## Oaxis Privacy Terms

Your privacy is important to us. To better protect your privacy we provide this notice explaining our online information practices and the choices you can make about the way your information is collected and used.

### THE INFORMATION WE COLLECT

This notice applies to all information collected or submitted on the Oaxis website and the Oaxis applications and services for Apple iOS, Android and other platforms, hereafter referred to as simply Oaxis.

Oaxis occasionally needs to collect information for convenience, practicality, or technical requirements. This information includes:

#### Account Information

- Your chosen username, which may be your email address or name. A username is technically required so you can log in from multiple computers and devices. We encourage you to use your email address to make "forgot password" functionality possible.
- Your chosen password, which is empty by default. A hash of your password is stored in the Oaxis database, and the plain-text password is only used for hash comparison to the stored value. You may also choose to provide other types of information, such as a profile photo, biography, country information, and community username

#### Additional Information

You may also connect with friends on the Services or invite friends who have not yet joined by providing their email addresses, a, or using the contact list on your mobile device. We do not store your contact list and delete it after it is used for adding contacts as friends.

#### Payment and Card Information

If you purchase Oaxis merchandise on our website, you provide your payment information, including your name, credit or debit card number, card expiration date, CVV code, and billing address. We do not store this payment information. We store your shipping address to fulfill your order. Note that third-party payment processors may retain this information in accordance with their own privacy policies and terms.

### INFORMATION WE RECEIVE FROM YOUR USE OF OUR SERVICES OR DEVICES

#### Device Information

Your device collects data to estimate a variety of metrics like the number of steps you take, your distance travelled, calories burned, weight, heart rate, sleep stages, active minutes, and location. The data collected varies depending on which device you use. When your device syncs with our applications or software, data recorded on your device is transferred from your device to our servers.

#### Location Information

The Services include features that use precise location data, including GPS signals, device sensors, Wi-Fi access points, and cell tower IDs. We collect this type of data if you grant us access to your location on your mobile devices. You can always remove our access using Oaxis application settings or mobile device settings.

#### Usage Information

When you access or use our Services, we receive certain usage data. This includes information about your interaction with the Services, for example, when install applications or software, create or log into your account, pair your device to your account, or open or interact with an application on your Oaxis device.

We also collect data about the devices and computers you use to access the Services, including IP addresses, browser type, language, operating system, mobile device information (including device and application identifiers), the referring web page, pages visited, location (depending on the permissions you have granted us), and cookie information.

#### Information We Receive From Third Parties

If you choose to connect your account on our Services to your account on another service, we may receive information from the other service. For example, if you connect to Facebook or Google, we may receive information like your name, profile picture, age range, language, email address, and friend list. You may also choose to grant us access to your exercise or activity data from another service. You can stop sharing the information from the other service with us by removing our access to that other service.

#### Health and Other Special Categories of Personal Data

To the extent that information we collect is health data or another special category of personal data subject to the European Union’s General Data Protection Regulation (“GDPR”), we ask for your explicit consent to process the data. We obtain this consent separately when you take actions leading to our obtaining the data, for example, when you pair your device to your account, grant us access to your exercise or activity data from another service. You can use email to us at support@oaxis.com to withdraw your consent at any time, including by stopping use of a feature, removing our access to a third-party service, unpairing your device, or deleting your data or your account.

### HOW WE USE INFORMATION

We use the information we collect for the following purposes.

#### Provide and Maintain the Services

Using the information we collect, we are able to deliver the Services to you. For example, we need to use your information to provide you with your Oaxis dashboard tracking your exercise, activity, and other trends; to enable the community features of the Services; and to give you customer support.

#### Develop and Improve the Services

We use the information we collect to improve and personalize the Services and to develop new ones. For example, we use the information to troubleshoot and protect against errors; perform data analysis and testing; conduct research and surveys; and develop new features and Services.

When you allow us to collect precise location information, we use that information to provide and improve features of the Services such as recording the location your device or kids for parental monitor.

We also use your information to make inferences and show you more relevant content. Here are some examples:

Information like your height, weight, gender, and age allows us to improve the accuracy of your daily exercise and activity statistics like the number of calories you burned and the distance you traveled.

#### Communicate With You

We use your information when needed to send you Service notifications and respond to you when you contact us.

#### Promote Safety and Security

We use the information we collect to promote the safety and security of the Services, our users, and other parties. For example, we may use the information to authenticate users, facilitate secure payments, protect against fraud and abuse, respond to a legal request or claim, conduct audits, and enforce our terms and policies.

For personal data subject to the GDPR, we rely on several legal bases to process the data. These include when you have given your consent, which you may withdraw at any time by email to us at support@oaxis.com and other tools; when the processing is necessary to perform a contract with you.

### HOW INFORMATION IS SHARED

When information is used in this or a similar manner, we do not disclose anything that could be used to identify the individuals on whom the information is based.

We may disclose your information in response to subpoenas, court orders, or other legal process, or to establish or exercise our legal rights or to defend against legal claims.

We may disclose your information when we believe it necessary or desirable in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our policies, and/or to protect our rights and property.

In the future, we may sell, buy, merge, or partner with other companies or businesses. In such transactions, user information may be among the transferred assets.

#### External Services

External services beyond Oaxis's control are integrated with Oaxis where necessary, such as Amazon mail service for email sending, Crashlytics for crash reporting, ZenDesk for customer support, and Google Analytics for traffic measurement and tracking.

Oaxis makes reasonable efforts to ensure that all integrated external services are trustworthy and reputable, but Oaxis cannot be held responsible for data collection and usage by such services.

#### Our Commitment to Data Security

To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect online.

#### How You Can Access or Correct Your Information

You can access all your personally identifiable information that we collect online and maintain by logging into your Oaxis application account and change the information from the User settings menu.

You can correct factual errors in your personally identifiable information by changing or deleting the erroneous information, by deleting your entire Oaxis account by emailing support@oaxis.com.

To protect your privacy and security, we will also take reasonable steps to verify your identity before granting access or making corrections.

#### Deleting Information

You can delete your entire Oaxis account at any time by emailing support@oaxis.com. If you delete your account, all account information and saved page data is deleted from Oaxis service immediately.

Due to the nature of backups and logs, deleted data may persist in backups and logs until they are deleted.

#### GDPR: Information for EEA Users

What Rights Do I Have?

Individuals located in the European Economic Area (EEA) have certain rights in respect of your personal information and Oaxis will provide these capabilities to all our worldwide users, including:

- The right of access to your personal data;
- The right to correct or rectify any inaccurate personal data;
- The right to restrict or oppose processing of personal data;
- The right to erase your personal data; and
- The right to personal data portability.

Oaxis uses, processes, and stores personal data, as necessary to perform our contract with you, and based on our legitimate interests in order to provide the Services. We rely on your consent to process personal data to place cookies on your devices. In some cases, Oaxis may process personal data pursuant to legal obligation or to protect your vital interests or those of another person.

How Can I Exercise My Rights?

If you're a user based in the EEA, you can:

- Request a personal data report by submitting a request to support@Oaxis.com. This report will include the personal data we have about you, provided to you in a structured, commonly used, and portable format. Please note that Oaxis may request additional information from you to verify your identity before we disclose any information.
- Have your personal data corrected or deleted. Some personal data can be updated by you through your Oaxis account settings, or by contacting us at support@Oaxis.com.
- Complain to a regulator. If you're based in the EEA and think that we haven't complied with data protection laws, you have a right to lodge a complaint with your local supervisory authority.

If you have other questions or do not have a Oaxis account, please contact us at support@Oaxis.com.

#### How to Contact Us

Should you have other questions or concerns about these privacy policies, please email support@oaxis.com. At this time, we only have the ability to receive and send English-language communications.

#### Changes to This Policy

Oaxis reserves the right to change this policy at any time. Please check this page periodically for changes. Your continued use of Oaxis following the posting of changes to this policy will mean you accept those changes. We will notify you before we make material changes to this policy and give you an opportunity to review the revised policy before deciding if you would like to continue to use the Services.