Kiio Privacy Policy

Updated: July 16, 2026
Effective: July 16, 2026
Personal information handler: the Kiio operator identified in the App ("we", "us", or "our")
Contact: jbternaltech@jbternal.com

1. Scope

This Policy applies to personal information processed through the Kiio App, Kiio smart devices, and related services. See the Personal Information Collection List for data categories, scenarios, and retention rules, and the Third-Party Information Sharing List for recipients.

2. Information We Process

Depending on the functions you use, we may process:

  1. Account information: email address, mobile number, verification codes, password hash, user identifier, login token, and preferences;
  2. Device and network information: device identifier, model, binding relationship, IP address, request time, error data, and security logs;
  3. AI interaction information: voice, text, necessary conversation context, AI responses, tool parameters, and results;
  4. Service information: chat history, reminders, bills, mail settings and message information, news or product searches, voice samples, and other information you submit;
  5. Transaction and support information: plans, orders, redemptions, refunds, benefits, and customer-support communications; and
  6. Permission information: camera images and QR code content when you use QR scanning.

If you do not use an optional function, we do not process information specific to that function. Your submissions may contain another person's personal information. You must have authority to provide it and should avoid submitting unrelated sensitive information.

3. Purposes and Methods

We process personal information to:

  1. create and manage accounts, verify identity, and protect account security;
  2. bind devices and provide AI interaction and tools you choose to use;
  3. fulfill orders, membership benefits, refunds, and customer support;
  4. prevent attacks, fraud, and abuse, troubleshoot failures, and comply with legal obligations; and
  5. fulfill other purposes that you separately authorize.

Where consent is required, we obtain it before processing. We obtain separate consent where required for sensitive personal information or cross-border transfers. Refusing optional processing affects only the related function.

4. Device Permissions

  1. Camera: used when you choose to scan a device QR code. You may use another binding method offered on the page.
  2. We explain the purpose of any other system permission before the related function asks for authorization.

You may disable permissions in system settings. This may disable the corresponding function but does not affect unrelated functions.

5. Processors, Sharing, and International Transfers

  1. To fulfill your request, we may provide necessary information to cloud, AI, voice, weather, search, messaging, mail, or order providers. Recipients, purposes, information categories, and methods are listed in the Third-Party Information Sharing List.
  2. We do not sell personal information or use private conversations, mail, or bills for third-party targeted advertising.
  3. We do not provide information to unrelated third parties except with your authorization, to comply with law, to protect significant lawful interests, or as otherwise permitted by law.
  4. When information is processed outside your country or region, we provide required information about the overseas recipient, purpose, data categories, and rights process and complete applicable safeguards.

6. Retention and Deletion

  1. We retain information only for the shortest period needed for its purpose. Account information is generally retained until account deletion; service records until you delete them, the function ends, or the account is deleted; and codes, tokens, caches, and security logs for their validity or necessary security period.
  2. Where law requires retention, or information is needed for disputes or security incidents, we retain only the necessary information for the legally required or necessary period and restrict other processing.
  3. After you delete information or your account, we delete or anonymize related information as required. Backup copies are removed through the backup rotation cycle and access is restricted in the meantime.
  4. Independently retained third-party information is handled under the third party's privacy rules. We assist you with applicable rights requests as required.

7. Security

We use measures such as encrypted transport, password hashing, credential encryption, access controls, audit logs, rate limits, and session management. If a personal information incident occurs, we take remedial, notification, and reporting measures as required by law.

8. Your Rights

You may exercise applicable rights to access, copy, correct, supplement, delete, withdraw consent, delete your account, and request an explanation of processing rules by:

  1. managing accounts, devices, and service records in the App;
  2. disabling permissions in system settings or unbinding, deleting, or withdrawing authorization in the relevant function;
  3. requesting deletion under the Account Deletion Notice; or
  4. contacting jbternaltech@jbternal.com for other requests or complaints.

We may verify your identity to protect account security. Withdrawal does not affect processing already completed before withdrawal.

9. Minors

Kiio is primarily intended for users aged 16 or older. Users under 18 should use it with guardian guidance. Before processing personal information of a child under 14, we obtain guardian consent and apply dedicated rules as required by law.

10. Updates and Contact

We may update this Policy for legal or service changes. Material changes will be prominently notified, and we will obtain renewed consent where required. Contact jbternaltech@jbternal.com with questions.