How to Withdraw Consent

Once you have selected "Yes" to consent, you can withdraw your consent at any time by contacting us at service@rooftopshark.com. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.

We, Rooftop Shark, LLC, are committed to protecting your personal data and respecting your privacy.

Introduction

This privacy policy, together with our Terms of Service and any other terms incorporated by reference into the Terms of Service, applies to your use of:

The Rooftop Shark mobile software application (App) which can be downloaded from app stores or other mobile application platforms once you have downloaded or copied the link to download the App onto your smartphone or handheld device (Device)

Any services available through the App (Service) which can be accessed through our application site or our other sites (Service Sites). This privacy policy forms the basis on which we process any personal data we collect from you or that you provide to us. This application is not intended for children, and we will not knowingly collect data about children. Please read the following carefully to understand how we use and process your personal data.

This privacy policy is presented in a layered format, and you can click on the specific areas listed below.

Important Information and Who We Are

Shenzhen Aozhi Tianxia Information Technology Co., Ltd. is the holder and responsible person for your personal information (collectively referred to as "we" in this privacy policy)

If you have any questions about this privacy policy, please contact us using the details listed below

Contact Details

Our details:

Legal Name: Rooftop Shark, LLC

Email: service@rooftopshark.com

Address: 1950 W. Corporate Way #95972, Anaheim CA 92801, USA

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) or other competent supervisory authority in EU member states at any time

Changes to the Privacy Policy and Your Obligation to Inform Us of Changes

We regularly review our privacy policy

This version was last updated on August 30, 2025. This version may change, and if there are changes, these changes will be posted on this page and any other places we deem appropriate so that you will notice the information we collect and how we use it and under what circumstances, if any, we will disclose it. If there are any changes to this privacy policy as a result of updating this application, an updated version of the privacy policy will appear on the screen when you download the new version, and you will need to read and agree to the new privacy policy to continue using the application or service.

The personal data we hold about you must be accurate and up-to-date. If your personal data changes during our relationship, please inform us promptly.

The Data We Collect About You

In order to provide you with our services, we need you to provide necessary personal data, and we will not be able to provide you with our products or services if you cannot provide it.

We will only collect necessary personal data for clear, specific, and lawful purposes, and will not use it contrary to the above.

We will collect, use, store, and transfer various types of personal data about you, as follows:

Personal data: Including your username and password, email address, gender, age

Health data: Heart rate, height, weight, exercise details, sleep status

We will not collect any special categories of personal data about you (including racial or ethnic origin, religious or philosophical beliefs, sexual life, sexual orientation, political opinions, trade union membership, biometric and genetic information about you). We will also not collect any information about criminal cases and illegal acts.

We will not collect or store any data from your HealthKit and Google Fit in any form or sell it to advertising or other operating agencies.

When you sync through HealthKit and Google Fit, you may be asked to authorize whether to sync. This information is managed by iOS and Android systems. The APP will not store health data in any form, nor will it collect or store your personal health data in any form.

Use of this APP constitutes your agreement to the terms and conditions of this privacy policy. If you do not agree with this policy, please do not use the APP. We reserve the right to change, modify, add or delete parts of this policy at any time. Please review this page periodically for any modifications. Your continued use of our APP after the publication of any changes to these terms will mean that you have accepted these adjustments.

How Your Personal Data Is Collected

We will collect and process your personal information and health data after you agree to provide it to us by filling out forms on the application site and service site (collectively referred to as our sites) or by corresponding with us (for example, by email). This includes information you provide when registering to use the application site, downloading or registering an application, subscribing to any of our services, searching for applications or services, participating in auctions, promotions or surveys, and when you report problems with the application, our services, or any of our sites, if you contact us, we will keep a record of the communication.

How We Use Your Personal Data

We will only use your personal data where the law allows us to do so.

Generally, we will use your personal data in the following circumstances:

• With your prior consent
• We need to perform a contract we are about to enter into or have entered into with you
• Our legitimate interests (or the interests of third parties) so require and your interests and fundamental rights do not override these interests
• We need to comply with legal or regulatory obligations

Disclosure of Your Personal Data

We will disclose your personal data to our affiliates or service providers with whom we have contracted to assist us in providing services to you (collectively referred to as third-party service providers), such as cloud computing service providers that provide cloud storage services. In accordance with applicable laws, our contracts require third-party service providers to comply with our data privacy and security requirements.

To the extent required by applicable law, we may also disclose your personal data to relevant authorities, which may include law enforcement agencies and courts.

Purposes for Which We Will Use Your Personal Data

You can learn more about the types of legal bases on which we will process your personal data, as follows:

Consent: Processing your personal data while you indicate your consent through a statement or explicitly choose to process for a specific purpose. Consent is only valid if it is freely given, specific, informed and clearly indicates what you want. You can contact us to withdraw your consent at any time.

Legitimate interests: Our business's interests in carrying out and managing the business, enabling us to provide you with the best services/products and the best, safest experience. Before we process your personal data on the basis of legitimate interests, we will ensure that we consider and balance any potential impact on you (positive and negative) and your rights. We will not use your personal data for actions that go beyond our interests to the extent that they affect you (unless we obtain your consent or the law requires or allows it). You can contact us for more information about how we assess our legitimate interests to prevent any potential impact on your specific actions.

Contract performance: Processing your data where necessary to perform a contract to which you are a party, or taking steps at your request before entering into such a contract.

Compliance with legal obligations: Processing your personal data where necessary to comply with legal obligations to which we are subject.

Permissions Used by the APP

Third-Party Libraries Used

International Transfers

Whenever we transfer your personal data out of the EEA, we ensure a similar level of protection by implementing at least one of the following protective measures:

• We may transfer your personal data to countries that the European Commission has determined provide adequate protection for personal data.
• If we use suppliers located in the United States who are part of the Privacy Shield, we may transfer data to them, which requires them to provide similar protection for personal data shared between Europe and the United States.
• We will implement appropriate safeguards to ensure that all such transfers comply with applicable legal requirements.

If you want to know more about the specific mechanisms we use when transferring your personal data out of the EEA, please contact us.

Data Security

All information you provide to us is stored on secure servers encrypted using Secure Sockets Layer technology. If we give you (or you choose) a password that enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask that you do not share your password with anyone.

Once we receive your information, we will use strict procedures and security features to prevent accidental loss, use or access of your personal data in an unauthorized manner.

We will use application data caching and other technologies to collect and store personal data on your device.

We have procedures in place to deal with any suspected personal data breaches and will notify you and any applicable regulatory authorities when required by law.

Data Retention

In some cases, you can ask us to delete your data: for more information, please see your legal rights below.

In some cases, we will anonymize your personal information for research or statistical purposes (so that it is no longer associated with you), in which case we may use this information indefinitely without further notice.

We will retain your personal data as necessary to fulfill the purposes described in this privacy policy or to comply with applicable laws. If we determine that it is reasonable to no longer retain your personal data as necessary to fulfill the purposes described in this privacy policy, we will no longer retain your personal information or delete relevant information associated with certain individuals.

Your Legal Rights

In certain circumstances, under data protection laws relating to your personal data, you have the following rights:

• Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are processing it lawfully.
• Request correction of the personal data we hold about you. This enables you to correct any incomplete or inaccurate data we hold about you, though we may need to verify the accuracy of the new data you provide to us.
• Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us to continue processing it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing. If you need to delete, please submit your request in the APP's Personal Center -> Feedback -> Bottom Logout Account, and we will process it for you within 15 working days.
• Object to processing of your personal data. Where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground, because you feel it impacts on your fundamental rights and freedoms. You also have the right to object to our processing of your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
• Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios:
  • (a) If you need us to establish the accuracy of the data;
  • (b) If our use of the data is unlawful but you do not want us to delete it;
  • (c) If you need us to keep the data even if we no longer need it because you need it to establish, exercise or defend legal claims;
  • (d) You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
• Request transfer of personal data to you or to a third party. We will provide your personal data to you or a third party you have chosen in a structured, commonly used, machine-readable format. Please note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to enter into a contract with you.
• Withdraw consent at any time, even if we are processing your personal data on the basis of consent. However, this will not affect the lawfulness of any processing carried out before you withdrew your consent. If you withdraw your consent, we may not be able to provide you with certain products or services. We will inform you of the situation when you withdraw your consent.
• Not to be subject to automated personal decision-making based solely on automated processing, including filling in registration account information, which produces legal effects concerning you or similarly significantly affects you.

You can exercise these rights at any time by contacting us at service@rooftopshark.com.

Mob Compliance Terms

We use the third-party (Shanghai Youkun Information Technology Co., Ltd., hereinafter referred to as "MobTech") MobTech MobPushSDK service to provide you with message push functions. In order to smoothly implement this function, you need to authorize MobTechSDK to provide corresponding services; after your authorization, MobTech will collect your relevant personal information. For information about the types of information collected by MobTech, purposes, personal information protection rules, and opt-out mechanisms, please refer to the privacy policy on MobTech's official website (www.mob.com).