FUNLAB TECHNOLOGY LIMITED, takes your privacy seriously and is committed to providing you with information to help you understand our privacy practices. This Privacy Policy (the "Policy") discloses the privacy practices of our Joya (collectively, “we,” “us,” or “our”), as well as related products and services we may offer to you (collectively referred to as the "Services"). This Policy covers how Personal Information that we receive or collect about you is used or shared. By using our Site and Services, you agree to the terms of this Policy as they may be amended from time to time.

Personal data is information that can be used to directly or indirectly identify you. This includes anonymous data that is linked to information that can enable us to identify you. Personal data does not include data that has been irreversibly anonymized or aggregated.

We abide by the principles of legality, legitimacy, and transparency. We use personal data to help verify accounts and user activity, and to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity. Such processing is based on our legitimate interest in helping ensure the safety of our products and services.

ⅰ. Data you provide: We collect the personal data you provide when you use our products, such as:

ⅱ. Data about use of our services and products: When you visit our websites or use the app, we collect:

ⅲ. Device Permissions (Crucial for Social Features): To provide full social functionality, we may request access to:

We obtain your Personal Information in the following ways:

From You: We obtain most of the Personal Information that we collect about you from you when you interact with our Services, including when you contact and communicate with us via forms contained on our Services and when you provide answers and information in response to surveys, quizzes, sweepstakes and contests.

From Our Partners: We may obtain Personal Information about you from our service providers or other partners, including marketing partners in the course of assisting us to providing you with our Services. We also may utilize third party companies that utilize technology to independently document users’ consent provided on our Site signifying agreement to be contacted by us or our partners. For more information about the data use and collection policies of these companies, please see the following

https://policies.google.com/privacy, (b) https://www.facebook.com/privacy/policy/, (c) https://terms2.line.me/ec_global_pp?lang=en, (d) https://www.apple.com/legal/privacy/;

In addition, advertising agencies, advertising networks, and other companies who place ads on our Site may use tracking technologies to collect information about you.

Providing and Improving Services:We use Personal Information to furnish our Services, including to develop features like the "Square" feed and 1v1 chat and to improve the quality, safety and security of our Services.

Communicating with You: We use Personal Information to respond to communications, contact you about your transactions, promote our Services, provide other relevant information, and request information or feedback..

Personalize Your Experience:We utilize Personal Information regarding your use of our Services, including to personalize and enhance your experiences.

AI Enhancement: To power our translation and inspiration features.

Internal Research: We use Personal Information to conduct internal research to develop, improve or repair our products, services or technology.

Security or Fraud Prevention: We use Personal Information to: (1) prevent, detect, protect against, or respond to security incidents, and (2) preserve the integrity or security of systems.

Legal Compliance: We may use Personal Information to comply with applicable law or to comply with a lawful governmental request.

We strive to retain your Personal Information only for as long as reasonably necessary to fulfill the purpose(s) for which we obtained the information or as otherwise required by law.

Legal Affiliates: We may share information with our subsidiaries and legal affiliates.

Service Providers: We engage third parties to act as our service providers and perform certain tasks on our behalf in connection with our Site and Services. The tasks performed by service providers include: (1) processing and storing Personal Information, (2) assisting with marketing communications and advertising, (3) customer service assistance; (4) providing technology services, including assisting with our Site. We may share all of types of Personal Information that we collect that are described above with service providers. We encourage service providers to take reasonable steps to ensure that they keep Personal Information confidential and only utilize Personal Information as permitted.

Partners: We may partner with third parties to provide services and other offerings. For example, we may share your contact information with business partners related to content on our Site to provide you with information about products, services and special offers that may interest you. When you use our Site, we may share Personal Information with partners who match the information you share with online and offline marketing databases and those of its advertising partners for the purpose of enabling interest-based content and advertising by third parties unaffiliated with our Site. We also may share Personal Information with sponsors of surveys, contests or sweepstakes so that they may contact you in conjunction with the survey, contest or sweepstakes. We take reasonable steps to ensure that the entities to which we share your Personal Information keep the information confidential and only use it as permitted.

Other Legal Purposes: We also may share Personal Information: (1) with your consent, (2) to respond to subpoenas, court orders, or other legal process or otherwise as required or allowed by law or the competent governmental or judicial authorities; (3) to cooperate with law enforcement, government or regulatory entities, and safety or investigation authorities; (4) to protect our rights or property, or to protect the personal safety of users or the public; or (5) to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by us is among the assets transferred.

Like many commercial websites, we analyze how visitors use our Services with "cookie" technology. A cookie is a small text file that is placed on your computer when you access our Services and allows us to recognize you each time you visit our Services. We may use cookies to (1) enhance or personalize your Services usage and experience; (2) monitor our Services usage; and (3) improve our services, including providing you with interest-based ads. If you choose, you can set your browser to reject cookies or you can manually delete individual cookies or all of the cookies on your computer by following your browser's help file directions. However, if your browser is set to reject cookies or you manually delete cookies, you may have some trouble accessing and using some of the pages and features on our Services. Please note that browser-management tools for cookies are outside of our control, and we cannot guarantee their effectiveness.

We may also use web beacons (sometimes called single-pixel gifs, clear gifs or action tags) on our Site, in our emails, and in our advertisements on other websites. Web beacons are tiny graphic images that are used to collect information about your visit to the website, such as the pages you view and the features you use, as well as information about whether you open and/or act upon one of our emails or advertisements. We may also collect the URL of the website you visited immediately before coming to our website. Web beacons help us analyze the behavior of visitors to our Site and measure the effectiveness of the Site and our advertising.

We may work with service providers and other third parties that help us track, collect and analyze the information collected in cookies and web beacons. We may combine the information we collect with other information we have collected from you or information from other sources.

We use commercial reasonably physical, technical and administrative security measures to reduce the risk of loss, misuse, unauthorized access, and disclosure of data. Please note, however, that no security measures are perfectly secure, and we are unable to guarantee the security of your Personal Information.

To provide you with high-quality social, communication, and AI features, we integrate the following third-party SDKs. These partners may collect and process certain data as described below:

Our product integrates advanced AI functionalities (including Smart Inspiration, AI Translation, and Content Generation) powered by industry-leading models.

Depending on where you live, you may have certain statutory rights in relation to your Personal Data. For example, you may have the right to:

Verification. In order to protect your Personal Data from unauthorized access, change, or deletion, we may require you to verify your credentials before you can submit a request to know, correct, or delete Personal Data. If you do not have an account with us, or if we suspect fraudulent or malicious activity, we may ask you to provide additional Personal Data for verification. If we cannot verify your identity, we will not be able to honor your request.

We provide additional information about the privacy, collection, and use of personal information of prospective and current customers located in certain jurisdictions.

The European Union’s General Data Protection Regulation (“GDPR”) provides EU data subjects with the additional rights described below.

We generally act as a data controller of EU data subject’s Personal Information submitted to us. We rely on that Personal Information for the legitimate commercial purposes of providing our Site and Services to you. Where we need to collect Personal Information by law or under the terms of a contract we have with you, and you fail to provide that Personal Information when requested, we may not be able to provide you with our Services. We consider and balance any potential impact on you and your rights before we process your Personal Information. We do not use your Personal Information for activities where our interests are overridden by the impact on you unless we have your consent or are otherwise required or permitted to by law. In certain circumstances, we act as a data processor of third-party partners, and, in those circumstances, we process your Personal Information for the purposes set out in this Policy consistent with the data processing terms of those partners.

We also may rely on your consent to collect, use or disclose your Personal Information. If we rely on your consent to process your Personal Information, you have the right to withdraw your consent at any time by contacting us at the information below. We will only use your Personal Information for the purposes for which we collected it unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your Personal Information for an unrelated purpose, we will notify you and explain the legal basis that allows us to do so.

If you are located in the EU and have any complaints regarding our privacy practices as a data controller, you have the right to make a complaint to your local Supervisory Authority. However, we would appreciate the opportunity to address your concerns before you contact your Supervisory Authority, so please contact us first at the information below.

If you would like to request a copy of your Personal Information being held by us, request that Personal Information be deleted, or to update and/or correct your Personal Information, or request that we provide a copy to another data controller, please contact us at the information contained in the “Contact Us” section below. We will need enough information to ascertain your identity as well as the nature of your request. We will aim to respond to your request within one (1) calendar month of receipt of the request. Where we were unable to do so within the calendar month, we will notify you of the soonest practicable time within which we can respond to your request (and within three (3) months from the date of your request). Please note that there are certain exemptions and restrictions of these rights under the European data privacy lWe that enable personal information to be retained, processed or withheld from access and we will inform you of these exemptions and restrictions, if applicable.

We offer EU Model Clauses, also known as Standard Contractual Clauses, to meet the adequacy and security requirements for our customers that operate in the European Union and the United Kingdom, and make transfers of Personal Information from those jurisdictions to other countries that lack adequacy determinations. Please contact us as detailed in the “Contact Us” section below for more information.

The California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), provides California residents with the following rights:

(1)The right to know what Personal Information (including Sensitive Personal Information) we have collected, used, disclosed, sold, or shared about you.

(2)The right to request deletion of your Personal Information, subject to exceptions.

(3)The right to opt out of the sale or sharing of your Personal Information (including for personalized or targeted advertising). We have sold or shared Personal Information when engaging in personalized or targeted advertising. In connection with such activities, we may share or sell the following categories: Device information and identifiers, usage information, location information, and inference data.

(4)The right to opt out of the use of your Sensitive Personal Information for non-service-related purposes.

(5)The right to limit the use and disclosure of Sensitive Personal Information.

(6)The right to correct inaccurate Personal Information.

To submit a request to know, delete, correct, or opt-out, please contact us as detailed in the “Contact Us” section below. We will verify your identity... We honor Global Privacy Control (GPC) signals as valid opt-out requests and will provide confirmation that your opt-out has been processed. Your exercise of these rights will have no adverse effect on the price or quality of our Services.

Residents of certain other U.S. states (e.g., Indiana, Kentucky, Rhode Island, Virginia, Colorado, and others with comprehensive privacy laws effective as of 2026) may have similar rights to access, delete, correct, or opt out of the sale, sharing, or targeted advertising of their personal information. Please contact us using the details below to exercise these rights where applicable.

We share personal information with third parties only to the extent described under “Our Sharing of Personal Information” above and in accordance with the Act on Protection of Personal Information(APPI)as amended.

When we share your personal information with third parties outside of Japan,, we require the recipients to adopt personal information security measures to protect your personal information.

You may have the right to request access to or delete your personal information in accordance with applicable law. If you wish to submit a data subject access request, you may contact us as detailed in the “Contact Us” section below.

We share personal information with third parties only to the extent described under “Our Sharing of Personal Information” above and in accordance with the Act on Protection of Personal Information.

When we share your personal information with third parties outside of South Korea, we require the recipients to adopt personal information security measures to protect your personal information.

We will delete your personal information (including after closure of your We account) as described in this Privacy Policy. When deleting personal information, We will take standard commercially reasonable measures to make the personal information practically irrecoverable or irreproducible. The specific manner of deletion will depend on the information being deleted, how the information was collected and stored, and your interactions with us. Electronic documents or files containing personal information will be deleted using a technical method that makes recovery or retrieval of such information practically impossible or renders the data no longer personally identifiable. Non-electronic documents or files containing personal information will be shredded, incinerated, or both.

We keep your personal information to enable your continued use of We Offerings, for as long as it is required in order to fulfill the relevant purposes described in this Privacy Policy, as may be required by law (including for tax and accounting purposes as may be required by the Framework Act on National Taxes of Republic of Korea or other laws), or as otherwise communicated to you. How long we retain specific personal information varies depending on the purpose for its use, and we will delete your personal information in accordance with applicable law.

If you have any privacy questions or requests, you may contact us as detailed in the “Contact Us” section below.

Our Services are not directed to, or intended for, children under 18. We do not knowingly collect Personal Data from children under 18. If you have reason to believe that a child under18 has provided Personal Data to Joya through the Services, please email us at support@joyachat.com. We will investigate any notification and, if appropriate, delete the Personal Data from our systems.

We implement technical and administrative measures to protect your data. As a global platform, your data may be transferred to and processed in countries outside your residence (e.g., Singapore, USA). We ensure these transfers comply with standard contractual clauses (GDPR-compliant).

We may update this Policy periodically as we offer new products and services, and as our business, technology, and applicable We change. Any changes will become effective upon posting of the revised Policy. Your continued use of Joya after the effective date means you accept the revised Policy.

If you have any questions regarding this Privacy Policy or how we process your information. We’ll be happy to help, please contact us at:

Email:support@joyachat.com

Company: FUNLAB TECHNOLOGY LIMITED