Xiaomi Account Rules on the Protection of Children's Personal Information

Introduction

These Xiaomi Account Rules on the Protection of the Children's Personal Information (hereinafter referred to as "Rules") govern the collection, use, transfer, and disclosure of the personal information of children (defined in these Rules as those individuals under the age of 14). The child's parent or legal guardian must be clearly informed about how their child's information will be collected and used, and their consent must be obtained in advance. For minors between the ages of 14 and 18, the consent of the minor or their parent or guardian must be obtained before collecting the minor's personal information.

These Rules are designed with you and your child's needs in mind, and it is important that you, as your child's guardian, have a comprehensive understanding of how we collect, use, disclose, process, and store personal information provided to us in your and your child's use of Xiaomi Account through these Rules, while ensuring that ultimately, you have control of your personal information provided to us.

These Rules outline how we will protect the personal information of children when they and their guardians use Xiaomi Account, and constitute an important part of the Xiaomi Account Privacy Policy. In the event of inconsistency between these Rules and the Xiaomi Account Privacy Policy with respect to child accounts, the former shall prevail. For the terms and conditions not stipulated in these Rules, the Xiaomi Account Privacy Policy shall prevail.

Ultimately, what we want is the best for all our users. Should you have any questions about our data handling practices as summarized in these Rules, please contact us via https://privacy.mi.com/support to address your specific concerns. We will be happy to address them directly.

1. What information we collect and how we use it

The purpose of collecting the personal information of children is to provide them with Xiaomi products and/or services, and to ensure that we comply with applicable laws, regulations, and other regulatory requirements. You have the right to choose whether or not to provide the information we have requested, but in most cases, if you do not provide the child's personal information, we may not be able to provide the relevant products or services or respond to queries.

Xiaomi will only collect and use children's personal information for the purposes described in these Rules. We may process children's relevant personal information in the course of providing the following services and features:

1.1 Creating an account

Xiaomi provides the option to create a Xiaomi child account. We need the child's date of birth, account name, and phone number not previously connected to a Xiaomi Account to be able to create the child account and allow the child to sign in and verify their account.

In order to comply with the requirements of relevant laws and regulations, we may undertake authentication measures to confirm that you are the parent or guardian of a child with the right to create a child account. These measures include asking you to provide the parent account's Xiaomi ID and login password or sending a SMS verification code to the phone number associated with the parent's account. After creating a child account, the parent's account will be assciated with the child account, and the child will be able to use their account to access Xiaomi products and services.

1.2 Family services

Parents and children can use Xiaomi products, services, and content through the Family services feature. To provide these features, we'll collect your Xiaomi ID and the child account and/or phone number of your child.

2. Retention policy

Personal information will be held for as long as it is necessary to fulfill the purpose for which it was collected, or as required or permitted by applicable laws. We shall cease to retain personal information, or remove the means by which the personal information can be associated with particular individuals, as soon as it is reasonable to assume that the purpose for which that personal information was collected is no longer being served by retention of the personal information.

Your and your child's information is saved within the territory of the People's Republic of China.

3. Your rights

3.1 Control of your child's personal information

Xiaomi recognizes that privacy concerns differ from person to person. Therefore, we provide examples of ways for you to restrict the collection, use, disclosure, or processing of your child's personal information and to control their privacy settings:

• You can create child accounts in Settings > Xiaomi Account > Family services.
• When the child account is signed in on a device, you can sign out of it by going to Settings > Xiaomi Account > Sign out and verifying the parent or guardian's account password.

If you have previously agreed to us using your child's personal information for the aforementioned purposes, you may change your mind at any time by contacting us on https://privacy.mi.com/support.

3.2 Your rights to your child's personal information

It will help us to process your request most efficiently if it meets the following conditions:

• The request is submitted through Xiaomi's exclusive request channel detailed above and for the protection of the child's information security, the request should be in writing (unless the local law explicitly recognizes the oral request).
• You provide sufficient information to enable Xiaomi to verify your identity and ensure that you are the data subject or legally authorized to act on the data subject's behalf.

Once we obtain sufficient information to confirm that your request can be processed, we shall proceed to respond to your request within any timeframe set out under your applicable data protection laws. In detail:

• Based on the requirements of applicable laws, a copy of the child's personal data collected and processed by us will be provided upon your request free of charge. For any extra requests for relevant information, we may charge a reasonable fee based on actual administrative costs according to and if permitted by the applicable laws.
• • If any information we are holding on the child is incorrect or incomplete, they are entitled to have their personal information corrected or completed based on the purpose of use.
• Based on the requirements of applicable laws, you may have the right to request the deletion or removal of your child's personal information. We shall consider the grounds regarding the erasure request and take reasonable steps, including technical measures. Please note that we may not be able to immediately remove the information from the backup system due to applicable legal and/or technological limitations. If this is the case, we will securely store the child's personal information and isolate it from any further processing until the backup can be deleted or be made anonymous.

We have the right to refuse to process requests that are not meaningful, manifestly unfounded or excessive, requests that damage others' right to privacy, extremely unrealistic requests, and requests that require disproportionate technical work, as well as requests not required under local law, regarding information that has been made public, and regarding information given under confidential conditions. If we believe that certain aspects of the request to delete or access the information may result in our inability to legally use the information for the aforementioned anti-fraud and security purposes, the request may also be rejected.

3.3 Withdrawal of consent

• You may submit a request to withdraw your consent for us to collect, use, and/or disclose your child's personal information held or controlled by us. You can do so in Settings > Xiaomi Account > About Xiaomi Account, or by visiting "Privacy" on https://account.xiaomi.com. We'll process your request for withdrawal of consent after verifying the parent or guardian's Xiaomi ID and password. Based on the specific service your child is using, you can contact us on https://privacy.mi.com/support. We will process your request within 15 business days of when the request was made, and thereafter not collect, use and/or disclose your child's personal information as per your request.
• Attention: Your withdrawal of consent may result in some legal consequences. Additionally, your child may not be able to continue receiving the full benefit of Xiaomi Account products and services, depending on how much authority you grant us to process their information. The withdrawal of your consent or authorization will not affect the validity of our processing carried out on the basis of the consent up until the point of withdrawal.

3.4 Canceling a service

If you wish to cancel a child account, you may do so by following the steps in Settings > Xiaomi Account > Help > Delete account, or by visiting https://account.xiaomi.com. Before canceling child account services, we'll first verify the parent or guardian's Xiaomi ID and password. You can also contact us to request termination on https://privacy.mi.com/support.

To protect your or others' legitimate rights and interests, we will judge whether or not to support your request for cancellation based on your use of various Xiaomi products and services. All related child accounts must be canceled before the parent or guardian's Xiaomi Account can be canceled. Please note that cancellation of the Xiaomi Account will prevent you and your child from using the full range of Xiaomi products and services.

4. Contact us

If you have any comments or questions about this Privacy Policy or any questions relating to Xiaomi's collection, use or disclosure of your personal information, feel free to contact us by visiting https://privacy.mi.com/support. Please include "Privacy Policy" in your contact message. We will generally respond within 15 business days. When we receive privacy or personal information requests about accessing or downloading personal information, we have a professional team to solve your problems. If your question itself involves a significant issue, we may ask you for more information.

If you are not satisfied with the response you received from us in relation to your personal information, you can hand over the complaint to the relevant data protection regulatory authorities in your jurisdiction. If you consult us, we will provide information on the relevant complaint channels that may be applicable based on your actual situation.

Mailing address:

#006, 6th Floor, Building 6, 33 Xi'erqi Middle Road, Haidian District, Beijing

China 100085