Posted Date:[September 16, 2026]
Effective Date: [October 1, 2026 ]

Yaya Android (the “App” / “Software”) is maintained and operated by the Yaya Android Development Team (“our team”, “we”, “us”). Collecting specific personal information belonging to you is a necessary step for us to supply you with access to the Software. We attach great weight to the protection of your privacy, and we make a firm commitment to secure your personal data; for this purpose, we establish the present Privacy Policy.

1.Policy Scope
This Privacy Policy describes our data management approaches and privacy protection mechanisms applicable when you utilize our mobile applications and associated services (the “Services”), alongside detailing every right and adjustable option you possess relating to your personal information. We uphold the principle that you deserve full disclosure of our data collection and usage procedures arising from your operation of the Software and Services. The Software and Services encompass all types of functions and content we provide and deliver to end users. If you fail to consent to the stipulations laid down in this Policy, you shall cease all use of the Software and Services.

2.Age Restrictions on Use
Eligibility for access and use of this App requires that the user be at least 18 years old or satisfy the legal age of majority as defined by the laws and regulations of the user’s jurisdiction of residence (hereinafter the “Minimum Legal Age”).
We do not knowingly collect any information from, or direct marketing to, any children, minors, or persons who have not attained the Minimum Legal Age. Any user who has not yet reached the Minimum Legal Age shall not use this App and shall not submit any personal information through any of the App’s functions or features.
Should we become aware that a person under the Minimum Legal Age has created an account or has transmitted personal data to us, we will take immediate action to terminate that account and permanently delete all personal information linked to it.
If you have any reason to believe that we hold personal data of an individual under the Minimum Legal Age, please contact us via the email address set forth at the end of this Policy.
We regard the safety and privacy of children as a matter of great importance. For that reason, we have drawn up a dedicated detailed [Child Safety Standards Policy]. You may access the full text using the link below: [ https://resource.yayaclubs.com/YaYa_childpolicy/1736498251796.html ].
3.Information We Collect
3.1 Information you provide
1)Account Information
When you create an account (“Account”), you may volunteer to provide certain information (“Account Information”) about yourself to the Software, such as username, gender identity, phone number, date of birth, preference, personal introduction, photos, profile image and other detailed information.

2)Your Content
Your Content includes any content you create, import, upload, send, publish, generate, receive or store through the Software or Services (including any content generated by the artificial intelligence features we may provide, if applicable), including without limitation photos, videos, texts, profile avatars, audio recordings and other related materials (collectively referred to as “Your Content”).
Keep in mind that viewers of your photos, chats, or other shared items can always take screenshots, save them, or copy them elsewhere. So please avoid sharing anything you wouldn’t feel comfortable having others keep or pass on.

3)Sensitive Personal Information
Information you provide may contain sensitive personal information within the meaning of relevant state privacy legislation. Our processing of such data is governed by applicable legal requirements, specifically to deliver the Services and for other authorized purposes set forth under state laws, including the California Consumer Privacy Act (“CCPA”). You have the sole election whether to include sensitive personal information in your user content or other voluntary submissions. As defined under statutes like the CCPA, sensitive personal information explicitly encompasses racial or ethnic origin, national origin, religious beliefs, physical or mental health diagnoses, sexual life or orientation, transgender or nonbinary identity, citizenship or immigration status, and financial information. We do not require that you supply this information. Nevertheless, if you choose to post user content relating to these topics, please be aware that such content may be rendered visible to other users and the public, subject to the parameters of your privacy settings.

4)Geolocation Information
We may collect your approximate location data inferred from your device and network identifiers, including your IP address and device system configuration parameters.
If you’ve chosen to turn on Location Services in our App and in your device settings, we may retrieve location signals sourced from your device’s GPS and other positioning sensors, and obtain either approximate or precise location data transmitted by your device’s geolocation module, determined by the permission tier you enable.
Approximate location data only reveals your broad geographic area, such as your city or adjacent district, without pinpointing your exact whereabouts. We can identify that your device is in a certain area but cannot pinpoint its exact location. By contrast, precise location data delivers far higher geographic accuracy.
When you opt to enable Location Services, we leverage your approximate or precise location to identify your country and regional jurisdiction, enable location-based features including nearby user recommendations, showing locally relevant content and displaying distance.
Where precise location is available, you can turn this setting on or off at any time through your device’s Location Services.

5)Permission to Access Camera, Microphone, Photo Album
To use video or voice communication features in the Software, you may voluntarily grant us access to your microphone and camera. For other features, such as setting avatars or sending images to other users, you may voluntarily permit us to access your camera or photo gallery. We will only access your camera, microphone, or photo album upon your explicit confirmation.

6)Permission to Access Storage
To ensure that you may save photos or cache information normally to your device, you may voluntarily grant us permission to access the storage of your device.

7)Permission to Access Floating Window
Where you operate third-party mobile applications, such permission is required to sustain the availability of our voice and video chat functionalities. This overlay authorization enables our Software to render its graphical interface in an overlaid layer above any third-party applications running on your device, so you may continuously engage in our audio and video conversation features without fully switching back to our Software foreground. You retain the right to enable or disable this permission at any time through your device’s system settings.

8)Support Related Information
If you communicate with us via our support section or via email, we may collect your email address and other information you send to us.

9)Information for Commercial Activities
If you participate in any activities within the Software, for example, expressing interest in a particular commercial offering, or liking, commenting on, or taking part in a commercial campaign, we may, for the purpose of improving the effectiveness of such activities, collect your username, profile avatar, and other information relating to your activities on the Software. Such information may be associated with advertisements, promotional offers, and other sponsored or commercial content displayed by us across the Software.

3.2Information that is processed automatically
1)Device Information.
We may collect information about your device when you use the Software, including your configuration and settings of the Software and Services, version of the Software and Services; ISP (Internet Service Provider), Internet protocol (IP) address, Globally Unique Identifier (GUID), Android ID.

2)Network Status.
The Software may collect your device’s network status information, including WLAN/Wi-Fi connection status and cellular data network status, to stabilize service operation, adapt to network environments, and optimize the delivery of in-app services and advertisement content. We identify your current network type and connection availability to prioritize content transmission over available WLAN/Wi-Fi , which helps reduce your cellular data consumption and deliver a more stable user experience. Such network information is collected solely for service adaptation and operational optimization purposes. We will not conduct user tracking or data profiling through such network status data.

3)Usage Information.
We may collect certain usage information relating to your use of and interaction with the Software, including but not limited to: the duration and frequency of your use of the Services; and your interactions with other users, such as comments, likes and reports.
We may automatically analyze your usage information, either based on your configured preferences or through computer-programmed algorithms, for the purpose of predicting your preferences. Such analysis enables us to provide you with enhanced friend recommendation services, such as recommendation pages, card matching, and “People Nearby” features.

4)Face Data.
A.Collection and Processing of Face Data
When you upload a photo for the purpose of setting your profile avatar, we solely use technology to detect the presence of a human face in the photo. Should no face be detected, the Software will prompt you to re-upload.
When you utilize certain features that involve processing your facial photos, we or third-party AI providers (when the feature is powered by such providers) may analyze the face data contained therein, including but not limited to the position and shape of facial features (e.g., eyes, nose, mouth) and gender cues. Such face data is processed solely for the purpose of rendering special-effect images based on the portrait you have provided.

B.Storage and Sharing of Face Data
Where certain features are enabled through third-party AI providers, we may share the facial photos you upload with such providers, but solely for the purpose of processing your facial photos in accordance with your instructions and generating special-effect images for you.
We will store your facial photos only when you upload them as your profile avatar, and such storage is limited to displaying the avatar you have set. Beyond this, neither we nor third parties will store any other face data. (For further details on biometric information processing, please refer to Section 3.4 below.)

5)Content Moderation and AI Feature Data Processing
To ensure a safe and healthy user experience within the Software, we may collect photos, videos, text and voice that you intend to post on your profile or moments, and share such content with third-party service providers for pre-publication moderation. These providers screen the content for any material suspected to be illegal, obscene, or otherwise objectionable. If the content is determined to fall within such prohibited categories, you will be prevented from posting it on your profile or moments.
When you use AI-powered features offered through the Software (collectively, “AI Features”), such as AI image editing or generation, we may collect the text, images, and other input data you provide, and share such data with third-party AI and content monitoring providers. This sharing is necessary to enable the AI technology to interpret your instructions and generate corresponding outputs, while the monitoring technology simultaneously screens both your inputs and the AI-generated outputs to filter out any content that may violate applicable laws or our content policies.

6)Virtual diamonds and points.
We may collect and process certain information relating to the virtual diamonds and points held in your Account, including but not limited to the accrual, expenditure, conversion, and current balance thereof. Such data is collected to enable the core functionality of our virtual economy and maintain accurate activity logs for your account. We process this information solely for the performance of our Services and for internal analytics, and we do not use it for any purpose other than those expressly set forth in this Policy.

7)Payment Information.
We may collect certain information relating to your purchases and consumption records in connection with virtual diamonds and other paid services offered through the Software, such as items purchased, payment time, order status.
We do not collect, and we are not responsible for, your payment card details or other sensitive financial credentials. All payment transactions are processed and stored by third-party service providers (e.g., Apple for iOS version, or Google for Android). We recommend that you review and familiarize yourself with the privacy policies of such third parties before providing any personal information.

3.3 Information from Other Sources
We may receive the information described in this Privacy Policy from external sources, which may include the following:
1)If you choose to sign up or log in to the Services through a third-party service, we may collect your publicly available profile information and email address from that service.
2)Information concerning you may be provided to us by other users or third parties, for example, where you are identified or mentioned in user content, correspondence, or in any complaint, appeal, request, or feedback directed to us, or where your contact information is transmitted to us by others.

3.4 Processing of Biometric Information
1)Definitions
A.The terms “biometric identifier” and “biometric information” shall be construed in accordance with the Illinois Biometric Information Privacy Act (740 ILCS 14, “BIPA”), the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), the Children’s Online Privacy Protection Act (“COPPA”), the CCPA and all other applicable privacy laws worldwide.
B.“Biometric identifier” means retina scans, iris scans, fingerprints, voiceprints, facial geometry scans and other physiological or behavioral biometric markers. Categories excluded under Section 10 of BIPA shall not be deemed biometric identifiers hereunder.
C.“Biometric information” means any data derived from a biometric identifier that can identify a natural person. Raw photographs, videos and audio files do not constitute biometric information unless they undergo dedicated technical processing for the purpose of unique individual identification or authentication.
(“Biometric identifiers” and “biometric information” hereinafter collectively referred to as “Biometric Information”)
D.“Third-Party Provider” means vendors we cooperate with to deliver content moderation and artificial intelligence technical services.
2)Written Consent
A.By clicking to accept this Privacy Policy, you grant our express written consent and authorization permitting us to collect, store, transmit, process, retain and disclose Biometric Information contained in Your Content, for purposes including but not limited to: (a) Normal display, playback and sharing of Your Content; (b) Collecting and analyzing images, voices and text contained in Your Content via Third-Party Providers to detect and filter illegal or objectionable content; © Processing materials you input into the Software via Third-Party Providers’ AI tools, generating corresponding outputs in accordance with your instructions and screening both input materials and AI-generated content for illegal or objectionable material; (d) Enforcing this Privacy Policy, Terms of Service and CONTENT STANDARDS, and removing violating content as required by applicable laws; (e) Complying with statutory reporting obligations, regulatory inquiries and court orders; (f) Maintaining basic operation of the Software under the data minimization principle.
B.If any third-party individual appears in any video, photograph or audio content you post or intend to post, by uploading such content, you represent and warrant that you have obtained the prior explicit informed consent of such third-party or its guardian (if required by law) permitting us to collect, analyze and process their images, voices and all other information contained in the content as set forth in this Privacy Policy.
C.You acknowledge and agree that Your Content you upload to the Software may contain Biometric Information as defined under applicable laws. By uploading content bearing your facial images, voices or other Biometric Information, you confirm that this Privacy Policy constitutes the written notice required by law, and we hereby disclose the following processing methods to you:
(a)Scope of Processing – No Biometric Identification.
Notwithstanding the consent you grant us to use your Biometric Information, the Software does not currently deploy any native functional modules, algorithms or commercial tools engineered to actively extract, scan, analyze, match or independently exploit facial, fingerprint or other biometric templates for user identity authentication, targeted advertising, automated user behavioral profiling or cross-platform user tracking.
Neither we nor our Third-Party Providers will utilize facial or voice data from your uploaded content to identify you or any third-party individuals featured therein.
Our processing of Your Content as set forth in Items (b) and © of this Section shall not be deemed the “collection” or “capture” or “storage” or “use” of Biometric Information under applicable laws, and we are not a “private entity in possession of biometric identifiers or biometric information” within the meaning of BIPA.
(b)Content Moderation – Image, Voice and Text Analysis.
To deliver a safe and wholesome service experience for all users, we will collect and analyze images, voices and text contained in Your Content that you intend to post on the Software via Third-Party Providers. The sole purpose of such analysis is to detect and filter illegal or objectionable content, and prevent any such content from being published on the Software. This analysis involves no extraction or processing of Biometric Information. Image review is conducted on an overall photograph level only (e.g. detecting prohibited visual materials), without measuring or extracting facial geometry, interpupillary distance or any other biometric features. Audio review is conducted on the whole audio track (e.g. detecting prohibited verbal content), without extracting or processing voiceprints for identification purposes.
©AI Features (If Applicable).
When you utilize AI Features of the Software (e.g. AI image editing), we will collect texts, images and other materials you input, and share such data with Third-Party Providers. Third-Party AI tools will recognize your requests and generate corresponding outputs per your instructions; meanwhile, Third-Party moderation systems will detect both your input materials and AI-generated content to filter illegal or objectionable materials. The sole purpose of processing texts, images and audios via AI Features is to produce edited derivative works, rather than biometric identification or authentication.
3)Retention and Destruction Policy
Although we do not collect, capture or store Biometric Information as defined under applicable laws and thus hold no Biometric Information subject to mandatory retention or destruction requirements, we maintain a publicly available written retention and destruction policy for all files that may incidentally contain Biometric Information as required by applicable laws:
(a)We will not intentionally collect or retain any Biometric Information;
(b)If we incidentally obtain any Biometric Information in the course of processing Your Content, such information shall be permanently deleted upon the earlier of: (i) full fulfillment of the original processing purpose; or (ii) three calendar years after your last interaction with the Software; and
We may extend the retention period solely where a valid warrant or subpoena issued by a court of competent jurisdiction mandates data preservation.
4)Prohibition Against Commercial Exploitation
We shall not sell, lease, trade or derive any commercial gains from any Biometric Information contained in Your Content.
5)Restrictions on Disclosure of Biometric Information
We will not disclose Biometric Information to any third party unless one of the four legal exceptions below applies:
(a)You provide separate specific written consent for such disclosure;
(b)Disclosure is necessary to complete a transaction initiated and authorized by you;
©Disclosure is required by applicable laws and regulations; or
(d)Disclosure is compelled by valid court orders, warrants or subpoenas.
The limited data sharing with Third-Party Providers for content moderation and AI Features under this Section 2), C shall not constitute prohibited disclosure.
6)Data Security Standards
A.We adopt the reasonable standard of care prevailing across the social media industry to encrypt, store and transmit all user content that may incidentally contain Biometric Information, and prevent unauthorized access or data leakage.
B.The technical, administrative and physical security safeguards we deploy for materials bearing Biometric Information shall be equal to or more stringent than those applied to other confidential and sensitive personal information in our systems.
7)Statutory Rights of Users
A.You are entitled to the rights of access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent in respect of your Biometric Information. Details of each right and exercise procedures are set forth in Section 11 of this Privacy Policy.
B.If you withdraw your consent to processing Biometric Information, such withdrawal shall not affect the lawfulness of all processing activities conducted prior to withdrawal based on your original consent.

4.Purposes of Data Processing
We use the collected information for multiple purposes. All are aimed at providing, improving, and securing our Services. These purposes include:
1)Operating and administering the Services. This covers content creation, sharing, interaction, user support, and other core functions.
2)Supporting social features. This includes connecting users, suggesting accounts, and enabling sharing and interaction with content.
3)Communicating with you. This includes notifying you of service changes.
4)Conducting marketing, promotional, and brandbuilding activities. We do this for our Services and affiliated offerings, including by using Your Content on social media, app stores, websites, events, and other cooperative channels.
5)Reviewing, supporting, improving, and developing the Services. We also train and refine underlying technologies (like machine learning models) by analyzing usage, gathering feedback, monitoring crossdevice activity, and examining user content, messages, AI interactions, and metadata.
6)Ensuring safety, security, and stability. We do this by fixing technical issues, fighting spam and abuse, and detecting fraud and illegal activity.
7)Complying with legal obligations. We also protect our legal rights, commercial interests, and those of our affiliates, users, and the public.
8)Carrying out other purposes. These are either disclosed at collection or based on your consent.
We may also combine information from different sources to achieve any of the above.
For users in the EEA, UK, or Switzerland, our legal bases are:
(i) Contract performance (for purposes 1, 2, and 3) – necessary to deliver the Service you requested, including account creation, matching, and communication.
(ii) Consent (for purposes 4 and 8) – for sensitive data (facial/biometric info, precise location), marketing, and optional features.
(iii) Legitimate interests (for purposes 5 and 6) – for security, fraud prevention, improvement, and analytics, where our interests do not override your rights.
(iv) Legal obligation (for purpose 7) – to comply with laws and regulations. If we rely on consent, you can withdraw it anytime without affecting prior lawful processing.

5.Sharing Information with Third Parties
We will share your information with third parties only in the ways that are described in this Privacy Policy.
1)Third-Party Service Providers. We may share your information with certain third parties (including, without limitation, search engines, content providers, and advertising networks and platforms) that provide various services (such as advertising, marketing, analysis, content, and search) in connection with the Software and the Service, or these third parties may directly collect your information through the Software or their SDK. We take appropriate measures to ensure that no user can be individually identified from the disclosure of such information, and we require these third parties (i) to keep the data secured, (ii) not to use the data for any other purpose other than to provide us with the Service; and (iii) to use the data solely in compliance with the applicable data protection laws and this Privacy Policy.
If you want to delete any personal information which we have shared with the third parties, please contact us through the email displayed below. We would try our best to notify the third-party of deleting the relative personal data, but no warranty as to the deletion is made by us.

2)Required by law. If we are required by law to disclose your information, we may share your information with law enforcement or other competent authorities and any third party, as may be required (e.g., to detect, prevent or otherwise address fraud, security, or technical issues; to respond to claims or satisfy any legal process, subpoena, or governmental request; or to protect the rights, property, or personal safety of the other users, our partners, or the general public).

3)Business Transfers. In the event that we or any of our affiliates undergoes a business transition or change of ownership, such as a merger, acquisition by another company, re-organization, or sale of all or a portion of its assets, or in the event of insolvency or administration, we may be required to disclose your personal information.

4)With Your Consent. We may share your information for other purposes pursuant to your consent or at your direction.

6.Modifying Your Registration Information
You may access or modify the Registration Information you provided. When your Account is deactivated, we take reasonable efforts to make sure it is no longer viewable on the App. We are not responsible for any information, pictures, comments, or other content that is deleted from our systems resulting from the deactivation of your Account.
Warning: Even after you remove information from your profile or delete your Account, copies of that information may still be viewable and/or accessed to the extent such information has been previously shared with others, or copied or stored by other users or to the extent such information has been shared with search engines. We cannot control this, nor do we accept any liability for this. If you have given third-party applications or websites access to your personal information they may retain such information to the extent permitted under their terms of service or privacy policies.

7.Changes to this Privacy Policy
As the App evolves, we may revise this Privacy Policy from time to time. The most current version of the policy will govern our use of your information. By continuing to access or use the App after changes to this Privacy Policy become effective, you agree to be bound by the revised Privacy Policy.

8.Security
We take commercially reasonable security measures to help protect your information against loss, misuse and unauthorized access, or disclosure.
Unfortunately, no website or Internet transmission is ever completely 100% secure and even we cannot guarantee that unauthorized access, hacking, data loss or other breaches will never occur, but here are some handy tips to help keep your data secure:
a. Please make sure you log out of your Account after use as you never know who may stumble onto your Account;
b. Please don’t share your Account password with anyone else!
c. Change your Account password periodically.
If you ever think someone has had access to your Account password, please report it to us and change your password immediately.
Please note that information collected by third parties may not have the same security protections as information you submit to us, and we are not responsible for protecting the security of such information.
WE EXPRESSLY DISCLAIM ANY REPRESENTATION OR WARRANTY, WHETHER EXPRESS OR IMPLIED, WITH RESPECT TO ANY BREACHES OF SECURITY, DAMAGE TO YOUR DEVICE, OR ANY LOSS OR UNAUTHORIZED USE OF YOUR REGISTRATION INFORMATION OR OTHER DATA.

9.International Data Transfers
To deliver Services to you, the information described in Section 3 (“Information We Collect”) is stored and processed on servers located in the United States, hosted by third-party cloud service providers. Our operation team primarily in Hong Kong may access and review certain user information for purposes including service maintenance, customer support and safety monitoring.
Whenever we transfer your information to jurisdictions outside your country of residence, we ensure that such transfers are carried out in compliance with your local legal requirements, to ensure that your personal information receives an adequate level of protection. While such information is outside of your jurisdiction of residence, it is subject to the laws of the jurisdiction in which it is held, and may be subject to disclosure to the governments, courts or law enforcement or regulatory agencies of such other jurisdiction, pursuant to local laws.
If you are situated within the European Economic Area (EEA), the United Kingdom (UK) or Switzerland, we rely on the Standard Contractual Clauses (“SCCs”) approved by the European Commission as the appropriate transfer mechanism for such cross-order data flows. Where personal data is transferred from the EEA, the UK or Switzerland to the United States or to Hong Kong, such transfers are conducted in accordance with applicable data protection laws. We implement appropriate safeguards, including SCCs, to ensure that your personal data receives an adequate level of protection during such transfers. Our relevant entities located in China are granted limited remote access to the information described in “Information We Collect” for the purpose of performing essential operational functions only, and is bound by confidentiality obligations and our internal data access policies.

10.Retention Period for Stored Information
The duration for which your information is retained shall be determined by the minimum period necessary for the provision of the Services and for the performance of the other activities set out in this Privacy Policy. Retention beyond such period may occur under any of the following circumstances: (a) where retention is required by legal or contractual mandates; (b) where we have a valid business justification for retention, including service improvement, development, and the maintenance of safety and stability; and © where the information may be required for the initiation or defense of legal proceedings.

11.Data Subject Entitlements
You are entitled, subject to the laws of your jurisdiction, to the following rights: the right to delete your Account; the right to access, modify, correct, or delete any personal data we have collected. To exercise any such right, please contact us via the email address set out below. We will perform identity verification before processing your request, and we will respond within the timeframes specified by applicable law (generally 30 days). Should we refuse to act on your request, we will advise you of the reasons for such refusal and of your right to appeal or to lodge a complaint with the relevant supervisory authority.
You may also be entitled, under applicable law, to submit a request through an authorized agent. To designate such an agent, please provide evidence that you have granted the agent power of attorney or that the agent otherwise holds valid written authority to submit requests on your behalf. We will respond to your request in line with applicable law and after proper verification. We will verify your request by requiring that it be sent from the email address associated with your account, or by requesting additional information necessary to confirm your account.

12.Communication Channel
Should you have any questions relating to the Service or this Agreement, or should you wish to obtain a prior version of this document, or should you wish to exercise any of your privacy rights, please contact us at [ TeamYaYa@outlook.com ].