U.S. States Privacy Notice

Aveola

1. APPLICABILITY

If you reside in a state that has enacted consumer privacy laws, this section applies to you.

This U.S. States Privacy Notice ("Notice") supplements our Privacy Policy and provides disclosures required by laws in states such as California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia.

This Notice is designed to supplement our Privacy Policy to ensure compliance with state-specific laws and applies to the collection, use, and sharing of your Personal Information through our websites, mobile applications, and other online or offline services (collectively, the "Services").

For California residents, this also serves as our California Notice at Collection. This Notice does not apply to information collected about employees, job applicants, or independent contractors in the context of employment.

Definition of Personal Information
The definition of "Personal Information" may vary by state law. Generally, it refers to "information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

2. CATEGORIES OF PERSONAL INFORMATION WE COLLECT

The information below outlines the categories of Personal Information we collect, along with examples and the third parties with whom such data may be shared. For more details, refer to our Privacy Policy.

Categories of Personal Information We Collect
We collect the categories of personal information listed below for the business and commercial purposes described in this Privacy Policy:

Category	Examples of Personal Information in this Category	Source
Identifiers	e.g., name, email, device ID, App Store / Social Login Providers	You Your Device
Onboarding data	Information you provide us when you register for the Service. For example, date of birth, profile photo, gender, hobbies, interests, etc.	You Your Device
Commercial Information	Purchase history (such as whether you bought a premium features), use history	You Your Device Payment Processors
Geolocation	Internet protocol; IP address	Your Device
Internet or other electronic network activity information	such as links you click or pages you visit on our website	You Your Device
Contents of your messages on our services	Profile photo, messages, video chat content	You (when you use the video chat features on our services)

For additional details, see Section 3 ("Information We Collect") of our Privacy Policy.

Additionally, we may share each of the above-listed categories of Personal Information with government entities if required:

To comply with legal obligations, subpoenas, or law enforcement requests.
To protect the rights, property, or safety of users, our company, or others.
To enforce our policies or contractual obligations.

If we undergo a merger, acquisition, financing, bankruptcy, reorganization, or sale of company assets, we may transfer your Personal Information to involved corporate entities and their professional advisors.

Aveola does not sell personal information for monetary value. However, limited identifiers (such as device IDs and cookies) may be shared with advertising or analytics partners to display relevant ads and measure their performance. This activity may be deemed a "sale" or "sharing" under certain U.S. privacy laws.

You can opt out at any time by clicking "Do Not Sell or Share My Personal Information".

3. WHY WE USE PERSONAL INFORMATION

We process Personal Information for the following purposes:

To provide and maintain our Services, including account creation, authentication, and access management.
To improve user experience through personalized content, recommendations, and service customization.
To process payments and transactions.
To conduct analytics and research for product development and service enhancements.
To communicate with users, including customer support, service updates, and promotional offers.
To prevent fraud, security threats, and unauthorized activities.
To comply with legal and regulatory requirements.

For additional details, refer to our Privacy Policy.

4. WHAT PERSONAL INFORMATION WE SHARE

In addition to the table above, our Privacy Policy provides further details regarding the categories of third parties with whom we share Personal Information (see Section 5).

Certain state privacy laws, such as those in California require us to disclose the categories of Personal Information that we have shared with third parties for business purposes over the past 12 months. During this period, we have disclosed all categories of Personal Information outlined in the "Сategories of Personal Information We Collect" section for business purposes. For example, we may share IP addresses and device identifiers with service providers that assist us with crash monitoring and reporting.

Some U.S. states grant residents the right to opt out of sharing their Personal Information with third parties in exchange for valuable consideration (which may be classified as a "sale" or "share" under state privacy laws, even if no monetary transaction occurs). If you reside in one of these states and would like to limit the disclosure of your Personal Information to third parties for advertising or marketing purposes, please refer to the "Your Rights" section below.

Privacy laws in some U.S. states broadly define the term "sale" to include sharing of information via cookies, pixels, and similar tracking technologies for certain targeted advertising activities. We do not sell Personal Information for monetary compensation. However, when you visit our websites, we and our advertising partners may collect device data and behavioral insights through tracking technologies, which could be interpreted as a "sale" or "sharing" under state laws, even if no money is exchanged.

5. YOUR U.S. PRIVACY RIGHTS

Certain U.S. state privacy laws grant residents specific rights regarding their personal information. If you reside in a state with such laws, you may have the following rights:

Right to Data Portability/Access

You may have the right to request access to the specific pieces of personal information we have collected about you in the 12 months preceding your request. Where applicable, we may provide this data in an electronic, portable, and readily usable format.

Right to Know

You may be entitled to receive information regarding the categories of Personal Information we collected, the sources from which we collected Personal Information, the purposes for which we collected and shared Personal Information, the categories of Personal Information that we sold and the categories of third parties to whom the Personal Information was sold, and the categories of Personal Information that we disclosed for a business purpose in the 12 months preceding your request.

Right to Deletion

You may have the right to request that we delete the personal information we have collected from you. We will use commercially reasonable efforts to fulfill your request, subject to applicable laws. However, we may be required to retain certain information for legitimate business purposes or as required by law.

Right to Opt-Out of Sales, Sharing, and Targeted Advertising

You may have the right to opt out of certain uses of your personal information, including:

The "sale" or "sharing" of your personal information as defined under state privacy laws.
The use of your personal information for targeted advertising.

To opt out, you can:

Visit our "Do Not Sell/Share My Personal Data" form.
Use a legally recognized opt-out mechanism, such as the Global Privacy Control (GPC) signal, when accessing our websites.
Submit a request via our support team (support@aveola.app)

Right to Limit the Use of Sensitive Personal Information

Certain states provide the right to restrict how businesses use sensitive personal information. If applicable, you can submit a request through our form.

Right to Withdraw Consent

Where applicable, you have the right to withdraw your consent for data collection and sharing.

Right to Correct (Rectification)

You may have the right to request that we correct inaccurate personal information we maintain about you.

How to Exercise Your Rights

To exercise any of the available privacy rights, please send a request to support@aveola.app or use the privacy features available in our products.

Verification

To ensure that we properly process your requests regarding your rights, we are required to verify your identity. The verification process may vary depending on the type of request and the Service you use. It may include confirming details such as your name, age, email address, date of premium items purchase, date of last activity, date of account creation, or other relevant Service usage data that reasonably identify you as the account owner. We may also request additional proof of identity if necessary, but we strive to minimize the information required. For certain requests, we may send a verification code or link to authenticate your identity.

Authorized Agent

You may designate an authorized agent to exercise your rights on your behalf. If you have provided the authorized agent with a valid power of attorney, we will work directly with them to process your request. If a power of attorney or similar authorization has not been provided, we will contact you directly to confirm the agent's authority and collect the necessary verification information. The authorized agent must verify both their own identity and that of the consumer they are representing.

Right to Appeal

If we deny your request, you may have the right to appeal our decision. To do so, please contact us and explain your concerns. If you are dissatisfied with the result of the appeal, you may escalate the matter by contacting the Attorney General's office in your state of residence.

Non-Discrimination

You have the right to exercise your privacy rights without fear of discrimination or retaliation. However, we may provide different levels of service or pricing based on the value of your personal information, as permitted by applicable law.

Data Retention

We retain the categories of personal information listed above as reasonably necessary to fulfill the purposes outlined in this notice, unless a longer retention period is required or permitted by law. In many situations, we must retain all, or a portion, of your personal information to comply with legal obligations, resolve disputes, enforce our agreements, protect against fraudulent, deceptive, or illegal activity, or for another one of our business purposes.

Children's Privacy

We do not knowingly sell or share information about users who are under the age of 18.

Effective as of: 24 November 2025