HiveShorts Privacy Policy

Effective date: 2 October 2026. Last updated: 2 October 2026.

This Privacy Policy explains how Universal Content Group Limited ("UCGL", "we", "us" or "our") collects, uses, shares and protects personal information when you use HiveShorts, our mobile short-drama app, and the related websites and services (together, the "Service"). It also explains the choices and rights you have.

Please read this Policy before using the Service. If you do not agree with it, please do not use the Service. Some laws require us to ask for your consent before we process certain information; where that applies, we will ask you, and you can withdraw your consent at any time (see Section X).

I. Who we are

The Service is operated by Universal Content Group Limited, a company in Hong Kong. For the purposes of data protection law, UCGL is the controller (data user) of the personal information described in this Policy.

Registered address: Room 101A, 1/F, Genplas Industrial Building, 56 Hoi Yuen Road, Kwun Tong, Hong Kong

Email: support@hiveshorts.com

II. Information we collect

The information we collect depends on how you use the Service. We collect it from you, from your device, and from third parties such as the sign-in and payment providers you choose to use.

A. Information you give us

· Account and sign-in details. You can use HiveShorts as a guest, or sign in with Google or Apple. A guest account is created automatically and is identified by an account ID we generate and by a device identifier and a secret key stored on your device (we store only protected, hashed versions of the device identifier and the secret key). If you sign in with Google or Apple, we receive from them your account identifier and, depending on your settings, your name, email address and profile picture. If you choose to add or change a nickname, avatar, email address or other profile details in the app, we store them.

· Feedback and support messages. If you send us feedback, a screenshot or a support request, we collect what you send and your contact details so that we can respond.

· Content you post. If the app lets you post comments or other content, we collect that content and related details such as the time it was posted and your IP address, so that we can display it, keep the Service safe and handle reports.

· Surveys, promotions and invitations. If you take part in a survey, promotion or invite-a-friend feature, we collect the information needed to run it, such as your responses, invite links or codes, and the activity needed to confirm that a reward is due.

B. Information collected automatically

· Device and technical information: IP address, device type and model, operating system and version, app version, language and region settings, network information, device identifiers, and your mobile advertising identifier (Google Advertising ID on Android, or IDFA on iOS if you allow tracking).

· Usage information: the dramas and episodes you watch, watch time and progress, search terms, favourites, likes, viewing history, rewards and tasks you complete (for example check-ins), and how you interact with screens, paywalls and ads.

· Advertising information: whether you were shown, clicked or completed an ad, ad-based unlocks, and which campaign or channel led you to install or open the app.

· Purchase information: the products you buy (for example Hive Coins or a VIP subscription), order and receipt identifiers, price, currency, date and subscription status. Payments are handled by Apple or Google. We do not receive or store your card number, bank account number or payment password.

· Approximate location: we use your IP address to estimate your country or region (for example to show the right language, pricing and content). We do not ask for precise (GPS) location permission.

· Logs and security data: login and request records, error and crash information, and signals used to detect fraud, abuse and fake accounts.

C. Information from third parties

· Sign-in providers (Google, Apple), as described above.

· App stores and payment providers (Apple App Store, Google Play), which confirm that a purchase or subscription is valid and tell us about its status or any refund.

· Attribution and advertising service providers, which tell us which advertising campaign or channel led to an install or purchase.

D. Device permissions

We ask for device permissions only when a feature needs them, for example the camera (only if you scan a QR code), and, on iOS, permission to track you across other companies' apps and websites. You can change these permissions at any time in your device settings. Clipboard content may be read to recognise an invite code or invite link when you open the app from one.

III. How we use information and our legal bases

We use personal information for the purposes below. Where the law requires a legal basis (for example in the UK and EU), we show the basis we rely on.

· To provide the Service: create and manage your account, let you watch content, remember your progress, process purchases and subscriptions, and deliver rewards. Basis: performing our contract with you.

· To provide customer support and respond to your requests, including verifying your identity. Basis: contract; legitimate interests in helping users.

· To keep the Service safe: prevent fraud, abuse, fake invites and unauthorised access, enforce our terms, and fix errors. Basis: legitimate interests; legal obligations.

· To improve and personalise the Service: analyse usage, test features, recommend dramas and tune pricing and paywalls. Basis: legitimate interests; consent where required.

· To show and measure advertising: show ads, give rewards for watching ads, measure which campaigns bring users, and send conversion events to our attribution and advertising partners. Basis: consent where required by law (for example the iOS tracking prompt or EU/UK consent rules); otherwise legitimate interests.

· To communicate with you: service messages, security notices and policy updates, and, where permitted, offers and news. You can opt out of marketing at any time. Basis: contract; legitimate interests; consent where required.

· To comply with law and protect rights: keep records, respond to lawful requests, and establish or defend legal claims. Basis: legal obligations; legitimate interests.

We will not use your personal information for a materially different purpose without telling you and, where required, obtaining your consent.

IV. Cookies, SDKs and similar technologies

The app uses software development kits (SDKs) and device identifiers rather than traditional cookies. Our websites may use cookies and similar technologies that are needed to run them, remember your settings (such as language), keep them secure, and understand how they are used. You can manage cookies in your browser settings. If you block them, parts of our websites may not work properly.

V. Advertising, attribution and your tracking choices

We use attribution and advertising service providers to measure which advertising campaigns lead to installs and purchases and to show ads in the app. To do this they may receive your advertising identifier, device and app information, IP address and in-app events (for example sign-up, viewing a paywall, subscribing, or viewing or completing an ad). Our attribution provider is Singular. Some advertising events may be passed on by our providers to the advertising platforms we run campaigns on.

Under some laws (for example California law), sharing of this kind may be called "sharing" for cross-context behavioural advertising or a "sale" of personal information. We do not sell personal information for money. You can opt out as follows:

· iOS: choose "Ask App Not to Track" in the tracking prompt, or change it in Settings > Privacy & Security > Tracking.

· Android: go to Settings > Privacy > Ads (or Google > Ads) and delete or reset your advertising ID or opt out of ads personalisation.

· Or email support@hiveshorts.com with the subject "Opt out of sharing" and we will act on your request within the time required by law.

Opting out does not remove ads; it limits ad personalisation and measurement.

VI. How we share information

We do not sell your personal information for money. We share it only as follows:

· Service providers who process data on our behalf under contract, including: Google (sign-in, Google Play billing and related services); Apple (Sign in with Apple, App Store in-app purchases); Singular (mobile attribution and measurement); Cloudflare (network security, content delivery and performance, and country-level location signals); and other cloud hosting and storage, analytics, attribution, advertising, payment and customer-support service providers.

· Advertising and attribution partners, as described in Section V.

· Other companies in our group and professional advisers (lawyers, auditors, insurers) where needed.

· Authorities and others, where we believe disclosure is required by law, court order or a valid legal request, or is needed to protect the rights, property or safety of users, us or the public, or to prevent fraud.

· A buyer or successor, if we are involved in a merger, acquisition, financing or sale of assets. We will tell you if your information becomes subject to a different privacy policy.

· Others at your direction or with your consent. If you share content or an invite link through another app (such as a messaging or social app), that app's own policy applies.

Third-party services have their own privacy policies, and this Policy does not cover them. We require our service providers to protect personal information and to use it only for the services they provide to us.

We may share or publish information that has been aggregated or de-identified so that it no longer identifies you.

VII. International transfers

UCGL is based in Hong Kong. Our main servers are located in Singapore, and our service providers operate in several other countries. Your information may therefore be transferred to, stored and processed in countries other than where you live, including countries whose data protection laws may differ from those in your country.

Where the law requires it, we use safeguards for these transfers, such as contracts with standard data protection clauses (for example the EU Standard Contractual Clauses and the UK International Data Transfer Addendum), or other lawful transfer mechanisms. You can contact us for more information about the safeguards we use.

VIII. How long we keep information

We keep personal information only as long as we need it for the purposes in this Policy, or as the law requires.

· Account information, viewing history, rewards and purchase records are kept while your account is active.

· When you delete your account, we delete or anonymise your account data within a reasonable time and in any event within the time required by law, except for the information described in Section XI.

· Purchase, tax and accounting records are kept for the period required by tax, accounting and other laws.

· Security, fraud-prevention and support records are kept for as long as needed to protect the Service and handle claims or disputes.

· Backups and logs are overwritten or deleted on a regular schedule.

· Aggregated or anonymised data that cannot identify you may be kept without a time limit.

If we stop operating the Service, we will notify you and delete or anonymise personal information in line with the law.

IX. Security

We use technical and organisational measures designed to protect personal information, such as access controls, restricted access for staff and service providers who need to know, secure storage of sensitive values (for example hashed guest secret keys), and monitoring for misuse. No system is completely secure, and we cannot guarantee absolute security. Please protect your device, your sign-in accounts and any account details. If you think your account has been compromised, contact us right away. If a data breach affects you, we will notify you and the relevant authorities as the law requires.

X. Your rights and choices

Depending on where you live, you may have some or all of these rights over your personal information:

· Access: ask what personal information we hold about you and get a copy.

· Correction: ask us to correct information that is inaccurate or incomplete.

· Deletion: ask us to delete your personal information (see Section XI).

· Withdraw consent: where we rely on your consent, you can withdraw it at any time. Withdrawal does not affect processing done before then.

· Object or restrict: object to, or ask us to restrict, certain processing, including processing for direct marketing and for advertising.

· Portability: ask for your information in a commonly used, machine-readable format, where the law gives you that right.

· Opt out of sale or sharing of personal information for advertising (see Section V), and not be treated unfairly for exercising your rights.

· Complain to a data protection authority.

To use these rights, email support@hiveshorts.com from the email address linked to your account (or tell us how you sign in) and say what you want. We may need to verify your identity, and an authorised agent may act for you with your written permission. We will respond within the time required by law (for example one month under the GDPR and UK GDPR). We may refuse requests only where the law allows, and we will tell you why.

Regional information

· European Economic Area and United Kingdom (GDPR / UK GDPR): you have the rights above, and you can complain to your local data protection authority.

· California (CCPA/CPRA): you have the right to know, access, correct and delete personal information, to opt out of sale or sharing, and not to be discriminated against. In the past 12 months we may have collected the following categories: identifiers (account ID, device and advertising IDs, IP address, email if provided); commercial information (purchases); internet and app activity; approximate geolocation derived from IP; and inferences used for recommendations. We do not use or disclose sensitive personal information for purposes that require a right to limit.

· Brazil (LGPD): you have the rights provided in the LGPD, including confirmation of processing, access, correction, anonymisation, blocking or deletion, portability, information about sharing, and revocation of consent. You can complain to the Brazilian data protection authority (ANPD).

· Indonesia (Personal Data Protection Law), Vietnam (personal data protection laws) and Thailand (PDPA): we respect the rights these laws give you, such as access, correction, deletion, withdrawal of consent and objection, and we will handle your request as those laws require.

· Hong Kong (Personal Data (Privacy) Ordinance): you can ask for access to and correction of your personal data, and you can ask us to stop using it for direct marketing.

If you live elsewhere, we will still do our best to honour the rights your local law gives you.

XI. Account and data deletion

You can ask us to delete your HiveShorts account and the personal information linked to it at any time. Full instructions are at https://help.hiveshorts.com/delete

How to ask:

1. Email support@hiveshorts.com with the subject "Account deletion request", from the email address linked to your account where you have one. Tell us how you sign in (Google, Apple or guest) and, if you know it, your account ID. For a guest account that was never linked to Google or Apple, include your device model and the approximate date you first used the app so that we can find it.

2. We may ask you to verify that the account is yours.

3. After verification we delete or anonymise your account data, and we will confirm when it is done.

What you should know:

· Deletion is permanent and cannot be undone. Remaining Hive Coins, VIP time, rewards and other purchased or earned rights are lost, without refund except where the law requires.

· Deleting your account or the app does not cancel a subscription. Please cancel in the App Store or Google Play first, or you may continue to be charged.

· We may keep limited information that we must or may keep by law, for example purchase and tax records, records needed to resolve disputes, prevent fraud or enforce our terms, and information that has been anonymised.

· Data held by Apple, Google and other third parties is governed by their policies, and you must ask them separately.

Deleting a Google or Apple sign-in on your device does not delete your HiveShorts account. Where the app lets you remove items from your viewing history, you can do that in the app without deleting your account.

XII. Children

HiveShorts is not for children under 13, and we do not knowingly collect personal information from children under 13. Where the law of your country sets a higher minimum age for using online services or consenting to data processing, you must meet that age.

If you are 13 or older but under 18 (or under the age of majority where you live, if that is higher), you may use the Service only with the consent and supervision of your parent or legal guardian, who should read this Policy and the User Agreement with you. Parents or guardians are responsible for any purchases made on their child's account or device.

If you are a parent or guardian and believe a child has given us personal information without the required consent, please contact us. We will investigate promptly and delete the information and any related account where appropriate.

XIII. Changes to this Policy

We may update this Policy from time to time, for example when our practices, the Service or the law change. We will post the updated Policy with a new "Last updated" date. For material changes, we will notify you in the app, by email where we have your address, or by another appropriate method before the changes take effect. If the law requires your consent to a change, we will ask for it. Please review this Policy regularly. If you do not agree with the changes, you should stop using the Service and may delete your account.

XIV. Contact us

If you have questions, requests or complaints about this Policy or our handling of personal information, contact:

Universal Content Group Limited

Email: support@hiveshorts.com

Registered address: Room 101A, 1/F, Genplas Industrial Building, 56 Hoi Yuen Road, Kwun Tong, Hong Kong

Support site: https://help.hiveshorts.com

We will reply as soon as we reasonably can. If you are not satisfied with our response, you may contact your local data protection authority, such as the Office of the Privacy Commissioner for Personal Data in Hong Kong.