficient online experience for you. It enables us to better understand the visitors who come to our Website or Apps, where they come from, and what content on our Website or Apps is of interest to them. We use this information for our internal analytics purposes and to improve the quality and relevance of our Website and Apps to our visitors.

Some of this information are collected using cookies and similar tracking technology, as explained further in our Cookie Notice which is available on Cookies Notice.

3. Minors

3.1 The Service we provide through the Website and the Apps is not intended for individuals below the age of 13. If you are under 13 years old, please do not use the Service. You may only use Lava+ if you are over the age at which you can provide consent to data processing under the laws of your country or if verifiable parental consent for your use of Lava+ has been provided to us.

4. Who does Lava+ share your Personal Data with?

4.1 We may disclose your Personal Data to the following categories of recipients:

(a) to our group company for purposes consistent with this Notice. We take precautions to allow access to Personal Data only to those staff members who have a legitimate business need for access and with a contractual prohibition of using the Personal Data for any other purpose.

(b) to our third party vendors, services providers and partners who provide data processing services to us, or who otherwise process Personal Data for purposes that are described in this Notice or notified to you when we collect your Personal Data. The services these vendors provide to us are transaction services (e.g., fulfillment, billing, mailing, storage or delivery services), cloud storage, customer support, maintenance, database management, analytics, advertisements, improvement of the Website's and Apps' features and advertising.

(c) to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;

(d) to our auditors, advisors, legal representatives and similar agents in connection with the advisory services they provide to us for legitimate business purposes and under contractual prohibition of using the Personal Data for any other purpose. We share Personal Data with our external counsel.

(e) to a potential buyer (and its agents and advisers) in connection with any proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your Personal Data only for the purposes disclosed in this Notice;

(f) to any other person if you have provided your prior consent to the disclosure.

5. How we protect your privacy

5.1 We will process Personal Data in accordance with this Notice, as follows:

(a)  Fairness: We will process Personal Data fairly. This means that we are transparent about how we process Personal Data and that we will process it in accordance with applicable law.

(b)  Lawfulness: We will process Personal Data only on lawful grounds.

(c)  Purpose limitation: We will process Personal Data for specified and legitimate purposes, and will not process it in a manner that is incompatible with those purposes, unless permitted by applicable data protection laws.

(d)  Data minimization: We will process Personal Data that is adequate, relevant and limited to what is necessary to achieve the purposes for which the data are processed.

(e)  Data accuracy: We take appropriate measures to ensure that the Personal Data that we hold about you is accurate, complete and, where necessary, kept up to date. However, it is also your responsibility to ensure that your Personal Data is kept as accurate, complete and current as possible by informing us promptly of any changes or errors. You should notify us of any changes to the Personal Data that we hold about you (e.g. new home address or change of name).

(f)  Data security: We use appropriate technical and organisational measures to protect the Personal Data that we collect and process about you. The measures we use are designed to provide a level of security appropriate to the risk of processing your Personal Data. Specific measures we use include to-date secure network architectures that contain firewalls and intrusion detection devices and backups.

6. Data storage, retention and deletion

6.1 We retain Personal Data we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).

6.2 When we have no ongoing legitimate business need to process your Personal Data, we will either delete or anonymise it or, if this is not possible (for example, because your Personal Data has been stored in backup archives), then we will securely store your Personal Data and isolate it from any further processing until deletion is possible.

7. Data storage and transfers of data

7.1 All your personal data is stored on our servers in the European Economic Area (EEA). However, we use third party service providers and business partners who may be operating from outside the EEA and therefore, your data may be transferred to, or accessed from those countries.

7.2 We have put in place appropriate safeguards (which includes the European Commission's Standard Contractual Clauses) to ensure that whenever your Personal Data is transferred outside the EEA to countries that are not deemed adequate by the European Commission, your Personal Data receives an adequate level of protection in accordance with the GDPR.

8. Profiling

8.1 In some instances, we carry out profiling to better understand our users and their potential interests. However, profiling does not result in automated decisions being taken that legally affect you or similarly significantly affect you.

9. Your data protection rights

9.1 You have the following data protection rights:

(a) If you wish to access, correct, update or request deletion of your Personal Data, you can do so at any time by contacting via legal@lavamusic.com. You can also correct your Personal Data by clicking on the My Profile tab.

(b) In addition, in certain circumstances, as stipulated in the applicable data protection legislation, you can object to processing of your Personal Data, ask us to restrict processing of your Personal Data or request portability of your Personal Data. Again, you can exercise these rights by contacting us using the following contact details: legal@lavamusic.com.

(c) If we have collected and process your Personal Data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Data conducted in reliance on lawful processing grounds other than consent.

(d) You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the "unsubscribe" or "opt-out" link in the marketing e-mails we send you. You can also access your profile page and modify your preferences.

(e) If you have a complaint or concern about how we are processing your Personal Data then we will endeavour to address such concern(s). If you feel we have not sufficiently addressed your complaint or concern, you have the right to complain to a data protection authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority. (Contact details for data protection authorities in the European Economic Area, Switzerland and certain non-European countries (including the US and Canada) are available here .)

9.2 We respond to all requests we receive at via legal@lavamusic.com from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

10. Linking to other websites

10.1 The Website or Apps may contain hyperlinks to websites owned and operated by third parties. These websites have their own privacy policies and we urge you to review them. They will govern the use of Personal Data you submit whilst visiting these websites.

We do not accept any responsibility or liability for the privacy practices of such third-party websites and your use of such websites is at your own risk.

11. Updates to this Notice

11.1 We may update this Notice from time to time in response to changing legal, technical or business developments. When we update our Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Notice changes if and where this is required by applicable data protection laws.

11.2 You can see when this Notice was last updated by checking the "last updated" date displayed at the top of this Notice.

12. How to contact us

12.1 If you have questions, comments, or suggestions about this privacy policy, or if you want to file a complaint or report related to user personal information security, you can contact us via written letter (address: Legal Department, phone: 020-83328691, zip code: 519000) or email (email: legal@lavamusic.com). We will respond within 15 days after receiving your letter or email.

Appendix Five: Cookie Notice

1. About this Notice

1. This Cookie Notice ("Notice") explains how we use cookies and other similar technologies to recognise you when you visit our websites lavamusic.com ("Website") or when you use our mobile application ("App"). It explains what these technologies are and why we use them, as well as your rights to control our use of them.

Please take the time to read this Notice carefully. If you have any questions or comments, please contact us via email at legal@lavamusic.com.

2. What are cookies?

1. Cookies are small data files that are placed on your computer or mobile device when you visit a website or use a mobile application. Cookies are widely used by website or mobile application owners in order to make their websites or mobile applications work, or to work more efficiently, as well as to provide reporting information.

2. Cookies have many different features, such as allowing you to navigate between pages efficiently, remembering your preferences, and generally improving your user experience. They can also help ensure that the advertisements you see online are more relevant to you and your interests.

3. Cookies set by the website or app owner (in this case, Lava Music) are called "first party cookies". Cookies set by parties other than the website or app owner are called "third party cookies". Third party cookies enable third party features or functionality to be provided on or through the website or mobile application (e.g. like advertising, interactive content and analytics). The parties that set these third party cookies can recognise your computer or mobile device both when it visits the websites or uses the mobile application in question and also when it visits certain other websites.

3. How long do cookies last?

Cookies can remain on your computer or mobile device for different periods of time. Some cookies are 'session cookies', which means they only exist when your browser is open and are automatically deleted when you close your browser or quit the app. Other cookies are 'persistent cookies', meaning they survive after your browser or app is closed and can be used by websites or apps to recognize your computer when you re-open your browser or app later. The length of the cookies used on our Website or our App is explained in more detail in the link provided below.

2. Why do we use cookies?

1. When you visit our Website or use our App, we may place the following types of cookies:

1. 

5. What about other tracking technologies, like web beacons?

Cookies are not the only way to recognise or track visitors to a website. We may use other, similar technologies from time to time, like web beacons (sometimes called "tracking pixels" or "clear gifs").These are tiny graphics files that contain a unique identifier that enable us to recognise when someone has visited our Website or opened an e-mail that we have sent them. This allows us, for example, to display advertisements on our Website and compile aggregated statistics about our web service or email product usage by determining whether our product emails are opened and/or read and to deliver or communicate with cookies. In many instances, these technologies are reliant on cookies to function properly, and so declining cookies will impair their functioning.

1. What about targeted advertising?

1. Third parties may serve cookies on your computer or mobile device to serve advertising through our Website or App. These companies may use information about your visits to our Website or App and other websites in order to provide relevant advertisements about goods and services that you may be interested in. They may also employ technology that is used to measure the effectiveness of advertisements.

2. This can be accomplished by them using cookies or web beacons to collect information about your visits to this and other sites or mobile applications in order to provide relevant advertisements about goods and services of potential interest to you.

3. The information collected through this process does not enable us or them to identify your name, contact details or other personally identifying details unless you choose to provide these.

4. All cookies for targeted advertising purposes that may be placed on your computer or mobile device when you visit our Website or App are listed within the link included in section 4 above.

5. If you would like more information about this practice or to opt out of having this information used by companies that are part of the Network Advertising Initiative and provide targeted ads, please visit http://www.networkadvertising.org.

7. How can I control cookies?

1. You have the right to decide whether to accept or reject specific cookies. You can exercise your cookie preferences by saving them in our cookie preference banner.

2. You can set or amend your web browser controls to accept or refuse some cookies. If you choose to reject cookies, you may still use our Website or our App though your access to some functionality and areas of our Website or App may be restricted. As the means by which you can refuse cookies through your web browser controls vary from browser-to-browser, you should visit your browser's help menu for more information.

3. In addition, most advertising networks offer you a way to opt out of targeted advertising. If you would like to find out more information, please visit http://www.aboutads.info/choices/ or http://www.youronlinechoices.com.

8. The cookies that were sent in the past

If you have disabled one or more cookies, we can always use information collected by these cookies before the deactivation. However, we cease to collect information via the opted-out cookie.

2. More information about cookies

For more information about cookies, including explanation about how cookies are placed on your device, or how to manage and delete them, visit http://www.allaboutcookies.org.

3. Updates to this Notice

1. We may update this Notice from time to time in response to changing legal, technical or business developments. When we update our Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make.

2. You can see when this Notice was last updated by checking the “last updated” date displayed at the top of this Notice.