Last updated: August 25, 2026 This Privacy Notice describes the processing of personal data collected through the Tali mobile application (hereinafter, "the App"), operated by Tali (hereinafter, "the Controller"). 1. Data controller Tali is responsible for processing your personal data collected through the Tali App. For privacy matters, contact us at support@tali.my. 2. Data we collect We collect only the data necessary to operate the service: • Account data: email address and, depending on the sign-in method, name and Google or Apple account identifier. • Device data: serial numbers and identifiers of your Tali devices and Puk sensors, and their configuration. • Sensor readings: measurements generated by your devices (for example, temperature). • Technical notification data: push notification token used to send you alerts about your devices. We also collect crash reports and App diagnostic data (for example, the state of the application at the time of an error) through Firebase Crashlytics, for the sole purpose of detecting and fixing operational problems. We do not collect precise geolocation data, contacts or sensitive information unrelated to the operation of the service. 3. Purpose of processing Your data is used exclusively to provide you with information about your device(s) and to operate the App's features, in particular to: • Authenticate your account and maintain your session. • Pair, configure and display the status of your devices and sensors. • Show you real-time and historical readings from your sensors. • Send you alerts and notifications related to your devices. We do not use your data for advertising purposes, nor do we sell, rent or trade it with third parties. 4. Data sharing To operate the service we rely on technology providers that process data on our behalf, such as Firebase / Google (authentication, push notifications and crash reporting) and our backend and messaging infrastructure (MQTT). These providers only access the data necessary to deliver their service and are bound by confidentiality obligations. We may disclose data when required by a competent authority in accordance with the law. 5. Retention and security We retain your data for as long as your account is active. We apply reasonable technical and organizational measures to protect your information, including secure credential storage (Keychain) and encrypted communications with the backend. 6. Account and data deletion You may delete your account from the Account screen of the App. Deletion takes effect immediately and is irreversible: we erase your account and the associated personal data, except for data we are required to retain by legal obligation. 7. Data subject rights You may request access to, rectification, cancellation of or objection to the processing of your personal data at any time, as well as withdraw your consent. To exercise these rights, write to support@tali.my. 8. Changes to this Privacy Notice We may update this Notice to reflect changes in the service or in applicable regulations. Relevant modifications will be notified through the App. 9. Consent By accepting this Notice and using the App, you consent to the processing of your personal data as described herein.