HueCircle Privacy Policy

Effective Date: January 31, 2026

Welcome to the HueCircle application (hereinafter referred to as the "Application") developed by COSMICFREE LLC (hereinafter referred to as "we" or "us"). This Privacy Policy is designed to clearly and detailedly inform you how we collect, use, store, share, transfer, and protect your personal data generated when using the Application, as well as the rights you have in relation to your personal data and how to exercise them.

This Application is only available to users aged 18 and above, and we explicitly commit not to collect any personal data of minors. Please carefully read and fully understand all the terms of this Privacy Policy. By checking "I agree to the Privacy Policy and User Terms" and using the Application, you indicate that you have fully understood and agreed to all the contents of this Policy and consent to our processing of your personal data in accordance with this Policy. If you do not agree to any term of this Policy, please immediately stop using the Application.

I. Information About the Data Controller and Data Protection Officer (DPO)

1.1 Data Controller

The data controller responsible for collecting and processing your personal data is: COSMICFREE LLC

Registered Address: 2457 Lamar St, Edgewater CO 80214, US

Contact Email: constancerodrig50@gmail.com

We reserve the right to change the information of the data controller according to business development needs. We will promptly notify you of such changes through pop-ups, announcements, or other means within the Application. Your continued use of the Application after the notification shall be deemed your consent to the changed content.

1.2 Data Protection Officer (DPO)

To protect your personal data rights and interests, we have appointed a dedicated Data Protection Officer who is responsible for supervising the implementation of this Privacy Policy and handling your inquiries and complaints related to personal data. The specific contact information is as follows:

Contact Email: constancerodrig50@gmail.com

You may contact us at the above email address at any time to consult about personal data processing, submit requests to exercise your rights, or file complaints and feedback. We will respond to and process your request within 7 working days of receipt.

II. Core Features and Service Description of the Application

HueCircle is an interest-based community application for lip makeup and lip color enthusiasts. Its core functions include lip color inspiration collection, authentic swatch sharing, user experience exchange, and occasion-based makeup guidance. It aims to help users quickly find lip colors suitable for themselves, learn lip makeup skills, explore lip makeup styles for different occasions, and establish communication and interaction with like-minded people.

This Application does not provide registration or login functions. You do not need to submit personal identification information such as your name, phone number, or email address. You can directly use all functions of the Application by simply checking and agreeing to this Privacy Policy and User Terms.

III. Scope and Purpose of Information Collection

We strictly adhere to the principle of "minimum necessity" and only collect personal data necessary for you to use the functions of the Application. We do not collect any information unrelated to the services of the Application, and all collection activities are solely for the purpose of realizing the core functions of the Application and improving service quality. The details are as follows:

3.1 Personal Data You Voluntarily Provide

• Swatch Content and Sharing Information: When you use the swatch sharing function on the "Post Page" of the Application, you may voluntarily upload lip makeup swatch photos (taken with the camera or selected from the album), and add text descriptions (such as lip color evaluations, usage experiences, skin tone adaptation suggestions, etc.). We collect such information to display your shared content, provide real references for other users, improve the Application's lip color inspiration library, and optimize the quality of content recommendations.

• Feedback Information: When you use the feedback function on the "My Page" of the Application, you can submit suggestions, complaints, or problem feedback about the Application through text or voice recording (which requires authorization of the microphone permission). We collect such information (including the text content and voice recordings you submit) to receive your feedback, promptly identify and resolve application issues, optimize functional experience, and improve service quality.

3.2 Personal Data We Collect Through Device Permissions

Some functions of this Application require relevant permissions of your device to work properly. We will only collect necessary information through the corresponding permissions after you authorize and consent. The purpose of the permission, the scope of collection, and the impact of refusing authorization are as follows. You can revoke the authorization at any time in the device settings:

• Camera Permission: Only used for the swatch shooting function on the "Post Page" of the Application. When you need to take lip makeup swatch photos and post them, we will obtain the real-time images taken by you through the camera permission. After shooting, you can choose whether to save and upload them. If you refuse to authorize, you will not be able to use the camera shooting function, but you can select existing photos from the album to post without affecting the normal use of other functions. We will not actively turn on the camera, take photo in the background, or collect irrelevant content taken by the camera.

• Album (Photo) Permission: Only used for the swatch sharing function on the "Post Page" of the Application. When you need to select existing lip makeup swatch photos from your device's album to post, we will access your album through this permission for you to choose the content to upload. If you refuse to authorize, you will not be able to select content from the album to post, but you can take new content with the camera without affecting the normal use of other functions. We only access the content you actively choose to upload and will not batch read or collect all photos and videos in your album.

• Microphone Permission: Only used for the feedback template on the "My Page" of the Application. When you need to submit feedback through voice recording, we will obtain your recording content through the microphone permission. After recording, you can choose whether to submit it. If you refuse to authorize, you will not be able to use the voice recording feedback function, but you can submit feedback through text without affecting the normal use of other functions. We will not actively turn on the microphone, record in the background, or collect irrelevant sounds recorded by the microphone.

• External Storage Permission: Only used to save the swatch photos you take (for your subsequent editing and uploading) and to read swatch-related content saved on your device (for you to choose to upload). If you refuse to authorize, you will not be able to save the taken content or select content from external storage to upload, but it will not affect the use of other core functions. We will not access or read other irrelevant files in your external storage (such as documents, music, other photos, etc.).

• Application Information Reading Permission: Only used to read the installation information, version number, running status, etc., of this Application on your device. The purpose is to identify application operation faults, push version update notifications, optimize application compatibility, and ensure that the Application can run stably and normally. We will not read any information about other applications on your device or collect device data unrelated to the operation of this Application.

• Advertising IDs Permission: Only used to optimize content recommendation accuracy and understand user preference trends (without involving personalized advertising promotion). We will collect your device's advertising ID, which is a non-personally identifiable identifier provided by the device system, to analyze user usage habits of lip makeup content and push more appropriate lip color inspiration and swatch content. If you refuse to authorize, it will not affect the normal use of all core functions of the Application, and we will not collect any advertising-related identifiers or conduct relevant preference analysis. We will not associate the advertising IDs with your personal identity information, nor will we share the advertising IDs with any third parties for advertising purposes.

3.3 Non-Personally Identifiable Information We Automatically Collect

When you use the Application, we will automatically collect some non-personally identifiable information (such information cannot identify your personal identity alone or in combination with other information) to optimize service experience and analyze user behavior. The details are as follows:

• Device-Related Information: Such as device model, operating system version, device resolution, network type (Wi-Fi/mobile network), and unique Device ID (only used to distinguish devices and not associated with personal identity);

• Usage Behavior Information: Such as the functional modules of the Application you use, the swatch content you browse, the number of contents you post, interactive behaviors (likes, comments, collections), usage duration, login frequency, etc.;

• Log Information: Such as application crash logs, error logs, page loading logs, etc., which are only used to identify application faults and optimize application performance and do not contain any personal identification information.

3.4 Information Not Collected

We explicitly commit not to collect the following information:

• Any Personal Identification Information: Including but not limited to name, phone number, email address, ID card number, passport number, address, bank card information, etc.;

• Minor-Related Information: This Application is only available to users aged 18 and above. We will not actively collect any personal data of minors. If we find that a minor is suspected of using the Application, we will immediately stop providing services and delete any collected relevant data (if any);

• Information Unrelated to the Application's Services: Including but not limited to your social account information, call records, geolocation information, browsing history (outside the Application), payment information, etc.;

• Any Other Information Without Your Explicit Authorization: We will not collect any of your personal data or device information in any way without obtaining your authorization.

IV. Rules for the Use of Personal Data

The personal data we collect will only be used for the following purposes. Without your explicit consent, it will not be used for any other purposes or beyond the following scope:

1. Realize the core functions of the Application: Including the release, display, and sharing of swatch content, the reception and processing of feedback, the collection and recommendation of lip color inspiration, and the communication and interaction between users;

2. Optimize service quality and user experience: According to your usage behavior and feedback information, optimize the function design and interface layout of the Application, improve application running speed, refine the content recommendation algorithm, and provide you with more tailored lip color inspiration and communication services;

3. Identify and resolve application faults: Through the collected application logs, device information, error feedback, etc., identify problems occurring during the operation of the Application, fix vulnerabilities, and ensure that the Application can run stably and safely;

4. Push important notifications: Such as application version update prompts, privacy policy change notifications, service terms update notifications, etc., to ensure that you can timely understand relevant changes of the Application;

5. Comply with legal and regulatory requirements: Use your personal data as required by laws and regulations, judicial organs, or regulatory authorities (only for performing legal obligations).

We will not use your personal data for purposes unrelated to the core services of the Application, such as marketing and advertising promotion, nor will we correlate and analyze your personal data with user data of other third-party services.

V. Sharing, Transfer, and Sale of Personal Data

5.1 Sharing of Personal Data

We strictly restrict the scope of personal data sharing. We will only share your personal data with third parties in the following circumstances. Before sharing, we will take security measures such as encryption and anonymization to ensure the security of your personal data and clarify the confidentiality obligations of third parties:

• With Your Explicit Consent: For example, if you take the initiative to choose to share your swatch content to other third-party social platforms, we will share the content you choose to share with the relevant third-party platform in accordance with your instructions;

• When Entrusting Third Parties to Provide Technical Support for Realizing the Core Functions of the Application: For example, we entrust third-party server providers to store your personal data, or entrust third-party technology companies to identify application faults and optimize recommendation algorithms. Such third parties can only use your personal data within the scope of providing services to us, and shall not use it beyond this scope or disclose your personal data to any other third parties;

• When Complying with the Requirements of Laws and Regulations, Judicial Organs, or Regulatory Authorities: For example, if we receive a subpoena, instruction, or other legal document from a judicial organ or regulatory authority requiring us to provide your personal data, we will share the necessary personal data with the relevant authority within the scope permitted by law;

• When Protecting Our Legitimate Rights and Interests or Those of Others: For example, if we find that you use the Application in violation of laws and regulations, this Privacy Policy, or the User Terms, or may damage the legitimate rights and interests of us, other users, or third parties, we may share your relevant data with relevant parties within the necessary scope (only for rights protection, liability investigation, or risk prevention).

Except for the above circumstances, we will not share your personal data with any third parties.

5.2 Transfer of Personal Data

We will not transfer your personal data to any third parties unless the following circumstances occur. Before the transfer, we will take reasonable security measures to ensure that your personal data rights and interests are not damaged, and will promptly notify you through pop-ups, announcements, or other means within the Application:

• Corporate Changes Such as Merger, Division, Acquisition, or Restructuring: At this time, your personal data will be transferred to the changed entity as part of the company's assets, but the changed entity will continue to perform the obligations agreed in this Privacy Policy. If you do not agree to the transfer, you can stop using the Application, and we will delete all your personal data;

• With Your Explicit Written Consent: For example, if you take the initiative to request the transfer of your personal data to a specific third party, we will conduct the transfer on the premise of ensuring data security in accordance with your instructions.

5.3 Sale of Personal Data

We explicitly commit that we will not sell, rent, or lend any of your personal data, nor will we assist third parties in selling your personal data in any way.

You have the right to choose not to allow your personal data to be "sold" (even though we will not engage in such behavior). If you find any suspected sale of your personal data, you can immediately contact us through the contact information agreed in this Policy. We will immediately conduct an investigation, take corresponding remedial measures, and feedback the investigation results to you.

5.4 Methods to Opt Out of Data Sharing or Sale

If you wish to opt out of the sharing of your personal data (only for the shareable scenarios agreed in Article 5.1 of this Policy), you can operate in the following ways. We will complete the processing and feedback the results to you within 7 working days of receiving your request:

• Opt Out of Third-Party Social Platform Sharing: In the "Settings" of the Application, find the "Third-Party Sharing" option and turn off the sharing permission of the corresponding social platform to stop sharing your swatch content with that third-party platform;

• Opt Out of Third-Party Technical Support Sharing: Submit a written application through the DPO contact email (constancerodrig50@gmail.com) clearly requesting to opt out of data sharing related to third-party technical support. We will immediately terminate the sharing of your personal data with the corresponding third party and require the third party to delete your personal data obtained (if any);

• If you find any suspected sale of your personal data, you can submit a complaint through the above contact email. We will immediately investigate and handle it, take measures to stop such behavior (if it exists), delete relevant data, and pursue the liability of the relevant parties.

Please note: If you opt out of data sharing, it may affect the normal use of some functions (such as being unable to share swatch content to third-party social platforms), but it will not affect the use of the core functions of the Application.

VI. Storage and Protection of Personal Data

6.1 Storage Location

The personal data we collect will be stored on third-party servers located in the United States (complying with Google Play listing requirements and relevant regional privacy laws and regulations). At the same time, we will take security measures such as encryption and access control to ensure the security of data storage.

If it is necessary to transfer your personal data to other countries or regions for storage due to business needs, we will strictly comply with the requirements of relevant regional privacy laws and regulations, obtain your explicit consent in advance, and take sufficient security measures (such as encryption, signing data processing agreements, etc.) to ensure that your personal data rights and interests are not damaged.

6.2 Storage Period

We adhere to the principle of "minimum storage period" and only store your personal data for the period necessary to achieve the purposes agreed in this Privacy Policy. The specific storage periods are as follows:

• Swatch Content, Text Descriptions, and Feedback (Text, Voice Recordings) You Voluntarily Upload: Will be stored continuously during your use of the Application; if you actively delete such content, or stop using the Application and request data deletion, we will immediately delete it or anonymize it (so that your personal identity cannot be identified);

• Information Collected Through Device Permissions (Such as Content Taken by the Camera, Content Selected from the Album): Only stored until you complete the relevant operation (such as posting, submitting feedback). If you do not complete the operation and do not save it, it will be automatically deleted after you exit the corresponding function;

• Non-Personally Identifiable Information (Such as Device Information, Usage Behavior Information, Log Information): The storage period shall not exceed 12 months. After the expiration, it will be automatically deleted or anonymized for subsequent data analysis and function optimization (only for non-identifiable purposes);

• If it is necessary to extend the storage period to comply with laws and regulations, perform legal obligations, identify faults, or protect rights and interests, we will extend it within the scope permitted by laws and regulations, take security measures to protect your personal data, and immediately delete or anonymize it after the expiration of the period.

6.3 Protection Measures

We attach great importance to the security of your personal data and take various technical and management security measures to prevent personal data from being disclosed, tampered with, lost, abused, etc. The details are as follows:

• Technical Security Measures: Adopt encryption technology to encrypt the transmission and storage of your personal data; set access control permissions so that only authorized personnel can access your personal data; regularly conduct security inspections and vulnerability scans on servers and applications to promptly fix security risks; adopt firewalls, intrusion detection systems, etc., to prevent network attacks;

• Management Security Measures: Establish a sound personal data processing management system, clarify the responsibilities of personnel in various positions, conduct strict security training and background checks on employees who have access to personal data; sign confidentiality agreements to prohibit employees from disclosing or abusing personal data; regularly audit the personal data processing process to ensure compliance with this Privacy Policy and relevant legal and regulatory requirements;

• Emergency Response Measures: Establish an emergency response mechanism for personal data security. If a personal data security incident such as disclosure, tampering, or loss occurs, we will immediately activate the emergency plan, take remedial measures (such as stopping disclosure, recovering data, etc.), and notify you of the relevant situation and the remedial measures taken through the contact email or other means within 72 hours according to the severity of the incident, and report to the relevant regulatory authorities (if required by laws and regulations).

Please note: Although we have taken the above strict security measures, due to the limitations of Internet technology and unforeseeable factors such as force majeure, hacker attacks, and user operation errors (such as device loss, password leakage, etc.), your personal data may be disclosed or lost. We shall not be liable for personal data security issues caused by the above non-intentional or gross negligence on our part, but we will make every effort to assist you in taking remedial measures.

VII. Protection of Minors' Data

This Application is only available to users aged 18 and above. We explicitly prohibit minors (under 18 years old) from using the Application and will not actively collect any personal data of minors.

If you are the guardian of a minor and find that your ward has used the Application and may have submitted personal data, please immediately contact us through the contact email agreed in this Policy and provide relevant supporting documents (such as the guardian's identification, the minor's identification, etc.). We will immediately stop providing services to the minor, delete all collected relevant data, and no longer retain any relevant information.

VIII. Additional Rights of Users in Specific Regions

We respect the privacy laws and regulations of different countries and regions. For users in specific regions, in addition to all the rights agreed in this Policy, you also have the following additional rights (in accordance with relevant regional privacy laws and regulations, such as VCDPA, CCPA, CPRA, LGPD, FADP, etc.):

8.1 Rights Under the Virginia Consumer Data Protection Act (VCDPA) (Applicable to Users in Virginia)

• Right of Access: You have the right to request us to inform you of the type, source, purpose of use, sharing object, and other information of the personal data we have collected about you, as well as to obtain a copy of your personal data;

• Right to Correction: You have the right to request us to correct your inaccurate or incomplete personal data;

• Right to Deletion: You have the right to request us to delete all or part of your personal data (unless we are required to retain it by laws and regulations);

• Right to Data Portability: You have the right to request us to provide your personal data to you in a structured, commonly used, and machine-readable format, or directly transmit it to another data controller designated by you (if technically feasible);

• Right to Refuse Automated Decision-Making: You have the right to refuse decisions with legal effect or significant impact on you made by us based on automated decision-making (including profiling);

• Right to Withdraw Consent: You have the right to withdraw your consent to the processing of your personal data at any time. After withdrawing consent, we will no longer process your personal data based on that consent, but it will not affect the legality of the processing activities completed before the withdrawal of consent.

8.2 Rights Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) (Applicable to Users in California)

• Right to Know: You have the right to know whether your personal information has been shared, and you have the right to request us to inform you of the category, specific information, purpose of collection, sharing object, sales situation (even though we will not sell your personal data), and other information of the personal data we have collected about you;

• Right of Access: You have the right to request us to provide a copy of your personal data, as well as relevant information about the sharing and sales of your personal data (if any);

• Right to Deletion: You have the right to request us to delete your personal data (except in cases where statutory exceptions apply);

• Right to Opt Out of Sale: You have the right to opt out of the sale of your personal data by us at any time (we will not engage in such behavior, but you still have this right);

• Right to Non-Discrimination: When you exercise the above rights, we will not discriminate against you in any way (such as refusing to provide services, increasing service prices, reducing service quality, etc.);

• Right to Authorize an Agent: You may entrust an authorized agent to exercise the above rights on your behalf. When the agent exercises the rights, he/she shall provide your written authorization and the agent's identification.

8.3 Rights Under the Lei Geral de Proteção de Dados (LGPD) (Applicable to Users in Brazil)

• Right of Access: You have the right to confirm whether we are processing your personal data and to obtain relevant processing information and a copy of your personal data;

• Right to Correction: You have the right to request us to correct your inaccurate or incomplete personal data;

• Right to Deletion: You have the right to request us to delete your personal data (except in cases where statutory exceptions apply);

• Right to Anonymization: You have the right to request us to anonymize your personal data so that your personal identity cannot be identified;

• Right to Data Portability: You have the right to request us to provide your personal data to you or another data controller in a structured and machine-readable format;

• Right to Withdraw Consent: You have the right to withdraw your consent to the processing of your personal data at any time. After withdrawing consent, we will stop the relevant processing activities;

• Right to Objection: You have the right to object to our processing of your personal data based on legitimate interests or public interests (except in cases where statutory exceptions apply).

8.4 Rights Under the Federal Data Protection Law (FADP) (Applicable to Users in the UAE)

• Right of Access: You have the right to request us to provide your personal data and relevant processing information;

• Right to Correction: You have the right to request us to correct your inaccurate personal data;

• Right to Deletion: You have the right to request us to delete your personal data (unless we are required to retain it by laws and regulations);

• Right to Restrict Processing: You have the right to request us to restrict the processing of your personal data (such as when there is a dispute over the data);

• Right to Complaint: You have the right to file a complaint with the relevant data protection regulatory authority in the UAE about our personal data processing activities.

8.5 Rights Under the General Data Protection Regulation (GDPR) (Applicable to Users in EU Member States and the European Economic Area)

• Right of Access: You have the right to confirm whether we are processing your personal data, as well as to obtain a copy of your personal data and relevant information such as the purpose of data processing, data source, and sharing object;

• Right to Correction: You have the right to request us to promptly correct your inaccurate or incomplete personal data to ensure that your personal data is true and accurate;

• Right to Erasure (Right to Be Forgotten): In specific circumstances (such as when the purpose of data processing has been achieved, you withdraw consent, we have no legal basis for processing, etc.), you have the right to request us to delete your personal data. We will complete the deletion within a reasonable period and notify the relevant sharing parties (if any);

• Right to Restrict Processing: You have the right to request us to restrict the processing of your personal data in circumstances such as when there is a dispute over the accuracy of the data, the processing activity is illegal but you do not wish to delete the data, or we no longer need the data but you need it for rights protection;

• Right to Withdraw Consent: You have the right to withdraw your consent to the processing of your personal data at any time. The withdrawal of consent will not affect the legality of the processing activities completed based on your consent before the withdrawal;

• Right to Objection: You have the right to object to our processing of your personal data based on legitimate interests, public interests, or for the performance of tasks. We will evaluate the reasons for the objection and stop the relevant processing activities if your objection is valid (except in cases where statutory exceptions apply);

• Right Not to Be Subject to Automated Decision-Making: You have the right to refuse decisions with legal effect or significant impact on you made by us solely based on automated decision-making (including profiling). If such decisions exist, we will provide opportunities for human intervention, expression of opinions, and correction.

8.6 Methods to Exercise Rights

If you wish to exercise the additional rights in the above specific regions or other rights related to personal data agreed in this Policy, you can submit a written application through the contact email (constancerodrig50@gmail.com) agreed in "I. Information About the Data Controller and Data Protection Officer (DPO)" of this Policy, clearly stating your name (if any), contact information, the rights you request to exercise, and relevant supporting documents (if applicable).

We will respond to you within 7 working days of receiving your application, verify your identity (the verification method will not collect additional personal data from you and is only used to confirm the identity of the applicant), and complete the processing and feedback the results to you within the period specified by laws and regulations. If your application does not meet the requirements, we will inform you of the necessary supplementary materials to handle it for you in a timely manner.

IX. Legal Basis for Personal Data Processing

We process your personal data in strict compliance with the privacy laws and regulations of relevant countries and regions. The main bases for processing are as follows:

• Based on Your Consent: For example, when you authorize us to access device permissions such as the camera, album, and microphone, and agree to our collection and use of your swatch content, feedback, etc., such processing activities are based on your explicit consent;

• To Perform Contractual Obligations: By checking and agreeing to this Privacy Policy and User Terms, you enter into a service contract with us. We process your necessary personal data to achieve the purpose of the contract (providing you with the core services of the Application);

• Based on Legitimate Interests: On the premise of not damaging your personal data rights and interests, process your non-personally identifiable information and necessary personal data for the purpose of optimizing the Application's services, identifying faults, improving user experience, protecting our legitimate rights and interests and those of others;

• To Comply with Legal and Regulatory Obligations: For example, process your personal data in accordance with the requirements of judicial organs or regulatory authorities, or conduct data storage, reporting, and other processing activities to comply with the provisions of relevant laws and regulations.

We ensure that all personal data processing activities comply with the requirements of applicable privacy laws and regulations (including but not limited to VCDPA, CCPA, CPRA, LGPD, FADP, EU GDPR, etc.) to fully protect your personal data rights and interests.

X. Complaint Channels and Feedback to Regulatory Authorities

10.1 Internal Complaint Channel

If you have any questions, dissatisfaction, or believe that your personal data rights and interests have been infringed upon regarding our personal data processing activities, you can submit a complaint and feedback through the contact email (constancerodrig50@gmail.com) agreed in this Policy. We will respond to you within 7 working days of receiving your complaint, conduct an investigation and verification, take corresponding remedial measures, and feedback the processing results to you.

10.2 Right to Feedback to Regulatory Authorities

If you believe that our personal data processing activities violate the privacy laws and regulations of the relevant country or region, or you are not satisfied with the results of our complaint handling, you have the right to file a complaint with the personal data protection regulatory authority in your region to seek help and remedy from the regulatory authority.

We will actively cooperate with the investigation and handling work of the regulatory authority, truthfully provide relevant information, fulfill the requirements of the regulatory authority, and properly resolve your complaint.

XI. Update and Notification of the Privacy Policy

We will update this Privacy Policy from time to time in accordance with the update of relevant privacy laws and regulations, changes in the functions of the Application, and adjustments in user needs.

After this Privacy Policy is updated, we will promptly notify you of the updated content through pop-ups, announcements, or other means within the Application. The updated Privacy Policy shall take effect on the date of the notification. Your continued use of the Application after the notification shall be deemed your full understanding and consent to the updated Privacy Policy. If you do not agree to the updated Privacy Policy, please immediately stop using the Application. We will process your personal data in accordance with the Privacy Policy before the update until you stop using it.

We recommend that you review this Privacy Policy regularly to understand the latest agreements related to personal data protection and ensure that your personal data rights and interests are fully protected.

XII. Disclaimer

• This Application only provides services such as lip makeup communication and swatch sharing. You shall be solely responsible for the swatch content, text descriptions, and other information you actively upload and share. If your content infringes upon the intellectual property rights, privacy rights, or other legitimate rights and interests of others, you shall bear full legal responsibility, which has no connection with us;

• We shall not be liable for the disclosure, loss, tampering, etc., of personal data caused by force majeure, hacker attacks, network failures, device failures, or other non-intentional or gross negligence on our part, but we will make every effort to assist you in taking remedial measures;

• You shall bear the personal data security risks arising from your voluntary sharing of your personal data with third parties (such as sharing swatch content to third-party social platforms), which has no connection with us;

• If you use the Application in violation of this Privacy Policy, User Terms, or relevant laws and regulations, resulting in damage to your personal data rights and interests, we shall not be liable.

XIII. Contact Us

If you have any questions, opinions, suggestions about this Privacy Policy, or wish to exercise your rights related to personal data or submit complaints and feedback, you can contact us through the following methods:

Data Controller: COSMICFREE LLC

Contact Email: constancerodrig50@gmail.com

Registered Address: 2457 Lamar St, Edgewater CO 80214, US

We will respond to you within 7 working days of receiving your message and sincerely solve relevant problems for you.