Eye Friend Privacy Policy

DeFiCall – A Global Super App

1. Introduction

Eye Friend is a privacy-focused location-sharing and safety feature within DeFiCall that enables users to share their location with people they choose and authorize.

Eye Friend is designed according to the principles of:

User Choice • User Authorization • Encrypted Location • User Control

Location information processed through Eye Friend is protected using encryption. DeFiCall servers do not receive or store the user's location in readable plaintext form. Location information stored or processed through the applicable Eye Friend server infrastructure is maintained in encrypted form.

This Eye Friend Privacy Policy (“Eye Friend Privacy Policy”) explains how information is handled when you use Eye Friend.

It supplements the DeFiCall General Privacy Policy and should be read together with it.

2. Purpose of Eye Friend

Eye Friend is designed to enable permission-based location sharing between users and people they authorize.

Depending on available functionality, Eye Friend may enable users to:

• share their current location;

• share live or continuously updated location;

• authorize selected users to view their location;

• view another user's location when authorized;

• use location-based safety functionality;

• receive applicable location-based notifications; and

• manage who is authorized to access their shared location.

Eye Friend is not designed to make a user's location publicly available.

3. Privacy by Design

Eye Friend is designed to minimize unnecessary access to sensitive location information.

Location information is protected through encryption so that the DeFiCall server does not receive or store the location in readable plaintext form.

In practical terms:

User's Location → Encryption → Encrypted Server Processing/Storage → Authorized Access

Accordingly:

• location information is protected in encrypted form;

• DeFiCall servers do not receive readable plaintext location;

• location is not publicly available;

• ordinary DeFiCall users cannot access another user's location;

• access is limited through the applicable authorization mechanism; and

• users control whom they authorize to view their location.

The encryption architecture is intended to reduce the risk of unauthorized access to sensitive location information.

4. User-Controlled Location Sharing

Eye Friend operates through user-authorized location sharing.

Users decide:

• whether to activate Eye Friend;

• whether to enable location sharing;

• which location permissions to grant;

• whom to authorize;

• whether to continue sharing; and

• when to revoke another user's access.

Having a DeFiCall account does not automatically allow another person to view a user's Eye Friend location.

Users should authorize only people they know and trust.

5. Location Information

Depending on the functionality enabled and device permissions granted, Eye Friend may use device-generated information such as:

• approximate location;

• precise location;

• GPS coordinates;

• current location;

• live location updates;

• timestamps associated with location information; and

• other technical data required to provide location functionality.

Location information transmitted to the applicable DeFiCall server infrastructure is protected through the Eye Friend encryption architecture and is not received or stored by the server as readable plaintext location.

6. Encryption of Location Information

Eye Friend location information is encrypted to protect its confidentiality.

Under the current Eye Friend architecture:

• location information is encrypted before or as part of transmission to the applicable server infrastructure;

• the DeFiCall server does not receive readable plaintext location;

• stored location information is maintained in encrypted form;

• unauthorized users are not permitted to access location information; and

• access to readable location information is restricted through the applicable authorized-user mechanism.

Encryption is an important component of Eye Friend's privacy and security design.

However, encryption should not be interpreted as eliminating every possible security risk. Users must also protect their accounts, devices, passwords, authentication credentials, and authorized connections.

7. Who Can View Your Location?

Eye Friend location sharing is intended only for persons authorized by the user through the applicable feature.

Another DeFiCall user does not automatically gain access to your location by:

• having your phone number;

• knowing your DeFiCall username;

• having a DeFiCall account; or

• otherwise being a DeFiCall user.

The applicable authorization process must be completed before another user can receive access to Eye Friend location information.

Users should grant location access only to trusted persons.

8. Location Permission

Eye Friend requires appropriate device location permission to provide location-based functionality.

Depending on the functionality, device, and operating system, DeFiCall may request:

• approximate location;

• precise location; and/or

• background location where required for enabled functionality.

Users may generally grant, deny, or withdraw these permissions through their device settings.

If required location permission is disabled, Eye Friend may become partially or completely unavailable.

9. Background Location

Certain Eye Friend functionality may require location updates while DeFiCall is not actively visible on the user's screen.

For example, where a user intentionally enables continuous live-location functionality, Eye Friend may require background location access so that authorized persons can continue receiving permitted location updates.

Where background location is required:

• the applicable device permission will be requested;

• the purpose of the permission will be disclosed to the user;

• background access will be limited to functionality requiring it; and

• users may withdraw the permission through their device settings.

Disabling background location may interrupt continuous location-sharing functionality.

Location information generated through such functionality remains subject to the applicable Eye Friend encryption protections.

10. Authorized Users

Eye Friend is designed so that users determine who is authorized to receive their location information.

Authorization may involve, depending on available functionality:

• adding or approving another user;

• accepting a connection;

• granting location access;

• enabling location sharing with a selected person; or

• another explicit authorization mechanism.

DeFiCall does not independently select who should receive a user's location.

11. Revoking Location Access

Users may revoke another person's authorization through the available Eye Friend controls.

Once authorization is revoked, the removed person should no longer receive future location information through that authorization.

However, revocation cannot necessarily erase information that an authorized recipient previously:

• viewed;

• remembered;

• captured through a screenshot;

• recorded;

• saved independently; or

• communicated outside DeFiCall.

For this reason, users should authorize only people they trust.

12. Information DeFiCall May Process

Although the DeFiCall server does not receive readable plaintext Eye Friend location, DeFiCall may process limited information necessary to operate and secure the Service.

This may include:

Account Information

• account identifier;

• profile information;

• registered contact information; and

• authentication-related information.

Authorization Information

Information necessary to determine:

• which accounts are connected;

• which users are authorized;

• whether sharing is enabled; and

• relevant access status.

Encrypted Location Data

DeFiCall infrastructure may transmit or store encrypted location information necessary to provide Eye Friend functionality.

The server does not receive this location information as readable plaintext.

Technical Information

DeFiCall may process:

• device type;

• operating system;

• application version;

• IP address;

• network information;

• security logs;

• diagnostic information;

• timestamps;

• delivery or synchronization information; and

• other technical information reasonably necessary to operate and secure Eye Friend.

13. How Information Is Used

Information associated with Eye Friend may be used to:

• provide location-sharing functionality;

• maintain authorized user relationships;

• transmit encrypted location information;

• authenticate users;

• maintain Service reliability;

• protect accounts and systems;

• prevent unauthorized access;

• investigate suspected misuse;

• troubleshoot technical problems;

• improve Eye Friend functionality; and

• comply with applicable legal obligations concerning information DeFiCall actually possesses.

DeFiCall does not use readable Eye Friend location for unrelated purposes because its server does not receive the location in readable plaintext form.

14. Advertising and Commercial Use

DeFiCall does not sell Eye Friend location information.

Eye Friend location information is not intended to be used for:

• targeted advertising based on precise location;

• commercial sale of location histories;

• advertising profiling based on private Eye Friend location;

• unrelated behavioral tracking; or

• unauthorized surveillance.

Eye Friend location functionality exists to provide the location-sharing services intentionally enabled by users.

15. Service Providers and Infrastructure

DeFiCall may use technical infrastructure or service providers necessary to operate Eye Friend, including services supporting:

• cloud infrastructure;

• encrypted data transmission or storage;

• notifications;

• mapping functionality;

• security;

• network operations; and

• other technical components.

Where encrypted Eye Friend location information passes through applicable infrastructure, it remains subject to the encryption architecture used by Eye Friend.

Service providers are expected to process information only for authorized purposes and subject to applicable contractual, technical, and legal safeguards.

16. Location Accuracy

Eye Friend relies on location information generated by the user's device and related technologies.

Accuracy may be affected by:

• GPS availability;

• buildings and surroundings;

• device sensors;

• network availability;

• approximate versus precise location permission;

• operating-system services;

• battery-saving settings;

• device limitations; and

• environmental conditions.

DeFiCall therefore cannot guarantee that Eye Friend location will always be completely accurate, current, or continuously available.

Encryption protects the confidentiality of location information but does not determine or guarantee the accuracy of the location generated by the device.

17. Network and Technical Limitations

Eye Friend functionality may depend on:

• internet connectivity;

• mobile or Wi-Fi networks;

• GPS;

• device battery;

• device permissions;

• operating-system functionality;

• background execution settings; and

• technical infrastructure.

Location updates may therefore sometimes be delayed, interrupted, or unavailable.

Users should not assume that an unavailable or outdated location necessarily indicates the actual location, movement, condition, or safety of another person.

18. Recipient Privacy Responsibility

A person who has been legitimately authorized to view another user's location must handle that information responsibly.

Authorized recipients must not use location information for:

• stalking;

• harassment;

• intimidation;

• unauthorized surveillance;

• unlawful disclosure;

• exploitation; or

• any purpose prohibited by applicable law.

Once readable information has been legitimately displayed on an authorized user's device, that person may technically be able to capture or independently retain it.

DeFiCall cannot fully control what an authorized recipient does after legitimately receiving information.

19. Prohibition on Unauthorized Tracking

Eye Friend must not be used to secretly or unlawfully track another person.

Users must not:

• bypass authorization mechanisms;

• track another person without required permission;

• attempt to defeat privacy protections;

• obtain location information through deception;

• use Eye Friend for stalking;

• use location information for harassment or intimidation; or

• otherwise violate another person's privacy or legal rights.

DeFiCall may restrict, suspend, or terminate access where misuse is reasonably identified, subject to applicable law and DeFiCall policies.

20. Data Retention

DeFiCall seeks to retain information associated with Eye Friend only for as long as reasonably necessary to provide and protect the Service.

Where encrypted location information is temporarily or otherwise stored as required for Eye Friend functionality, it remains subject to the applicable encryption architecture.

Limited technical or account information may be retained where reasonably necessary for:

• security;

• fraud and abuse prevention;

• Service reliability;

• troubleshooting;

• dispute resolution; and

• legal compliance.

When information is no longer reasonably required, it may be deleted, anonymized, aggregated, or securely disposed of in accordance with applicable law.

21. Data Security

DeFiCall uses reasonable administrative, organizational, and technical safeguards designed to protect Eye Friend information.

These may include:

• encryption of location information;

• secure communications;

• account authentication;

• access controls;

• security monitoring;

• restricted infrastructure access; and

• other security measures appropriate to the Service.

No electronic system can guarantee absolute security.

Users are also responsible for protecting their devices, passwords, PINs, verification codes, and account credentials.

22. Children's Privacy

Where Eye Friend is available to minors, use of the feature is subject to applicable age, parental-consent, child-safety, and privacy requirements.

Where required by law, parental or legal guardian consent may be required.

The relevant provisions of the DeFiCall General Privacy Policy also apply.

23. User Privacy Rights

Depending on applicable law, users may have rights concerning personal information DeFiCall processes, including rights to:

• request access;

• request correction;

• request deletion;

• withdraw applicable consent;

• object to or restrict certain processing; and

• exercise other applicable privacy rights.

Such rights may be subject to legal, security, identity-verification, and technical limitations.

Requests may be submitted through DeFiCall's designated privacy or support channels.

24. International Data Processing

Because DeFiCall is designed as a global platform, encrypted Eye Friend information and associated technical information may be processed using infrastructure located in different jurisdictions.

Where required by applicable law, DeFiCall will implement appropriate safeguards for international processing or transfers of personal information under its control.

The DeFiCall General Privacy Policy provides additional information regarding international data processing.

25. Legal Requests

DeFiCall may be required to respond to valid and binding legal requests concerning information that it actually possesses.

However, DeFiCall cannot provide authorities or other requesting parties with readable plaintext Eye Friend location from its servers where the server does not possess that information in readable plaintext form.

DeFiCall may still be legally required to provide other account, authorization, technical, or encrypted information that it actually possesses where required by applicable law.

Any such request will be handled in accordance with applicable law and the DeFiCall General Privacy Policy.

26. User Responsibilities

Users are responsible for using Eye Friend safely and lawfully.

Users should:

• enable location sharing only intentionally;

• authorize only trusted people;

• periodically review authorized users;

• revoke unnecessary access;

• maintain appropriate device permissions;

• protect their DeFiCall account and device;

• understand the limitations of location technology; and

• respect the privacy and rights of other users.

27. Changes to This Eye Friend Privacy Policy

DeFiCall may update this Eye Friend Privacy Policy to reflect changes in:

• Eye Friend functionality;

• encryption architecture;

• security practices;

• location technology;

• applicable laws;

• platform requirements; or

• operational practices.

Where required by applicable law, users will receive appropriate notice of material changes.

The current version will display an updated “Last Updated” date.

28. Relationship With the General Privacy Policy

This Eye Friend Privacy Policy forms part of the broader DeFiCall Privacy Policy framework.

It should be read together with the DeFiCall General Privacy Policy.

The General Privacy Policy describes DeFiCall's overall privacy practices, while this section specifically addresses information processed in connection with Eye Friend.

Where this policy specifically addresses encrypted Eye Friend location information, these feature-specific provisions apply to Eye Friend.

29. Contact Us

If you have questions, concerns, complaints, or privacy requests regarding Eye Friend, you may contact DeFiCall through the official privacy or support contact information published within the DeFiCall application or on the official DeFiCall website.

DeFiCall will make reasonable efforts to review legitimate privacy requests concerning information under its control in accordance with applicable law.

DeFiCall
A Global Super App

Eye Friend Privacy Principle

Your Location. Your Choice. Your Control.

Eye Friend location information is protected through encryption. DeFiCall servers do not receive or store users' location information in readable plaintext form. Location sharing is permission-based and limited to users authorized through the applicable Eye Friend functionality.

SOS Privacy Policy

DeFiCall – A Global Super App

1. Introduction

The DeFiCall SOS feature is a privacy-focused safety communication feature designed to help users quickly alert trusted people and securely share relevant location information during an emergency or safety-related situation.

SOS is designed around the principles of:

User Control • Trusted Helpers • Encrypted Location • Privacy by Design

Location information processed through SOS is protected using encryption. DeFiCall servers do not receive or store users' SOS location information in readable plaintext form. Location information transmitted to or maintained within the applicable SOS server infrastructure is protected in encrypted form.

Users determine who may receive their SOS information by selecting trusted persons through the Helper List.

This SOS Privacy Policy (“SOS Privacy Policy”) explains how information is handled when you use SOS.

It supplements the DeFiCall General Privacy Policy and should be read together with it.

2. Purpose of SOS

SOS is designed to provide users with a fast and privacy-conscious way to communicate safety-related information to trusted persons.

Depending on available functionality, device capabilities, permissions, and application version, SOS may enable users to:

• activate an SOS alert;

• notify selected Helpers;

• securely share location information;

• provide location updates during an active SOS event;

• communicate relevant safety information; and

• use other safety-related functionality provided through DeFiCall.

SOS is intended primarily to facilitate communication between a user and the trusted Helpers selected by that user.

3. Privacy by Design

SOS is designed to minimize unnecessary access to sensitive location information.

Location information is protected through encryption so that DeFiCall servers do not receive or store the user's SOS location in readable plaintext form.

In practical terms:

User Location → Encryption → Encrypted Server Processing/Storage → Authorized Helper Access

Accordingly:

• SOS location information is protected through encryption;

• DeFiCall servers do not receive readable plaintext SOS location;

• SOS location is not publicly available;

• ordinary DeFiCall users cannot access another user's SOS location merely by using DeFiCall;

• access is restricted through the applicable Helper authorization mechanism; and

• users control whom they select as Helpers.

Encryption is an important part of the SOS privacy architecture but should not be interpreted as eliminating every possible security risk.

4. Helper List

The Helper List is a user-controlled list of trusted persons selected to receive SOS-related information.

Users decide whom to add to or remove from their Helper List.

Helpers may include, for example:

• family members;

• friends;

• colleagues; or

• other trusted persons selected by the user.

DeFiCall does not independently decide who should be included in a user's Helper List.

Users should add only people they know and trust.

5. Who May Receive SOS Location Information?

SOS location information is intended to be accessible only through the applicable authorization mechanism to Helpers selected and authorized by the user.

Depending on the functionality available, authorized Helpers may receive:

• an SOS alert;

• available current location;

• relevant location updates;

• time information associated with an SOS event; and

• other safety-related information intentionally shared through SOS.

A person does not automatically gain access to another user's SOS location merely because they have a DeFiCall account.

6. Location Information

Depending on the SOS functionality being used and permissions granted by the user, SOS may access device-generated information such as:

• approximate location;

• precise location;

• GPS coordinates;

• current location;

• relevant location updates;

• timestamps associated with location information; and

• other technical information necessary to provide location-based SOS functionality.

Location information transmitted to the applicable DeFiCall SOS server infrastructure is protected through encryption and is not received or stored by the server as readable plaintext location.

7. Encryption of SOS Location

SOS location information is protected through encryption to help preserve its confidentiality.

Under the applicable SOS architecture:

• location information is encrypted before or as part of transmission to the applicable server infrastructure;

• DeFiCall servers do not receive readable plaintext SOS location;

• stored SOS location information is maintained in encrypted form;

• unauthorized users are not permitted to access SOS location information; and

• access to readable location information is restricted through the applicable authorized Helper mechanism.

DeFiCall may process encrypted information and limited technical information required to transmit, secure, synchronize, and operate SOS functionality.

8. Location Permission

SOS requires appropriate device location permission to provide location-based functionality.

Depending on the functionality, device, and operating system, DeFiCall may request:

• approximate location;

• precise location; and/or

• background location where required for enabled SOS functionality.

Users may generally grant, deny, or withdraw location permissions through their device settings.

If a required permission is denied, restricted, or withdrawn, some SOS functionality may become unavailable or may not operate correctly.

9. Background Location

Certain SOS functionality may require location access while DeFiCall is not actively visible on the user's screen.

For example, where an active SOS event requires continuing location updates, location access may need to continue when the application is in the background or not actively in use.

Where background location is required:

• the applicable permission will be requested;

• users will be informed of its purpose;

• background access will be used for functionality requiring it; and

• users may manage or withdraw the permission through their device settings.

Disabling background location may interrupt or prevent continuous SOS location updates.

Location information generated through background functionality remains subject to the applicable SOS encryption protections.

10. SOS Activation

When a user intentionally activates SOS, DeFiCall systems may facilitate transmission of the SOS alert and encrypted location information to the user's authorized Helpers.

Depending on available functionality, Helpers may receive information indicating that:

• SOS has been activated;

• the user may require attention or assistance;

• location information is available through the authorized SOS functionality; and/or

• relevant location updates are being shared.

Activation of SOS does not make the user's location publicly available.

11. Information DeFiCall May Process

Although DeFiCall servers do not receive readable plaintext SOS location, DeFiCall may process limited information reasonably necessary to operate and secure SOS.

Account Information

This may include:

• account identifier;

• name or profile information;

• registered contact information; and

• authentication-related information.

Helper and Authorization Information

DeFiCall may process information necessary to determine:

• which users are included in a Helper List;

• which accounts are authorized;

• applicable SOS relationships; and

• relevant authorization status.

Encrypted Location Data

DeFiCall infrastructure may transmit or store encrypted location information required to provide SOS functionality.

The applicable server infrastructure does not receive or store this information as readable plaintext location.

SOS and Technical Information

DeFiCall may process limited information such as:

• SOS activation time;

• alert or delivery status;

• device type;

• operating system;

• application version;

• network information;

• IP address;

• security logs;

• diagnostic information; and

• other technical information reasonably necessary to operate, protect, and troubleshoot SOS.

12. How SOS Information Is Used

Information associated with SOS may be used to:

• provide SOS functionality;

• authenticate users;

• identify authorized Helpers;

• transmit encrypted location information;

• deliver SOS alerts and notifications;

• maintain Helper List functionality;

• maintain Service security and reliability;

• prevent unauthorized access;

• detect fraud or abuse;

• troubleshoot technical failures;

• improve SOS functionality; and

• comply with applicable legal obligations concerning information DeFiCall actually possesses.

SOS location information will not be intentionally used for purposes materially incompatible with the disclosed safety functionality without an appropriate legal basis and notice where required.

13. No Sale of SOS Location Information

DeFiCall does not sell SOS location information.

SOS location information is not intended to be used for:

• targeted advertising based on private SOS location;

• commercial sale of location histories;

• advertising profiling based on SOS location;

• unrelated behavioral tracking;

• unauthorized surveillance; or

• other unrelated commercial exploitation.

SOS location functionality exists to support safety communication between users and their authorized Helpers.

14. Information Received by Helpers

When SOS information is successfully made available to an authorized Helper, that person may be able to view location or other safety-related information provided through the feature.

After information has been legitimately displayed on an authorized Helper's device, the Helper may technically be able to:

• remember the information;

• capture a screenshot;

• record it;

• independently store it;

• communicate it to another person; or

• otherwise use information visible on their device.

DeFiCall cannot fully control what an authorized Helper independently does with information after legitimately receiving it.

Users should therefore select Helpers carefully.

15. Adding and Removing Helpers

Users are responsible for managing their own Helper List.

Users should:

• add only trusted persons;

• periodically review their Helper List;

• remove people who should no longer receive SOS information; and

• maintain appropriate security over their DeFiCall account.

Where supported, removing a Helper prevents that person from receiving future SOS information through that authorization.

Removal cannot necessarily erase information that the person previously received or independently retained while authorized.

16. Service Providers and Infrastructure

DeFiCall may use technical infrastructure and service providers reasonably necessary to operate SOS.

These may include services supporting:

• cloud infrastructure;

• encrypted transmission or storage;

• notifications;

• mapping functionality;

• security;

• communications;

• network operations; and

• other technical components.

Where encrypted SOS location information passes through applicable infrastructure, it remains subject to the encryption protections used by SOS.

Service providers are expected to process information only for authorized purposes and subject to appropriate contractual, technical, and legal safeguards.

17. Data Retention

DeFiCall seeks to retain information associated with SOS only for as long as reasonably necessary to provide, secure, and maintain the Service.

Where encrypted location information must be temporarily or otherwise stored as required for SOS functionality, it remains subject to the applicable encryption architecture.

Limited technical, account, authorization, or security information may be retained where reasonably necessary for:

• security;

• fraud and abuse prevention;

• Service reliability;

• troubleshooting;

• dispute resolution; and

• legal compliance.

When information is no longer reasonably required, it may be deleted, anonymized, aggregated, or securely disposed of in accordance with applicable law.

18. Data Security

DeFiCall uses reasonable administrative, organizational, and technical safeguards designed to protect information associated with SOS.

These measures may include:

• encryption of location information;

• secure communications;

• account authentication;

• access controls;

• security monitoring;

• restricted infrastructure access; and

• other security measures appropriate to the Service.

No electronic system, mobile network, internet connection, GPS technology, or data-storage system can guarantee absolute security.

Users are also responsible for protecting their devices, passwords, PINs, verification codes, and account credentials.

19. Location Accuracy

SOS relies partly on location information generated by the user's device and related technologies.

Accuracy may be affected by:

• GPS availability;

• device capabilities;

• buildings and physical surroundings;

• internet connectivity;

• mobile network conditions;

• device sensors;

• operating-system services;

• location permission settings;

• battery-saving features; and

• environmental conditions.

DeFiCall therefore cannot guarantee that SOS location information will always be completely accurate, current, or continuously available.

Encryption protects confidentiality; it does not guarantee the accuracy of the location generated by the user's device.

20. Network and Delivery Limitations

SOS functionality depends on appropriate device and communication capabilities.

SOS alerts or location updates may be delayed, interrupted, or unavailable because of:

• loss of internet connectivity;

• weak mobile or Wi-Fi network;

• GPS unavailability;

• device shutdown;

• insufficient battery;

• disabled permissions;

• operating-system restrictions;

• notification settings;

• Helper device connectivity;

• third-party infrastructure problems; or

• circumstances outside DeFiCall's reasonable control.

Accordingly, DeFiCall cannot guarantee successful or immediate delivery of every SOS alert or location update.

21. Emergency Services Limitation

DeFiCall SOS is a technology-based safety communication feature and is not an official emergency response service.

DeFiCall is not a:

• police department;

• ambulance service;

• fire service;

• hospital;

• emergency dispatch center;

• rescue organization; or

• government emergency authority.

Unless expressly stated for a particular functionality, activating SOS does not automatically contact official emergency services.

SOS is primarily designed to help users communicate with trusted Helpers selected by them.

Where immediate professional assistance is required, users should contact the appropriate official emergency service available in their location whenever possible.

22. No Guarantee of Helper Response

Activation of SOS does not guarantee that a Helper will:

• immediately receive an alert;

• see the notification;

• be available;

• respond;

• contact the user;

• contact emergency services;

• locate the user; or

• successfully provide assistance.

DeFiCall does not control the availability, actions, decisions, or response times of independently selected Helpers.

23. Misuse and Unauthorized Tracking

SOS must not be used for:

• unauthorized tracking;

• stalking;

• harassment;

• intimidation;

• unlawful surveillance;

• coercive monitoring;

• false emergency alerts;

• fraudulent activity; or

• any other unlawful or abusive purpose.

Users must not attempt to bypass authorization, privacy, encryption, or security mechanisms associated with SOS.

DeFiCall may restrict, suspend, or terminate access where misuse is reasonably identified, subject to applicable law and DeFiCall policies.

24. User Control

Users maintain control over important aspects of SOS privacy.

Depending on available functionality, users may:

• decide whether to use SOS;

• control applicable location permissions;

• choose their Helpers;

• remove Helpers;

• manage applicable background location permission; and

• stop using SOS.

Operating-system permissions can generally be changed through device settings.

Some SOS functionality may become unavailable when required permissions are disabled.

25. Children's Privacy

Where SOS is available to minors, its use is subject to applicable age, parental-consent, child-safety, and data-protection requirements.

Where legally required, parental or legal guardian authorization may be necessary.

The applicable provisions of the DeFiCall General Privacy Policy also apply.

26. International Data Processing

Because DeFiCall is designed as a global platform, encrypted SOS information and associated technical information may be processed using infrastructure located in different jurisdictions.

Where required by applicable law, DeFiCall will implement appropriate safeguards for international processing or transfers of personal information under its control.

The DeFiCall General Privacy Policy provides additional information regarding international data processing.

27. Legal Requests

DeFiCall may be required to respond to valid and binding legal requests concerning information that it actually possesses.

Because DeFiCall servers do not receive or store SOS location information in readable plaintext form, DeFiCall may not possess readable plaintext SOS location within its server infrastructure.

DeFiCall may nevertheless be legally required to provide other information that it actually possesses, including certain:

• account information;

• authorization information;

• technical information;

• security records; or

• encrypted information,

where disclosure is required by applicable law.

Legal requests will be handled in accordance with applicable law and the DeFiCall General Privacy Policy.

28. User Privacy Rights

Depending on applicable law, users may have rights concerning personal information DeFiCall processes, including rights to:

• request access;

• request correction;

• request deletion;

• withdraw applicable consent;

• object to or restrict certain processing; and

• exercise other privacy rights provided by law.

These rights may be subject to applicable legal, security, identity-verification, and technical limitations.

Privacy requests may be submitted through DeFiCall's designated privacy or support channels.

29. Changes to This SOS Privacy Policy

DeFiCall may update this SOS Privacy Policy to reflect changes in:

• SOS functionality;

• encryption architecture;

• security practices;

• location technology;

• applicable laws;

• platform requirements; or

• operational practices.

Where required by applicable law, users will receive appropriate notice of material changes.

The current version will display an updated “Last Updated” date.

30. Relationship With the General Privacy Policy

This SOS Privacy Policy forms part of the broader DeFiCall Privacy Policy framework.

It should be read together with the DeFiCall General Privacy Policy.

The General Privacy Policy describes DeFiCall's overall privacy practices, while this section specifically addresses information processed in connection with SOS.

Where this policy specifically addresses encrypted SOS location information, Helper authorization, or SOS location processing, these feature-specific provisions apply to SOS.

31. Contact Us

If you have questions, concerns, complaints, or privacy requests regarding SOS, you may contact DeFiCall through the official privacy or support contact information published within the DeFiCall application or on the official DeFiCall website.

DeFiCall will make reasonable efforts to review legitimate privacy requests concerning information under its control in accordance with applicable law.

DeFiCall
A Global Super App

SOS Privacy Principle

Your Location. Your Control. Your Trusted Helpers.

SOS location information is protected through encryption. DeFiCall servers do not receive or store users' SOS location information in readable plaintext form. SOS location sharing is restricted through the applicable authorization mechanism to Helpers selected by the user.

Important Safety Notice

DeFiCall SOS is a safety communication feature, not an official emergency response service. Location availability and delivery may be affected by GPS, device, network, permission, or other technical limitations.

General Privacy Policy

DeFiCall – A Global Super App

1. Introduction

Welcome to DeFiCall, a global digital platform designed to provide multiple services and features through a unified ecosystem.

This General Privacy Policy explains how DeFiCall (“DeFiCall,” “we,” “us,” or “our”) may collect, use, process, store, protect, and share information when users (“you” or “your”) access or use the DeFiCall mobile applications, websites, web applications, and related products, features, and services (collectively, the “Services”).

We are committed to respecting user privacy and handling personal information responsibly, transparently, and in accordance with applicable privacy and data protection requirements.

Because DeFiCall provides multiple services, certain features may require additional information or permissions. Feature-specific privacy provisions are provided separately under the relevant service or feature sections and form part of this Privacy Policy.

By accessing or using the Services, you acknowledge that your information will be handled as described in this Privacy Policy, subject to applicable law.

2. Scope of This Privacy Policy

This Privacy Policy applies to information processed through DeFiCall-operated applications, websites, platforms, and Services.

It should be read together with any feature-specific privacy notices or disclosures applicable to individual DeFiCall services.

Where a particular feature requires additional permissions, information, processing activities, or third-party integrations, those matters will be explained in the relevant feature-specific section.

Third-party websites, applications, payment providers, merchants, travel providers, healthcare providers, or other external services may maintain their own privacy policies. Their independent processing activities are governed by their respective privacy practices.

3. Information We May Collect

Depending on the Services you use, we may collect or process the following categories of information:

A. Account and Profile Information

This may include:

• Name;

• username or account identifier;

• email address;

• mobile number;

• profile information;

• profile image;

• country or region;

• account preferences; and

• other information you voluntarily provide.

B. Device and Technical Information

We may automatically receive certain technical information necessary to operate, secure, diagnose, and improve the Services, including:

• device type and model;

• operating system and application version;

• device or application identifiers;

• IP address;

• language and regional settings;

• network information;

• crash reports;

• diagnostic information; and

• security and system logs.

C. Usage Information

We may process information about how users interact with DeFiCall, such as:

• features accessed;

• service interactions;

• application activity;

• dates and times of access;

• preferences and settings;

• performance information; and

• actions necessary for security, fraud prevention, and service improvement.

D. Information Required for Specific Services

Certain DeFiCall features may require additional information, such as location, camera, microphone, contacts, files, transaction information, identity or verification information, or other service-specific data.

Such information will be accessed or processed only where reasonably necessary for the relevant functionality and subject to applicable permissions, consent requirements, and feature-specific privacy disclosures.

4. Device Permissions

Certain DeFiCall features may request access to device capabilities or information, including, where applicable:

• Camera;

• Microphone;

• Location;

• Contacts;

• Photos, media, files, or storage;

• Notifications;

• Bluetooth or nearby-device functionality; and

• other device permissions required for specific features.

DeFiCall requests permissions based on the functionality being used.

Where supported by the device or operating system, users may grant, deny, or later withdraw permissions through their device settings. Disabling a permission may prevent the related feature from functioning correctly or may make that feature unavailable.

DeFiCall does not intend to access device permissions for purposes unrelated to the functionality for which access is requested.

5. How We Use Information

We may process information for legitimate and appropriate purposes, including to:

• create and maintain user accounts;

• provide requested Services and features;

• authenticate users and maintain account security;

• personalize applicable functionality and user experience;

• process user requests and service interactions;

• maintain platform functionality and reliability;

• provide customer support;

• detect, investigate, and prevent fraud, spam, abuse, unauthorized access, or other harmful activities;

• enforce our Terms and applicable policies;

• troubleshoot technical problems;

• analyze and improve platform performance;

• develop and improve products, features, and Services;

• communicate important service, security, administrative, or policy information;

• comply with applicable legal and regulatory obligations; and

• protect the rights, property, security, and safety of DeFiCall, our users, and others.

We will not use personal information for materially incompatible purposes without an appropriate legal basis or notice where required by applicable law.

6. Legal Basis for Processing

Where applicable law requires a legal basis for processing personal information, DeFiCall may rely on one or more of the following:

• Consent — where you have provided valid consent;

• Contractual necessity — where processing is necessary to provide a Service you requested or to perform our contractual obligations;

• Legitimate interests — where processing is reasonably necessary for operating, securing, improving, or protecting our Services and those interests are not overridden by applicable user rights;

• Legal obligations — where processing is required to comply with applicable laws, regulations, legal processes, or lawful requests; and

• Protection of vital interests — where permitted and necessary to protect the safety or vital interests of an individual.

The applicable legal basis may vary depending on the Service, type of information, and jurisdiction.

7. How We Share Information

We do not sell personal information merely as a business model for trading user data.

We may share or disclose information only where reasonably necessary, including with:

• infrastructure and cloud service providers;

• payment and financial service providers;

• analytics, security, verification, communication, or technical service providers;

• merchants, service providers, or other parties involved in fulfilling a user-requested transaction or Service;

• professional advisers where appropriate;

• corporate affiliates where legally permitted and operationally necessary; and

• government authorities, regulators, courts, or law-enforcement agencies where disclosure is legally required or otherwise permitted by applicable law.

Service providers processing information on our behalf are expected to process it only for authorized purposes and subject to appropriate contractual or legal safeguards.

Feature-specific sharing practices, where applicable, will be described under the relevant service sections.

8. Data Security

We use reasonable administrative, organizational, and technical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, loss, destruction, or misuse.

Depending on the nature of the information and Service, these measures may include access controls, authentication mechanisms, encryption, secure communications, monitoring, infrastructure protections, and other security practices.

However, no digital platform, internet transmission, or electronic storage system can be guaranteed to be completely secure. Users are also responsible for maintaining the confidentiality of their passwords, verification codes, and account credentials.

Users should immediately notify DeFiCall if they suspect unauthorized access to or misuse of their account.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing the Services, maintaining security, resolving disputes, enforcing agreements, preventing fraud, and complying with applicable legal, accounting, or regulatory requirements.

Retention periods may vary depending on:

• the nature of the information;

• the Service involved;

• account status;

• security requirements;

• legal obligations; and

• legitimate operational requirements.

When information is no longer reasonably required, we may delete, anonymize, aggregate, or otherwise securely dispose of it, subject to applicable law.

10. International Data Processing and Transfers

DeFiCall is designed as a global platform. Information may therefore be processed, stored, or transferred in countries or regions other than the user's country of residence.

Where required by applicable law, we will use appropriate safeguards for international transfers of personal information.

Users acknowledge that privacy and data protection laws may differ between jurisdictions. DeFiCall will seek to handle personal information in accordance with applicable legal requirements governing the relevant processing activities.

11. User Privacy Rights

Depending on the user's jurisdiction and applicable law, users may have rights regarding their personal information, which may include the right to:

• request access to personal information;

• request correction of inaccurate information;

• request deletion of eligible personal information;

• withdraw consent where processing is based on consent;

• object to or restrict certain processing;

• request data portability where applicable; and

• submit a complaint to an appropriate data protection or regulatory authority.

Some rights may be subject to legal exceptions, identity verification, security requirements, or legitimate retention obligations.

DeFiCall may provide privacy controls directly through the application, website, account settings, or designated support channels.

12. Account and Data Deletion

Users may request deletion of their DeFiCall account and associated eligible personal information through available account-management functionality or designated DeFiCall support channels.

Upon a valid deletion request, DeFiCall will delete or anonymize eligible personal information within a reasonable period, subject to information that must or may lawfully be retained for purposes such as:

• legal and regulatory compliance;

• fraud and abuse prevention;

• financial or transaction recordkeeping;

• security;

• dispute resolution; or

• enforcement of legal rights.

Information retained under such exceptions will remain subject to appropriate protections and will not be used for unrelated purposes.

13. Children's Privacy

DeFiCall Services are not intended to be used by children in violation of applicable age and parental-consent requirements.

Where a Service is available to minors under applicable law, DeFiCall may implement age-appropriate safeguards and require parental or guardian consent where legally required.

If we become aware that personal information from a child has been collected or processed contrary to applicable law, we will take reasonable steps to address the matter, including deletion where appropriate.

Parents or legal guardians may contact DeFiCall regarding privacy concerns involving a minor.

14. Cookies and Similar Technologies

DeFiCall websites and web-based Services may use cookies, local storage, software development kits, or similar technologies where appropriate.

These technologies may be used to:

• maintain sessions;

• remember user preferences;

• support authentication;

• improve security;

• understand service performance; and

• improve functionality and user experience.

Where required by applicable law, appropriate notice or consent mechanisms will be provided.

15. Third-Party Services and Integrations

Certain DeFiCall Services may interact with third-party platforms, APIs, websites, payment systems, merchants, service providers, or other external services.

When users choose to interact with an independent third-party service, that third party may process information according to its own privacy policy and terms.

DeFiCall is not responsible for the independent privacy practices of third parties that are not acting as processors or service providers on behalf of DeFiCall.

Users are encouraged to review applicable third-party privacy policies before providing information directly to such services.

16. Automated Systems and Service Improvement

DeFiCall may use automated technologies where appropriate to support platform security, fraud and abuse detection, content or service organization, operational efficiency, personalization, and improvement of the Services.

Where automated processing produces legal or similarly significant effects and applicable law provides specific rights, DeFiCall will provide the protections required by that law.

Additional disclosures may be provided for individual features where automated technologies are materially involved.

17. Compliance With Law and Protection of Users

We may preserve, access, or disclose information where we reasonably believe doing so is necessary and legally permitted to:

• comply with applicable law or legal process;

• respond to valid governmental or regulatory requests;

• investigate suspected fraud, abuse, security incidents, or violations of our policies;

• protect the rights and property of DeFiCall or others;

• protect users or the public from harm; or

• establish, exercise, or defend legal claims.

Where legally permitted and appropriate, we seek to evaluate requests for user information before disclosure.

18. Changes to This Privacy Policy

DeFiCall may update this Privacy Policy from time to time to reflect changes in our Services, technologies, operational practices, or applicable legal requirements.

When material changes are made, we may provide notice through the DeFiCall application, website, email, or other appropriate means where required.

The updated policy will display a revised “Last Updated” date.

Users are encouraged to review this Privacy Policy periodically.

19. Feature-Specific Privacy Provisions

This General Privacy Policy establishes the general privacy principles applicable across the DeFiCall ecosystem.

Individual Services may have additional privacy provisions covering their specific data processing activities, permissions, functionality, and safeguards.

These may include, among others:

Communication • SOS • Eye Friend • Pay Call • Pay Meeting • Pay Group • Pay Shop • Pay Travel • Pay Learning • Pay Health • People Map • DeFi Drive • Wallet and Payment Services • and other current or future DeFiCall Services.

Where a feature-specific privacy provision applies, it should be read together with this General Privacy Policy.

20. Contact Us

If you have questions, concerns, requests, or complaints regarding this Privacy Policy or the processing of personal information, you may contact DeFiCall through the official contact information published within the DeFiCall application or on the official DeFiCall website.

We will make reasonable efforts to review and respond to legitimate privacy requests in accordance with applicable law.

DeFiCall
A Global Super App

This General Privacy Policy forms part of DeFiCall's overall privacy framework and should be read together with the privacy provisions applicable to individual DeFiCall features and services.