Privacy Policy

Effective Date: [28/10/2025]

1. Introduction

This Privacy Policy (“Policy”) explains how Age App Inc. and its affiliates (“Age App,” “we,” “our,” or “us”) may collect, use, disclose, and otherwise process personal information through our websites, including www.ageapp.com (“Sites”), mobile applications (“Apps”), your Age App^® account (“Account”), and our other products, platforms, and services that link to this Policy, including Age App ID, a Web3 digital identity solution, and Pactvera, a Web3 digital agreement and execution solution (the “Services”). Please note that certain of our Services may include additional privacy disclosures relevant to the personal information that we collect through those Services. These disclosures will be provided when you interact with the relevant sections of those Services.

2. Personal Information Collection

We collect personal information when you interact with our Services, which may include information in the following categories:

• Identifiers and Contact Information: name, address, telephone number, email address, signature.
• Biometric Data: facial geometry and liveness scans used for identity verification.
• Government ID Data: driver’s license, passport, and other government-issued ID, and the information captured in the same, including date of birth, ID number, issue date, expiration date, issuing state/jurisdiction, and any other information captured from a government-issued ID.
• Images: Photographs from device cameras and government-issued IDs.
• Device Data: device ID, device fingerprints, operating system, browser entropy, IP address.
• Location Information: location inferred from IP address, mobile device location, precise geolocation, and location captured from Age App kiosks.
• Financial Information: payment details (processed via third-party providers).
• Activity and Usage Data: information about interactions with the Services, access logs, and records of your opening, reading, and signing documents.
• Communications Content: information you provide when you contact us using a webform, help ticket, or other form of communications.

3. Personal Information Sources

We may collect personal information from a variety of sources, including:

• From you when you enter it into the Services, including through the App and forms on the Sites.
• Automatically when you use the Services, including through Cookies (defined below), our vendors, and your device.
• From Age App kiosks that validate identity.
• From our business partners who use the Services to verify identity.
• From our identity verification partners and vendors that provide know-your-customer (“KYC”), anti-money laundering (“AML”), and other background and record checks.
• From service providers and vendors that help us operate our business, including providing our technical infrastructure.

The Services also generate a non-custodial wallet, private key, nonce (Auth0 Token), and Validated Data Token to provide your Account with access to the blockchain.

4. Personal Information Access and Use

When you create and use an Account, you provide personal information to use the Services, including to:

• Verify your identity through Age App ID, including through location and background checks.
• Securely execute Pactvera digital agreements.
• Conduct KYC and AML compliance checks.
• Create attributes that you can share with third parties to confirm your identity and provide audit-ready records for legal enforceability.

When you visit our Sites, we may use your Device Data, Location Data, Activity and Usage Data, and Communications Content to understand how you interact with our Sites, perform analytics, personalize our Service, respond to your requests, and otherwise provide our Services and operate the Sites, including as described in the Cookies and Other Online Tracking Technologies section below. We may also use your Contact Information and Communications Content to communicate with you regarding our products, your requests, billing, and our Services. When use visit the Sites or otherwise use our Services, we may also use Device Data, Location Information, Transaction Data, Financial Information, Usage Data, Activity Data, and Communications Data to:

• Provide our Services, including maintaining, operating, optimizing, and providing access to our Services; identifying visitors to our Services; monitoring, analyzing, and evaluating usage, trends, and performance; making our Services more intuitive and easier to use; repairing or improving the quality of the Services; and tracking and responding to quality issues.
• Operate our business, including providing our Services; processing transactions; managing accounts; performing system administration and technology management; improving our business, products, and Services; carrying out internal administration, such as recordkeeping and auditing; and identifying prospects and managing relationships with our customers, partners, and vendors.
• Maintain our security and integrity, including protecting, safeguarding, and securing our Services and information technology systems; authenticating users; and detecting and protecting against malicious, deceptive, and illegal activity.
• Comply with legal requirements and other obligations,including managing risks, investigations, reporting, and other compliance activities; identifying, investigating, and responding to fraud, illegal or malicious activities, and other activity that violates or may violate applicable laws, regulations, legal processes, or our policies; fulfilling our legal obligations; responding to court orders or other government and law enforcement mandates or requests; identifying or managing legal actions related to our or others’ rights or property; supporting actual or threatened claims, defenses, or declarations in a case or before any jurisdictional and/or administrative authority, arbitration, or mediation panel; and enforcing compliance with applicable laws, regulations, or legal processes as well as industry standards and our policies and terms.

The Services allow you to locally store or export certain information for your own use. We do not access or use information that you store locally on your device.

5. Personal Information Disclosure

We may disclose personal information to:

• Our affiliated entities to operate our business.
• Our business partners and other parties requested by you so you can verify your identity through Age App ID, securely execute Pactvera digital agreements, and otherwise utilize the functionalities of our Services when you authorize such parties to access your personal information.
• Our identity verification partners and vendors that provide KYC, AML, and other background and record checks.
• Our service providers, contractors, providers, and other vendors that help us operate our business, including providing our technical infrastructure, processing payments, supporting website tracking technologies, analyzing use of our Services, and improving and securing our Services.

6. Biometric Policy

For information about how we collect, use, disclose, retain, and otherwise process biometric data, please visit our Biometric Policy.

7. Cookies and Other Online Tracking Technologies

We and our vendors use cookies, software development kits (SDKs), and other online tracking technologies (collectively “Cookies”) to:

• Collect and analyze information about your interactions with our Services, such as by collecting information about which pages on our Services you viewed or links you clicked and how you interacted with our content during your visit or over multiple visits.
• Store information to improve our Services’ functionality.
• Help you access and navigate our Services more efficiently.
• Recognize your preferences, so that you do not need to enter the information each time you visit our Services.
• Safeguard and detect fraud on our Services.

We and our vendors may collect personal information about your online activities over time and across different devices and websites when you visit our Services, and link information collected through Cookies to other information collected about you. Your web browser may have settings that allow you to transmit a “Do Not Track” signal when you visit various websites or use online services. Like many websites, our Sites are not designed to respond to “Do Not Track” signals received from browsers. To learn more about “Do Not Track” signals, visit allaboutdnt.com. You may set your browser to notify you of or decline the receipt of Cookies; however, certain features of our Sites may not function properly or be available if your browser is configured to disable Cookies.

8. Interactive Features and Integrations

We may engage vendors to provide certain interactive features on the Services. Your use of these interactive features is voluntary. When you use these features, both we and our vendors or third parties that support the feature may receive and retain the information that you submit. For example, we may offer an interactive chat feature on our Sites to answer questions and for other customer service purposes. When you participate in the interactive chat, either with a virtual or live agent, the contents of the chat may be captured and kept as a transcript. By using these features, you understand that our vendors may process the information obtained through the feature to provide the service on our behalf. Certain functionalities on our Services permit interactions that you initiate between our Services and external services, such as social networks (“Social Features”). For example, Social Features enable you to “like” or “share” our content and pull or push information to or from our Sites. If you use Social Features, information you post or provide access to may be publicly displayed by the third-party service you use. Additionally, both Age App and the third party may have access to certain information about you and your use of our Services and the third-party service. We may offer third-party integrations on our Services. If you choose to connect a third-party account to our system, you should refer to that party’s privacy policy for information on how your personal information is processed and safeguarded.

9. Mobile Devices and Applications

We may disclose your personal information to our vendors, service providers, contractors, providers, and other parties, as further described in the Personal Information Disclosure section above. We will retain your personal information processed through our Apps for only as long as we reasonably consider it necessary for achieving the purposes set out in this Policy, or for as long as we are legally required or permitted to retain it. If you no longer wish to provide your personal information through our App, you may uninstall our App from your device. Note that deleting the App will not delete your Account or any information we previously collected via the App, nor does it affect our personal information collection through our other Services. Please see the section on User Rights and Choices below for information on deleting your Account.

10. Links to Other Websites

Our Services may contain links to other websites or online services that offer goods, services, or information. Some of these websites may appear as windows-within-windows on our Services. When you click on one of these links, you will be leaving our Services and will no longer be subject to this Policy. We are not responsible or liable for the information collection practices of the other websites that you visit and urge you to review their privacy policies and other terms to learn more about their data practices. Such websites may collect and use information about you in a way that is different from this Policy.The inclusion of a link to another website or online service does not imply our endorsement.

11. User Rights and Choices

We may use your personal information to contact you with newsletters, marketing or promotional materials, and other information that may be of interest to you. You may opt out of receiving these types of communications from us by following the unsubscribe link or instructions provided in any email we send. We provide the following choices related to your personal information, many through self-service tools in the Services:

• Confirmation and Knowledge: You may confirm that we process your personal information and request details about the personal information we process.
• Access and Portability: You may request a copy of your personal information.
• Correction: You may update your personal information in your Account or request that we correct personal information that we maintain about you and you believe is inaccurate.
• Deletion: You may request that we delete certain personal information about you and you may manually delete your personal information in your Account or your entire Account. Where we use deidentification to satisfy a deletion request, we commit to maintaining and using the information in deidentified form and will not attempt to reidentify the information. Please see below for additional details on Account data.
• Sales and Sharing for Targeted Advertising: You may have the right to opt out of sales of your personal information and sharing of your personal information for targeted advertising. However, Age App does not sell personal information or share personal information for targeted advertising, so does not offer the opportunity to exercise this right.
• Profiling: You may opt out of opt out of the processing of your personal information for purposes of profiling in furtherance of a decision that produces a legal or similarly significant effect.

How to Submit a Request Due to the decentralized nature of the Services, Age App is unable to access much of your personal information. For example, we do not have access to or the ability to modify non-custodial wallet keys and IPFS-hosted content outside Age App’s operational control. If you would like to access this data, delete it, or correct it, you may do so by following instructions at https://support.chainit.com/how-to-delete-your-account-and-user-data. Additionally, requests to exercise the above choices and rights can be submitted to: privacy@ageapp.com. If you submit certain requests, we may request additional information to verify your identity, which may require you to log into your Account or to provide 2-3 pieces of personal information that we will match against our records. You may be able to designate an authorized agent to make requests on your behalf by using the email address above. We will not discriminate against you for choosing to exercise any of these choices or privacy rights. If we deny one of your privacy rights and you believe it was denied in error, you have the right to request an appeal by emailing privacy@ageapp.com.

12. Retention and Deletion

You have exclusive control over the personal information you enter into your Account and we will maintain such information in our protected systems until you delete your Account. You can initiate an account deletion through our automated systems, but we do not have any control over the individual pieces of personal information you enter into or generate from your Account. Please visit our Biometric Policy

for more information about how long we retain Biometric Information. We may keep personal information we process for as long as necessary for the purposes described in this Policy or otherwise authorized by law. This generally means that we maintain the personal information for as long as one of the following apply:

• The personal information is reasonably necessary to manage our operations, to manage your relationship with us, or to satisfy another purpose for which we collected the information.
• The personal information is reasonably necessary to carry out a disclosed purpose that is reasonably compatible with the context in which the personal information was collected.
• The personal information is reasonably required to protect or defend our rights or property.
• We are otherwise required or permitted to keep the personal information by applicable laws or regulations.

Where personal information is collected and used for more than one purpose, we will retain it until the purpose with the latest period expires.

13. Data Security

We implement reasonable technical, organizational, and administrative measures to safeguard personal information against unauthorized or unlawful processing and against accidental loss, destruction, or damage. However, because transmission via the internet is not completely secure, we cannot guarantee the security of any information we may have collected from or about you through our Services. For validation integrity information, see Age App’s Touch Audit™ technical overview

in the Age App Risk Management and Security Framework.

14. International Transfers

Age App is based in the United States. By accessing our Services, you acknowledge that your personal information may be transferred to and processed in jurisdictions outside your own, including the United States. Cross-border transfers of personal information are subject to appropriate contractual safeguards. Please be aware that the data protection laws and regulations that apply to personal information transferred to the United States or other countries may be different from the laws in your country of residence.

15. Changes to This Policy

We may update this Policy from time to time. Updates will be posted in the Services with a revised “Effective Date.” Your continued use of the Services after any update to this Policy will constitute your acceptance of the changes.

16. Contact Us

For questions about this Policy or other privacy or compliance inquiries, please contact privacy@ageapp.com.