Bulala(音萌) Privacy Policy

Last Updated: March 2026 | Effective Date: March 2026

We attach great importance to the protection of your personal information, abide by the requirements of laws and regulations, and are committed to providing you with a safer and more personalized music social service. To provide you (hereinafter referred to as "you" or "user") with accurate music interaction, K-song social and other services, Bulala(音萌) (hereinafter referred to as "Bulala(音萌) " or "we") will collect, use, store and disclose your personal information in accordance with this Privacy Policy. This Policy aims to clarify the types of personal information we collect within the necessary scope, service application scenarios and core principles of personal information management, and detail the various rights you enjoy regarding your personal information.

This Policy is closely related to your use of Bulala(音萌) 's products and services. When you download, install, start, browse, register, log in or use our products/services (hereinafter referred to as "using this product/service"), we will process and protect your personal information in accordance with the terms of this Policy. We strive to explain professional technical terms in a clear and easy-to-understand way, and bold the key clauses that may affect your rights. Please read them carefully.

1. Data Protection Officer (DPO) Information

• Responsible Person: Bulala(音萌) Data Protection Management Team
• Contact Email: contact@ibulala.com

We have formulated management specifications for the collection, use and sharing of personal information in accordance with applicable international and local laws and regulations and technical standards, creating a more accurate personalized service and a safer digital music social environment for you, while further clarifying your rights to personal information.

2. Important Reminders

Please carefully read and fully understand all the contents of this Policy before using/continuing to use this product/service, and make appropriate choices according to the Policy guidelines if necessary. If you disagree with any content of this Policy, it may cause you to be unable to use this product/service normally or achieve the expected service effect, and you should immediately stop accessing/using this product/service. Once you use or continue to use the products/services provided by us, it means that you have fully understood and agreed to all the contents of this "Bulala(音萌) User Privacy Policy" (including updated versions).

3. Scope of Application

To realize personalized services and a safe digital environment, we formulate relevant rules for the collection, use and sharing of personal information in accordance with the following requirements:

1. International General Privacy Standards (GDPR, CCPA, etc.)
2. Applicable local laws, regulations and technical requirements
3. Clearly defined user personal information rights

This Policy stipulates the core principles for our processing of any personal data collected from you or provided by you. If you have any questions about privacy-related issues, you may consult the Data Protection Officer.

4. How We Collect and Use Your Personal Information

To provide you with music K-song, social interaction and other services of Bulala(音萌) , we need to process necessary personal information. When we process your personal data, we strictly follow the following principles:

4.1 Basic Principles of Data Processing

1. Legality and Necessity Principle: Collect and process necessary information only for the purpose of realizing services and for clear and legitimate needs;
2. Transparency and Controllability Principle: You have the right to choose whether to provide relevant information, but refusing to provide some information may affect the normal use of some services;
3. Consent Essential Principle: Using Bulala(音萌) shall be deemed as your consent to this Privacy Policy. If you refuse to accept it, we may not be able to provide you with some functional services;
4. Minimum Reasonableness Principle: Strictly limit the scope of data collection to the necessary information required by the service, and refrain from collecting irrelevant and excessive personal information.

4.2 Types of Personal Information We Collect

1. Information You Voluntarily Provide: Information you voluntarily submit when using Bulala(音萌) , such as account registration information, personal preference settings, K-song work release information, etc.;
2. System-Generated Information: Relevant data generated during your interaction with our services, such as usage behavior tracks, device information, music playback records, etc.

4.3 Subsequent Changes in Information Use

If we need to use your personal information for other purposes not specified in this Policy, we will take the following measures:

1. Inform you of the new information processing purposes and methods in a clear and prominent manner;
2. Obtain your express consent before carrying out relevant processing activities.

4.4 Your Rights and Choices

You may withdraw your consent to the processing of personal information at any time, but this operation may affect the normal use of some service functions. If you refuse to accept all or part of the contents of this Policy, we have the right to restrict your access to this product/service.

Bulala(音萌) promises to protect your privacy in accordance with applicable laws, regulations and industry standards. Continuing to use our services means that you recognize and agree to all the terms stipulated in this Policy.

4.5 Registration and Login

1. Mobile Phone Number Registration: You need to provide your mobile phone number to complete SMS verification. After verification, the system will assign you an editable avatar and nickname, which you can modify later by yourself;
2. Third-Party Login: If you choose to log in with third-party accounts such as WeChat and QQ, we will only obtain public profile information (avatar, nickname, gender) of the third-party platform, and the above information is only used for account login and identity identification of Bulala(音萌) ;
3. Optional Personal Information: You may voluntarily fill in gender, birthday, music preferences and other information to optimize the display effect of your personal homepage. If you choose not to fill in, it will not affect the use of Bulala(音萌) 's core K-song and social functions.

4.6 Avatar Upload

1. Uploading an avatar requires obtaining camera/album access permission of your device;
2. If you refuse to grant this permission, you will not be able to complete the avatar upload operation;
3. We only process the photos you actively select or take, and will not access or obtain other picture information in the device without permission.

4.7 Content Release

When you release K-song works, dynamics, comments and other content on Bulala(音萌) , we will collect the display content you release and display it in association with your nickname and avatar. The above information is only used for content dissemination and interactive scenarios.

4.8 Audio/Video Functions

Bulala(音萌) 's core audio/video functions require corresponding device permissions. The specific permission requirements and the impact of refusal are as follows:

4.9 Payment and Transactions

1. Collected Information: Order number, transaction amount, transaction timestamp, payment method/status, purchase records of virtual goods (such as membership, gifts, sound effect props);
2. Purpose of Use: Ensure transaction security, complete the delivery of virtual goods and retain transaction records;
3. Information Security: The above information is necessary for the service. We will not collect your financial sensitive information such as bank card number and payment password, nor can we identify your unique identity through such information.

4.10 Device Permission Description

Some functions of Bulala(音萌) rely on device permissions to realize. The functional purposes and closing impacts of each permission are as follows. You can independently enable/disable them in the device system according to your own needs:

4.11 Legal Basis for Data Processing

We process your personal information based on the following legal basis in accordance with applicable laws and regulations (including but not limited to the Personal Information Protection Law (PIPL), GDPR, CCPA, etc.):

1. User Consent: After you explicitly consent, we will process relevant information, such as you providing a mobile phone number to complete registration, granting device permissions such as camera/microphone, and choosing to share content publicly. You may withdraw your consent to the processing of personal information at any time in the manner agreed in Article 4 of this Policy, but it will not affect the legitimate information processing activities carried out based on your consent before withdrawal;
2. Contract Performance: Process necessary information to perform the service agreement with you, such as transaction records (order details, payment status) for completing the purchase of virtual goods, and account data for ensuring your access to Bulala(音萌) services;
3. Legal Obligations: Process information in accordance with legal requirements, such as retaining transaction records to fulfill tax and regulatory requirements, and responding to legitimate information inquiry requests from government authorities;
4. Legitimate Interests: Process information for legitimate commercial purposes without impairing your privacy rights, for example: optimize service stability and user experience through browsing logs; analyze anonymized usage data to optimize product functions; take security measures (such as detecting and preventing fraudulent behaviors) to protect the safety of services and users;
5. Protection of Major Interests: Process relevant personal information in extremely rare special circumstances (such as emergency situations involving personal safety) to protect the life, property and other major interests of you or others.

5. How We Share, Transfer and Disclose Your Personal Information

We respect your privacy and strictly protect your personal information. Except for the following circumstances, we will not share or transfer your personal information to any third party:

5.1 Legal/Agreed Circumstances for Information Sharing/Transfer/Disclosure

1. With Your Express Consent: Share your personal information with third parties only with your explicit authorization;
2. At Your Request: Share your relevant information with designated third parties according to your personal instructions;
3. Sharing with Trusted Business Partners: To optimize service experience, we may share necessary personal information with partners, and strictly follow: only share the minimum scope of data required by the service; conduct a strict security assessment of partners before sharing; continuously monitor the information processing behaviors of partners, and immediately terminate cooperation and pursue relevant responsibilities if partners violate privacy agreements;
4. Legal Requirements: Disclose your personal information in accordance with legal provisions, court judgments, arbitral awards or legitimate requirements of government authorities;
5. Restricted Public Announcements: If you participate in Bulala(音萌) activities and win awards, we may only disclose necessary information (such as username, award information), not involving sensitive personal information;
6. Voluntary Public Sharing by You: Personal information you voluntarily disclose to the public through Bulala(音萌) 's public release, comment, interaction and other functions;
7. Changes in Enterprise Operating Subjects: In case of enterprise merger, acquisition, asset restructuring and other changes in operating subjects, we will inform you in advance, and obtain your consent when necessary in accordance with the requirements of laws and regulations to ensure the continuous protection of your personal information;
8. Safety and Legal Protection: Disclose personal information within a reasonable and necessary scope to protect the life, property safety or legitimate rights and interests of Bulala(音萌) users and the platform.

5.2 Third-Party SDKs and Services

Some functions of Bulala(音萌) rely on third-party SDKs (Software Development Kits) to realize (such as audio processing, payment, data analysis, etc.). We follow the following principles for the use of third-party SDKs:

1. Only select third-party SDKs that meet strict security standards and have legal qualifications;
2. Strictly limit the information access permissions of SDKs, and only grant necessary data access permissions required by the service;
3. Continuously monitor the compliance of third-party SDKs with privacy policies to ensure that they process personal information in accordance with the agreement.

Important Reminder: If you find information security risks in third-party SDKs, it is recommended to stop using relevant functions immediately and contact us in a timely manner through the contact information in Article 9 of this Policy.

5.3 Your Core Rights to Personal Data

Subject to applicable laws and regulations, you have the following rights to your personal data:

1. Right of Access: Have the right to request us to provide a copy of your personal data;
2. Right of Correction: Have the right to update and correct inaccurate or incomplete personal information;
3. Right of Deletion: Have the right to request us to delete your personal data under legal/agreed circumstances;
4. Right to Restrict Sharing: Have the right to choose to opt out of the operation of sharing personal data with third parties.

We strictly abide by privacy-related laws and regulations, and take all necessary technical and management measures to protect the security of your personal information.

6. Data Retention Policy: Storage, Protection and Your Control Options

We only retain your personal information for the period necessary to achieve the service purpose, unless laws and regulations require an extension of the retention period. At the same time, we provide you with a variety of personal information control methods to protect your right to know and right to control.

6.1 Data Retention Period

Exceptional Circumstances:

1. If it involves legal litigation, investigation or public security needs, the data retention period may be extended in accordance with the law;
2. Non-personally identifiable data after anonymization and aggregation processing may be retained indefinitely for product optimization, industry analysis and other scenarios.

6.2 Your Core Data Rights

1. May request to suspend the processing of all or part of personal information;
2. May withdraw consent to the processing of personal information at any time, and it will not affect the legitimate processing behaviors before withdrawal;
3. May manage the display of personal information in social scenarios through functions such as blacklist and friend-specific privacy settings of Bulala(音萌) .

6.3 Permission Management

You may independently adjust the various information collection permissions of Bulala(音萌) (such as camera, microphone, location, etc.) through the system settings of the device.

Notes:

1. Revoking permissions may cause relevant functions of Bulala(音萌) to fail to work normally;
2. The legality of personal information processed by us based on your authorization before permission withdrawal is not affected.

6.4 Automated Decision-Making

If Bulala(音萌) has algorithm-driven automated decision-making scenarios (such as membership rights assessment, personalized recommendation, etc.), you have the following rights:

1. Have the right to request us to explain the algorithm logic and core influencing factors of automated decision-making;
2. If you disagree with the decision result, you may file an appeal through the email contact@ibulala.com, and we will verify and feedback in a timely manner.

6.5 Data Access and Correction

You may submit a request for access and correction of personal information to us through the email contact@ibulala.com, and we will respond and process it within 15 working days after completing your identity verification.

6.6 Data Portability Right

You may request to obtain a copy of your personal information through the email contact@ibulala.com. After completing identity verification, we will provide it in machine-readable formats such as CSV/JSON, and complete data delivery within 30 working days.

6.7 Opt-Out Options

You may exercise the following opt-out rights with convenient operation methods:

1. In accordance with CCPA requirements, choose to opt out of the sharing/sale of personal data;
2. Turn off the personalized advertising recommendation function.

Operation Methods:

1. Directly switch relevant options in [Personal Center - Settings - Privacy Management] of the Bulala(音萌) APP;
2. Submit an opt-out request through the email contact@ibulala.com.

Impact: The above operations may lead to reduced relevance of advertising recommendations or weakened personalized service experience of Bulala(音萌) , but will not affect the use of core functions.

7. Your Data Control and Privacy Rights

Bulala(音萌) fully protects your right to control your personal information. You may manage and control personal information in various ways. The specific rights and operation methods are as follows:

7.1 Independent Management of Personal Information

You have complete control over your personal data, including:

1. Request to suspend the use of part or all of personal information;
2. Withdraw the consent granted for personal information processing at any time;
3. Manage personal information in social interactions through the following methods:
• Blacklist function: block the access and interaction permissions of specified users;
• Friend-specific privacy settings: set personalized information display permissions for different friend groups.

7.2 Device Permission Management

You may independently control Bulala(音萌) 's access to device information through the system settings of the device (such as GPS, address book, camera, photo and other permission entrances).

Important Notes:

1. Permission change operations take effect immediately;
2. Revoking some permissions may cause the corresponding service functions to be unavailable;
3. The legality of information processing behaviors completed before permission withdrawal is not affected.

7.3 Transparency of Automated Decision-Making

For algorithm-driven functions in Bulala(音萌) (such as personalized music recommendation, K-song room matching, etc.), you have:

1. The right to request an explanation for major automated decision-making results;
2. The right to access remedies if you disagree with the decision results.

7.4 Data Access and Modification

To ensure the security of your personal information, the modification of some sensitive personal information needs to be completed through formal requests:

1. You need to submit a modification request through the official channels agreed in this Policy;
2. We will verify your identity through an identity verification process to ensure that personal information is not illegally tampered with.

7.5 Data Portability Right

You may request to export personal information in specified formats, including:

1. CSV format (structured data, easy to view and organize);
2. JSON format (adapted to developer scenarios, easy for data docking).

Processing Flow: We will provide you with data export services only after your identity verification is successful.

7.6 Opt-Out Options

You may exercise the following rights in accordance with the law, and we fully respect your privacy choices:

1. Stop the sharing/sale of personal data;
2. Turn off the personalized advertising push function.

Operation Method: Send an email to contact@ibulala.com to submit a request.

Impact: It may lead to a reduction in the personalized service experience of Bulala(音萌) , but will not affect the use of core K-song and social functions.

7.7 Account Cancellation

You may independently complete the permanent cancellation of your account through the Bulala(音萌) APP. Operation Path: [Personal Center - Settings - Account and Security - Cancel Account].

Notes:

1. After account cancellation, except for information that must be retained in accordance with laws and regulations (such as transaction records, compliance retention data), your other personal information will be permanently deleted;
2. Cancelled accounts cannot be recovered, and related virtual assets (unexpired memberships, unused props, etc.) will be processed in accordance with relevant rules. It is recommended that you properly handle them before cancellation.

7.8 Cookies and Other Tracking Technologies

Bulala(音萌) uses Cookies and similar tracking technologies to provide you with a better service experience. The relevant explanations are as follows:

1. The operation of some core functions depends on Cookies. If you disable Cookies, some functions may not work normally;
2. The terms of this Policy apply to all tracking technologies used in Bulala(音萌) ;
3. Purposes of using Cookies: improve the personalization of services, realize functions dependent on Cookies (such as login status maintenance, personalized recommendation);
4. You may independently enable/disable Cookies through the browser's setting functions. For specific operation methods, please refer to the browser's official guidelines.

8. Third-Party Services and SDK Description

To realize the independent functional modules of Bulala(音萌) and provide you with richer music K-song and social interaction services, we have integrated third-party SDKs in the product. We have conducted strict evaluation and screening of all third-party SDKs to ensure that they comply with the relevant requirements of privacy protection and information security.

Please note that the functions and services provided by third-party SDKs will be continuously updated and iterated. For the personal information processing rules of third-party SDKs, please refer to the privacy policies released by third parties. The main third-party SDKs integrated by Bulala(音萌) and related information are as follows:

9. Exclusive Clauses for Specific Jurisdictions

Bulala(音萌) respects the privacy protection laws and regulations of different countries/regions, and provides privacy protection services in accordance with local legal requirements for users in different jurisdictions. The following are exclusive clauses for specific regions:

9.1 Exclusive Information for California Users (in accordance with CCPA)

In accordance with the requirements of the California Consumer Privacy Act (CCPA), we supplementarily disclose the categories of personal information collected and disclosed for commercial purposes. In the past 12 months, based on your interaction scenarios with Bulala(音萌) , the categories of personal information we collected/disclosed for commercial purposes (as defined by CCPA) include:

1. Identifying information: name, alias, address, mobile phone number, IP address, etc.;
2. Financial information: personal information in line with Section 1798.80(e) of the California Civil Code, such as credit card number (only collected when you choose relevant payment methods);
3. Protected classification information: if user research/analysis is carried out, protected classification characteristics in line with California/U.S. federal laws such as age and gender will be collected;
4. Commercial information: purchase behavior, virtual commodity consumption records, etc.;
5. Network/electronic activity information: network behavior information such as content download, music playback, K-song recording, interactive operations, etc.;
6. Biometric information: if you choose to participate in voice/image recognition services, your biometric information such as voice and facial features will be collected;
7. Geographic location data: if you enable location permission, the geographic location information of the device will be collected for services such as city recommendation;
8. Audio/video/electronic information: relevant information of your communication with us by phone, audio/video, etc.;
9. Occupation/employment-related information: commercial and occupation-related data voluntarily provided by you;
10. Inferred data: inferred information such as preferences and interests obtained based on the analysis of your usage behavior.

Your Rights: In accordance with CCPA, you have the right to request us to provide details of the collected personal information, or access and delete your personal information. If you need to exercise the above rights, you may contact us in the manner agreed in this Policy, and some services may be restricted or unavailable due to your choice.

Important Statement:

1. No Sale of Personal Information: In the past 12 months, we have not sold any consumer's personal information as defined by CCPA;
2. No Discrimination: We will not take any discriminatory measures against consumers who exercise their rights under CCPA.

9.2 Exclusive Clauses for Virginia Users (in accordance with VCDPA)

We attach great importance to the privacy rights of Virginia users, and promise to comply with the Virginia Consumer Data Protection Act (VCDPA) and relevant privacy regulations, effectively protect users' personal data, and strictly follow the various requirements of VCDPA.

Your Rights: In accordance with VCDPA, you have the right to access, correct, delete your personal data, and request to stop the processing of personal data.

Methods of Exercising Opt-Out Rights: You have the right to choose to opt out of the following behaviors, and the operation methods include:

1. Access our online preference setting center for operation;
2. Submit an application through our privacy request portal;
3. Send an email to contact@ibulala.com with the subject marked "VCDPA Opt-Out".

We will process your request within 45 working days and will not take any discriminatory measures against users who exercise their rights under VCDPA.

Data Processing and Protection Measures: We take dual technical and management measures to protect the security of users' personal data, ensure the confidentiality and integrity of information, and continuously monitor and optimize measures to ensure VCDPA compliance.

If you have any questions/complaints about VCDPA or this Privacy Policy, you may contact our Data Protection Officer (email: contact@ibulala.com).

9.3 Exclusive Clauses for UAE Users (in accordance with DIFC DP Law)

If you use the Bulala(音萌) platform in the United Arab Emirates (UAE), we will strictly comply with the relevant requirements of the Dubai International Financial Centre Data Protection Law (DIFC DP Law). In addition to the personal data processing rules generally agreed in this Policy, we will additionally comply with the following clauses:

In accordance with Article 39, Part VI of the DIFC DP Law (Rights of Data Subjects), you will not be subject to any form of discrimination when using Bulala(音萌) platform services.

9.4 Exclusive Clauses for EU Users (in accordance with GDPR)

We attach great importance to the privacy rights of EU users, and promise to comply with the General Data Protection Regulation (GDPR) and EU relevant privacy regulations, effectively protect users' personal data, and strictly follow the various requirements of GDPR.

Your Rights: In accordance with GDPR, you enjoy extensive personal data rights, including accessing personal data, correcting inaccurate data, deleting data, restricting data processing, etc. If you need to exercise the above rights or learn more about GDPR-related information, you may contact our Data Protection Officer.

Data Processing and Protection Measures: We take all necessary measures to protect the security of users' personal data, ensure the confidentiality and integrity of information, promise to comply with all data processing and protection requirements of GDPR, and continuously monitor and optimize data processing practices.

If you have any questions/complaints about GDPR or this Privacy Policy, you may contact our Data Protection Officer at any time for support and answers.

9.5 Exclusive Clauses for Brazilian Users (in accordance with LGPD)

In accordance with the Brazilian General Data Protection Law (LGPD), users in Brazil have the following rights: access, correct, delete, block personal data, and request to obtain information related to data processing.

We promise to comply with the various requirements of LGPD, effectively protect the privacy and personal information security of Brazilian users. This updated Privacy Policy clarifies the way we collect, use and store personal data, as well as the various security protection measures taken. We are committed to the transparency and accountability of data processing. It is recommended that you carefully read this Policy to understand our personal information processing rules.

If you have any questions/concerns about this Privacy Policy or data processing practices, you may contact our Data Protection Officer for support. Thank you for your trust and support to Bulala(音萌) .

9.6 Right to Know About "Sharing" for California Users (in accordance with CCPA)

In accordance with the California Consumer Privacy Act (CCPA), you have the right to know whether we "share" your personal data. "Sharing" as defined by CCPA specifically refers to: disclosing personal information to third parties for the purpose of cross-scenario behavioral advertising (whether or not monetary consideration is involved).

You have the right to request us to disclose the following information:

1. Categories of personal information collected in the past 12 months;
2. Sources of personal information collection;
3. Commercial purposes of sharing/disclosing personal information;
4. Categories of third parties with whom we share personal information;
5. Specific personal information content collected (provided after identity verification).

Exercise Method: Send an email to our Data Protection Officer's email contact@ibulala.com with the subject marked "CCPA Data Sharing Inquiry".

10. Protection of Minors

Bulala(音萌) attaches great importance to the protection of minors' personal information. For minors under the age of 16 (especially children under the age of 13) using this service, special protection clauses have been formulated. Minors are requested to read them carefully accompanied by their guardians, and guardians should decide whether to agree to minors using Bulala(音萌) services after fully understanding this Policy.

1. Minors under the age of 16 (especially children under the age of 13) should read this Policy and use Bulala(音萌) services under the supervision, guidance and consent of their guardians;
2. When filling in personal information, minors should raise their awareness of personal information protection, carefully handle personal information, and correctly use Bulala(音萌) services under the guidance of guardians;
3. We promise to strictly protect the confidentiality and security of minors' personal information and comply with the applicable laws and regulations and the terms of this Policy. If we inadvertently collect minors' personal information without obtaining the explicit consent of minors' parents/legal guardians, we will delete it immediately;
4. If guardians have any questions about minors' use of Bulala(音萌) 's services or the information submitted, they may contact us through the contact information in Article 12 of this Policy.

11. Policy Updates

We reserve the right to update and revise this Policy at any time. The updated policy content will form part of this Policy and have the same legal effect as the original policy. Without your explicit consent, we will not reduce the rights you enjoy in accordance with the current version of this Policy.

If any update occurs to this Policy, we will inform you through reasonable means such as push notifications on the Bulala(音萌) APP client and official announcements to ensure that you are timely informed of the changes to the Policy.

12. Contact Us

If you have any questions, concerns or complaints about our personal information processing behaviors, you may contact us through the following methods:

• Contact Email: contact@ibulala.com
• Address: 3442, 3/F, Building 5, Plot 4, Tianyu Huayuan, No.16 Qinglin Road, Nanning Area, China (Guangxi) Pilot Free Trade Zone

We will promptly verify your request and respond and process it as soon as possible.

You also have the right to file a complaint with the relevant data protection regulatory authority (such as filing a complaint with the regulatory authority in your location in accordance with GDPR, or filing a complaint with the national cyberspace administration in accordance with the Personal Information Protection Law), and this right is not affected by the terms of this Policy.

For general questions about this Privacy Policy or suggestions related to data protection, you may also send an email to contact@ibulala.com, and we will reply to you within 15 working days after completing your identity verification.