VicastCamUser Privacy and Data Protection

Effective Date: July 22, 2026

VICAST INTERNATIONAL LIMITED (hereinafter referred to as "we") fully understands the importance of personal information to you and regards protecting personal information as a core principle.

This Privacy Policy strictly complies with the EU GDPR, the UK Data Protection Act, the Hong Kong Personal Data (Privacy) Ordinance, and data protection regulations worldwide, processing your personal information in accordance with the principles of lawfulness, fairness, necessity, and data minimization.

Special Notice for Users in the United States: In accordance with the California Consumer Privacy Act (CCPA), we will never sell, rent, or trade any of your personal information.

This Privacy Policy explains the rules for collecting, using, storing, transmitting, and disclosing personal information, as well as your rights to access, correct, and delete personal information. We do not collect personal information through mandatory bundling; we only collect information necessary to provide the service. You may decline to provide non-essential information without affecting basic functionality.

In addition to this Privacy Policy, pop-ups, page prompts, feature update notices, and other published content are integral parts of this Privacy Policy and have the same legal effect.

When you first use VicastCam, clicking "Agree" indicates that you have fully read and accepted this Policy. If additional sensitive information needs to be collected when you subsequently use relevant features, we will obtain your separate consent again. You have the right to withdraw consent at any time through device settings or by contacting customer service.

You confirm that you are at least eighteen years old or have reached the legal age of majority in your jurisdiction ("adult"); minors must use this software with the explicit consent and full supervision of a legal guardian, who bears guardianship responsibilities in accordance with the law.

VicastCam products are only provided to users outside mainland China; we do not actively promote the product to users in mainland China. If you are located in mainland China, please be aware that this product does not have the relevant operating qualifications in mainland China.

The following will help you understand how we collect, use, share, disclose, and protect personal information; and help you understand the methods for managing personal information, such as accessing, correcting, supplementing, and deleting it.

Information Collection and Use

1 VicastCam Products and Services

1.1 Information You Actively Provide

Mandatory Collection: We only collect your email address for account registration and login; we do not collect phone numbers or identity information.

Optional Collection: Personal bio, nickname, avatar, etc. You may choose whether to fill these in; refusal will not affect basic usage.

1.2 Information Obtained from Third Parties

When you register or log in using third-party accounts (Google, Facebook, Apple), we only obtain the public avatar, nickname, and third-party UID from the platform. This information is used solely for account login and identity verification, and will not be used for secondary purposes or shared externally.

1.3 Automatically Collected Information

(1) Device Information: device model, IP address, system version, device version, etc.;

(2) Browsing and Usage Records: your browsing and operation content within the application;

Data Retention Rules: All device identifiers, IP addresses, and log-type information are retained for a maximum of 12 months, after which they are automatically anonymized or deleted. For details, see Section 5, Retention Period Table, of the GDPR and Data Protection policy.

Facial Feature Statement (Sensitive Biometric Information): When using facial effects or beauty features, we only recognize and process your facial feature information locally to achieve better visual effects. We do not upload, store, or share any facial data.

Clipboard: We only temporarily read the clipboard when you input or share content, to identify navigation and sharing instructions. We do not upload or store any information from your clipboard.

Multi-Device Screen Mirroring: We request screen recording and local network permissions, transmitting images only within the local area network. Data is not sent externally.

Membership Purchase: We may associate the purchase time and duration information with your account and store it on the server to ensure normal service provision during the membership period.

Payment Instructions: You complete payments via App Store/Google Play, and payments are processed by the platform. We do not collect or store any sensitive payment information such as bank card numbers or ID card numbers.

2 VicastCam Product Operation and Security Assurance

We are committed to providing you with a safe and trustworthy product and usage environment. To maintain the normal and stable operation of related products or services and to protect the safety and legitimate interests of you, other users, or the public, we may collect the following necessary information:

Device Information: During your use, we may collect your hardware model, operating system version, device identifier (e.g., IDFA/Android ID), network device hardware address (MAC address), IP address, software version, network access method/type/status, network quality data, operation/usage/service logs, and device sensor data (e.g., accelerometer, gyroscope sensor), etc.

Application Usage: To prevent malicious programs and ensure operational quality and efficiency, we may collect the overall operation, usage frequency, application crash data, overall installation and usage data, and performance data of the application.

Account Security Assessment: We may collect account information, device information, and service log information generated during your use. We use this information, along with information obtained from our affiliates and partners with your authorization or as legally permitted, to assess account security, transaction security, perform identity verification, identify violations, detect and prevent security incidents, and take necessary recording, analysis, and handling measures in accordance with the law.

Message Notifications: You acknowledge and agree that during our operations, we may send one or more types of notifications (e.g., user message notifications, identity verification, security verification, user experience surveys) via the contact information you provided during registration (e.g., email). We may also push content updates you follow, recommended content, etc., via your device's system notifications. You may choose to disable VicastCam's notification function in your device settings.

3 Application Permissions

Camera Permission: Used for taking photos, live streaming, scanning QR codes, and multi-device image capture. Disabling this will prevent the corresponding functions from being used.

Photo Album Permission: Used to access local materials for creating scene plans, uploading avatars/feedback images, and saving recorded videos.

Microphone Permission: Used for video recording and live streaming audio capture.

Local Network Permission: Used for multi-device screen mirroring, remote control, and backup functions for local area network device pairing and data transfer.

Clipboard Permission: Used for quick input and sharing navigation.

Screen Recording Permission: Used for image capture in recording and screen mirroring scenarios.

Face ID/Fingerprint Permission: Used for local quick login and security verification. Biometric feature information is not uploaded or stored. Disabling this will allow login only via account and password.

Advertising Identifier Permission: Used solely for providing personalized content services and optimizing the experience. No sensitive information is collected.

Phone Sensors: Used for beauty features and screen angle adaptation.

You can enable or disable the above permissions in your device's settings, change the scope of authorization, or withdraw your consent. After withdrawing consent, we will no longer collect information related to these permissions, but this will not affect the processing of personal information carried out based on your prior authorization.

4 Other Rules

You understand that as our business develops, we may adjust the functions and services provided by VicastCam. In principle, when new functions or services are related to the functions or services we currently provide, the collection and use of personal information will have a direct or reasonable connection to the original processing purpose. In scenarios where there is no direct or reasonable connection to the original processing purpose, we will notify you again before collecting and using your personal information and obtain your consent in accordance with applicable laws and regulations.

The sensitive personal information we collect is clearly marked in this policy. To prevent your sensitive personal information from being leaked, altered, or illegally used, we have implemented appropriate technical and organizational protection measures to safeguard your information security to the best of our ability.

If the information you provide contains personal information of other users, you must ensure that you have obtained lawful authorization before providing such personal information to us. If it involves the information of minor users, you must obtain the consent of their guardians before providing it. In such cases, the guardians have the right to contact us through the channels specified in this policy to request correction or deletion of content involving the minor user's information.

Rules for the Use of Cookies and Similar Local Storage Technologies

To ensure the normal operation of the VicastCam official website and App embedded web pages, and to optimize the service experience, we store similar identification technologies such as Cookies, local storage, and web beacons on your browser/device locally. This section fully explains the classification, purpose, and user management permissions of Cookies, in compliance with the EU ePrivacy Directive and UK data protection regulations.

Important Distinction: The native audio, video, shooting, and creation functions of the VicastCam mobile App client do not use, read, or write any Cookies. Cookies only function on the official website pages and web pages embedded within the App.

1 Cookie Classification, Purpose, and Compliance Requirements

We classify Cookies into two categories: Strictly Necessary Cookies and Non-Essential Cookies. The processing rules and authorization requirements for these two categories are completely distinct:

Strictly Necessary Cookies (No active user consent required, cannot be disabled)

These Cookies are essential for the basic operation of the website. Their absence would cause core functions such as login, account security, orders, and Cookie preference settings to fail. The legal basis is the performance of the service contract and legitimate interests:

Session Login Cookies: Record the account login status to avoid repeated logins;

Security Verification Cookies: Prevent cross-site attacks and identify account risks;

Authorization Preference Cookies: Permanently store your acceptance/rejection choice for Non-Essential Cookies;

Load Balancing Cookies: Ensure stable server access across multiple regions.

Non-Essential Cookies (Must obtain your active and explicit consent before activation, consent can be withdrawn at any time)

These do not affect basic browsing but are used to optimize products and collect usage data. No corresponding scripts will be loaded without your consent:

Analytics Cookies: Anonymously collect data on official website pages visited, time spent, and traffic sources to iterate product functions. Corresponding third parties: OpoInstall, Firebase Analytics SDK;

Preference Settings Cookies: Record your selected website language and page display habits;

Third-Party Login Temporary Cookies: The Google login component only temporarily stores the authorization status during the login process, with no long-term tracking behavior.

2 Third-Party Cookie Description

Third-party service providers integrated into the official website (Google, Alibaba Cloud Analytics, payment platforms) may write third-party Cookies on the page. The collection and use of third-party Cookies are governed by the respective privacy policies of those service providers. We only allow third-party tracking scripts to load after you have actively consented to enable Non-Essential Cookies; we will not deploy tracking Cookies in advance. For a complete list of third-party service providers, please refer to the "VicastCam SDK List".

3 All Channels for You to Manage, Disable, and Delete Cookies

You may withdraw your consent for Non-Essential Cookies and clear local Cookie storage at any time. All operations take effect permanently:

Cookie Authorization Pop-up on the Official Website Homepage (Forced pop-up on first visit for users in the EU and UK)

Manual Browser Management

In the settings of mainstream browsers such as Chrome, Safari, Edge, and Firefox, you can clear all Cookies with one click or globally block third-party Cookie storage. Disabling Non-Essential Cookies will retain only basic login functions, while analytics and personalization features will be disabled.

Privacy Settings Entry within the App

Open the VicastCam App → My → Settings → Privacy Management, and you can disable the loading of tracking Cookies for embedded web pages with one click.

Change Authorization via Email

Send an email to business@vicastcam.com to request the permanent disabling of all Non-Essential Cookie tracking activities.

4 Cookie Data Retention and Boundary Constraints

All locally stored Cookies have a maximum validity period of no more than 13 months and will be automatically cleared upon expiration; if you revisit the page, authorization for non-essential Cookies will be requested again.

We do not collect or identify sensitive content such as your facial features, audio/video, or locally created materials through Cookies.

Anonymous statistical data generated by Cookies is used solely for product optimization and will not be separately associated with your account email or identity information for external sharing or sale.

5 Functional Impact After Disabling Cookies

Disabling only non-essential Cookies: Basic website browsing, account login, paid purchases, and customer service inquiries remain completely unaffected.

Disabling all Cookies: Unable to save login status, language preferences, or Cookie authorization choices; each time you open the page, you must log in again and reset authorizations.

Information Sharing, Transfer, and Public Disclosure

1 Information Sharing

We do not proactively share your personal information with any company, organization, or individual, except in the following circumstances:

1.1 With your explicit prior consent or authorization; sharing as required by applicable laws and regulations, legal procedures, or mandatory administrative or judicial requirements.

1.2 Sharing with Our Affiliated Companies

Your personal information may be shared with our affiliated companies. We will only share necessary personal information, subject to the purposes stated in this Privacy Policy. If an affiliated company changes the purpose of using or processing personal information, we will seek your consent again.

1.3 Sharing with Authorized Partners

To achieve the purposes stated in this Policy, certain services may be jointly provided by us and our authorized partners. We will share your personal information only for lawful, legitimate, necessary, specific, and explicit purposes, and only the personal information necessary to provide the service. Our partners have no right to use the shared personal information for any other purpose. Currently, our authorized partners include the following types:

1.4 Message Notification Providers

To adapt message push functionality to your terminal device model, terminal device manufacturers may use technologies such as SDK to access your phone model, version, and related device information (including hardware model, operating system version, device identifier, and device sensor information).

1.5 Payment Service Providers

Payment functionality may be provided to you by third-party payment platforms (Apple / Google) cooperating with us. Third-party payment platforms may collect your account information to complete the payment. We do not collect or store any bank card or ID card information.

1.6 Authorized Partners for Advertising and Analytics Services

Unless we have obtained your permission, we will not share your personally identifiable information (information that can identify you, such as name or email address) with partners providing advertising or analytics services. We may provide these partners with information about the reach and effectiveness of their advertisements, without providing your personally identifiable information, or we may aggregate this information so that it does not identify you personally.

1.7 Suppliers, Service Providers, and Other Partners

We send information to suppliers, service providers, and other partners that support our business, including providing technical infrastructure services, analyzing how our services are used, measuring the effectiveness of advertisements and services, providing customer service, or conducting academic research and surveys. We enter into strict confidentiality agreements with the companies, organizations, and individuals with whom we share personal information, requiring them to process personal information in accordance with our instructions, this Privacy Policy, and any other relevant confidentiality and security measures.

2 Information Transfer

We do not transfer your personal information to any company, organization, or individual, except in the following circumstances:

2.1 With your explicit consent for transfer, we will transfer your personal information to other parties.

2.2 Provision as required by applicable laws and regulations, legal procedures, or mandatory administrative or judicial requirements.

2.3 In the event of mergers, acquisitions, asset transfers, or bankruptcy liquidation, your personal information may be transferred accordingly. In the event of such changes, we will require the successor to protect your personal information in accordance with laws, regulations, and security standards no less than those stated in this Privacy Policy. If the successor changes the original processing purpose or method, we will require the successor to obtain your authorization and consent again.

3 Public Disclosure

We will only publicly disclose relevant personal information under the following circumstances:

3.1 With your explicit prior consent, we may publicly disclose relevant information.

3.2 Disclosure based on law. We may publicly disclose your personal information when required by law, legal proceedings, litigation, or compulsory requests from government authorities.

Information disclosure caused by users’ own public sharing, hacker attacks, or force majeure does not fall within the scope of our proactive public disclosure.

4 Exceptions to prior authorization and consent:

Please understand that in the following circumstances, in accordance with laws, regulations, and relevant national standards, the use by partners, or our transfer or public disclosure of your personal information does not require your authorization or consent:

As necessary for the conclusion or performance of a contract to which you are a party.

As necessary to fulfill statutory duties or legal obligations.

Directly related to national security or national defense security.

Directly related to public security, public health, or major public interests.

Directly related to criminal investigation, prosecution, trial, and enforcement of judgments.

As necessary to protect your or another individual’s vital interests such as life or property, where it is difficult to obtain the individual’s consent.

Personal information that you have voluntarily made public.

Collection of personal information from legally publicly disclosed information, such as lawful news reports or government information disclosures.

Other circumstances as provided by laws or administrative regulations.

According to the law, sharing or transferring de-identified personal information, where the data recipient cannot restore or re-identify the data subject, does not constitute external sharing, transfer, or public disclosure of personal information. The storage and processing of such data will not require further notification or consent from you.

Information Storage, Transmission, and Security

1 Cross-Border Data Transfer

The information we collect may be stored, processed, and transferred in any country or region where our business operations are conducted, with all actions strictly following this Privacy Policy.

The information we collect may be transferred to Singapore AWS compliant server nodes. All cross-border transfers are carried out in accordance with the Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring that the data recipient provides a level of protection equivalent to the GDPR. You may obtain a copy of the SCC agreement via business@vicastcam.com.

When you actively publish content publicly on the platform, the relevant information may be viewed by global users via the internet. Please carefully evaluate the content you publish to avoid disclosing sensitive personal information.

2 Data Protection

We place great importance on the security of personal information, implementing protective measures from both technical and managerial perspectives to prevent unauthorized access, disclosure, alteration, or loss of personal information, and to ensure all information processing activities comply with applicable laws and regulations. We use industry-standard encryption, de-identification, and anonymization technologies to defend against various malicious attacks; we also establish a comprehensive data security management system and a tiered access permission system, allowing only authorized personnel to access relevant data, and regularly conduct employee security training and data security audits.

We have developed an emergency response plan for personal information security incidents. In the event of or upon prediction of a security incident such as personal information disclosure, alteration, or loss, we will notify affected users and relevant regulatory authorities within 72 hours and take immediate remedial measures. We will inform you of the incident details via in-app notifications, email, letters, SMS, etc.; if it is not feasible to notify all users individually, we will issue a public announcement and report the incident handling progress as required by regulatory authorities.

VicastCam will continuously optimize its security protection capabilities. Due to objective limitations such as internet technology, network environment, and external malicious acts, even with comprehensive protective measures in place, absolute security of personal information cannot be guaranteed. Please enhance your security awareness, properly safeguard your account and related information, use complex passwords, and change them regularly.

When you navigate to third-party products or services, we no longer bear responsibility for protecting the personal information you submit to such third parties. However, we will remind you that you are about to enter a third-party product or service, so that you can better protect your personal information.

Information Management

We highly value and fully ensure your management rights over your personal information, including the rights to access, copy, transfer, correct, supplement, delete, withdraw consent, cancel your account, and file complaints or reports. When you withdraw relevant consent, we will no longer provide the corresponding functions and will stop processing the relevant personal information; withdrawal of consent will not affect the lawfulness of information processing carried out based on your prior consent.

The specific entry points for functions may vary depending on the software version or operating system; please refer to the actual display.

1 Access, Copy, Transfer, Correct, Supplement, and Delete Your Information

You may manage your personal information through the following methods:

1.1 Open VicastCam, go to the "My" or "Settings" page, and independently view, correct, or supplement your personal information.

1.2 The software includes a built-in "Personal Data Download" feature, allowing you to export a copy of your personal data under your account with one click, exercising your right to data portability.

1.3 The "Account Deletion" entry within the App allows you to submit an account deletion request; after cancellation, a 30-day data buffer period is reserved, after which the account data will be permanently and physically deleted from the cloud.

1.4 Send an email to service@vicastcam.com, submitting your account and identity verification materials to apply for relevant services.

Upon receiving your application, we will process it in accordance with procedures. To ensure security, you may be required to submit written materials or relevant certifications. We may verify your identity before processing your request.

We will respond to your legitimate requests within the following timeframes, in accordance with the data protection laws applicable in your region:

EU and UK: A reply will be provided within 30 calendar days from receipt of a complete request. If your request is complex or involves a large volume, we may extend this period to up to two months as permitted by law and will inform you of the reason for the extension within 30 days.

Hong Kong Region: A reply will be provided within 40 calendar days from receipt of the request.

Other Regions: A reply will be provided within 15 working days from receipt of the request or within the timeframe stipulated by applicable laws and regulations.

Under normal circumstances, you may correct or supplement submitted information at any time. However, for security and identity verification purposes, certain initial registration information and verification information cannot be changed.

2 Changing the scope of your authorized consent or withdrawing your authorization

You can change the scope of your authorized consent or withdraw your authorization through your device terminal (e.g., "System Settings" - "VicastCam").

You can also change the scope of VicastCam's authorization to continue collecting personal information or withdraw your authorization by contacting customer service.

3 Account Cancellation

You can cancel your account via the VicastCam App by navigating to "My" - "Settings" - "Account Management" - "Cancel Account".

Before you cancel your account, we may verify the personal identity, security status, device information, etc., that you have authorized to us.

You acknowledge and understand that account cancellation is irreversible. After account cancellation, a 30-day buffer period is reserved solely for financial reconciliation, dispute resolution, and after-sales verification; permanent physical deletion will be executed after the buffer period expires. You remain liable for actions taken prior to cancellation.

After account cancellation, you will be unable to log in to VicastCam using that account, nor will you be able to retrieve any content or information related to the account. After account cancellation, you remain liable for your use of VicastCam prior to the cancellation of the account.

4 We may be unable to respond to your requests in the following circumstances

Where it is related to our compliance with obligations stipulated by laws and regulations.

Directly related to public security, public health, or major public interests.

Where it is directly related to criminal investigation, prosecution, trial, and execution of judgments.

Where we have sufficient evidence to indicate that you have subjective malice or are abusing your rights.

Where it involves the life, property, or other significant legitimate rights and interests of you or other individuals, but obtaining your consent is very difficult.

Where responding to your request would cause serious harm to the legitimate rights and interests of you, other individuals, or organizations.

Where it involves trade secrets.

Protection of Minors' Information

The VicastCam products and services we provide are primarily intended for adults, but we place great importance on protecting the personal information of minors.

Different jurisdictions have different age requirements for minors to use services independently. We will dynamically apply the following standards based on the country/region you selected during registration:

European Economic Area (EEA): Individuals under the age of 16 must obtain consent from a legal guardian to use this service. However, if the national law of your member state stipulates a lower age of consent (not lower than 13 years old), the age stipulated by that country's law shall apply.

South Korea: Individuals under the age of 14 must obtain consent from a legal guardian.

UK: Individuals under the age of 13 must obtain the consent of their legal guardian.

US and Brazil: Individuals under the age of 13 must obtain the consent of their legal guardian.

Other regions: Individuals under the age of 18 must obtain the consent of their legal guardian.

1 If you are a minor meeting the above conditions, you must obtain the prior consent of your legal guardian before using our products or services, and read this policy, complete registration, and perform operations under the supervision and guidance of your legal guardian.

2 For cases where personal information of minors is collected with the consent of parents or legal guardians, VicastCam will only collect, use, or publicly disclose such information where permitted by law, with the explicit consent of parents or legal guardians, or as necessary to protect the minor.

3 If we discover that information of a minor has been collected without the consent of a guardian, we will delete the relevant data within 72 hours of discovery or within a shorter period as required by law, and restrict or cancel the corresponding account.

4 If you are the guardian of a minor and have any questions regarding the personal information of the minor under your guardianship, please contact us through the contact information published in this Privacy Policy.

Amendments and Notifications

1 VicastCam may amend this Privacy Policy in the event of the following changes to its products and/or services:

1.1 Changes to the business functions involved in our products and/or services, resulting in changes to the purpose, type, or method of processing personal information;

1.2 Changes to the main recipients of personal information sharing, transfer, or public disclosure.

1.3 Significant changes to your rights regarding the processing of personal information and the means of exercising such rights;

1.4 Changes to the responsible department, contact information, or complaint channels of the department responsible for the security of your personal information;

1.5 Other changes that may affect the security of users' personal information or users' privacy rights.

1.6 Changes made in response to policies or legal requirements following the issuance or implementation of such policies or laws.

2 Without your explicit consent, we will not reduce the rights you are entitled to under the currently effective Privacy Policy.

3 After this Privacy Policy is updated, we will release the updated version on VicastCam and notify you of the updates via in-site messages or other appropriate means, so that you can stay informed of the latest version of this Privacy Policy. If this policy undergoes a major change, we will announce it at least 30 days in advance via in-site messages or official channels.

4 We may also help you better manage your personal information through feature updates; please refer to the relevant feature descriptions.

5 Unless otherwise specified, the revised Privacy Policy takes effect on the date of publication.

Third-Party SDK Explanation

To ensure the implementation of VicastCam-related functions and the stable and secure operation of the application, we may integrate software development kits (SDK) provided by third parties and affiliates for related purposes. All third-party SDK comply with Apple's App Store and Google Play privacy policy standards.

We conduct strict security monitoring and compliance assessments of third-party SDK and require them to adhere to global data protection regulations. For a detailed list of third-party SDK we integrate (including the SDK name, operator, types of information collected, purpose of use, and applicable platforms), please refer to the dedicated document published on our official website:

👉 "VicastCam SDK List" (accessible via the official website vicastcam.com/sdk-list)

This list will be kept in real-time synchronization with SDK version updates, eliminating the need for frequent revisions to this Privacy Policy.

Contact Us

If you have any questions, suggestions, or comments regarding this Privacy Policy, please contact us at service@vicastcam.com.

Operator: VICAST INTERNATIONAL LIMITED

Registered Address: RM 18 2/F, TUSPARK, 118 WAI YIP STREET, KWUN TONG, HONG KONG

To ensure we handle your issue efficiently and provide timely feedback, you will need to submit proof of identity, valid contact information, a written request, and relevant evidence. We will process your request after verifying your identity. Generally, we will respond within fifteen days or the period stipulated by law.