Privacy Policy

This Privacy Notice describes how we collect and use information about you when you use our website https://rlyxa.co.uk (and any components thereof, the "Site"), applications, services, tools and features, or otherwise interact with us (collectively, the "Services").

We are a Limited company established in the United Kingdom ("UK") with our full name RLYXA LIMITED, also known as ("RLYXA"), registered under Company number 16768571, with our office located at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, UNITED KINGDOM, and we are the data controller for the processing of your information.

Please read this Privacy Notice carefully. By using any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Notice. If you do not agree to this Privacy Notice, please do not use or access the Services.

The Site and Services are not intended for children under the age of 18, (or another age of legal capacity in the appropriate jurisdiction), and we do not knowingly collect data relating to children. Children must not use the Services, except where their parent or guardian has provided consent, if this option is available in your location.

We may modify this Privacy Notice from time to time, in which case we will update the "Last Updated" date at the top of this Privacy Notice. If we make material changes to the way in which we use information we collect, we will use reasonable efforts to notify you (such as by emailing you at the last email address you provided us, by posting notice of such changes on the Services, or by other means consistent with applicable law) and will take additional steps as required by applicable law.

If you do not agree to any updates to this Privacy Notice, please do not access or continue to use the Services.

When you use or access the Services, we collect certain categories of information about you from a variety of sources.

Information You Provide to Us

Some features of the Services may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features. Information you may provide includes:

• Basic contact details, such as full name, address (including city and country of residence), phone number, and email. • Payment-related information, including bank account, credit or debit card information, which will be collected if you subscribe to a paid functionality. • Account information, such as username, password, and security questions. You are responsible for keeping your account credentials safe. • User-generated content, such as messages, photos, and recordings, submitted by you through the Site. • Audio data and conversation data, which may be collected when you interact with our Services through voice-enabled features or customer support channels. • Data through third-party authentication providers, which may include your profile details, when you choose to log in using third-party authentication services. • Any other information you choose to include in communications with us.

Information We Collect Automatically

When you visit the Site and use our Services, we automatically collect information from your device including: (i) your IP address; (ii) device information including name and type of operating system; (iii) mobile network information; (iv) standard web information such as your browser type and the pages you access; (v) transaction information; (vi) security information including a list of certain installed software and device information.

We process your information in order to perform our agreement with you, such as:

• Provide you with our Services, content and Site functionality. • Register and maintain your account with us. • Answer requests for customer or technical support. • Process your financial information and other payment methods for products or Services purchased. • Communicate with you about your account, activities on our Services, and policy changes.

We obtain your consent to:

• Sign you up for our newsletters or alerts. • Personalise our Services for you. • If you opt-in to marketing, communicate with you about products, services, promotions, events and other news. • Enhance and improve our Services, including the refinement and development of our artificial intelligence models (including but not limited to RATIX and Rlyxa Kids), ensuring better accuracy and user experience.

We may also use your information in our legitimate interests to:

• Administer the Site and Services, and for internal operations including troubleshooting, data analysis, testing, research, and statistical analysis. • Maintain the safety and security of our users, the Site, our Services, and business. • Send you announcements in relation to security, privacy or administrative related communications. • Personalize the Site and our Services to ensure content is presented in the most effective manner for you and your device. • Improve and develop our products.

We disclose your information with third parties in certain circumstances, including:

• With service providers and vendors (including data analytics vendors, security vendors, and website hosting vendors) that assist us to provide the Site and Services to you. • When you request us to share certain information with third parties with your consent or to perform a contract with you. • With professional advisors (including auditors, law firms, or accounting firms) in our legitimate interests or as required by applicable law. • For legal and security reasons — with regulators, law enforcement agencies, public authorities, or any other relevant organisations to comply with applicable law, protect the interests and safety of us, our users, a third party or the public; to exercise or defend legal claims; and to enforce our terms and conditions or other agreements. • With our affiliates or otherwise within our corporate group, in our legitimate interests. • With a prospective buyer, seller, new owner, or other relevant third party in connection with or anticipation of an asset sale or purchase, a share sale, purchase or merger, bankruptcy, or other business transaction or re-organisation.

The information we collect may be transferred to and stored in countries outside the UK. When we do this, we ensure your data is protected by using one of the following legally-approved mechanisms:

• Transferring to a country that has been deemed to provide an "adequate" level of protection by the UK. • Using a UK-approved legal agreement, specifically the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses. • Relying on a specific, UK-approved derogation for the specific situation, such as your explicit consent.

We may provide links to third-party websites or platforms. If you follow links to sites or platforms that we do not control and are not affiliated with us, you should review the applicable privacy notice, policies and other terms. We are not responsible for the privacy or security of, or information found on, these sites or platforms.

Information you provide on public or semi-public venues, such as third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.

Despite our reasonable efforts to protect your information, no security measures are impenetrable, and we cannot guarantee "perfect security." Any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure while in transit. We recommend that you do not use unsecure channels to send us sensitive or confidential information.

We will retain your information only for as long as is necessary for the purposes set out in this notice. We consider the following criteria to determine our retention periods:

• To provide the Services: We retain your account data, profile information, and user-generated content for as long as your account is active. • To comply with legal obligations: For example, we retain payment transaction information for 7 years to comply with UK financial and tax regulations. • For our legitimate business interests: We may retain certain information after you close your account for a limited period (e.g., 6 years) for the establishment, exercise, or defence of legal claims. • Marketing: We retain your contact details for marketing purposes until you unsubscribe or for a period of 24 months of inactivity.

Once the retention period expires, we will securely delete or anonymise your personal data.

Under data protection laws, you may have several rights regarding the processing of your personal data:

• Right to Be Informed: You have the right to be informed about how we collect, process, store, and destroy your personal data. • Right of Access to Your Personal Data: You are entitled to request access to your personal data in a clear and readable format. • Right to Request Correction of Your Personal Data: If you believe that any personal data we hold about you is inaccurate, incorrect, or incomplete, you have the right to request its correction. • Right to Request Erasure of Your Personal Data: In certain circumstances, you have the right to request the destruction of your personal data. • Objection to Marketing: You can object to marketing at any time by opting-out using the unsubscribe/opt-out function displayed in our communications to you. • Right to Withdraw Your Consent for Processing Your Personal Data: Where you have provided your consent for processing, you may withdraw your consent at any time. • Right to Object to Processing Based on Legitimate Interests: You have the right to object to our processing of your personal data which we carry out based on our legitimate interests.

To exercise any of these rights, please contact contact@rlyxa.co.uk. We will respond to requests in accordance with the timelines set out in the applicable law.

You may also make a complaint to the Information Commissioner's Office (ICO) contactable via www.ico.org.uk.

A "cookie" is a small text file placed on your device when you visit our Site. Cookies help the Site recognise your device and remember information about your visit, such as your preferences and actions.

Types of cookies we use:

• Strictly Necessary/Technical Cookies: Essential for the basic functioning of our Site. We do not need your consent to use these cookies and they cannot be turned off. • Analytical/Performance Cookies: We use these to analyse how our Site is used and assess performance. Examples include Google Analytics Cookies. • Functionality Cookies: These adapt our Site to your preferences and help us "remember" you between visits. • Third-Party Advertising Cookies: These gather information about your activities on our Site and other websites to provide targeted advertising.

How to decline or revoke cookie consent: You can modify your internet browser settings to reject cookies or permit only certain types. Note that blocking all cookies may limit your ability to access all features on our Site.

Google Analytics: We use Google Analytics to understand how users engage with our Services. You can opt out at: https://tools.google.com/dlpage/gaoptout

We welcome your questions and feedback about our privacy practices and this Privacy Notice. You can contact us at:

Email: contact@rlyxa.co.uk Address: RLYXA LIMITED, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, UNITED KINGDOM

This Privacy Notice was originally written in English. Any translated versions are provided for your convenience only. In the event of any conflict or inconsistency between the English version and a translation, the English version shall prevail.