Privacy Policy

Last updated: June 6, 2025

This Privacy Policy (“Privacy Policy”) explains how Ducky Lucky Logistics Co., Ltd. (“Yangyuen” or “we”) collects, uses, discloses, and manages your personal data, including information related to your use of our services. This Privacy Policy applies to personal data we collect from you when you use our services, including websites, applications, and other services operated by Yangyuen. We are committed to protecting your personal data seriously and will comply with applicable data protection laws, including Thailand’s Personal Data Protection Act (PDPA) and other relevant laws. This Privacy Policy describes the information we collect, how we use such information, and your rights to control your personal data. We recommend that you read this Privacy Policy carefully to understand how we handle your personal data. If you have any questions or concerns about this policy, you can contact us using the information provided below. This Privacy Policy may be updated or changed in the future, and we will notify you of such changes through our website or application. By using our services, you accept this Privacy Policy. If you do not agree with this policy, please do not use our services.

1. About Us

The “Yangyuen” platform is designed to support activities and promote sustainable behaviors by incentivizing target groups with tokens. This concept aligns with ESG principles. The use of blockchain technology ensures transparency, reliability, auditability, and scalability for activities that strengthen business sustainability. All data is managed under this Privacy Policy (“Data Controller”). Our company is located at the address below.

2. Data Collection

We collect information from your use of our services, such as access history, details about your activities, locations where you participate in activities, and other information. For more details about the data we collect, please see below. When you use our services, you provide us with certain information, including:

• Information you use to log in and other basic information such as name, surname, display name, age range, gender, email, mobile phone number, and at least a profile picture, which you must provide when creating an account to access our services.
• When you want to change your profile picture, you may allow us to access your device’s camera or photo library.
• When you register or participate in activities, we may collect information you provide during those processes.

When you use our services, we also collect information about how you use the services and about the devices you use to access our services, including:

• We collect information about your activities within our services, such as login dates and times, activity registrations, all types of token transfer transactions, and marketplace redemptions.
• We collect your exercise data such as step count, calories burned, and sleep duration. We will request your permission to access data from Apple Health, Health Connect, Garmin, or Fitbit applications to process this data for token distribution. We will only process data from these applications.
• We collect data from and about the devices you use to access our services, including:
  • Hardware and software information such as IP address, device type and ID, device-specific information such as app settings and characteristics, app crashes, advertising IDs (e.g., Google’s AAID and Apple’s IDFA, both of which are randomly generated and can be reset in your device settings), browser type, version and language, operating system, time zone, cookie identifiers, or other technologies that can uniquely identify your device or browser (e.g., IMEI/UDID and MAC address).
  • Wireless and mobile network connection information such as network provider and signal quality.
  • Device sensor information such as accelerometer, gyroscope, and compass.
• You may allow us to verify your location to confirm your participation in activities. We may collect background location data when you are not actively using our services. If you deny our permission request, we will not collect your data; however, some services may not function fully. We may also request access to your gallery and camera for uploading your photos.

3. Types of Personal Data Collected

We collect personal data you provide directly to us and data we collect from your use of our services. The personal data we collect includes:

• Personal information such as name, surname, etc.
• Contact information such as address, mobile phone number, email, etc.
• Account information such as user account, usage history, etc.
• Transaction information such as token transfer history, token redemption, etc.
• Technical information such as IP address, Cookie ID, Wallet ID, Google ID, Facebook ID, website and application usage history (Activity Log), etc.
• Other information such as birth month and year, display name, shipping name, photos, animations, step count, calories burned, etc.

Sleep duration and any other information considered personal data under data protection laws.

4. Processing of Personal Data

We collect, use, or disclose your personal data for the following purposes:

• To create and manage user accounts
• To deliver products or services
• To improve products, services, or user experience
• For internal company administration
• For marketing and promotional purposes
• For after-sales service
• To collect feedback
• To process payments for products or services
• To comply with terms and conditions
• To comply with laws and regulations of government agencies

5. Disclosure of Personal Data

We are an application that allows you to participate in activities that promote sustainability and personal health. Therefore, we share minimal information about you. The information we share is usually about you, and we also share certain user information with service providers and partners who assist us in providing these services. You can see details of these entities below.

• Sharing with others
  We display your name and profile picture set in your Yangyuen account publicly, including your activity rankings and exercise scores on the leaderboard. You can change your display name and profile picture as long as they do not contain nudity, sexual content, violence, hate speech, personal information, sexual harassment, fraud, impersonation, copyright or trademark infringement, or any illegal content. If you do not want your profile picture displayed publicly, you can set this in your “User Profile” settings, and your public profile picture will be replaced with our default image.
• Sharing with our service providers and partners
  We may use external services to help operate and improve our services. These organizations assist us in areas such as data hosting and system improvement, marketing analytics, advertising, payment processing, and security. We prioritize your privacy. All our service providers and partners must agree and sign confidentiality and personal data protection agreements.
• Sharing for corporate changes
  We may transfer your data if we are involved, in whole or in part, in a merger, business sale, acquisition, divestiture, restructuring, reorganization, closure, bankruptcy, or other change of ownership or control.
• Sharing as required by law
  We may disclose your information as required by law, court order, or other regulations, and in the following cases: (a) disclosure helps reduce liability in litigation; (b) as necessary to protect our legal rights and those of our users, business partners, or others; (c) to enforce our agreements with you; (d) to investigate, prevent, or otherwise address illegal or harmful activities that have occurred or are suspected to occur; (e) when requested by government or public authorities for national administration purposes.
• Sharing under your consent or request
  In some cases, we may share your information with external organizations when necessary. We will inform you why we need and want to share your information. We may also use and share indirectly identifiable information with external organizations for the purpose of developing and displaying targeted advertising on our services. Such information includes device data, behavioral data, or geographic location data.

6. Transfer of Personal Data Abroad

We may disclose or transfer your personal data to individuals, organizations, or servers located abroad. We will take measures to ensure that the destination country has adequate personal data protection standards or as otherwise required by law.

7. Tools to Manage Your Rights

You can control the data we collect through the following tools:

• Profile update tools You can access and update your name and profile picture using the tools available in the application.
• Device permission settings You can control access to certain functions on your device under “Settings.” However, restricting certain permissions may cause the application to not function fully.
• Uninstalling the application If you uninstall our app, we will no longer be able to collect your data. If you uninstall the application from your mobile device, the system will still retain your device identifier. When you reinstall the application on the same device, this identifier allows us to recognize your device and related transactions and activities, except for the PIN code, which must be reset each time you reinstall the application.

If your country has privacy or data protection laws that grant you the right to access or review your data held by us, you may request a copy of your personal data by contacting us as described at the end of this Privacy Policy and providing proof of identity. However, we may deny your request if we determine that it is contrary to law or infringes on trade secrets, intellectual property, or the privacy of others.

8. Security of Personal Data

We will maintain the security of your personal data according to the principles of confidentiality, integrity, and availability to prevent loss, access, use, alteration, modification, or disclosure. We will implement administrative, technical, and physical safeguards regarding access or control of personal data (access control).

9. Data Retention

We will retain your personal data for as long as necessary for business and legal purposes and as permitted by applicable law. Please note that due to technical limitations, we cannot guarantee or specify an exact period for deleting all data or making your data completely anonymous.

10. Data Subject Rights

Under data protection laws, you have the following rights:

• Right to withdraw consent If you have given consent, we will collect, use, or disclose your personal data, whether the consent was given before or after the data protection law came into effect. You have the right to withdraw your consent at any time.
• Right to access You have the right to access your personal data under our responsibility and request a copy of such data, including asking us to disclose how we obtained your personal data.
• Right to data portability You have the right to receive your personal data in a machine-readable format and to request that we transfer such data to another data controller when technically feasible.
• Right to object You have the right to object to the collection, use, or disclosure of your personal data at any time if such processing is based on our legitimate interests or those of others, except where it is necessary for public interest tasks.
• Right to erasure/destruction You have the right to request deletion or destruction of your personal data or to make it anonymous if you believe your data has been collected, used, or disclosed unlawfully, or if we no longer need to retain it for the purposes stated in this policy, or when you have exercised your right to withdraw consent or object as stated above.
• Right to restriction of processing You have the right to request temporary suspension of the use of your personal data while we are verifying your request for rectification or objection, or in other cases where we are required by law to delete or destroy your data but you request restriction instead.
• Right to rectification You have the right to request correction of your personal data to be accurate, current, complete, and not misleading.
• Right to lodge a complaint You have the right to complain to the relevant authorities if you believe the collection, use, or disclosure of your personal data violates applicable laws.

You can exercise your rights as a data subject by contacting our Data Protection Officer as detailed at the end of this policy. We will notify you of the result within 30 days from the date we receive your request, according to our specified procedures. If we deny your request, we will inform you of the reason via various channels such as SMS, email, or application.

11. Minors

If you are under 20 years old or have legal incapacity, we may collect, use, or disclose your personal data only with parental or guardian consent or as permitted by law. If we learn that personal data has been collected from minors without parental or guardian consent, we will delete such data from our servers.

12. Advertising and Marketing

We may send information or newsletters to your email for the purpose of offering you interesting content. If you no longer wish to receive communications from us via email, you can click “unsubscribe” in the email link or contact us directly.

13. Tracking Technologies (Cookies)

To enhance your experience, we use cookies or similar technologies to improve access to products or services, deliver relevant advertisements, and track your usage. We use cookies to identify and track website users and their access to our website. If you do not want cookies stored on your computer, you can set your browser to refuse cookies before using our website.

14. Policy Changes

Our policy may be updated periodically to comply with applicable laws, business practices, and other guidelines. We will notify you before making any changes that may affect your legal rights and obligations, so you can review them before they take effect. If the changes do not affect your legal rights and obligations, we will notify you after the changes are made.

15. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, you can contact us or our Data Protection Officer as follows: