Children's Privacy Rules

1. If you are a parent or other guardian, please read these Rules and the Privacy Policy together with your child.
2. Before a child uses the Service or provides us with any personal information, a guardian's consent must be obtained. If you do not consent, please have your child stop using the Service.
3. If a child has already used the Service without your consent, contact us using the details at the end of these Rules and we will delete the relevant information at your request.

We do not build any child-specific features and do not collect any additional information. When a child uses the Service, the categories collected are identical to those for adult users (see Section 1 of the Privacy Policy):

We never ask children for information unrelated to the Service (such as ID numbers, school, home address or a guardian's occupation).

1. No targeted push: we do not use children's personal information for commercial personalization or targeted advertising. The Service contains no third-party advertising at all.
2. No profiling for marketing: usage events are used only to understand feature usage and improve the product, never for marketing to minors.
3. No public display: sharing has been retired from the Service; there is no route that publishes user content to the open internet.
4. No sale or rental: we do not sell or rent any user's personal information, children included.

1. Storage location: identical to adult users — China-version data is stored within mainland China; international-version data is stored in Canada and on global CDN nodes. See Section 5 of the Privacy Policy.
2. Retention: kept while the account exists; deleted immediately and irreversibly upon account deletion.
3. Security measures: HTTPS in transit, database access controls, token-based authentication and least-privilege access.
4. Internal controls: staff access follows the principle of least privilege, and key operations leave an audit trail.

As a child's guardian, you may:

1. Access the child's personal information that we hold;
2. Correct inaccurate information (nickname, avatar and bio can be edited directly in the App);
3. Delete the child's personal information;
4. Withdraw consent at any time, including by turning off camera, photo library, location and notification permissions in system settings;
5. Delete the account via My → Delete Account in the App; on submission we immediately delete all data associated with that account.

How to exercise these rights: act directly in the App, or email support@livenforest.com. To protect the child, we may need information to verify the guardian relationship; once verified we will act within 15 working days.

1. The third-party services we use (AI models, object storage, sign-in providers) are itemized in Section 3 of the Privacy Policy and are exactly the same for children as for adults.
2. AI services: identification, care guidance and guardian replies are generated by third-party large models. Content is sent for immediate processing and discarded afterwards; it is not retained by the provider. AI output is for reference only — for safety-related matters such as plant toxicity or edibility, guardians should verify independently and supervise accordingly.
3. We require all third parties to process data only as necessary to provide the Service and for no other purpose.

If we learn that we have collected a child's personal information without guardian consent, we will delete it as soon as possible. Where deletion is not possible (for example because of a statutory retention obligation), we will cease all processing other than storage and necessary security measures.

For questions about these Rules, or to exercise the rights above on a child's behalf:

• Email: support@livenforest.com
• Website: https://livenforest.com/contact
• Response time: within 15 working days of receiving your request.

If you are not satisfied with the outcome, users in mainland China may complain to the Cyberspace Administration of China, the Ministry of Industry and Information Technology, or their local market regulator; users elsewhere may complain to their local data protection authority.