PRIVACY POLICY FOR XYN Applications

(i) Contact information

Such as: Name, Company and email address

(ii) Account Information

If you have a Sony account (XYN account), your log-in information and registered account information (including email address, date of birth, country/region, and language preferences). For more information about Sony account (XYN account), please go;URL

Please be aware that some Sony accounts for other Sony group services will be linked automatically if you use the same sign-in ID and password. For more information about linking accounts, please go: https://acm.account.sony.com/linking-account

For password management and authentication, you can also register a security question and answer and telephone number at the XYN account security setting page. This Collected Data is not used for any other purpose.

When you sign in to Google account or Microsoft account, SONY will receive account information (including your name, email address) necessary for authentication and authorization for use of the Service from Google LLC and Microsoft Corporation.

(iii) User ID set by Sony

Identifier managed by Sony for the purpose of uniquely identifying you.

(iv) Information regarding the settings and usage of the Service:

Pictures uploaded by you, 3D models created by the Service, and their related information such as metadata

Usage logs of the Service, including usage time

Information about the device you use to access the Service (e.g., device model name)

Other information related to the settings, operation, and any errors/malfunction of the Service, including information collected through Firebase Crashlytics

(i) Providing the Service

SONY and SONY Affiliates use the Collected Data to operate and provide the features/ functions of the Service (including distribution of updates).

(ii) Business planning and forecasting

SONY and SONY Affiliates use the Collected Data to formulate business strategy and conduct internal analysis for the purpose of understanding market and customer trend, region specific characteristics, and preliminary study of product/service improvement/development. For clarity, this does not include actual general marketing and targeted advertising.

SONY may use the Collected Data to ask you whether you would like to participate in one of our surveys for this purpose. You can decide not to participate in the survey by closing the browser or tabs of the survey at any point during the survey.

(iii) Service improvement

SONY collects and analyzes the information collected through Firebase Crashlytics to detect errors in order to improve and develop the Service.

If you give us consent, SONY and SONY Affiliates use the Collected Data to improve and develop the SONY products and services. For this purpose, SONY will use Google Analytics for Firebase provided by Google LLC.

(iv) Sending emails with news, offers, recommendations and surveys

With your consent where required:

We may send you emails with news, offers, and recommendations regarding Sony Group Company products, services and other offerings that may be of interest to you.

We may send voluntary questionnaires and surveys.

You can unsubscribe from receiving email marketing at any time using the “unsubscribe” link in such email or contacting us as described in Section 9 below.

(i) SONY Affiliates

The Collected Data may be shared with and used by other SONY Affiliates for providing the services or to pursue the activities related to the purposes set out in this Privacy Policy.

(ii) Service providers

SONY and SONY Affiliates may use third party service providers to process the Collected Data on our behalf for the purposes set out in this Privacy Policy. Such third parties include IT service providers, email vendors, customer service providers and data hosting providers. One of our hosting providers is Microsoft Corporation providing us with Microsoft Azure as our processor. The Collected Data may be stored on Microsoft Azure servers in Japan.

We may also disclose the Collected Data to Google LLC providing us with Google Analytics for Firebase and Firebase Crashlytics. (https://policies.google.com/privacy?hl=en-US) to analyze the Collected Data as our processor.

(iii) Business transfer

In the event that SONY or SONY Affiliates sell or transfer a portion or all of its business or engage in a corporate reorganization, the Collected Data may be transferred by SONY or such SONY Affiliates to the purchasing or acquiring entity or other SONY Affiliates as part of the transaction, including any due diligence process connected to the sale or transfer.

(iv) Government Authorities/ Law Enforcement Officials

The Collected Data may be disclosed to government authorities and/or law enforcement officials if required by the applicable laws.

(v) Other Unaffiliated Third Parties

We may disclose the Collected Data to auditors or similar external consultants like lawyers or tax advisors, to defend and exercise our legal rights (e.g., enforcing compliance with the terms of use) and as we believe necessary to comply with our legal obligations. SONY may disclose any of the Collected Data if required or permitted by law, regulation or order, or if we believe in good faith that disclosure is reasonably necessary for us to protect or enforce the rights, property, safety or security of ourselves or others, to third parties including government authorities and law enforcement officials, and auditors and similar external consultants like lawyers and tax advisors.

(i) Notice to Residents of U.S. States (including but not limited to: VA, CO, CT, MT, IA, DE, UT, TN, TX, and, OR, MN, MD, NH, NJ, KY, IN and RI; but excluding California)

We set forth in our Privacy Policy and Table 1 the categories of personal data we process, the purpose for processing personal data, the categories of personal data shared, and the categories of third parties with whom personal data is shared.

Consumers in certain states with comprehensive privacy laws may have the following rights:

• Right to Know and Access. The right to confirm whether we are processing personal data about you and to access such data. Residents in certain states may also obtain a list of third parties with whom we have shared personal data.

• Right to Correct. The right to correct inaccurate Personal Data we hold about you.

• Right to Delete. The right to delete the Personal Data provided by you or obtained about you.

• Right to Data Portability: The right to obtain a copy of the Personal Data previously collected by us and, to the extent feasible, in a readily usable format to allow data portability.

• Right to Appeal. If for any reason you would like to appeal a decision made by us relating to your request to exercise privacy rights, you have the right to submit an appeal to us. Please include your full name, the basis for your appeal, and any additional information to consider.

If you would like to submit a request to exercise one of the rights listed above, you can do so by completing this form: Data Requests

• Right to Opt-Out of Targeted Advertising and “Sales”. SONY engages in online advertising and analytics practices that may be considered “targeted advertising” or a “sale” of data under applicable state law. To submit a request to opt-out, click here: Opt-out request

  In addition, please ensure that any “Targeting Cookies” are disabled via “Manage Cookies” for any of our websites that you visit. If you have enabled an opt-out preference signal on your browser or extension, we will honor such requests that our websites can recognize.

• Right to Opt-Out of Automated Decision Making and Profiling. While some state laws may permit you to opt-out of automated decision making and profiling in furtherance of decisions that produce legal or similarly significant effects, we do not engage in either of these activities at this time.

(ii) Notice to California Residents: California Privacy Notice

This California Privacy Notice is effective as of March 23, 2026.

This California Privacy Notice supplements our Privacy Policy and sets forth the disclosures and rights for California Consumers regarding their personal information, as required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and any implementing regulations adopted thereunder (“CPRA”). Terms (including defined capitalized terms) used in this California Privacy Notice have the same meanings given in the CPRA, unless otherwise defined.

California Consumer Rights. Subject to certain exceptions, as a California consumer, you may have the following rights regarding your Personal Information:

• Right to Know. Request information regarding what Personal Information we collect, use, disclose, and sell, including the right to request that we provide you with the categories and /or specific pieces of Personal Information we have collected about you.

• Right to Delete. Request deletion of the Personal Information we collect about you.

• Right to Correct. Request correction of inaccurate Personal Information that we maintain about you.

“Do Not Sell or Share My Personal Information.” You have the right to opt-out of the “sale” of your Personal Information or the “sharing” of your Personal Information to a third party for cross-context behavioral advertising (i.e., targeted advertising).

“Limit the Use and Disclosure of Sensitive Personal Information.” Under the CPRA, a business must provide the Right to Limit the Use and Disclosure of Sensitive Personal Information when Sensitive Personal Information is collected or processed for the purpose of inferring characteristics about a consumer or does not fall under certain statutory exceptions. SONY’s processing of Sensitive Personal Information falls under permitted exceptions, and we therefore do not offer this right at this time.

Agents. If you are an authorized representative submitting a request on a consumer’s behalf, please complete the applicable request per the instructions below. We will follow up to request a signed, written permission signed by the individual who is the subject of the request authorizing you to make the request on their behalf. The written permission must state your full legal name, the full legal name of the individual who is the subject of the request, and a clear description of the permission granted. Alternatively, you may submit a copy of a power of attorney under applicable state law. In either case, please also indicate in your email the nature of your request. The consumer’s identity, in addition to your own, will need to be independently verified in order for us to be able to fulfill your request. We may also ask the consumer to directly confirm with us that they provided you permission to submit the request. Please keep in mind that if we do not receive adequate proof that you are authorized to act on the consumer’s behalf, we may deny the request.

Verifying Requests. In your request, you must provide enough information to allow us to verify you are the person about whom we collected Personal Information, or their authorized representative. You must also describe your request with enough detail so that we can understand, evaluate and respond to it. We will only use the information you provide in a request to verify your identity.

When you exercise your Right to Know, Right to Delete, and/or Right to Correct, we may ask that you provide us with additional information in order to verify your identity and fulfill your request. If we are unable to verify your identity, we will not be able to process the request.

Exercising Your Rights.

• Right to Know; Right to Delete; Right to Correct. If you are a California Consumer and would like to exercise your Right to Know, Right to Delete, and/or Right to Correct, please submit your request at: Data Requests; or you may call us toll-free at 1-833-681-9900.

• Right to Opt-out of Sales and Sharing If you are a California Consumer and would like to submit a request to opt-out of the “sale” or “sharing” of your personal information, click here: Opt-out request

  In addition, please ensure that any “Targeting Cookies” are disabled via “Manage Cookies” for any of our websites that you visit. If you have enabled an opt-out preference signal on your browser or extension, we will honor such requests that our websites can recognize.

Data Retention.

SONY will keep the Collected Data for as long as it is necessary for the relationship with you and the purposes detailed in Section 2 or otherwise permitted or required under applicable law.

SONY may retain the Collected Data for an appropriate period to protect ourselves from legal claims, to administer our business, or to the extent permitted by applicable law, which may require us to hold the relevant Collected Data for specific periods.

Data Reporting.

Click here to access our data reporting metrics for the previous calendar year.

• Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights. California Consumers have the right to not receive discriminatory treatment for exercising CPRA rights. We will not discriminate against you for exercising your CPRA rights.

Notice of Financial Incentive.

Under California regulations, if we offer certain loyalty or similar program(s) directly or reasonably related to the collection, retention or deletion of your Personal Information, such program may be considered a “financial incentive”. In such case, we will be required to make additional disclosures to you, which we will provide when you agree to participate.

Personal Information We Collect & Purposes for Collection.

The Personal Information we collect about you will depend upon how you use the Service. Accordingly, we may not collect all of the below information about you. In addition to the below, we may collect and/or use additional types of information and will do so after providing notice to you and obtaining your consent to the extent such notice and consent is required by applicable law.

We may have used Personal Information for the business or commercial purposes described in Table 1:

[Table 1]

(iii) Notice to Nevada Residents

If you are a Nevada resident, you have the right to opt-out of the sale of certain personally identifiable information we have collected about you to third parties. SONY does not currently sell your personally identifiable information as those terms are defined under Nevada law. However, if you wish to submit a request to opt-out of the sale of such information if Sony were to engage in such a sale in the future, you may submit your request in writing to: SonyElectronicsPrivacy@sony.com. Your request must reference “Your Nevada Rights –“XYN Spatial Scan” and include your name, mailing address, zip code, and email address. We are not responsible for requests that do not come through the designated request mechanism or do not contain sufficient information to allow us to process your request. We will respond to valid requests within 60 days.

Last Updated and Effective: March 23, 2026