PocketGallery Privacy Policy

Last Updated: November 13, 2025

Welcome to PocketGallery. We value your privacy protection. This policy clearly informs you how we collect, use, store, share and protect your personal information. By using PocketGallery, you indicate that you have read, understood and agreed to all the contents of this policy. If you do not agree, please do not use PocketGallery.

I. Our Commitment to Your Privacy

Your privacy at PocketGallery. We want you to feel confident and secure when using PocketGallery. This section outlines our commitment to protecting your personal information with clarity and respect.

Our approach is built on a few core principles:

• Clarity is key. We explain our practices in straightforward terms so you understand how your data is used.

• Your rights are protected. We uphold your privacy through robust measures aligned with global standards.

• You have the final say. You maintain full control over your information, including the ability to update or delete it.

• Less is more. We adhere to data minimization, collecting only what is essential to deliver our services to you.

• We're here to help. Our dedicated team is responsive to your questions and concerns.

We invite you to read on for the details.

II. How We Collect and Use Your Information

This is a utility tool kit app. All user-generated data and operational records are stored exclusively on your local device. We do not collect, transmit, or share any personal information, usage data, or content with third parties or external servers. Your data privacy and security are fully protected. The permissions you can control are clearly specified in the table below.

III. How We Share Your Information

We take your trust very seriously and do not sell your personal information. We only share information under the following limited circumstances and for specific purposes.

If you have any further requests regarding the table's style or content presentation, I am happy to make additional adjustments.

IV. Our Multi-Layered Security Approach

1. Technical Protections

• Advanced end-to-end encryption protocols for data transmission and storage

• Cutting-edge security systems to detect and neutralize cyber threats in real time

• Regular third-party vulnerability assessments to identify and fix risks promptly

• Data anonymization for non-essential user information where feasible

2. Administrative Controls

• Strict access management with least-privilege principles (only authorized personnel access data)

• Comprehensive staff training on data protection laws, privacy best practices, and incident response

• Regular reviews and updates of security policies to align with global standards

3. Data Minimization Practices

We strictly limit data collection to what is indispensable for delivering PocketGallery’s services, avoiding any unnecessary information gathering.

User Responsibilities & Incident Response

• If you suspect any account compromise or unusual activity, contact our support team immediately for swift assistance

• We adhere to all legal obligations for reporting significant data incidents, ensuring transparency and compliance

Our Commitment

While we implement these robust security measures, no system can ensure absolute protection. We continuously monitor, assess, and enhance our safeguards to tackle emerging threats and uphold the highest standards of data safety for PocketGallery users.

V. Your Data Control Rights

In accordance with global data protection laws, you maintain a comprehensive set of rights regarding your personal information. This section details these rights and provides clear instructions on how to exercise them. Please note that the application of these rights may be subject to certain legal exceptions and verification requirements.1. Accessing and Obtaining Your Information (Right of Access and Data Portability) You have the right to know whether we are processing your personal information and to access that data. Furthermore, you have the right to receive a portable copy of your personal data in a structured, commonly used, and machine-readable format.

• How to Exercise These Rights:

• Request a Comprehensive Data Report: For a complete copy of all personal information we hold about you, you must submit a verifiable request to our support team. This report will detail the categories and specific pieces of data collected, the sources of collection, the purposes for processing, and the categories of third parties with whom we share it.

• Our Commitment: We will respond to your verifiable access and portability request within the timeframe required by applicable law, typically not exceeding 30-45 days. We will provide the information free of charge, up to twice per calendar year.

• Correcting and Deleting Your Information (Right to Rectification and Erasure)You have the right to request the correction of inaccurate or incomplete personal data. You also have the right to request the deletion of your personal information under specific circumstances, such as when the data is no longer necessary for the purposes collected, or you withdraw your consent (where processing is based on consent).

• Important Considerations:

• Legal Exceptions: We may not be able to fulfill a deletion request if it is necessary to:

• Complete the transaction for which the personal information was collected.

• Provide a good or service requested by you.

• Exercise a legal right, including ensuring security and integrity, or protecting against malicious, deceptive, fraudulent, or illegal activity.

• Comply with a legal obligation, such as retaining financial records for regulatory purposes.

• Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us.

• Publicly Shared Information: Please be aware that information you have previously shared publicly (e.g., in public forums or comments) may have been copied or stored by other users. We cannot delete such copies.

• Restricting Processing and Objecting to Processing (Right to Restriction and Objection)You have the right to request a temporary restriction on the processing of your personal data, for example, while we verify the accuracy of data you have contested. Additionally, you have the right to object, on grounds relating to your particular situation, to the processing of your personal data which is based on our legitimate interests.

• How to Exercise These Rights: To request a restriction or to object to processing based on legitimate interests, please submit a verifiable request through our support channels. We will evaluate each request in accordance with the law.

• Managing Your Consent (Right to Withdraw Consent)Where the processing of your personal information is based on your consent, you have the right to withdraw that consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

• How to Exercise This Right: You can manage many of your consent preferences directly within the application's privacy settings or your device's permission settings (e.g., for camera, microphone access). Withdrawing consent is typically effective immediately.

Process for Submitting Verifiable RequestsTo protect your privacy and security, we are required to verify your identity before processing any rights request. When you submit a request, we will ask for information sufficient to allow us to reasonably verify you are the person about whom we collected personal information. We will only use this information for verification purposes.Please submit all requests using the contact details provided in the "Contact Us" section (Section XV). We will acknowledge receipt of your request and inform you of any delays.

VI. Region-Specific Privacy Rights

To comply with various international privacy laws, we provide the following additional details for users in specific jurisdictions.

1. Privacy Rights for California Residents (CCPA/CPRA as amended)

If you are a resident of California, the California Consumer Privacy Act grants you the following additional rights:

• Right to Know and Request Disclosure: You have the right to request disclosure about our data collection, use, and sharing practices for the past 12 months. You can request a list of the categories of personal information disclosed for a business purpose and the categories of third parties to whom it was disclosed.

• Right to Opt-Out of Sale/Sharing: You have the right to direct us not to "sell" or "share" your personal information for cross-context behavioral advertising. While we do not typically engage in activities that constitute a "sale" under the CCPA, we provide a clear and conspicuous link titled "Do Not Sell or Share My Personal Information" on our website and within our application to exercise this right.

• Right to Limit Use and Disclosure of Sensitive Personal Information: You have the right to limit the use of your sensitive personal information (e.g., precise geolocation) to purposes necessary to provide the requested goods or services.

• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights, including by denying goods or services, charging different prices, or providing a different level or quality of services.

How to Exercise Your California Rights:

Submit a verifiable consumer request to us via the methods in Section XV. You may also designate an authorized agent to make a request on your behalf. We will respond within 45 days.

2. Privacy Rights for Brazilian Residents (LGPD)

If you are in Brazil, the Lei Geral de Proteção de Dados (LGPD) grants you the following rights:

• Right to Anonymization, Blocking, or Elimination: You can request the anonymization, blocking, or elimination of unnecessary or excessive data, or data processed in noncompliance with the LGPD.

• Right to Information about Public and Private Entities: You have the right to obtain information about public and private entities with which we have shared your data.

• Right to Revoke Consent: As mentioned above, with specific procedures outlined in Brazilian regulations.

• Right to Lodge a Complaint with the ANPD: You have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD).

How to Exercise Your LGPD Rights:

You may exercise these rights through our standard channels. Our Data Protection Officer (DPO) is also available for queries related to the LGPD.

3. Privacy Rights for Virginia Residents (VCDPA)

If you are a resident of Virginia, the Virginia Consumer Data Protection Act grants you rights similar to the CCPA, including:

• Right to Confirm and Access.

• Right to Correct Inaccuracies.

• Right to Delete.

• Right to Data Portability.

• Right to Opt-Out: You have the right to opt out of the processing of your personal data for purposes of (i) targeted advertising, (ii) the "sale" of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects.

How to Exercise Your VCDPA Rights:

Please use the contact information in Section XV to submit a verifiable request.

4. Privacy Rights for Users in the European Union and United Kingdom (GDPR/UK GDPR)

If you are in the EU or UK, the General Data Protection Regulation grants you all the rights detailed in Section V. Importantly:

• Right to Lodge a Complaint with a Supervisory Authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

VII. Protection of Minors' Personal Information

1. International Variations in the Definition of Minors

We recognize that the legal definition of a minor varies across jurisdictions. For example, regulations such as the GDPR in Europe protect users under 16, while COPPA in the United States protects children under 13. Notwithstanding these differences, PocketGallery uniformly applies the standard by prohibiting anyone under the age of 13 from using our services.

2. No Knowing Collection and Data Deletion Commitment

We do not knowingly collect, process, or store personal information from individuals under 13. If we become aware that such data has been inadvertently collected, we will take immediate action to delete it. Our goal is to complete the deletion process within 30 days upon verification, unless a longer retention period is required by applicable law.

• Rights of Guardians:

Guardians of minors primarily enjoy the following rights regarding the personal information of their children:

• Right to Know and Consent:

To be informed of the purposes, methods, and scope of any collection or use of the minor’s personal information.

• Right to Access and Inquire:

To access the minor’s personal information held by us.

• Right to Correct:

To request correction of inaccurate or incomplete personal information.

• Right to Delete:

To request deletion of the minor’s personal information under specific circumstances, such as when the processing purpose has been fulfilled or if the information is handled in violation of the law.

• Right to Withdraw Consent:

To withdraw previously given consent at any time.

• Right to Account Deletion:

To request the deletion of the minor’s account and all associated personal information.

3. Procedure for Exercising Rights

Guardians may exercise any of the above rights by contacting us via email at Staniahere123@gmail.com. To protect the information of minors under the age of 13, we will verify the guardian’s identity before processing the request.We commit to responding to all verified requests within 15 business days.

4. Legal Compliance

PocketGallery adheres to applicable laws and regulations concerning the protection of minors’ personal information, including but not limited to China’s Personal Information Protection Law (PIPL) and the Regulations on the Protection of Children’s Personal Information Online.

VIII. Updates to This Privacy Policy

PocketGallery reserves the right to modify this policy periodically to reflect evolving legal obligations, technological advancements, or service enhancements. Significant changes that impact your rights or data handling practices will be communicated through prominent in-app notifications, email alerts, or website banners. These updates may include, but are not limited to:

1. Expanded Data Use Cases: Introduction of new service features requiring additional data collection.

2. Organizational Changes: Adjustments due to mergers, acquisitions, or partnerships affecting data governance.

3. Security Enhancements: Implementation of advanced protective measures or breach response protocols.

4. User Rights Modifications: New or updated mechanisms for exercising privacy rights.

By continuing to use our services after policy revisions take effect, you acknowledge and accept the updated terms. Users who disagree with these changes may limit platform interaction to guest mode, which does not require personal data sharing. Historical versions of this policy remain archived and accessible upon request for transparency and review purposes.

IX Data Protection Officer (DPO)

For any inquiries regarding your personal data protection, privacy rights, or data processing activities, please contact our designated Data Protection Officer Emma Thompson，at Staniahere123@gmail.com.

Our DPO oversees all matters related to GDPR, CCPA, LGPD and other privacy regulations compliance, ensuring your personal information is handled in accordance with applicable data protection laws.

X. Controller Information

The controller responsible for managing your personal information in relation to this service is PocketGallery. We are in charge of the collection, usage, storage, and disclosure of any personal data you provide while using our services. For any inquiries regarding your personal data, feel free to reach us at Staniahere123@gmail.com.

Address：

ABDELKRIM EL ABBOUBI

ASSOUEL DB LALLA BENT LAAMRI NO 2 MARRAKECH

MARRAKECH - 20200

Morocco (MA)

XI. Contact Us

For any questions, concerns or requests regarding this Privacy Policy or your personal data, you may contact us through the following channels within 15 days:

• Email:Staniahere123@gmail.com

• post：

ABDELKRIM EL ABBOUBI

ASSOUEL DB LALLA BENT LAAMRI NO 2 MARRAKECH

MARRAKECH - 20200

Morocco (MA)

You can contact us in the following ways, and we will respond to your request