ASTRAUX Aimon AI Pet Robot Privacy Policy

For the purposes of this Privacy Policy, the controller of personal data is MAKTOUM TECHNOLOGY SARL (hereinafter referred to as “we”, “us” or “our”). To the extent permitted by applicable law, we may process relevant personal data through our affiliated companies or third-party service providers acting on our behalf.

This Privacy Policy applies to the ASTRAUX Aimon AI Pet Robot (hereinafter referred to as “Aimon Robot”), the related mobile applications (hereinafter referred to as the “App”), and other related products or services we provide to you.

Please note that for specific products, features, or services, we may provide and apply separate supplementary privacy terms, statements, or notices. In the event of any inconsistency between these supplementary terms and this Privacy Policy, the supplementary terms shall prevail. Before using the relevant products or services, please carefully read and ensure you understand the applicable privacy terms.

If you have any questions, comments, or requests regarding the personal data processing activities described in this Privacy Policy, please feel free to contact us using the contact information provided in this Privacy Policy.

1. What Data We Collect

In this Privacy Policy, “personal data” or “personal information” refers to information that can identify you, either alone or in combination with other information. We only collect relevant data to the extent necessary for the core functionality of the Aimon Robot, enhancing the interactive experience, and ensuring the stable operation of the system.

1.1 Account and Basic Setup Data

To support device initialization, personalized interaction, and cloud synchronization, we may collect the following information:

• Account Identification Information: When you register through the App or bind the device, we may collect your email address, nickname, or other basic information used for account identification, account creation, identity verification, device binding, and service management.
• User and Device Naming Information: This includes the user name, pet nickname, or device name entered during the initial setup or setup process. This information will be used for voice output, conversation generation, and personalized interaction experiences.
• Basic Time Information: If you provide your birthdate during setup, this information will only be used for time-related interactive feedback (e.g., birthday greetings) and will not be used for identity verification or marketing purposes.

1.2 Robot Usage and Interaction Data

To implement the core functionalities of the Aimon Robot, we process the following data locally on the device and, when necessary, through the cloud:

1.2.1 Perception and Motion Feedback Data

• Interaction and Motion Data: Data collected through pressure sensors, accelerometers, gyroscopes, and other sensors, such as touch, petting, shaking, waving, and device movement status, is used to identify user interactions and trigger corresponding animations, lighting effects, vibrations, and sound feedback.
• Movement State Data: Data used to recognize motion scenarios, such as hanging, to keep the screen active and trigger corresponding animations.
• Vehicle Driving Status Data: In vehicle mode, sensor and location information are used to infer the vehicle’s start, braking, turning, speed range, and parking status to drive corresponding pet animations and sound effects. We do not use this data for navigation, route tracking, or driving analysis.

1.2.2 Location and Check-in Data

• Geolocation Data (GPS): When you trigger relevant features (e.g., pressing the physical button for POI check-in), we temporarily use the device’s geolocation coordinates to identify nearby points of interest (POI), retrieve location names, determine the time zone, and display weather or holiday-related content.
• Check-in and Activity Records: This includes check-in time, location type, activity category, check-in frequency, consecutive check-in days, system-generated quotes, rewards, and related records, which are used to build long-term memories and user profiles, supporting personalized growth and interaction.

1.2.3 Voice Interaction and Content Generation Data

• Voice Input and Transcribed Text: When you interact using a wake-up word or physical button, we collect the voice content and transcribe it into text to understand commands, generate responses, and execute functions.
• Content Generation Data: Includes contextual information, interaction records, and system status data used to generate conversational text, quotes, and emotionally styled, natural-sounding voice output. This data supports natural language understanding, emotion recognition, and behavior scheduling.

1.2.4 Social and Interaction Features Data

• Proximity Interaction Data: In features like “Discover Friends,” when devices are in close proximity or shake, we record interaction events between the devices to trigger automatic check-ins or reward mechanisms.
• User-uploaded Content: In features such as “Custom Commands” or “Character Open Platform,” you may voluntarily upload custom voice commands, animations, or character materials. This content will only be used for the relevant functionality and display, and you are responsible for ensuring it complies with applicable laws and regulations.

1.2.5 Status, Logs, and System Data

• Emotion and Interaction Logs: This includes emotion value changes, interaction behavior logs, and records of pet-initiated interactions, used to maintain character continuity and long-term memory.
• System and Scheduling Logs: These are used to ensure the normal scheduling and operation of features such as voice conversations, vehicle mode, and check-ins, avoiding command conflicts and improving system stability.
• Device and Cloud Synchronization Data: Includes device identifiers, device binding information, app settings, and data synchronization and storage records, used to provide cloud service support and ensure data consistency.

1.3 Age Assurance Technologies

In accordance with our policies and applicable law, you may be required to provide proof of your age in order to access our services. The methods you use to prove your age may vary based on where you live, and include:

• On-Device Facial Age Estimation: This solution analyzes your selfie in order to estimate whether you are above or below a designated age threshold. This technology operates on-device, meaning that no facial images or biometric information ever leave your device.
• Facial Age Estimation: This solution analyzes your selfie in order to estimate whether you are above or below a designated age threshold. Your selfie and associated personally identifiable data are deleted once the verification is complete.
• ID Scan and Selfie Match: This solution scans a government-issued identification document to determine your age [and compares the image on the ID with a selfie you provide in order to verify you are the owner of the document]. The ID image and selfie are deleted once the verification process is complete.
• ConnectID: This solution allows you to verify your age by logging in using your credentials for an existing Australian financial institution. The credentials are not stored.
• SingPass: SingPass is a trusted digital identity that allows Singapore citizens and residents to access government and business services online using biometrics (fingerprint, Face Verification) or SMS Two-Factor Authentication (2FA) for login. These login credentials are not stored.
• AgeKeys: AgeKeys are unique reusable cryptographic tokens generated locally on your device, and protected by your local device’s security measures. You can share an AgeKey with us or other online providers to more seamlessly prove your age. The AgeKey does not contain your identity: it simply acts as a secure record of how and when you proved your age. If you would like to learn more about how AgeKey works, please refer to www.agekey.org.

Regardless of which method or methods you use to verify your identity, we only receive and store the results of the verification process (for example, pass/fail, what method was used to perform the verification, what time the check occurred, and diagnostic information). Neither we nor our service providers retain any personally identifiable information you provide to prove your age.

1.4 Third-Party Data Sources

We do not collect your personal data from third parties. The personal data you provide or generate through the use of the Aimon Robot and related services is directly provided by you, generated by the device during use, or created by the system based on features you actively trigger. We do not collect identity information, account details, behavioral profiles, or preference data from data brokers, advertising platforms, social media platforms, or other third-party organizations.

2. How We Use Your Data and Legal Basis

We process your personal data only when we have a legal basis to do so. The legal bases for processing your data include: fulfilling our contract with you, our legitimate interests, your consent, and compliance with legal obligations or public interests.

2.1 Data Processing for Contract Fulfillment

In order to provide the Aimon Robot and its core functionalities, we need to process the following types of data:

• Enforce Our Terms, Guidelines, or Policies: We use your information to enforce our Terms, Guidelines, and policies.
• Account and Device Service Provision: Used to complete account creation, device binding, basic setup, and cloud synchronization to ensure the Aimon Robot operates properly and continues to provide services to you.
• Core Functionality Implementation and Operation: Used to enable core functionalities such as perception feedback, interaction behavior recognition, growth and development system, POI check-ins, vehicle mode, voice conversations, tool-based queries, social discovery, and pet-initiated interactions.
• Content Understanding and Generation: Used to recognize your voice commands, understand the interaction context, and generate corresponding text content, voice output, animations, and emotional feedback.
• Service Support and System Maintenance: Used to provide technical support, troubleshoot issues, ensure system operation, synchronize data, and apply necessary software and functionality updates.

The above data processing activities are necessary for you to use the Aimon Robot and related services. Without processing this data, the corresponding functionalities cannot be implemented.

2.2 Data Processing Based on Legitimate Interests

Without infringing on your legitimate rights, we may process certain data based on our legitimate interests for the following purposes:

• Product Operation Analysis and Optimization: Analyzing feature usage, interaction frequency, system status, and overall performance to optimize the growth system logic, enhance the interaction experience, improve model performance, and ensure system stability. The analysis is typically carried out in a de-identified or aggregated form.
• Feature Improvement and New Capability Testing: Used for testing, tuning, and improving existing functionalities, such as enhancing the naturalness of character expression, coherence in interactions, and behavior scheduling, or improving capabilities related to custom commands and character materials.
• Security and Stability Assurance: Used to monitor for abnormal behavior, system errors, or potential misuse to ensure the security, integrity, and reliability of the device, system, and services.

When processing data based on legitimate interests, we assess the impact on your privacy rights and take reasonable measures to limit and protect your data.

2.3 Data Processing Based on Your Consent

We will only process the relevant data in the following cases, after obtaining your explicit consent:

• Non-core or Optional Features: When certain features are not necessary for the operation of the Aimon Robot but involve additional data processing, we will clearly inform you through the App or device interface and obtain your consent. You may withdraw your consent at any time, and such withdrawal will not affect your use of core functionalities.
• Sending Notifications: Where legally required or in accordance with industry practices, we may send you necessary notifications related to product use, based on your preferences and consent.

We will not use your personal data for purposes unrelated to the Aimon Robot’s functionalities without your consent.

2.4 Compliance with Legal Obligations or Significant Public Interest

Where required or permitted by applicable laws, we may process your personal data for the following purposes:

• Fulfilling Legal Obligations: To comply with applicable laws, regulations, regulatory requirements, judicial orders, or legitimate governmental requests.
• Ensure The Security and Stability of Our Services: To detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity;
• Protecting Significant Legitimate Interests: In emergency situations, to process data necessary to protect your or others’ life, physical safety, or significant property safety.

3. How We Share Your Data

We do not sell, rent, or trade your personal data in any form. We will only share your personal data to the extent necessary for the functionality of the Aimon Robot, ensuring system operation, or fulfilling legal obligations, and we take reasonable measures to ensure the security of your data.

3.1 Affiliates and Branches

Where necessary, we may share certain personal data between ASTRAUX group entities and its affiliates for the following purposes:

• To provide unified technical support, system operations, or cloud services.
• To ensure cross-regional data synchronization and service continuity.
• To implement unified security management and compliance auditing.

Such sharing will be limited to the extent necessary for fulfilling services related to the Aimon Robot, and affiliates will process your personal data in accordance with this Privacy Policy and applicable laws.

3.2 Service Providers

To enable the core functionalities of the Aimon Robot, we may engage third-party service providers to process certain personal data on our behalf. These third parties will only process data under our instructions and may not use the data for their own purposes. The types of services include:

• Cloud and Model Service Providers: Used for cloud computing, data storage, and synchronization capabilities, as well as large language model services for content understanding, dialogue generation, and behavior scheduling.
• Generative Voice Service Providers: Used to synthesize text content into emotional, stylized voice output, creating a natural, personalized voice interaction experience.
• Map and Location Service Providers: Used to obtain location names and POI information based on geolocation coordinates to support POI check-ins, location display, and activity type identification.
• Weather Service Providers: Used to obtain real-time weather information based on your location or time zone to support animated displays and situational interactions.
• Messaging and Notification Service Providers: If you choose relevant features, these providers will send data summaries or service notifications related to the Aimon Robot via messaging platforms (e.g., WhatsApp).

We will enter into data processing agreements with the above service providers, requiring them to adopt data protection measures that meet or exceed the standards of this Privacy Policy.

3.3 Third Parties You Actively Share Data with or Authorize

In the following situations, your data may be accessed by other users or third parties based on your voluntary actions:

• User-Generated Content Sharing: When you voluntarily upload custom voice commands, character animations, or character materials to the relevant functionality modules of the App and choose to make them public, other users may download or use such content.

Please note that once you choose to make content public, its visibility will be determined by the functionality settings, and we cannot control the subsequent use of the content by other users.

3.4 Legal Requirements or Security Needs

In accordance with applicable laws or when permitted, we may disclose your personal data in the following circumstances:

• To comply with laws, regulations, judicial procedures, or regulatory requirements.
• To protect the life, property, or legal rights of yourself, other users, or the public.
• To respond to significant security incidents or system abuse.

4. Location of Data Storage

Your data may be stored on servers located outside of your country of residence. We may transfer your personal data to third-party service providers located in different countries/regions. Regardless of where the data is transferred, we will comply with applicable legal requirements and take appropriate protective measures to ensure that your data is protected in a manner consistent with the commitments made in this policy.

5. Your Rights and Choices

You have various rights concerning your personal data held by us. To exercise these rights, please contact us using the contact details provided at the end of this Privacy Policy.

• Right of Access: You have the right to know what data we have collected about you, the purposes of processing, and who your data will be shared with.
• Right to Rectification: You have the right to request correction or modification of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request the deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw your consent and there is no other legal basis for processing.
• Right to Restrict Processing: In certain circumstances, you have the right to request the restriction of our processing of your personal data.
• Right to Data Portability: Where technically feasible, you have the right to receive a transferable copy of the personal data you have provided to us, or to request that your personal data be transferred to another data controller.
• Right to Object: In certain circumstances, you have the right to object to our processing of your personal data (e.g., for direct marketing purposes).
• Right to Withdraw Consent: If we process your personal data based on your consent, you have the right to withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint: If you believe our processing of your personal data violates legal requirements, you have the right to lodge a complaint with the regulatory authority in your jurisdiction.
• Marketing Preferences: You may unsubscribe from our promotional communications at any time by contacting us.

6. Data Security

We are committed to implementing reasonable and appropriate management, technical, and organizational security measures to protect your personal data from unauthorized or unlawful access, alteration, use, disclosure, or loss. We regularly monitor our systems to detect potential vulnerabilities and attacks.

7. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected. If data is used for multiple purposes, it will be deleted automatically or stored in an anonymized form once the final purpose is achieved. To comply with legal obligations, tax matters, or legal disputes, personal data may be retained for a longer period.

8. Data Transfer to Third Countries

If necessary, we may transfer your personal data across borders within ASTRAUX and its subsidiaries and affiliates. In any case of transferring personal data outside of its country of origin, we will comply with applicable laws and implement appropriate protective measures as required.

9. Children

Our products and services are not intended for individuals under the age of 16. In some cases, depending on local regulatory requirements, this age limit may be higher. We do not knowingly collect personal data from individuals under the age of 16. If we become aware that we have inadvertently collected personal data from a child, we will promptly take steps to delete such data.

We partner with k-ID to support children, teens, and their parents / legal guardians.

How can I manage settings for a child? Family tools are available for children who require a trusted adult to approve or consent to the collection and processing of their personal information. You can manage your child’s account at family.k-id.com.

Can I manage settings for a teen? In some jurisdictions, parents or legal guardians may have the ability to configure settings on behalf of their teens, in addition to younger children. The settings available vary by location, as the rights that teens have, and the regulatory requirements with respect to certain features for teens, are different across different jurisdictions.

How do I contact you about my child’s data? You can directly submit a request by visiting family.k-id.com, selecting your child and our service, and submitting a data subject request by clicking “Contact Developer.”

Who is k-ID? k-ID provides technologies designed to create safer, more empowering online experiences for kids and teens. You can read more about k-ID at k-id.com and review its privacy policy at k-id.com/privacy-policy.

10. Updates to this Privacy Policy

We reserve the right to modify or update this Privacy Policy to reflect changes in our services, data processing practices, or to comply with regulatory requirements. The revised Privacy Policy will take effect immediately upon publication. If there are significant changes, we will make reasonable efforts to notify you through email, App notifications, or website announcements.

By continuing to use ASTRAUX products and services, you will be deemed to have accepted the updated version of this Privacy Policy.

11. Contact Us

If you have any questions or concerns regarding this policy, please contact us at:

We will do our best to address your concerns promptly. If you are not satisfied with our response, you may escalate your concern to the applicable privacy regulatory authority in your jurisdiction.