Cubeot Privacy Policy

Cubeot is operated by Linkhead Future Technology Co., Ltd. This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you use the Cubeot application, websites and related services.

Please read this Policy carefully. If you do not agree with it, do not use services that require personal information.

1. Information we collect

We collect information only where it is reasonably needed to provide, secure and support the Service.

• Account and contact information, such as account ID, display name, phone number, email address and sign-in method status.
• Authentication information, such as password hashes, one-time passcode records, human-verification results and security-operation records.
• Device and security information, such as device identifier, device model, operating system, app environment, language, region, IP address, request timestamps, verification tokens and necessary logs.
• Service content and activity information, such as pet names, pet state, interaction records, activity progress and content you create or enter in the Service.
• Support and communication information, such as messages you send to us, contact details, account information and support records.
• Diagnostics information, such as crash data, API errors, request identifiers, timestamps, app environment, device and operating-system summaries.
• Consent and compliance records, such as the policy name, version, confirmation time, consent choice or withdrawal record.

2. How we use information

We use personal information to:

• create, authenticate and manage accounts;
• provide the companion, pet-care, interaction and related service features;
• send verification codes, security notices and service messages;
• prevent fraud, abuse, automated misuse and security incidents;
• respond to support, privacy and account-deletion requests;
• diagnose faults, maintain reliability and improve service stability;
• comply with legal obligations and enforce our Terms of Service.

Legal bases. Where laws such as the GDPR or UK GDPR apply, we rely on contract performance to provide the Service, legitimate interests to protect and maintain the Service, legal obligations to keep compliance records and respond to lawful requests, and consent where required by law.

Cookies and similar technologies. We may use local storage, cache, tokens and similar technologies to keep you signed in, remember your privacy choices, protect account security and improve reliability. We do not use these technologies for third-party advertising tracking.

3. Sharing and disclosure

We do not sell personal information. We may disclose personal information only as described below:

• to service providers that process information on our behalf and under our instructions;
• to comply with law, legal process or lawful requests from public authorities;
• to protect the rights, safety and security of users, the public, the Service or our organisation;
• as part of a merger, acquisition, restructuring or similar transaction, provided that the recipient remains bound by appropriate privacy obligations;
• with your consent or at your direction.

Third-party services. Current service providers and the information they may process are described in the Cubeot Third-Party Information Sharing List. We will update that list if the providers, purposes or information categories change.

4. International transfers

Cubeot is offered in multiple countries and regions. Your information may be processed in countries other than where you live. Where required by law, we use appropriate safeguards such as contractual commitments, transfer assessments, access controls and encryption in transit.

5. Retention

We retain personal information only for as long as needed for the purposes described in this Policy, including service delivery, account management, security, legal compliance and dispute resolution. When information is no longer needed, we delete or anonymise it unless retention is required by law.

6. Security

We use technical and organisational safeguards, including encryption in transit, password hashing, access controls, least-privilege permissions, logging, authentication, risk detection and incident response processes. No service can be guaranteed to be completely secure, but we work to protect the information entrusted to us.

7. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, receive a copy of your information, withdraw consent and complain to a supervisory authority. You may exercise rights through in-service settings where available or by contacting privacy@cubeot.com. We may verify your identity before responding.

United States privacy notice. We do not sell personal information and do not share personal information for cross-context behavioural advertising. We do not use sensitive personal information for purposes that require a right to limit under California privacy law. If our practices change, we will update this Policy and provide required controls.

8. Children and teens

Cubeot is not directed to children under 13. Users must meet the minimum age required in their country or region. If you believe a child has provided us personal information without the required consent, contact us and we will take appropriate steps.

9. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will provide notice through the Service, our website or another appropriate method, and we will ask for consent where required by law.

10. Contact us

Privacy contact: privacy@cubeot.com. Data protection contact: dpo@cubeot.com. Support: support@cubeot.com. Postal address: 20 Wenlock Road, London, N1 7GU, United Kingdom.

Relationship with other notices. This Policy works together with the Cubeot Terms of Service, Third-Party Information Sharing List, Children and Teen Privacy Notice, Regional Data Compliance Notice and regional privacy supplements. If multiple notices apply to you, they should be read together.

Request handling and appeals. We may need to verify your identity, location or account relationship before responding to a privacy request. If your request is denied in whole or in part and applicable law provides an appeal right, you may appeal through the privacy contact channel.

Language versions. We may provide English, Chinese and Arabic versions of legal notices. If a translated version conflicts with the version designated for your service location, the designated version applies to the extent permitted by law.