SnapLedger Privacy Policy

Last Updated: October 6, 2025

Next4AI Technology Limited ("Next4AI," "Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SnapLedger mobile application ("Service," "App," or "Application").

We use Your Personal data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable. Under GDPR (General Data Protection Regulation), You can be referred to as the Data Subject or as the User as you are the individual using the Service.
• Company (referred to as either "the Company", "Next4AI", "we", "us" or "our" in this Agreement) refers to Next4AI Technology Limited. For the purpose of the GDPR, the Company is the Data Controller.
• Application means the software program provided by the Company downloaded by You on any electronic device, named SnapLedger.
• Service refers to the Application.
• Account means a unique account created for You to access our Service or parts of our Service.
• Personal Data is any information that relates to an identified or identifiable individual. For the purposes for GDPR, Personal Data means any information relating to You such as a name, an identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity.
• Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
• Data Controller, for the purposes of the GDPR (General Data Protection Regulation), refers to the Company as the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data.
• Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.
• Third-party Social Media Service refers to any website or any social network website through which a User can log in or create an account to use the Service.

2. Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using our Service, we may ask You to provide us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

• Account Information: Email address, name, profile information
• Third-Party Authentication Data: When you sign in with Google or Apple, we collect your email address, name, and unique user identifier from these services. We do not store your Google or Apple passwords
• Financial Data: Transaction records, expense categories, budget information, receipt data
• Media Content: Photos of receipts and financial documents uploaded for AI recognition
• Communication Data: Messages sent through the App, support requests

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to:

• Device Information: Hardware model, operating system and version, screen size and density, unique device identifiers (e.g. IDFA)
• System Information: Language and country settings, time zone, device mute status
• Network Information: IP address, carrier information, connection type
• App Usage: Features used, time spent in app, crash reports, performance data
• Location Data: General location information based on IP address (we do not collect precise GPS location)

Information from Third-Party Social Media Services

We allow You to create an account and log in to the Service through the following Third-party Social Media Services:

• Google Sign-In: When you sign in with your Google account, we receive your email address, name, profile picture (optional), and unique Google user ID. Google's privacy policy governs their data collection practices
• Apple Sign-In: When you sign in with Apple, we receive your email address (or Apple's private relay email if you choose to hide your email), name, and unique Apple user ID. Apple's privacy policy governs their data collection practices

If You decide to register through or otherwise grant us access to a Third-Party Social Media Service, We may collect Personal data that is already associated with Your Third-Party Social Media Service's account, such as Your name, Your email address, and other information associated with that account.

You may also have the option of sharing additional information with the Company through Your Third-Party Social Media Service's account. If You choose to provide such information and Personal Data, during registration or otherwise, You are giving the Company permission to use, share, and store it in a manner consistent with this Privacy Policy.

Your Consent and Our Use of Your Personal Data

By creating an account or using our App, you expressly agree to:

• The collection and processing of account data for service provision
• If using Google or Apple Sign-In, the sharing of your authentication information from these services to our App
• AI processing of receipt images for data extraction
• Use of analytics data for app improvement
• Storage of your financial data for accounting services

Except as provided in this privacy policy, we will not transfer any of your personal data to third parties without your explicit consent.

3. How We Use Your Information

The Company may use Personal Data for the following purposes:

• To provide and maintain our Service: Including to monitor the usage of our Service and provide customer support
• To manage Your Account: To manage Your registration as a user of the Service. The Personal Data You provide can give You access to different functionalities of the Service that are available to You as a registered user
• AI Processing and Data Extraction: To analyze receipt images using artificial intelligence and extract financial data for automatic transaction recording
• For the performance of a contract: The development, compliance and undertaking of the purchase contract for the products, items or services You have purchased or of any other contract with Us through the Service
• To contact You: To contact You by email, push notifications or other equivalent forms of electronic communication regarding updates or informative communications related to the functionalities, products or contracted services, including security updates, when necessary or reasonable for their implementation
• To provide You with news and offers: To provide You with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless You have opted not to receive such information
• To manage Your requests: To attend and manage Your requests to Us
• For business transfers: We may use Your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets
• Analytics and Improvement: To understand usage patterns, improve our Services, and develop new features
• Security and Fraud Prevention: To detect, prevent and address technical issues, security vulnerabilities, and fraudulent activities

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your personal information in the following situations:

• With Service Providers: We may share Your personal information with Service Providers to monitor and analyze the use of our Service, to show advertisements to You to help support and maintain Our Service, for payment processing, to contact You, and for AI processing of receipt images
• For Business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company
• With Affiliates: We may share Your information with Our affiliates, in which case we will require those affiliates to honor this Privacy Policy
• With business partners: We may share Your information with Our business partners to offer You certain products, services or promotions
• With other users: When You share personal information or otherwise interact in the public areas with other users, such information may be viewed by all users and may be publicly distributed outside
• With Your consent: We may disclose Your personal information for any other purpose with Your consent
• Legal Requirements: When required by law, legal process, litigation, and/or requests from public and governmental authorities
• To protect rights and safety: When we believe disclosure is necessary to protect the rights, property, or safety of the Company, our users, or others

5. Data Security

The security of Your Personal Data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

We implement appropriate technical and organizational security measures including:

• Encryption: Data encryption in transit using TLS and at rest using AES-256
• Access Controls: Strict access controls and authentication mechanisms
• Regular Assessments: Regular security assessments and penetration testing
• Secure Infrastructure: Use of secure cloud infrastructure with industry-standard security practices
• Employee Training: Regular security training for all employees handling personal data
• Incident Response: Comprehensive incident response procedures

6. Data Retention

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

• Account Data: Retained until you delete your account or request deletion
• Financial Records: Up to 7 years for legal and tax compliance requirements
• Usage Data: Generally retained for 2 years for analytics and service improvement
• Receipt Images: Retained as long as your account is active, unless you delete them manually
• Communication Records: Support communications retained for 3 years

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right to Access: You can access and export your data through the App or by contacting us
• Right to Rectification: Update your information directly in the App or request corrections
• Right to Erasure: Delete your account and data through App settings or by contacting us
• Right to Restrict Processing: Request limitation of processing in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing for direct marketing and other purposes
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with your local data protection authority

8. GDPR Privacy Rights

If You are a resident of the European Economic Area (EEA), You have certain data protection rights covered by GDPR. We aim to take reasonable steps to allow You to correct, amend, delete, or limit the use of Your Personal Data.

If You wish to be informed what Personal Data we hold about You and if You want it to be removed from our systems, please contact us at privacy@next4.ai.

In certain circumstances, You have the following data protection rights:

• The right to access, update or to delete the information We have on You
• The right of rectification: You have the right to have Your information rectified if that information is inaccurate or incomplete
• The right to object: You have the right to object to Our processing of Your Personal Data
• The right of restriction: You have the right to request that We restrict the processing of Your personal information
• The right to data portability: You have the right to be provided with a copy of Your Personal Data in a structured, machine-readable and commonly used format
• The right to withdraw consent: You also have the right to withdraw Your consent at any time where We relied on Your consent to process Your personal information

Please note that we may ask You to verify Your identity before responding to such requests. If You make a request, We will try our best to respond to You within one month.

You have the right to complain to a Data Protection Authority about Our collection and use of Your Personal Data. For more information, if You are in the European Economic Area (EEA), please contact Your local data protection authority in the EEA.

9. CCPA Privacy Rights

Your Rights under the CCPA

Under this Privacy Policy, and by law if You are a resident of California, You have the following rights:

• The right to notice: You must be properly notified which categories of Personal Data are being collected and the purposes for which the Personal Data is being used
• The right to access / the right to request: The CCPA permits You to request and obtain from the Company information regarding the disclosure of Your Personal Data that has been collected in the past 12 months by the Company or its subsidiaries to a third-party for the third party's direct marketing purposes
• The right to say no to the sale of Personal Data: You also have the right to ask the Company not to sell Your Personal Data to third parties
• The right to know about Your Personal Data: You have the right to request and obtain from the Company information regarding the disclosure of the following:
  • The categories of Personal Data collected
  • The sources from which the Personal Data was collected
  • The business or commercial purpose for collecting or selling the Personal Data
  • Categories of third parties with whom We share Personal Data
  • The specific pieces of Personal Data we collected about You
• The right to delete Personal Data: You also have the right to request the deletion of Your Personal Data that have been collected in the past 12 months
• The right not to be discriminated against: You have the right not to be discriminated against for exercising any of Your Consumer's rights

Exercising Your CCPA Data Protection Rights

In order to exercise any of Your rights under the CCPA, and if you are a California resident, You can email us at privacy@next4.ai.

The Company will disclose and deliver the required information free of charge within 45 days of receiving Your verifiable request. The time period to provide the required information may be extended once by an additional 45 days when reasonably necessary and with prior notice.

Do Not Sell My Personal Information

We do not sell personal information as defined under CCPA law. However, some Service Providers we partner with may use technology that could be considered a "sale" under CCPA definitions.

You can opt out of any potential sales by contacting us at privacy@next4.ai or through the App settings.

10. Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us.

If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.

If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent's consent before We collect and use that information.

11. Subscription Information

• Payment Processing: All payments are processed through Apple App Store's secure payment system
• Payment Information: We do not store or have access to your payment information
• Title of auto-renewing subscription: Monthly Subscription
• Subscription Management: Manage your subscription through your Apple ID settings
• Pricing: Monthly subscription at $2.99/month with 3-day free trial
• Auto-renewal: Subscriptions auto-renew unless cancelled at least 24 hours before renewal
• Cancellation: Cancel anytime through Apple ID Account Settings
• Refunds: Refund requests are handled by Apple according to their refund policy

12. International Data Transfers

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction.

If You are located outside Hong Kong and choose to provide information to us, please note that We transfer the data, including Personal Data, to Hong Kong and process it there.

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.

The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.

13. Third-Party Services

Our Service may contain links to other websites or services that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Third-Party Services We Use:

• Google Sign-In (Google LLC): For authentication and account creation. Google's Privacy Policy: https://policies.google.com/privacy
• Apple Sign-In (Apple Inc.): For authentication and account creation. Apple's Privacy Policy: https://www.apple.com/legal/privacy/
• Analytics: For app performance and usage analytics
• Cloud Storage: For secure data storage and backup
• AI Processing: For receipt image recognition and data extraction
• Push Notifications: For service notifications and updates

14. Changes to Privacy Policy

We may update our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy.

We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective for material changes.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

15. Contact Us

For California Residents: You have additional rights under the California Consumer Privacy Act (CCPA) as detailed in Section 9.
For EU/EEA Residents: You have additional rights under the General Data Protection Regulation (GDPR) as detailed in Section 8.