N NovaU

Privacy

Privacy Policy

This privacy policy is applicable to the NovaU app (hereinafter referred to as "Application") for mobile devices, which was developed by NOVA STAR LINK LIMITED (hereinafter referred to as "Service Provider," "we," "us," or "our") that offers both free and paid features, including optional subscription plans and in-app purchases.

Effective as of 2026-07-16

What information does the Application obtain and how is it used?

The Application acquires the information you supply when you download and register the Application. Registration with us is not mandatory. However, bear in mind that you might not be able to utilize some of the features offered by the Application unless you register with us.

We may also use the information you provided us to contact you from time to time to provide you with important information, required notices and marketing promotions.

What information does the Application collect automatically?

In addition, the Application and service providers acting on our behalf may automatically collect certain information, including the type and model of mobile device you use, operating system and version, language, time zone, network and carrier information, IP address, identifiers such as the Identifier for Vendors (IDFV) and an AppsFlyer-generated installation identifier, and information about how you use the Application.

Where you provide the permission required by Apple, we may also receive the Identifier for Advertisers (IDFA). We may collect installation, launch, session, advertising campaign and attribution information, and a purchase-conversion event indicating that a purchase occurred and the time of that event. The purchase event we currently send to AppsFlyer does not include the product or plan purchased, price, currency, quantity, order or transaction number, App Store receipt, or your complete purchase history.

Does the Application collect location information?

With your permission, the Application collects location information. Depending on the permission and precision setting you select on your device, this may be precise or approximate location information. We use this information in the following ways:

  • Geolocation Services: We utilize location data to provide features such as personalized content, relevant recommendations, and location-based services.
  • Analytics and Improvements: Aggregated and anonymized location data helps us analyze user behavior, identify trends, and improve the overall performance and functionality of the Application.
  • Third-Party Services: Periodically, we may transmit anonymized location data to external services. These services assist us in enhancing the Application and optimizing our offerings.

Does the Application use Artificial Intelligence (AI) technologies?

The Application does not use Artificial Intelligence (AI) technologies to process your data or provide features.

Do third parties see and/or have access to information obtained by the Application?

We use service providers to operate, secure, analyze and improve the Application. Depending on the service, these providers may process information that is aggregated or de-identified, as well as device-level or account-level information, solely for the purposes described in this Privacy Policy and our instructions.

We may disclose User Provided and Automatically Collected Information:

  • as required by law, such as to comply with a subpoena, or similar legal process;
  • when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
  • with trusted service providers that process information on our behalf and under our instructions;
  • in connection with a merger, acquisition, financing, reorganization or sale of all or part of our business, subject to appropriate confidentiality and data-protection safeguards.

We do not currently enable AppsFlyer to send purchase-conversion events or other personal information to advertising partners. If we decide to enable advertising-partner data sharing in the future, we will update this Privacy Policy before doing so, provide any legally required notice and opt-out mechanism, and obtain any consent or permission required by applicable law or platform rules.

We do not provide advertising partners with your messages, photos, payment card or bank details, Apple ID credentials, App Store receipts, or complete purchase history. Service providers and partners receiving personal data must provide the same or an equivalent level of protection described in this Privacy Policy and required by applicable law.

What are my opt-out rights?

You may decline or withdraw optional advertising-tracking permission through the privacy settings on your device. Where required, we will obtain the applicable permission before using information for tracking across apps or websites owned by other companies. Declining or withdrawing optional advertising tracking does not prevent you from using the Application's core features.

You may also contact us at service@thbanana.com to object to or request that we stop certain processing or sharing, subject to applicable law. Uninstalling the Application stops future collection from that installation but does not automatically delete information already retained by us or our service providers.

What is the data retention policy and how can you manage your information?

We retain User Provided data for as long as you use the Application and for a reasonable time thereafter. We retain Automatically Collected information, including information processed through AppsFlyer, for up to 24 months unless a shorter period is configured, a longer period is required or permitted by law, or the information has been aggregated or de-identified so that it no longer identifies you. If you'd like us to delete personal data associated with you, please contact us at service@thbanana.com and we will respond in a reasonable time. We may retain limited records where necessary for legal compliance, fraud prevention, security, dispute resolution or enforcement of our agreements.

How does the Application address children's privacy?

We do not use the Application to knowingly solicit data from or market to children under the age of 18.

We do not knowingly collect personally identifiable information from children. We encourage parents and legal guardians to monitor their children's Internet usage and to help enforce this Policy by instructing their children never to provide personally identifiable information through the Application and/or Services without their permission. If you have reason to believe that a child has provided personally identifiable information to us through the Application and/or Services, please contact us (service@thbanana.com) so that we will be able to take the necessary actions. You must be at least 18 years old to use this Application. By using the Application, you confirm that you are 18 years of age or older.

How is your information kept secure?

We are concerned about safeguarding the confidentiality of your information. We provide physical, electronic, and procedural safeguards to protect information we process and maintain. For example, we limit access to this information to authorized employees and contractors who need to know that information in order to operate, develop or improve the Application. Please be aware that, although we endeavor to provide reasonable security for information we process and maintain, no security system can prevent all potential security breaches.

How will you be informed of changes to this Privacy Policy?

This Privacy Policy may be updated from time to time for any reason. We will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes. Where required by law, we will provide additional notice or obtain consent before a material change takes effect.

How do you give your consent?

We do not rely on your use of the Application as consent for every type of processing. We process personal data as necessary to provide the services you request, comply with legal obligations, and pursue legitimate interests such as security, fraud prevention and service improvement, where those interests are not overridden by your rights. We request consent separately where applicable law or platform requirements require it, including for certain advertising-tracking activities. You may withdraw consent at any time, without affecting processing that was lawful before withdrawal.

Payment and Transaction Information

When you make a subscription or in-app purchase through the Apple App Store, the transaction is processed by Apple Inc. We receive limited transaction information from Apple, which may include:

  • The type of subscription or in-app purchase made
  • The date and time of the transaction
  • The price paid
  • Whether the transaction was successful
  • Your device type

We do not receive or store your credit or debit card number, bank account details, or Apple ID password. This transaction information is used solely for the purpose of providing and managing your subscription or purchase, and for resolving billing-related support requests.

Categories of Information We Process

Depending on the features you use and the permissions you grant, we may process the following categories of information:

  • Contact Information: Email address and unique account identifier provided through Sign in with Apple
  • User Content: Messages and photos you share through the Application
  • Identifiers: User ID, IDFV, AppsFlyer installation identifier and, where authorized, IDFA
  • Location: Precise or approximate location, depending on your device permission and precision settings, for location-based features
  • Purchases: Subscription status and limited transaction records used to provide purchases, plus a purchase-conversion event sent to AppsFlyer. The AppsFlyer event does not contain complete purchase history or payment details
  • Usage Data: Information about Application installations, launches, sessions and feature usage
  • Diagnostics: Crash logs and performance data

CCPA/CPRA User Rights

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the following rights:

  • Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you during the applicable lookback period.
  • Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
  • Right to Opt-Out: You have the right to opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising. We do not currently sell or share personal information for cross-context behavioral advertising. Before beginning any activity that constitutes a sale or sharing under applicable law, we will update this Privacy Policy and provide the legally required notice and opt-out mechanisms.
  • Right to Correct: You have the right to correct inaccurate personal information that we hold about you.
  • Right to Limit Use of Sensitive Information: You have the right to limit the use and disclosure of sensitive personal information.
  • Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising any of your privacy rights.

To exercise these rights, please contact us at service@thbanana.com. We will respond to your request within 45 days.

EU/EEA and UK Data Protection Rights (GDPR/UK GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR) and the UK GDPR.

Legal Basis for Processing: We process your personal data on the following legal bases:

  • Consent: Where you have given consent for specific processing purposes, such as marketing communications, location access or advertising tracking where required.
  • Contractual Necessity: Where processing is necessary to provide the Application's services to you (e.g., account creation, subscription management, messaging functionality).
  • Legitimate Interest: Where processing is necessary for our legitimate interests (e.g., improving the Application, preventing fraud, ensuring security), provided these interests are not overridden by your rights.
  • Legal Obligation: Where processing is necessary to comply with applicable laws.

Your Data Protection Rights: You have the following rights:

  • Right of Access (Article 15): You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification (Article 16): You have the right to request correction of inaccurate or incomplete personal data.
  • Right to Erasure (Article 17): You have the right to request deletion of your personal data, subject to certain exceptions (e.g., legal obligations, legitimate interests).
  • Right to Restrict Processing (Article 18): You have the right to request that we restrict the processing of your personal data under certain circumstances.
  • Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
  • Right to Object (Article 21): You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
  • Right Not to be Subject to Automated Decision-Making (Article 22): You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

Right to Lodge a Complaint: If you believe your data protection rights have been infringed, you have the right to lodge a complaint with a supervisory authority in the EEA member state of your habitual residence, place of work, or place of the alleged infringement. In the United Kingdom, you may contact the Information Commissioner's Office (ICO) at ico.org.uk.

International Data Transfers: We are based in the Hong Kong Special Administrative Region. Your personal data may be transferred to and processed in jurisdictions outside the EEA/UK. Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your personal data in accordance with applicable data protection laws.

To exercise any of these rights, please contact us at service@thbanana.com. We will respond to your request within 30 days.

Third-Party Services and SDKs

We use certain third-party services and SDKs to operate the Application. These third parties may collect and process certain information as described below:

  • AppsFlyer SDK: We use AppsFlyer Ltd. and its affiliates as an attribution and analytics service provider to measure Application installations, launches, sessions and purchase conversions, understand which advertising campaigns contributed to those events, optimize our marketing, and detect advertising fraud. Depending on our configuration, AppsFlyer may process:
    • Identifiers: IDFV, an AppsFlyer-generated installation identifier and, only where the required permission has been granted, IDFA
    • Technical and Network Information: Device type and model, operating system, language, time zone, network information, IP address and approximate region derived from the IP address
    • Advertising and Usage Information: Installations, launches, sessions, advertising clicks or impressions, campaign and media-source information, and attribution results
    • Purchase Conversion: Whether a purchase occurred and the event time. We currently send this as an event without product, plan, price, currency, quantity, order or transaction number, App Store receipt, or complete purchase history

    We do not currently enable AppsFlyer to send purchase-conversion events or other personal information to advertising or measurement partners. If we enable such sharing in the future, we will first update this Privacy Policy, provide any required notice and opt-out mechanism, and obtain any consent or permission required by applicable law or platform rules. We do not permit IDFV or another identifier to be used to circumvent a user's advertising-tracking choice. For more information, see the AppsFlyer Services Privacy Policy and AppsFlyer Processing Customer Data.

    International Data Transfer: AppsFlyer and its service providers may process data in countries outside your place of residence. Where required, these transfers are protected by applicable data-processing agreements, Standard Contractual Clauses or other legally recognized safeguards.

  • Tencent Cloud Instant Messaging (IM) SDK: We use Tencent's IM SDK to provide real-time messaging functionality. The legal basis for sharing data with Tencent is contractual necessity — the SDK is required to deliver the messaging feature you request when using the Application. According to Tencent's official privacy documentation, this SDK may collect and process the following information:
    • Device Information: Device name, system version, hardware device information, network status (purpose: ensuring message delivery and compatibility)
    • Log Information: IP address, operating system version, network carrier information, access date, time and duration of service use (purpose: connection management and security)
    • User Content: Messages, images, audio and video data that you actively upload or record for communication transmission purposes (requires camera, microphone permissions)
    • Usage Data: Click behavior, error reports, feedback and comments (purpose: service improvement and bug fixing)

    International Data Transfer: Tencent's servers may be located in regions outside your country of residence, including mainland China. Data transfers to Tencent are protected by Tencent's contractual commitments and applicable data transfer safeguards. For more details, please refer to Tencent's official privacy documentation at: Tencent Cloud IM Privacy Protection Guidelines and Tencent Privacy Policy

If you wish to exercise your rights regarding data processed by third-party SDKs, please contact us at service@thbanana.com and we will assist you in contacting the relevant third party.

How can you contact us?

If you have any questions regarding privacy while using the Application, or have questions about our practices, please contact us via email at service@thbanana.com.