Privacy Policy

Effective June 22, 2026

This privacy policy applies to the MyPlushies app for mobile devices, together with any related services operated by Zultic (collectively, the "Application"). Zultic is hereby referred to as the "Service Provider".

Information Collection and Use

The Application collects information when you download and use it. This information may include:

• Your device's Internet Protocol (IP) address
• The screens or pages of the Application that you visit, and the time and date of your visit
• The time spent on those screens and within the Application
• The mobile operating system and device type you use
• Subscription and in-app purchase activity (for example, when a trial starts, a purchase is made, or a subscription is renewed or cancelled)

The Service Provider uses the technologies described below (PostHog and Superwall) to collect and process this information. The Application does not require you to create an account or provide your name or email address in order to use its core features.

Analytics (PostHog)

The Application uses PostHog for product analytics. The Service Provider has configured PostHog to capture analytics events on an anonymous basis: the Service Provider does not create user profiles and does not link analytics events to your name, email address, or any account identifier.

Please note that even in this anonymous configuration, PostHog may process certain technical information, such as your IP address, device and operating system information, and an approximate location derived from your IP address. While this information is not tied to your identity by the Service Provider, IP addresses and device identifiers may still be considered personal data under certain laws (such as the GDPR and CCPA/CPRA). The Service Provider uses this information only to understand how the Application is used and to improve it.

PostHog's handling of data is governed by its own privacy policy, linked in the "Third-Party Services" section below.

Subscriptions and In-App Purchases (Superwall)

The Application uses Superwall to present subscription offers (paywalls) and to manage in-app purchases and subscriptions. Superwall acts as a data processor on the Service Provider's behalf.

In its default configuration, the Service Provider does not provide Superwall with your name, email address, or account identifier. Superwall processes information necessary to deliver and manage purchases, which may include transaction details, device identifiers, and related usage data. Superwall does not track your purchase history for advertising purposes.

Superwall's handling of data is governed by its own privacy policy, linked in the "Third-Party Services" section below.

Cookies and Tracking Technologies

The Application or its third-party SDKs (including PostHog and Superwall) may use SDKs, device identifiers, local storage, and similar technologies to support functionality, analytics, or service delivery. Where required by applicable law, the Service Provider will obtain consent before using non-essential tracking technologies.

Your Rights

You may request access to, correction of, or deletion of your personal data held by the Service Provider. You may also have the right to restrict or object to certain processing, and to data portability. To exercise these rights, or to withdraw consent where processing is based on consent, contact the Service Provider atsupport@zultic.com.

Because the Application is designed to collect data on an anonymous basis, the Service Provider may not always be able to identify the specific data associated with you. The Service Provider may ask you for information necessary to locate the relevant data or to verify your request.

Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights.

The Service Provider does not sell your personal information. To exercise your CCPA/CPRA rights, contact the Service Provider at support@zultic.com.

How the Service Provider Uses Information

The Service Provider may use the information collected to operate and improve the Application, to deliver and manage subscriptions, to understand how the Application is used, and to send important information, required notices, and, where permitted by law, marketing communications.

For a better experience while using the Application, the Service Provider may require you to provide certain information. Any information requested will be retained and used as described in this privacy policy.

Third-Party Access

To provide and improve the Application, the Service Provider shares certain information with the third-party service providers described above, who process it on the Service Provider's behalf:

• PostHog — for anonymous product analytics
• Superwall — for subscription and in-app purchase management

These providers process the information only to perform services for the Service Provider and are required to handle it consistently with this privacy policy and applicable law.

The Service Provider may also disclose information:

• as required by law, such as to comply with a subpoena or similar legal process;
• when the Service Provider believes in good faith that disclosure is necessary to protect its rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
• with trusted service providers who work on the Service Provider's behalf, do not have an independent use of the information disclosed to them, and have agreed to adhere to the rules set forth in this privacy policy.

Third-Party Services

The Application utilizes third-party services that have their own privacy policies regarding how they handle data. Below are links to the privacy policies of the third-party service providers used by the Application:

• Superwall —https://superwall.com/privacy
• PostHog —https://posthog.com/privacy

International Data Transfers

The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms, which may include:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions or other legally recognized transfer mechanisms
• Your consent, where required and legally permitted

Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.

Opt-Out Rights

You can stop further collection of information by the Application by uninstalling it. Uninstalling will stop the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider or to third parties.

To request deletion of your data, to withdraw consent, or to exercise any of your rights, contact the Service Provider at support@zultic.com.

Data Retention Policy

The Service Provider retains data based on its necessity for the stated purposes:

• Analytics Data (PostHog): Retained for up to 24 months from collection, unless longer retention is required for legal compliance.
• Subscription / Purchase Data (Superwall): Retained for the duration of your use of the Application plus 12 months thereafter, unless longer retention is required by law.
• Aggregated and Anonymized Data: Retained indefinitely, as it no longer identifies you.
• Data required for legal compliance: Retained as long as required by applicable law.

You may request deletion of your data, subject to any legal obligation to retain it. To make such a request, contact the Service Provider at support@zultic.com. Please note that some data may be required for the Application to function properly.

Children

The Application is not intended for children under 16 years of age, or such higher age as required by applicable law. The Service Provider does not knowingly solicit data from children or market the Application to them.

Where parental or guardian consent is required under applicable law, the Application is not intended for use without that consent. The Service Provider does not knowingly collect personal information from children under 16 years of age in violation of applicable law. In the event the Service Provider discovers that a child has provided personal information, the Service Provider will delete it from its servers. If you are a parent or guardian and you are aware that your child has provided personal information, please contact the Service Provider atsupport@zultic.com so that the necessary actions can be taken.

Security

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect the information it processes and maintains. However, no method of transmission over the internet or electronic storage is completely secure, and absolute security cannot be guaranteed.

Data Breach Notification

If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.

Changes

The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with a new effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.

Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at support@zultic.com.

This privacy policy is effective as of June 22, 2026.

Your Consent

Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases is carried out as described above.

Contact Us

If you have any questions regarding privacy while using the Application, or have questions about these practices, please contact the Service Provider via email at support@zultic.com.