Allsum Privacy Policy

此内容尚不支持你的语言。

Effective Date: 10 November 2026

This Privacy Policy (“Privacy Policy”) is legally binding between you (“user”, “you” or “your”) and Chrematica Pte. Ltd. and its applicable affiliates (collectively, “Chrematica”, “we”, “us”, or “our”), concerning your use (including any access to) of our website(s), mobile and desktop applications and the accompanying products and services offered under the name “Allsum” (collectively, “Allsum”), which are operated by us. We are committed to respecting and protecting the personal data collected through or in connection with Allsum during the course of your use.

Please read this Privacy Policy carefully. If you do not agree with the practices described in this Privacy Policy, you should not use Allsum. Some processing is necessary to provide Allsum; if you object to that processing, you are recommended to stop using the relevant feature or close your account. Capitalised terms used but not defined in this Privacy Policy have the meanings given to them in our Terms and Conditions.

1. Introduction

We take our data protection responsibilities seriously and seek to process Personal Data (as defined below) fairly, lawfully, transparently and securely.

In this Privacy Policy, “Applicable Law” means the Singapore Personal Data Protection Act 2012 (the “PDPA”) and any other data protection, privacy, electronic marketing or similar law that applies to our processing of your Personal Data (as defined below), including mandatory laws in the jurisdiction where you are located. If Applicable Law grants you additional rights or imposes additional requirements, those rights and requirements will apply to the extent required. We may provide jurisdiction-specific or feature-specific notices that supplement this Privacy Policy as necessary. If a supplemental notice conflicts with this Privacy Policy, the supplemental notice will govern for the relevant processing.

This Privacy Policy sets out the basis on which we use and process any personal data we collect from you. It is designed to assist you in understanding how we collect, use, disclose and/or process the personal data you have provided to us, as well as to assist you in making an informed decision before providing us with any of your personal data. If you have any queries on this Privacy Policy, please contact our customer service team at the contact details provided in Section 17 below.

Allsum may from time to time contain links to other platforms or websites operated by third parties. As these platforms or websites may not be owned or operated by us and have their own privacy policies, we do not accept any responsibility or liability for the contents of these platforms or websites and their privacy policies. Your access to, and any provision of personal data to, a third-party platform or website is at your own risk, and we recommend that you review its privacy policy before submitting any personal data to it. This includes Third-Party Services that you choose to connect to Allsum through a Connector (each as defined in our Terms and Conditions), and external websites cited as sources in responses generated by Allsum.

2. Summary

2.1 This Privacy Policy informs you how we collect, use, disclose, process or otherwise handle your Personal Data (as defined below).

2.2 Please read this Privacy Policy so that you know and understand the purposes for which we collect, use and disclose your Personal Data.

2.3 By interacting with us or submitting information to us, you agree and consent to us collecting, using, disclosing and sharing your Personal Data, and disclosing such Personal Data to our authorised service providers and relevant third parties in the manner set forth in this Privacy Policy.

2.4 This Privacy Policy is not an exhaustive list of all situations or scenarios concerning Personal Data. Please feel free to approach our customer service team (see Section 17 below) if you need clarification about any specific situation.

2.5 We may from time to time update this Privacy Policy to ensure that it is consistent with our future developments, industry trends and/or any changes in legal or regulatory requirements. Subject to your rights at law, you agree to be bound by the prevailing terms of this Privacy Policy as updated from time to time. Please check back regularly. IF YOU DO NOT AGREE, PLEASE STOP USING AND UNINSTALL ALLSUM IMMEDIATELY.

3. What is Personal Data

3.1 In this Privacy Policy, “Personal Data” refers to any data, whether true or not, about an individual who can be identified (a) from that data; or (b) from that data and other information to which we have or are likely to have access, including data in our records as may be updated from time to time.

3.2 Examples of Personal Data you may provide to us include (depending on the nature of your interaction with us) your name, telephone number, mailing address, email address, transactional data and any other information you have provided to us via any forms or other forms of interaction, including but not limited to the content of your conversations with the AI agents in Allsum, images and files that you upload, and data retrieved through Connectors that you authorise. The specific categories of Personal Data that we currently collect through Allsum are set out in Section 4.3 below.

3.3 Personal Data does not include data about a data subject which has been anonymised. Anonymisation is the process of removing identifying information such that the remaining data does not identify any particular individual. Techniques can include pseudonymisation, aggregation, replacement, data reduction, data suppression, data shuffling, or masking.

3.4 We practise and endeavour to provide reasonable safeguards to anonymise personal data in appropriate situations, balancing both the need to rely on sufficiently accurate and complete personal data and the need to protect life, health, and avoid mistakes, injury or accidents.

4. How We Collect Personal Data

4.1 Generally, we collect Personal Data:

(a) directly from you, including when you register or manage an account, submit a form, purchase a service, contact customer support, participate in a survey or promotion, or otherwise communicate with us;

(b) automatically from your device and your use of Allsum, including through server logs, cookies, software development kits (“SDKs”) and similar technologies;

(c) from your interactions with our personnel or service channels, including telephone calls, emails, social media and in-app support;

(d) from Third-Party Services that you choose to connect to Allsum through a Connector, within the scope that you authorise;

(e) from third parties that you choose to use with Allsum, such as third-party login providers (for example, Sign in with Apple), payment providers (for example, Apple and Stripe) and advertising attribution providers;

(f) when you respond to our requests, surveys, promotions or marketing communications;

(g) from public sources, regulators, government authorities, fraud-prevention providers or other third parties where permitted by Applicable Law; and/or

(h) in any other manner disclosed to you at or before the time of collection.

4.2 When you use Allsum, certain technical, device, log, and usage information may be collected automatically, even if you do not log in. The specific information collected depends on the device, operating system, feature and permissions you enable. See the table in Section 4.3 below and Sections 6, 10 and 11.

4.3 Categories of Personal Data currently collected through Allsum, and their purposes and retention periods, are set out below:

Core Scenario / Function	Categories of Personal Data	Purpose of Collection / Use	Retention Period
Installation & Use	Information for reading and writing to device storage; device identification information; device status information; and device environment information.	To ensure the stable operation of Allsum and to reduce security risks to users.	For the duration of your Allsum account
Registration & Login	Mobile phone number, email address, verification code, password, invitation code, and, where you use Sign in with Apple, your Apple account identifier or, where you use Google login, your Google account identifier.	To register and create your account and to log in.	For the duration of your Allsum account
Registration & Login (device data)	Device-related information: device name, device model, unique device identifiers (e.g. IDFA, IDFV, OAID, Android ID and an app-generated device ID), operating system, IP address, screen resolution, mobile application download channel, current app version, app language settings, software version, system version, and mobile network information.	To identify your device; for troubleshooting, system updates and software compatibility; and to improve user experience.	For the duration of your Allsum account
Account Management	Nickname and profile photo/avatar.	To complete your profile information.	For the duration of your Allsum account
Account Management (device/login history)	Device information (device model, device serial number, operating system and version, client version) and historical login device information, together with your account login state (including session or token information).	To identify your device; for troubleshooting, system updates and software compatibility, and to improve user experience; and to manage your logged-in devices and prevent unauthorised use of your account.	For the duration of your Allsum account
Account Management (credentials)	Account information such as nickname, password, account age, and any linked third-party accounts.	To log in to your account, retrieve or change your password, unlock your account, and close your account.	For the duration of your Allsum account
Account Management & AI Services (photos)	Photos stored on your mobile device that you choose to select and, where supported, photos that you take with your camera.	To upload photos to the AI agent at your request, to update your profile photo/avatar, and to save images to your photo library at your request. Some of these functions are available only on certain devices.	For the duration of your Allsum account (photos uploaded to the AI agent are retained as part of your Conversation Content (see Section 12.1)).
Quick Login / Biometric Verification	Identity verification result only (that is, whether verification passed). We do not obtain your biometric data.	To allow you to log in quickly using Face ID, Touch ID or fingerprint recognition.	For the duration of your Allsum account
Browsing Market Information & News	Information generated from your clicks, views, follows/favourites, searches, queries and sharing activity when you access and use Allsum.	To display content and recommendations based on your searches, browsing and other needs.	For the duration of your Allsum account
Calendar	Information accessed under the calendar permission on your device.	To provide scheduled tasks, records, reminders and related functions by writing to or reading your device calendar.	For the duration of your Allsum account
Security Operations	Device-related information (as above) together with information generated through your use of Allsum, such as standard network log data, usage habits, operation logs, and service records.	To ensure the normal and secure use of Allsum and the security of your account.	For the duration of your Allsum account
Voice Input	Recordings of your voice, captured only when you tap the microphone button, are sent directly from your device to a third-party speech recognition service (Microsoft Azure Speech) to be converted into text. The recordings do not pass through Allsum’s servers.	To allow you to ask questions by voice.	Allsum does not receive or retain your recordings. Only the transcribed text is retained, as part of your Conversation Content (see Section 12.1).
AI Services (conversations)	Your Inputs, including questions and prompts that you enter (including text transcribed from voice input) and images and files that you upload, and the Outputs generated (together, “Conversation Content”).	To generate answers and to display your conversation history.	For the duration of your Allsum account and thereafter for as long as is necessary for the purposes described in this Privacy Policy. You can clear all of your conversations at any time under “Data & Privacy” in your settings.
AI Services (memory)	Memories extracted from, and saved on the basis of, your past conversations.	To tailor answers to your situation.	Until you clear them. You can view and clear your saved memories at any time.
AI Services (artifacts and scheduled tasks)	Artifacts that you create or import, and scheduled tasks that you set up (including their results).	To provide the corresponding features.	For the duration of your Allsum account and thereafter for as long as is necessary for the purposes described in this Privacy Policy
AI Services (Connectors)	Connector authorisation credentials (such as access tokens, but not your passwords for third-party platforms), and data returned by a Connector at your request.	To call Third-Party Services with your authorisation and to answer your questions.	Authorisation credentials are revoked when you disconnect the Connector and when your account is deleted. Returned data is retained as part of your conversation history.
Subscription & Payment	Subscription Plan, order records, usage and usage limit information. Payment card details are collected and processed directly by third-party payment service platforms and are not stored by us.	To provide paid services, manage usage limits, and handle billing queries and refunds.	For the duration of your Allsum account, except for payment card details which are collected and processed by third-party payment service platforms.
Notifications	Push notification token.	To send you system notifications when an answer is complete or your confirmation is needed.	For the duration of your Allsum account
Referrals & Sharing	Invitation codes, and links to conversations or artifacts that you choose to share.	To administer referral rewards and to enable content sharing that you initiate.	For the duration of your Allsum account

5. Purposes of Collection, Use and Disclosure of Your Personal Data

5.1 Generally, we collect, use and disclose your Personal Data for the following purposes:

(a) responding to your queries, feedback, complaints and requests;

(b) performing data analytics;

(d) facilitating the daily operation of our services, including providing the AI agents and other AI features of Allsum, displaying market information and news, processing your Subscription Plan purchases, managing usage limits, administering referral rewards and content sharing that you initiate, and providing customer service and support (including resolving technical difficulties, disputes or problems);

(e) facilitating back-end operations, including disclosing required information to counterparties for administration and processing purposes;

(f) managing project, business operations and/or product development;

(g) requesting feedback or participation in surveys, and conducting market research and/or analysis to understand customer behaviour, preferences and market trends, and to review, develop and improve our services;

(h) monitoring our interactions with you for quality assurance, service improvement, and identity verification purposes;

(i) in connection with any claims, actions or proceedings, and/or protecting and enforcing our contractual and legal rights and obligations;

(j) conducting investigations relating to audit, disputes, billing or fraud;

(k) meeting or complying with any applicable rules, laws, regulations, codes of practice or guidelines issued by any legal or regulatory bodies binding on us;

(l) matching any Personal Data held which relates to you for any of the purposes listed herein; and/or

(m) purposes which are reasonably related to the aforesaid.

5.2 Furthermore, where permitted under Applicable Law, we may also collect, use and disclose your Personal Data for the following “Additional Purposes”:

(a) providing or marketing additional products, services and benefits to you;

(b) matching your Personal Data with other data collected for other purposes and from other sources, in connection with the provision, marketing or offering of services to you;

(d) conducting market research and surveys to understand customer location, preferences and demographics; and/or

(e) purposes which are reasonably related to the aforesaid.

6. App Permissions

6.1 Depending on which features of Allsum you use, we may request the following device permissions. We only request a permission where it is relevant to a feature you are using, and you may decline or later disable a permission through your device settings, though this may limit your ability to use the related feature.

Permission Requested	Purpose
Storage read/write permission	To ensure the stable operation of Allsum. We undertake to read or cache only the information that is necessary. On Android devices, this permission is requested only when you select images on older devices on which the system photo picker is not available.
Camera and photo album permission	When you take or select photos to upload to the AI agent, set a profile photo/avatar, or save images to your photo library, you will need to enable the camera and/or photo library permission (depending on the function you use and your device).
Microphone permission	When you ask questions by voice input, you will need to enable the microphone permission. The microphone is used only when you tap the microphone button.
Calendar permission	When you use scheduled tasks, reminders or similar functions, you will need to enable the calendar permission so that we can write to or read your device calendar.
Fingerprint / facial recognition permission	When you enable biometric verification, you can use Face ID, Touch ID or fingerprint recognition to log in quickly. Your device only tells us whether verification passed; we do not obtain your biometric data. If you do not enable this permission, you can still use your other credentials.
Notification permission	To send you a system notification when an answer is complete, or when your confirmation is needed, while Allsum is running in the background.
Advertising identifier permission	To access your device’s advertising identifier (IDFA on iOS; Google advertising ID on Android) to measure the effectiveness of our advertising campaigns for Allsum. Declining does not affect your use of Allsum.

7. Disclosure of Personal Data to Third Parties

7.1 We will take reasonable steps to protect your Personal Data against unauthorised disclosure. Subject to the provisions of any applicable law or for confidentiality reasons, your Personal Data may be disclosed, for the purposes listed below, to the following entities or parties, whether located overseas or in Singapore:

(a) vendors and third-party service providers that support Allsum, including but not limited to cloud hosting providers, AI model providers, search service providers, code-execution sandbox providers, analytics, push notification and advertising attribution providers, payment processors and app store providers (see Sections 9.4, 11 and 12);

(b) credit bureaus, or in the event of default or disputes, any debt collection agencies or dispute resolution centres;

(d) relevant government ministries, regulators, statutory boards, authorities or law enforcement agencies to comply with any applicable laws, rules, guidelines or regulations;

(e) anyone to whom we transfer or may transfer our rights and obligations;

(f) providers of Third-Party Services that you choose to connect through a Connector, which receive the data needed to perform your requests, as described in Section 12.3;

(g) other users of Allsum or other persons, where you choose to share a conversation or artifact link; and/or

(h) any other party to whom you authorise us to disclose your Personal Data.

7.2 We require organisations outside Chrematica which handle or obtain Personal Data as service providers, vendors, or other entities we work with, to acknowledge the confidentiality of this data, respect individuals’ privacy rights, comply with Applicable Law, use the information only for our purposes, and follow our reasonable directions.

7.3 While we will not disclose Personal Data provided to us to third parties without first obtaining the relevant consent(s), we may disclose Personal Data to third parties without first obtaining your consent in certain situations, including: (a) where disclosure is required or authorised by applicable laws or regulations; (b) where the purpose of disclosure is clearly in your interests and consent cannot be obtained in a timely way; (c) where disclosure is necessary to respond to an emergency threatening life, health or safety situation; (d) where disclosure is necessary for any investigation or proceedings; (e) where disclosure is to an officer of a prescribed law enforcement agency upon production of appropriate written authorisation; (f) where disclosure is to a public agency and is necessary in the public interest; and/or (g) where disclosure without consent is otherwise permitted by Applicable Law or by law.

8. Use of Telephone Numbers and Email Addresses for Marketing

8.1 If you have provided your telephone number or email address and consented to receiving marketing or promotional information by that means, we may from time to time contact you using that telephone number or email address (including by voice call, text, email, fax or other means) with information about Allsum.

8.2 You may withdraw your consent to receiving marketing or promotional materials or communications at any time by contacting us using the details in Section 17 below. Please note it may take up to 30 working days for your withdrawal to take effect in our systems. Therefore, you may still receive marketing or promotional materials/communication during this period of time.

8.3 Even after you withdraw your consent to marketing communications, we may still contact you for other purposes relating to Allsum, in connection with products and services you have already requested or are currently receiving. See Section 14 below for further details on withdrawal of consent.

9. Security, Storage, Retention and Cross-Border Transfers

9.1 We will safeguard the confidentiality of your Personal Data, whether you interact with us personally, by telephone, by mail, over the internet or via other electronic media. We hold Personal Data in secure computer storage facilities and take steps to protect it from misuse, loss, unauthorised access, modification or disclosure.

9.2 We will take reasonable administrative, technical and physical safeguards to protect your Personal Data. However, we will not accept responsibility or liability for any unauthorised use of such Personal Data by third parties wholly attributable to factors beyond our control.

9.3 We retain Personal Data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to maintain Allsum, ensure its security, comply with Applicable Law, resolve disputes and enforce agreements. Retention periods of Personal Data are set out in the table under Section 4.3 and vary by data category and context. Unless we determine, at our sole discretion, that a longer retention period is required or permitted by Applicable Law, we may not retain account-related Personal Data after your Allsum account is closed if (i) retention is no longer necessary for legal and business purposes; and (ii) the purpose for which Personal Data was collected is no longer being served. In such cases, we may delete, anonymise, or securely dispose of Personal Data collected through Allsum. Retention of AI-related data, including Conversation Content, memories and Connector data, is further described in Section 12.

9.4 Transfers to service providers. To provide Allsum, your Personal Data may be transferred to, and processed in, other jurisdictions, including but not limited to the following categories of recipient:

(a) AI model providers, to generate responses to your questions;

(b) search service providers, to retrieve information relevant to your questions;

(d) providers of Third-Party Services that you connect through Connectors, depending on the Connector you choose;

(e) providers of the software development kits and payment services described in Section 11; and

(f) speech recognition service providers, which may process data to convert your voice input into text.

This list of recipients is not exhaustive and may change from time to time, including as AI services develop. Where Applicable Law requires your consent to a cross-border transfer, we will obtain it at an appropriate time. For Connectors, we may obtain your consent through a Connectors Notice shown before you first connect a Connector.

10. Use of Cookies and Similar Technologies

10.1 When you interact with us on Allsum (whether you are logged in with your account credentials or not logged in as per Section 4.2), we automatically receive and record certain information in our server logs, and we may use cookies and similar technologies (such as web beacons) for the purposes described below.

10.2 Cookies are small text files stored on your device that allow us to recognise you as a returning visitor. You may refuse or disable cookies at any time through your browser settings; if you do so, certain parts of Allsum may become unavailable to you, and we will not gather information about you through the cookies you have refused. As our cookies allow you to access some of Allsum’s features, we recommend that you leave cookies enabled. Otherwise, if cookies are disabled, you may potentially experience reduced functionality or be prevented from using Allsum.

10.3 Our use of cookies, web beacons and similar technologies on Allsum:

(a) Remembering your account: we use cookies to help remember your account so that you do not need to repeatedly enter your login details.

(b) Advertising attribution: Allsum does not display advertisements. When we advertise Allsum on other platforms, we use attribution technologies (on our website and in our app) to measure which campaigns lead people to visit, install or use Allsum. This involves collecting device identifiers, including your IDFA on iOS where you permit tracking through Apple’s App Tracking Transparency prompt, and your Google advertising ID on Android. If you log in, these identifiers may be linked to your Allsum account.

(c) Usage analytics: we use cookies, web beacons, and event tracking technologies to compile visit statistics and understand how Allsum is used (for example, conversation impressions, button clicks, Connector connections and page views) so that we can improve the user experience. This information may be linked to your Allsum account.

10.4 In addition to cookies, we may use an Authorization HTTP header (in place of cookies) and web beacon technology to record your identity and collect information about your web-browsing activity, such as your IP address, browser type, internet service provider, pages visited, operating system, date/time stamp and click-stream data, so that we can learn more about, and improve, our products and services.

10.5 For more information about the cookies and similar technologies we use, and how to manage them, please refer to our Cookie Policy.

11. SDK Technology

11.1 Allsum embeds third-party software development kits (“SDKs”) and collects some information from you to ensure that you can use Allsum normally. We conduct strict security monitoring of APIs and SDKs, and agree with authorising partners on strict data protection measures so that they process personal information only in accordance with our delegated purposes, service instructions, this Privacy Policy, and other relevant confidentiality and security measures.

11.2 The third-party SDKs and services currently used in Allsum include the following. Not all of them are used on every platform (such as iOS, Android or web), and they may change from time to time as our services evolve:

(a) Analytics and advertising attribution SDKs, which process device identifiers (including advertising identifiers where permitted), install source information, IP address, device and app information and usage data, which may be linked to your account if you log in;

(b) App performance monitoring SDKs, which process device information, app information, and crash logs;

(d) Login and verification services, which process your login and verification information;

(e) Voice Input: Speech recognition services, which process recordings of your voice input to convert them into text; and

(f) Payments: Third-party payment service platforms, which process your payment details directly, and we receive transaction records only.

12. AI Features and Automated Processing

12.1 When you use the AI agents in Allsum, your Inputs (including questions and prompts, text transcribed from your voice input, and images and files that you upload) and the Outputs generated (each as defined in our Terms and Conditions) (together, “Conversation Content”) are processed in order to generate responses for you. To do so, Conversation Content and, where relevant to your request, information retrieved through tool calls (including data retrieved through Connectors) are sent to the AI model, search and sandbox providers described in Section 9.4, which may involve the transfer of your Personal Data to jurisdictions other than the one in which you are located.

12.2 We retain Conversation Content according to the table under Section 4.3 in order to display your conversation history and for quality assurance, safety and content moderation purposes. You can clear all of your conversations at any time under “Data & Privacy” in your settings. Retention after your Allsum account is closed will be limited to what is necessary and, in any event, will be in accordance with Section 9.3.

12.3 Connectors. If you authorise a Connector, we store the authorisation credentials needed to call the relevant Third-Party Service (such as access tokens, but not your password for that service) and process the data that it returns to answer your questions. That data enters the context of the AI model and is therefore processed as described in Section 12.1. Depending on your instructions, the questions you ask and the tasks you initiate (including scheduled tasks), Allsum may also send data to a connected Third-Party Service so that it can perform your request. The specific data sent depends on the relevant Connector and the scope of authorisation you grant for it. Once received, that data is processed by the provider of the Third-Party Service under its own terms and conditions and privacy policy, and is outside our control. Unless otherwise stated on Allsum, Allsum is not currently designed to use Connectors to place orders, execute transactions, transfer funds or assets, or open accounts on your behalf. Some connected services allow content in your account to be created, edited, or deleted; any such action is taken only on your instruction and is performed by the service’s provider. You may view, change and disconnect Connectors at any time in your settings. When you disconnect a Connector or when your Allsum account is deleted, authorisation credentials are revoked, and data already returned is retained as part of your conversation history until you clear it.

12.4 Memory. If you enable the memory feature in Allsum, Allsum extracts and saves details from your conversations, and may reference your recent conversations, to tailor future answers. The memory feature is optional and controlled by you: you can enable or disable it, and view and clear your saved memories, at any time in your settings. Saved memories are used as part of your Conversation Content when generating answers, and are therefore processed as described in Section 12.1.

12.5 Artifacts, scheduled tasks and sharing. We store the artifacts that you create, import or upload, and the scheduled tasks that you set up and their results, in order to provide those features. Scheduled tasks run automatically using your settings and Connector authorisations at the time of each run. If you share a conversation or artifact link, its content, including any data retrieved through Connectors, will be visible to anyone who has access to it; as such, please do not include Personal Data that you do not wish to make public.

12.6 Model training. Except for data retrieved through a Connector which is not used for training, we may use your Conversation Content to improve our Platform Services, including training and improving our AI models. You may opt out of the use of your Conversation Content for training our AI models at any time through the settings on Allsum. Opting out does not affect use already made before you opt out.

12.7 Automated decision-making. We do not use your Personal Data to make decisions that materially affect you based solely on automated processing.

13. Managing Consents

13.1 The purpose of this Section is not only to inform you of the purposes and contact information of our customer service team (see Section 17 below), but also to provide further information relevant to how we manage your consent arrangements in respect of your Personal Data, where such consents are required and not subject to an exception.

13.2 Without prejudice to other consents or rights we may have under Applicable Law, in the daily course of our dealings with you, you may have provided us with your Personal Data in connection with purposes already notified to you in this or an earlier version of this Privacy Policy. Where so, your consent to the collection, use or disclosure of your Personal Data for such purposes is deemed by your provision of that Personal Data, except where we have explicitly indicated that separate consent is required.

13.3 Where we have entered into a contract with you under which we are to perform contractual obligations owed to you, your Personal Data will be collected, used or disclosed by other organisations with whom we collaborate in accordance with this Privacy Policy, to the extent reasonably necessary to fulfil our contractual obligations or exercise our contractual rights in relation to you.

13.4 These other organisations may in turn collect, use or disclose your Personal Data to carry out these necessary purposes, which may include further disclosures to third-party organisations. In each case, such collection, use and disclosure is limited to the necessary purposes.

13.5 Where your contract with us is terminated or expires for any reason, such reasonably necessary purposes will continue to apply to allow us to discharge our obligations and exercise our rights in connection with the termination or expiry, including our surviving duties at law.

13.6 Without prejudice to other consents or rights we may have under Applicable Law, we may, after taking appropriate measures (including conducting relevant assessments and identifying reasonable measures to eliminate, mitigate or avoid identified adverse effects), choose to manage additional or future consents required of you under this Privacy Policy by issuing a notice to you (“Notice”), by placing/posting on Allsum, informing you of: (a) our intention to collect, use or disclose your Personal Data; and (b) the purposes for which the Personal Data will be collected, used or disclosed.

13.7 Where you do not consent, you should not use Allsum. If you continue to use Allsum after a Notice has been issued, we will proceed on the basis that consent is deemed pursuant to Applicable Law. If you have any objection to a Notice, you may raise it with our customer service team (see Section 17 below).

13.8 Your response should be unambiguous so that we are able to apply your instructions, and we may seek verification of your instructions and identity to confirm they are duly authorised.

13.9 You agree to let us know if you would prefer another mode of communication for a Notice, failing which we will proceed on the basis outlined above.

14.1 You are entitled under Applicable Law to withhold or withdraw consent to the collection, use or disclosure of your Personal Data, and we will respect your choice in this regard.

14.2 However, if you withdraw your consent for any or all purposes, depending on the nature of your request, we may not be in a position to continue to allow you to use Allsum.

15. Right to Deletion of Personal Data and Account Closure

15.1 As a user of Allsum, you may request deletion by contacting our customer service team using the details in Section 17. When you delete your account, your account will be closed, and you will no longer be able to access it or the Personal Data associated with it, including your conversations, memories, artifacts, as well as Connector authorisations, subject to required applicable laws and regulations. You can clear your conversations and saved memories, and disconnect Connectors, at any time within Allsum without deleting your account.

15.2 Upon receiving your request under Section 15.1, we will take reasonable steps to verify your identity before closing your account. Processing your request may take up to 30 days. After your account is closed, we may continue to retain your Personal Data in accordance with Section 9.3 and the table under Section 4.3 where applicable.

15.3 Unless otherwise required by applicable laws and regulations, we may delete, anonymise, or cease to retain your Personal Data where: (a) the purpose for processing has been fulfilled, can no longer be fulfilled, or is no longer necessary; (b) we have stopped providing the relevant services, or the retention period has expired; (c) you withdraw your previously provided consent; (d) we have processed your Personal Data in violation of law or our agreement with you; or (e) other circumstances required by applicable laws and regulations.

15.4 You acknowledge that requesting deletion of your data may impact your ability to continue using certain features of Allsum, as some services rely on specific data to function.

16. Use of Biometric Data

16.1 Introduction

We may offer biometric authentication (such as fingerprint or facial recognition) as a security feature of Allsum, allowing you to access our services more securely. By enabling this feature, you consent to the use of your biometric credentials stored on your device to facilitate login and identity verification within Allsum. Use of biometric authentication is optional, and you may choose alternative authentication methods if preferred.

16.2 Collection and Use of Biometric Data

Your biometric data, including fingerprints and facial recognition information, is stored and managed solely by your mobile device’s biometric identity sensor. Allsum does not collect or store any biometric data itself. Instead, Allsum interacts with the biometric sensor on your device to verify your identity, receiving only a “yes/no” confirmation. This ensures that your biometric data remains secure on your device.

By enabling biometric authentication, you acknowledge and agree to the use of your biometric credentials for verifying your identity when accessing Allsum. You may disable biometric authentication at any time via your device settings or within Allsum, without affecting your ability to use other authentication methods such as passwords.

16.4 Data Security

We ensure that all communication between Allsum and your device relating to biometric authentication is encrypted and secured. Any sensitive data involved in the authentication process (e.g. session tokens or login information) is protected in accordance with applicable technology risk management guidelines and Applicable Law.

16.5 Control and Transparency

You retain full control over the biometric authentication feature, including the option to enable or disable it at any time. Your biometric data is processed solely on your device and is not stored by us.

16.6 Limitations of Responsibility

We do not have access to, or control over, the biometric identity sensor on your device. Any issues with the security of the biometric sensor or its data storage should be addressed through your device’s manufacturer. If you suspect any security issue relating to biometric authentication on your device, we recommend that you disable the feature and notify us immediately to secure your account.

If you: (a) have any questions or feedback relating to your Personal Data or this Privacy Policy; (b) would like to withdraw your consent to any use of your Personal Data as set out in this Privacy Policy; (c) would like to obtain access to or make corrections to your Personal Data records, you can contact our customer service team through our customer service channel, or by writing to us at:

For the attention of: Customer Service Team

Chrematica Pte. Ltd.

Email: contact@allsum.ai

18. Governing Law

This Privacy Policy is governed by the laws of Singapore, without prejudice to any mandatory rights and protections that apply to you under Applicable Law. Nothing in this Section limits your right to seek a remedy or lodge a complaint with a competent authority. If a provision of this Privacy Policy conflicts with a mandatory requirement of Applicable Law, the mandatory requirement will prevail to the extent of the conflict.

19. Others

19.1 Any headings in this Privacy Policy are for convenience only.

19.2 In the event there is any discrepancy between the English version of this Privacy Policy and any version in another language, the English version shall prevail.