Effective Date: January 2, 2026

This Privacy Policy (the "Policy") explains how Edisoft Technologies LTD. ("we," "us," or "our") collects, uses, discloses, retains, and protects your personal data when you use LMGOAL services, including the promotional site https://lmgoal.com/, the mobile site https://m.lmgoal.com/, the iOS app, and the Android app (collectively, the "Service"), and how you may exercise your rights.

1. Who We Are (Operator and Contact)

• Legal name: Edisoft Technologies LTD.
• Location: Taipei City 103745, Taiwan (R.O.C.)
• Privacy contact: info@lmgoal.com
• DPO: We have not appointed a dedicated DPO at this time. You may still contact us via the email above for any privacy-related requests.

2. Scope

This Policy applies to the Service (websites and apps).

The Service may contain links to third-party websites, services, or content (e.g., third-party advertising or social platforms). Their data practices are governed by their own policies, and we are not responsible for matters outside our control.

3. Personal Data We Collect

We collect personal data only to the extent necessary to provide and operate the Service. The categories below may not all apply to every user depending on features and usage.

3.1 Data you provide

• (A) Account data: email address, phone number, password (registration, login, account management, and security verification).
• (B) Profile data (optional): name, nickname, avatar/profile photo (e.g., profile display and identification in interactions).
• (C) Content: user-uploaded photos; chat/message logs (when you use in-app chat/messaging features).
• (D) Support communications: information you provide via email or phone (Chinese), including your request details, necessary account identifiers, and communication records.

3.2 Data collected automatically

• (E) Device and technical data: IP address; cookies (primarily on the websites); browser information; device ID; advertising ID (iOS: IDFA; Android: AAID); OS version; app version; language/time zone; crash logs; performance/diagnostic data.
• (F) Usage data: clicks, browsing, searches, interactions, feature usage, preference settings, and related event data.
• (G) Location data: approximate location (e.g., city/region level derived from IP or general device settings). We do not require precise GPS location; if a future feature requires precise location, we will provide clear notice and request permission where applicable.

3.3 Data we do not currently collect (Important)

• Payment card/bank account information (the Service does not process payments at this time)
• Government ID documents, real-name verification data, or biometric identifiers (e.g., face/fingerprint)
• Your address book/contacts (unless a future feature clearly requires it and you are informed)

4. How We Use Your Data (Purposes)

We process personal data for the following purposes:

• To provide, operate, and support the Service: registration/login, account management, feature delivery, profile display and interactive content, and customer support.
• To personalize recommendations and content presentation: improving ranking or recommendation experiences based on your usage, preferences, and interaction signals.
• Analytics, debugging, and product improvement: understanding feature usage, diagnosing errors/crashes, and improving performance and stability.
• Marketing and advertising delivery and measurement: delivering ads on the Service or third-party platforms, measuring performance, frequency capping, and optimization. Based on the information you provided, we do not use remarketing/lookalike targeting mechanisms at this time; however, we may use advertising identifiers and event data for basic measurement and optimization.
• Security, compliance, and fraud prevention: detecting and preventing abnormal logins, abuse, fraud, attacks, or violations; complying with laws and lawful governmental requests; and protecting users' and our rights and interests.

5. Cookies and Similar Technologies (Websites)

Our websites may use cookies and similar technologies to:

• maintain website functionality and preferences,
• perform traffic and usage analytics, and
• support advertising delivery and performance measurement.

You can refuse or delete cookies through your browser settings. If you disable cookies, some features may not function properly.

6. Push Notifications and Your Choices

We may use FCM (Firebase Cloud Messaging) and AWS SNS to deliver push notifications or service messages (e.g., feature updates or system notices).

You can disable push notifications in your device system settings.

If promotional notifications are provided (e.g., campaign announcements), you can opt out via in-app settings or device settings (depending on available features).

7. How We Share and Disclose Data

We do not sell your personal data. We may share data only to the extent necessary to provide the Service and achieve the purposes in this Policy.

7.1 Service providers and partners (processors)

• Firebase: analytics, diagnostics, and messaging integrations
• Google Play Console: Android basic analytics and crash/performance information
• AWS (Hong Kong region): cloud hosting, storage, and infrastructure (AWS HK)
• FCM and AWS SNS: push notifications and message delivery
• Google Ads and Meta (Facebook/Instagram): advertising delivery and performance measurement

We require processors to handle data only as necessary to provide services and to implement reasonable security measures.

7.2 Legal requirements, protection of rights, and security

We may disclose data to comply with laws, court orders, or lawful governmental requests; to detect, prevent, or address fraud, security incidents, abuse, or violations; or to protect the rights, property, and safety of us, you, or others.

7.3 Business transactions

In the event of a merger, acquisition, asset transfer, or bankruptcy, personal data may be transferred as part of the transaction. We will provide reasonable notice and require the recipient to continue to protect data under this Policy or provide protections at least equivalent to this Policy.

7.4 With your consent

Except as described above, if we need to use data for purposes not stated in this Policy or share data with other third parties, we will seek your consent where applicable.

8. Third-Party SDK / Services Summary

The Service may integrate the following third-party services (actual integrations depend on your device/app version and enabled features):

• Firebase: analytics, diagnostics, and messaging integrations
• Google Play Console: Android diagnostics/crash reporting and basic analytics
• AWS (Hong Kong): hosting and storage
• FCM and AWS SNS: push notification and message delivery
• Google Ads and Meta: advertising delivery and performance measurement

If you need more detailed items (e.g., data fields and event names per SDK), we can provide them as an appendix based on engineering implementation lists.

9. International Transfers

Because we use AWS (Hong Kong region) and third-party service providers, your data may be transferred to, stored, or processed outside Taiwan. We require reasonable safeguards where feasible and limit processing to what is necessary to provide the Service.

10. Retention and Deletion

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy and as required by applicable laws:

• Account data: retained for the life of your account. After you delete your account in the app, we will delete or de-identify the data unless retention is required by law or necessary for disputes/security.
• Chat logs and uploaded photos: retained as needed for the relevant features. After account deletion, we will generally delete or de-identify them unless limited retention is required for legal or security reasons (in which case we will minimize scope and duration).
• Usage logs, device data, and diagnostic data: retained for a reasonable period for analytics, debugging, and security.
• Backups: we do not maintain routine backups at this time; however, transient technical logs or caches may exist and will be cleared or de-identified within a reasonable timeframe.

Account deletion: available in the app. If you need help, contact info@lmgoal.com.

11. Your Rights and How to Exercise Them

Subject to applicable law, you may request access/copies, correction, restriction or cessation of processing, deletion, and withdrawal of consent (without affecting prior lawful processing).

To exercise your rights, contact us at info@lmgoal.com. We may request reasonable information to verify your identity for account security. We will respond within a reasonable timeframe. If requests are repetitive or clearly beyond a reasonable scope, we may charge necessary costs or refuse as permitted by law.

12. Security

We implement reasonable technical and organizational measures to protect personal data, including HTTPS encrypted transmission; encryption and access controls where appropriate; and limiting internal access and monitoring anomalies as needed.

No method of transmission or storage is 100% secure. If you suspect a security issue, contact info@lmgoal.com promptly.

13. Children

The Service is not primarily directed to children under 13, and we do not intend to collect their personal data. If you are a parent/guardian and believe a child has provided personal data, contact info@lmgoal.com and we will take reasonable steps to address the issue.

14. Changes to This Policy

We may update this Policy from time to time. For material changes (e.g., purposes, data categories, or major sharing partners), we will provide reasonable notice (e.g., via website/app notice) and update the effective date. Continued use of the Service after changes means you accept the revised Policy.