PRIVACY POLICY

Effective Date: [19 August 2026]
Version: 1.0

At DeepFeel, your privacy matters to us. This Privacy Policy explains how we collect, use, store, process, disclose and protect your personal data when you interact with the DeepFeel website, mobile application, products, services and related experiences.

This includes services and features such as AcuSmart, Relief Modes, QR product activation, Dippie, DeepCoins, rewards, referrals, shopping, customer support and other DeepFeel services that may be introduced from time to time.

By accessing or using DeepFeel, you acknowledge that your personal data may be processed as described in this Privacy Policy, subject to applicable data protection laws and your available choices and rights.

1. About DeepFeel

DeepFeel is a personalised wellness platform that connects physical wellness products with digital guidance, interactive experiences, rewards and related services.

For the purposes of this Privacy Policy, references to “DeepFeel”, “we”, “us” or “our” refer to:

[Legal Company Name]
Company Registration No.: [Registration Number]
Registered Address: [Company Address]

2. Scope of This Privacy Policy

This Privacy Policy applies when you:

• Visit the DeepFeel website.
• Create or manage a DeepFeel account.
• Use the DeepFeel mobile application.
• Activate or use AcuSmart.
• Scan a DeepFeel QR code.
• Use Relief Modes or guided routines.
• Collect Dippies or earn and redeem DeepCoins.
• Participate in rewards, referrals or promotions.
• Purchase DeepFeel products.
• Use our Store Locator or location-based features.
• Contact our customer support team.
• Subscribe to marketing or promotional communications.
• Otherwise interact with DeepFeel products, services or platforms.

3. Personal Data We May Collect

Depending on how you use DeepFeel, we may collect the following categories of personal data.

Account & Profile Information

• Name or nickname.
• Mobile number.
• Email address.
• Profile photo or avatar.
• Account ID.
• Login and authentication information.
• Account status.
• Country or region.
• Language preference.

QR & Product Activation Information

• QR code ID.
• Product associated with the QR code.
• Scan date and time.
• Scan verification status.
• Product activation information.
• Scan history.

AcuSmart & Wellness Interaction Information

• Selected discomfort or body areas.
• Selected Relief Modes.
• Completed guided routines.
• Routine completion dates.
• Favourite or recently used routines, where available.
• Routine ratings.
• Before-and-after feeling feedback.
• Optional comments.
• Safety concern feedback.
• Routine history, where the feature is available.

We aim to minimise the collection of sensitive personal data. Where information you provide may qualify as sensitive personal data under applicable law, we will apply appropriate safeguards and obtain any consent required by law.

Dippie, DeepCoins & Rewards Information

• DeepCoins balance.
• DeepCoins earning and transaction history.
• Reward redemption history.
• Dippie collection and Passport progress.
• Dippie reveal and collection records.
• Reward eligibility information.
• Campaign participation.

Referral Information

• Referral code.
• Referral attribution.
• Referral status.
• Qualifying referral activity.
• Referral reward records.

Purchase & Order Information

• Name.
• Contact information.
• Shipping and delivery address.
• Order information.
• Products purchased.
• Order status.
• Payment reference.
• Refund or cancellation information.

We generally do not need to store your full payment card information where payments are processed through authorised third-party payment providers.

Device & Technical Information

• Device type.
• Operating system.
• App version.
• Browser type.
• IP address where collected.
• Device or session identifiers where necessary.
• Diagnostic and error information.
• Security and login activity.

Usage & Analytics Information

• Pages or screens viewed.
• Features used.
• Buttons or links interacted with.
• Session information.
• App and website usage events.
• General performance and diagnostic information.

Customer Support Information

• Support requests.
• Messages and correspondence.
• Product issue information.
• Attachments you choose to provide.
• Support ticket status and history.

Consent & Preference Information

• Privacy Policy acceptance.
• Terms & Conditions acceptance.
• Marketing preferences.
• Notification preferences.
• Permission settings.
• Country-specific consent.
• Consent date, time, version and language.

4. How We Collect Your Personal Data

We may collect personal data:

• Directly from you when you create an account or update your profile.
• When you purchase or activate a DeepFeel product.
• When you scan a QR code.
• When you use AcuSmart or other DeepFeel features.
• When you complete routines or provide feedback.
• When you participate in DeepCoins, Dippie, rewards, referrals or campaigns.
• When you contact customer support.
• When you subscribe to marketing communications.
• Automatically through your use of our website, app or digital services.
• From authorised third-party service providers where permitted by applicable law.

5. How We Use Your Personal Data

We may use your personal data to:

• Create and manage your DeepFeel account.
• Authenticate and secure your account.
• Provide DeepFeel services and features.
• Activate AcuSmart and eligible products.
• Provide guided Relief Mode experiences.
• Save your QR scan and product activation history.
• Manage your Dippie Passport and collections.
• Calculate, award and manage DeepCoins.
• Manage reward eligibility and redemption.
• Manage referral activity and qualifying rewards.
• Process purchases, orders, deliveries, returns and refunds.
• Provide customer service and technical support.
• Send important account, security, transaction and service notifications.
• Provide marketing communications where you have opted in or where otherwise permitted by law.
• Personalise relevant DeepFeel experiences.
• Understand how users interact with our website and app.
• Improve our products, features and customer experience.
• Detect and prevent fraud, QR abuse and rewards manipulation.
• Maintain platform security and system integrity.
• Comply with legal, regulatory, tax and audit requirements.
• Establish, exercise or defend legal rights where necessary.

6. Consent & Processing of Personal Data

We process personal data in accordance with applicable data protection laws.

Where your consent is required, we will request it in an appropriate manner before carrying out the relevant processing.

Certain information may be necessary to provide a requested service. For example, we may require account information to create your account or delivery information to fulfil an order.

Other permissions, such as marketing communications or location access, may be optional.

Where permitted, you may withdraw or change your consent through the DeepFeel app settings or by contacting us.

7. QR Codes & Product Verification

DeepFeel uses QR codes as part of product verification, AcuSmart activation, Dippie, DeepCoins, rewards and other eligible experiences.

When you scan an eligible QR code, we may process information including:

• Your user account ID.
• The QR code ID.
• Associated product information.
• Date and time of the scan.
• Verification result.
• Reward eligibility.
• Associated Dippie or DeepCoins activity.

QR records may also be used for product verification, customer support, fraud prevention, security and audit purposes.

8. Dippie, DeepCoins & Rewards

When you participate in DeepFeel’s rewards ecosystem, we may maintain records of your DeepCoins balance, transaction history, Dippie collection, reward activity and redemption history.

These records help us operate the rewards programme, verify transactions, prevent misuse and resolve customer support enquiries.

9. Purchases & Payments

When you purchase a DeepFeel product, we may process personal data required to complete the transaction, including your contact information, delivery address, order information and payment reference.

Payments may be processed by third-party payment service providers. Those providers may process your payment information according to their own privacy notices and security requirements.

DeepFeel should not receive or retain more payment information than is reasonably required to process and manage your order.

10. Location Information

Certain DeepFeel features, such as the Store Locator, may request access to your device location to help identify nearby stores or services.

Location access is optional unless specifically stated otherwise.

If you do not provide location permission, you may still be able to search manually using information such as your city, area, state or postcode.

You can manage location permissions through your device settings.

11. Cookies & Tracking Technologies

Our website and digital services may use cookies, software development kits, analytics technologies or similar tools to operate our services, remember preferences, understand usage, improve performance and maintain security.

These technologies may collect information such as:

• Browser and device information.
• Pages viewed.
• Session information.
• General usage behaviour.
• Technical and performance information.

Where required by applicable law, we will provide appropriate choices or obtain consent for non-essential tracking technologies.

Additional information may be provided in a separate Cookie or Tracking Notice.

12. Marketing & Communications

With your permission where required, DeepFeel may send you information about:

• New products.
• DeepFeel campaigns.
• Promotions and offers.
• Reward opportunities.
• Dippie activities.
• DeepCoins campaigns.
• Referral campaigns.
• Personalised offers.

Marketing communications may be delivered through email, SMS, WhatsApp, push notifications or other available communication channels.

Marketing consent is optional. You may update or withdraw your marketing preferences at any time through your account settings, where available, or by contacting us.

Even if you opt out of marketing communications, we may still send necessary account, order, payment, security, support, legal or service-related messages.

13. How We Share Personal Data

We do not disclose personal data unnecessarily. Where required to provide our services, personal data may be shared with:

• Companies within the DeepFeel corporate group, where applicable.
• Cloud hosting and technology service providers.
• Authentication and login providers.
• Payment service providers.
• Delivery, logistics and fulfilment partners.
• Customer support service providers.
• Analytics and technology providers.
• Marketing service providers where you have provided the necessary consent.
• Professional advisers such as lawyers, accountants and auditors.
• Government authorities, regulators or law enforcement agencies where required by law.
• Other parties where you have authorised or requested the disclosure.

We require service providers that process personal data on our behalf to apply appropriate data protection and security measures.

14. International & Cross-Border Data Transfers

DeepFeel is designed as a global platform. As a result, personal data may in certain circumstances be processed or stored outside your country or region.

Where personal data is transferred internationally, we will take appropriate steps to ensure the transfer is carried out in accordance with applicable data protection laws and appropriate safeguards.

15. How We Protect Your Personal Data

We take reasonable technical, organisational and administrative measures designed to protect personal data from:

• Loss.
• Misuse.
• Unauthorised access.
• Unauthorised disclosure.
• Alteration.
• Accidental destruction.
• Unlawful processing.

Our security practices may include access controls, authentication, restricted administrative permissions, audit logging, secure data transmission, monitoring and other appropriate safeguards.

No website, application, database or electronic transmission can be guaranteed to be completely secure. Users should also take reasonable steps to protect their account credentials and devices.

16. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or as required by applicable law.

Different types of information may have different retention periods. For example:

• Account data may generally be retained while your account remains active.
• Legal acceptance and consent records may be retained for compliance and audit purposes.
• DeepCoins transactions may be retained for rewards, fraud prevention and audit purposes.
• QR scan records may be retained for verification, support, fraud prevention and audit purposes.
• Order and payment records may be retained for transaction, accounting, tax and legal requirements.
• Support records may be retained for customer service and dispute resolution purposes.
• Analytics information may be aggregated or anonymised where appropriate.

When personal data is no longer required, we may securely delete, anonymise or otherwise dispose of it in accordance with applicable requirements.

17. Personal Data Breaches

We maintain processes to identify, assess and respond to suspected personal data breaches.

Where required by applicable law, we will notify the relevant data protection authority and affected individuals of a qualifying personal data breach within the required timeframe.

18. Your Privacy Rights

Depending on the laws applicable to you, you may have rights relating to your personal data, including the right to:

• Know how your personal data is being processed.
• Request access to personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Withdraw consent where processing is based on your consent.
• Object to or prevent certain processing where permitted by law.
• Stop receiving direct marketing communications.
• Request data portability where available and technically feasible under applicable law.
• Request deletion of your DeepFeel account.
• Make an enquiry or complaint regarding how your personal data is handled.

Certain rights may be subject to legal exceptions, verification requirements or information that DeepFeel must retain for legal, fraud prevention, transaction, security or audit purposes.

We may need to verify your identity before processing a privacy-related request.

19. Account Deletion

You may request deletion of your DeepFeel account through the available account settings or customer support channels.

Account deletion may result in the removal or anonymisation of information associated with your account, including:

• Your profile.
• DeepCoins wallet information.
• Dippie Passport information.
• Scan history.
• Routine history.
• Rewards information.
• Referral records.
• Support history.

Some information may need to be retained where reasonably necessary for legal compliance, transactions, fraud prevention, security, dispute resolution, support or audit purposes.

20. Children’s & Minors’ Privacy

DeepFeel services should be used in accordance with applicable age requirements.

Where consent from a parent or legal guardian is required by applicable law, users should not provide personal data or create an account without the necessary consent.

If we become aware that personal data has been collected from a person in circumstances where legally required consent was not obtained, we may take appropriate steps to restrict the account or remove the information as required.

21. Third-Party Services & Links

The DeepFeel website or app may contain links to, or integrate with, third-party websites and services such as payment providers, delivery services, login providers, app stores, maps or social platforms.

Those services operate under their own privacy policies and practices. We encourage you to review their privacy information before providing personal data to them.

22. Country & Regional Privacy Requirements

DeepFeel operates across different countries and regions. Privacy requirements may therefore vary depending on where you are located.

We may provide additional country-specific privacy notices, consent requests or disclosures where required by applicable law.

Where a country-specific privacy notice applies, it should be read together with this Privacy Policy.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, products, technology, business practices or legal requirements.

The latest version will display its effective date and version number.

Where a material change requires additional notice or renewed acceptance, we may notify you or request that you review and accept the updated Privacy Policy.