• Phone Number / Email: Used to create your account, verify login, and recover your password. The service cannot be registered or used without this information.

• Password: Used to protect your account security.

• Verification Code: SMS or email verification codes used for identity verification.

• Store Information (name, address, contact details): Used to create, manage, and display stores.

• Employee Information (name, role, contact details): Used for store staff management and permission assignment.

• Product Information (name, SKU, price, barcode, images, etc.): Used for core business functions such as product management, AI weighing recognition, and price tag binding.

• Wi-Fi Information (SSID, password): Used to configure network connections for smart devices (electronic shelf labels, AI smart scales, etc.). The Wi-Fi password is only used during the provisioning process and is never uploaded to our servers.

• Bluetooth: Used to scan, discover, and connect to Bluetooth devices for device provisioning and data communication.

• Device Identifier Information (device number, SN, MAC address, model, firmware version, etc.): Used for device identification, management, and upgrades.

• Camera Permission: Used to scan product barcodes and device QR codes. If you deny this permission, the scanning feature will be unavailable.

• Image Selection: Used to upload product images, price tag template images, marketing assets, etc. We use the Android system-level Photo Picker for image selection, so no photo library permission is required.

• Video Selection: Used to upload product demonstration videos and marketing video assets.

• Saving Images: You may save price tag previews, report screenshots, etc. to your device album.

• Weighing Data (weight, amount, product recognition results): Used for AI smart scale weighing records, product recognition, sales statistics, and report generation.

• Abnormal Operation Records (price change records, below-cost sale records, etc.): Used for loss prevention monitoring and anomaly alerts.

• Device Information (device model, operating system version, unique device identifiers, IP address): Used for troubleshooting, data statistics, and service optimization.

• Operation Logs (operation time, type, and content): Used for auditing and issue traceability.

  We are committed to not proactively collecting your sensitive personal information (such as ID card numbers, biometric information, location tracks, financial accounts, medical and health information, etc.). All business functions described in this Policy can be used normally without collecting sensitive personal information. If it becomes necessary to collect your sensitive personal information due to future business needs, we will explicitly inform you in advance of the purpose, method, and scope of the collection, and will only collect it after obtaining your separate consent.

We will not share your personal information with any company, organization, or individual outside of our company, except in the following circumstances:

• Sharing with your explicit consent.

• Sharing as required by laws and regulations, legal proceedings, litigation, or competent government authorities.

• Sharing with authorized partners: for example, push notification service providers and cloud service providers. We will only share your information for lawful, legitimate, and necessary purposes, and only the information necessary to provide the service will be shared.

We will not transfer your personal information to any company, organization, or individual, unless:

• Transferring with your explicit consent.

• In the event of a merger, acquisition, or bankruptcy liquidation involving the transfer of personal information, we will require the new holder to continue to be bound by this Policy.

• With your explicit consent.

• As mandatorily required by law or judicial proceedings.

Our services may integrate the following third-party services, which may collect certain information about you:

• MQTT Service: Used for real-time device communication.

• Cloud Storage Service: Used to store your data (product images, assets, etc.).

• SMS / Email Service: Used to send verification codes and notifications.

We conduct strict security assessments of third-party services and require them to comply with relevant laws, regulations, and confidentiality obligations.

• We use SSL/TLS encryption to protect data transmission security.

• We encrypt stored sensitive data (such as passwords).

• We have established a comprehensive access control mechanism under which only authorized personnel may access your data.

• We conduct regular security audits and vulnerability scans.

• Right of Access: You can view your personal information within the App.

• Right of Rectification: If you find your personal information is inaccurate, you may correct it yourself or contact us for correction.

• Right of Deletion: You may request the deletion of your account and related information.

• Withdrawal of Consent: You may withdraw consent by disabling the relevant permission settings.

• Account Cancellation: You may apply to cancel your account in Settings.

• Camera Permission: Used for barcode scanning.

• Bluetooth Permission: Used for scanning and connecting Bluetooth devices.

• Network Status Permission: Used to detect network connectivity.

• Wi-Fi Status Permission: Used to obtain Wi-Fi information to assist with device provisioning.

• Storage Permission: Used to save images, assets, and other files.

• Location Permission: Used for Bluetooth scanning (Bluetooth scanning on Android 6.0+ requires location permission).

• Storage Location: Your personal information is stored on servers located within the territory of the People's Republic of China.

• Storage Period: We retain your personal information only for the period necessary to achieve the purposes described in this Policy, unless otherwise required by law. After your account is cancelled, we will promptly delete your personal information.

• Statement on Cross-Border Transfer: Your personal information is stored within the territory of the People's Republic of China, and we will not provide your personal information to any overseas organization or individual. If it becomes necessary to transfer your personal information overseas due to future business needs, we will strictly comply with legal requirements by completing statutory procedures such as security assessments, professional certification, or entering into standard contracts, and will inform you in advance of the recipient's name, contact information, and the purpose and method of processing. Such transfer will only take place after obtaining your separate consent.

  Our products and services are primarily intended for business users. If you are a minor, please read this Policy accompanied by your guardian and obtain your guardian's consent. We do not knowingly collect personal information from minors.

  We may revise this Privacy Policy in response to product updates or changes in laws and regulations. Material changes will be notified to you through in-App pop-ups, announcements, or other means. Your continued use of our services constitutes your acceptance of the updated Privacy Policy.

  If you have any questions, comments, or suggestions regarding this Privacy Policy, or need to exercise your personal information rights, please contact us through the following channels:

• Developer: OSAI Inc.

• Address: Room 706, No. 88 Wanchuang Road, Tangjiawan Town, High-Tech Zone, Zhuhai, Guangdong Province, China

• Email: info@osai.cc

• In-App Feedback: Settings -> Feedback

We will respond to your request within 15 business days.

If you are not satisfied with our handling of your request, or believe that our personal information processing activities have infringed upon your legitimate rights and interests, you have the right to file a complaint or report with regulatory authorities such as the cyberspace administration, industry and information technology, public security, and market supervision authorities, or to safeguard your rights through legal channels such as filing a lawsuit with a people's court that has jurisdiction.