Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you register for and use the Service, we may collect:

• Account information, such as parent/guardian email address, account username, authentication credentials, and age or age-range information used for account eligibility and parental consent;
• Child profile information, such as a display name or avatar selected by the parent or child;
• Device information, such as printer device name, pairing status, and device settings;
• Print content, such as images, text, drawings, and AI-generated content created or selected for printing;
• Support and feedback information, such as inquiries, suggestions, and reports; and
• Information submitted by a parent or guardian when participating in surveys, testing programs, or promotions.

1.2 Information Collected Automatically

When you use the Service, we may automatically collect certain technical and usage information:

• Device information, such as device model, operating system version, language, time zone, and app version;
• Network and log information, such as IP address (which may indicate general location), network type, access time, login time, activity logs, error logs, and crash logs;
• Usage information, such as page views, button clicks, print frequency, content creation frequency, AI feature usage, and feature usage data; and
• Identifiers, such as device identifiers, session identifiers, or other identifiers related to analytics, fraud prevention, or notifications.

1.3 Information from Third Parties

Where applicable, we may receive necessary information from third parties, including:

• Order information, transaction identifiers, and purchase status from app stores or payment platforms;
• Authorized identity information from third-party sign-in providers (if applicable); and
• Analytics results, notification status, or security screening results from service providers.

2. How We Use Your Information

We may use the information we collect for the following purposes:

• To provide, maintain, and improve Jmmibox and related services;
• To create and manage user accounts and verify parental consent;
• To pair and manage thermal printer devices and transmit print content via the internet;
• To process and generate AI-assisted content for printing;
• To store print history and allow users to review, manage, and reprint past content;
• To verify identity, maintain account security, detect abnormal activity, and prevent fraud or abuse;
• To process in-app purchases, validate transactions, and handle refunds;
• To provide customer support and respond to inquiries, reports, and requests;
• To analyze product usage and improve features, performance, safety controls, and user experience;
• To send service-related notices, such as print completion notifications, account security alerts, and policy updates; and
• To comply with legal obligations, respond to lawful requests, and protect our rights and the rights of others.

3. AI Features and Safety

3.1 AI Processing

When you use AI-powered content generation features, the images, text, and parameters you provide may be used to perform model inference, generate outputs, and return results. AI-generated content is stored as part of your print history so you can review, manage, and reuse your records.

3.2 No AI Training

We do not use your personal User Content to train, fine-tune, or improve any AI or machine learning models without your separate, explicit consent. Third-party AI service providers process data in accordance with their privacy policies and applicable data processing agreements.

3.3 Safety and Content Moderation

To help prevent misuse, we may use automated tools, filters, classifiers, and human review where reasonably necessary to identify or investigate content that may be unsafe, unlawful, or inappropriate for children. We may refuse prompts, block content, or restrict features where necessary for safety and legal compliance.

4. How We Share Your Information

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We may share, disclose, or transfer necessary information in the following circumstances:

• Service providers: cloud storage providers, cloud computing providers, AI processing providers, content moderation providers, analytics providers, notification services, and email delivery providers;
• Payment and platform partners: Apple, Google, or other providers handling payments, order verification, or refunds;
• Legal and compliance requirements: to comply with applicable law, court orders, subpoenas, regulatory requests, or lawful law enforcement requests;
• Business transactions: in connection with a merger, acquisition, asset sale, or restructuring; and
• With your consent: where you have expressly authorized us to do so.

We require relevant third parties to process your information only for documented purposes, only as necessary to provide contracted services, and subject to appropriate data protection, security, retention, and deletion requirements.

5. Data Retention

We retain your information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general retention periods are:

• Account information: retained while your account is active and for up to 30 days after account deletion, except where longer retention is required by law;
• Print history and AI generation records: retained while your account is active, deleted from active systems within 30 days after confirmation of an account deletion request, and deleted or overwritten in backup systems within 90 days;
• Security and fraud-prevention logs: retained for up to 12 months only where necessary for security, fraud prevention, and dispute resolution;
• Analytics data: retained for up to 24 months only in aggregated or de-identified form that cannot reasonably be linked to a child or account;
• Purchase and billing records: retained for the period required by applicable tax, accounting, or legal obligations; and
• Legal hold or compliance data: retained until resolution of any related legal matter.

6. Your Rights and Choices

You have the following rights regarding your personal information:

6.1 CCPA/CPRA Rights (California Residents)

If you are a California resident and the CCPA applies to us, you have the following additional rights:

• Right to know: request disclosure of personal information collected, the purposes, and third parties with whom we share it;
• Right to delete: request deletion of personal information we hold about you;
• Right to correct: request correction of inaccurate personal information;
• Right to data portability: request a copy of your personal information in a portable format;
• Right to opt out of sale/sharing: direct us not to sell or share your personal information;
• Right to limit sensitive personal information: where applicable, request that we limit the use of sensitive personal information;
• Right to non-discrimination: we will not discriminate against you for exercising these rights.

To exercise any of these rights, contact us at help@jmmico.com. We will respond to your request within the period required by applicable law, generally within 45 days where the CCPA/CPRA applies.

7. Children's Privacy Notice

7.1 COPPA Compliance (United States)

This section applies to users under 13 and their parents/legal guardians, in compliance with COPPA. We limit data collection from children to what is strictly necessary to provide the Service, including:

• A parent-verified email address for account setup and management;
• Device identifiers and basic technical data for app operation and security;
• Content voluntarily created or uploaded by the child (e.g., print content and drawings); and
• Print history records for app functionality.

We do not collect precise geolocation data or behavioral profiles for advertising, or any unnecessary data from children. We do not display interest-based, behavioral, or targeted ads to children. Integrated third-party SDKs are configured to disable behavioral data collection and targeted advertising for child users.

7.2 Verifiable Parental Consent

Before collecting personal information from a child, we obtain verifiable parental consent via FTC-recognized methods. No account activation or data collection occurs until VPC is completed.

7.3 Parental Rights

Parents/legal guardians may at any time:

• Review their child's personal information by contacting help@jmmico.com;
• Request correction or deletion of such information;
• Refuse further collection or use by contacting us or deleting the account in-app;
• Consent to collection while prohibiting disclosure to third parties (except as necessary for Service operation); and
• Withdraw consent at any time.

7.4 Additional Rights for California Users Under 16

Under CPRA, we may not sell or share personal information of California residents under 16 without affirmative opt-in consent. For users under 13, such consent must be given by a parent or legal guardian. We do not knowingly sell or share the personal information of users under 16 for cross-context behavioral advertising.

8. App Permissions and Device Access

8.1 iOS Permissions

• Camera: used to capture images or scan content for printing;
• Photo Library: used to select images for printing and save generated results;
• Notifications: used to send print completion alerts and service notices;
• Local Network: used, where required by device setup, to discover or communicate with the thermal printer on the local network.

8.2 Android Permissions

• Camera: used to capture images or scan content for printing;
• Network: used for login, data synchronization, content upload, AI generation, printing, and notifications;
• Storage / Media Access: used to select and save images;
• Notifications: used to send print alerts and service messages.

8.3 Our Principles

We request only the permissions necessary for clearly identified functions, seek to minimize the scope of permissions, do not access unrelated permissions without notice, and you may disable permissions at any time in your device settings.

9. Third-Party SDKs and Services

To support analytics, performance, notifications, content processing, and payment validation, we may integrate third-party SDKs, APIs, or services. The third-party services that collect or maintain children's personal information are identified below, together with their purposes and data practices.

9.1 Firebase / Google Analytics for Firebase

Operator: Google LLC. Purpose: app analytics, crash reporting, performance monitoring. Data collected: device identifiers, usage events, app version, OS version. If enabled for child users, Firebase and Google Analytics for Firebase are configured to disable advertising identifiers and advertising features, limit data collection, and operate only after any required parental consent.

9.2 Cloud Infrastructure

We use cloud infrastructure providers to host and process data, transmit print content, and provide the Service. Data is processed under appropriate data processing agreements.

9.3 AI Services

We may use third-party AI services to generate or enhance print content. These services process data under appropriate agreements and do not use your User Content for model training without your explicit consent.

9.4 Changes to Third-Party Services

As our product, technical architecture, or regulatory requirements evolve, we may add, replace, or remove third-party SDKs or services. If such changes materially affect how personal information is processed, we will notify you through an updated Privacy Policy, in-app notice, or other reasonable means.

10. Data Security

We implement the following administrative, technical, and physical safeguards to protect your personal information:

• Encryption: data in transit is protected using TLS/SSL; data at rest is protected using safeguards appropriate to the sensitivity and risk of the information, which may include encryption;
• Access controls: access to personal information is restricted to authorized personnel on a need-to-know basis and subject to multi-factor authentication;
• Security monitoring: we monitor systems for unauthorized access, anomalous activity, and security incidents;
• Vendor management: we contractually require service providers to implement appropriate security measures.

In the event of a personal data breach, we will notify affected users in accordance with applicable law. For California residents, we will notify affected users in accordance with California Civil Code section 1798.82.

11. International Data Transfers

User data collected through Jmmibox may be processed on servers located in the United States or other countries where our service providers operate. We implement appropriate safeguards for any cross-border data transfers as required by applicable law. If you are located outside the United States, please be aware that your information will be transferred to and processed in the United States or other countries, where data protection laws may differ from your jurisdiction.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If a change materially affects your rights or the way we process your data, we will notify you by email and/or by a prominent in-app notice at least thirty (30) days before the change takes effect. Where a material change involves a new use of previously collected personal information, we will provide a new direct notice and obtain verifiable parental consent where required by COPPA. If you do not agree to the updated Privacy Policy, you must stop using the Service and may request deletion of your account.

13. Contact Us

If you have any questions, comments, requests, or complaints regarding this Privacy Policy, please contact us:

ARTOZIA LIMITED (Brand: Jmmico)
Email: help@jmmico.com
Address: FLAT/RM 185 G/F HANG WAI IND CENTRE NO.6 KIN TAI ST TUEN MUN NT