Certain US states have enacted comprehensive privacy laws that provide residents with specific rights regarding their personal information. If your state is listed below, this document provides important information about your privacy rights under applicable state law. We encourage you to review this information carefully in conjunction with our Privacy Policy to understand your options and make informed decisions about your personal data.

1. California California Notice at Collection

This notice explains how we collect, store, protect, and share your information, and with whom we share it. Please note that not all categories listed below may apply to your specific situation. For example, financial information is only collected if you make a purchase from us.

1. Categories of Personal Information

When accessing or using Tumile on our website or application, we may collect the following categories of personal information and sensitive personal information as defined by the California Consumer Privacy Act (CCPA):

• Identifiers, such as name and location
• Personal information as defined in the California customer records law, such as contact information (including email and telephone number) and financial information
• Characteristics of protected classifications under California or federal law (if you choose to provide them), such as age, gender identity, marital status, sexual orientation, race, ancestry, national origin, religion, and medical conditions
• Commercial information, such as transaction information and purchase history
• Biometric information
• Internet or network activity information, such as browsing history and interactions with our sites and application
• Geolocation data, such as mobile device location
• Audio, electronic, visual, and similar information, such as photos and videos
• Professional or employment-related information, such as work history and prior employer
• Non-public education information
• Inferences drawn from any of the personal information listed above to create a profile or summary about an individual's preferences and characteristics

Categories of sensitive personal information include account login credentials and passwords, financial data or other credentials allowing access to your account, biometric information, and any other sensitive personal information you may provide in your account or post about yourself.

2. Purposes for Collection

• To provide you with the Tumile social networking service
• To facilitate networking opportunities on the Tumile application
• To verify your identity, prevent fraud, and ensure the safety and security of users
• To process payments for premium services (not applicable for users making payments via the Apple App Store)
• To send marketing information about our events, offers, and services
• To conduct research and analysis to improve the application and test new technologies and processes designed to enhance user experience
• To respond to correspondence and queries submitted to us, including social media queries
• To investigate and block users for reported violations of our Terms and Conditions of Use
• To enhance user experience on the application
• To enable users to create and enhance their Tumile profile and log into the application via third-party accounts
• To block payment transactions as part of our anti-fraud procedures
• To serve promotional cards and advertisements on the application
• To serve advertisements on third-party networks and measure advertising effectiveness
• To contact you to conduct surveys for research purposes, obtain feedback, and determine interest in marketing campaigns
• To enable video and audio call functions and the sending of images and video
• To defend legal claims, protect legal rights, and protect people from harm

3. Selling or Sharing Personal Information

The CCPA requires businesses that sell personal information, as the term is defined under the CCPA, to provide an opt-out mechanism. Some interpretations suggest that when a website uses third-party cookies or similar technology for analytics or advertising purposes, the website may be engaged in a sale under the CCPA if third parties have some ability to use, disclose, or retain data to improve their service or take steps beyond the narrowly defined bounds of merely providing their service. This interpretation may apply even when the website pays the third party and typically merely provides an opportunity to collect data directly rather than providing personal information to the third party.

As part of these analytics and advertising services, these technologies may access identifiers (such as IP addresses), internet or other electronic network activity information (such as browsing interactions on our services), and commercial information (such as the fact that a browser visited a page directed to people considering use of our services). While we do not believe these constitute sales as defined under the CCPA, you may opt out of this activity. You can opt out by visiting the "Do Not Sell or Share My Personal Information" link available on our website homepage or in the Privacy Settings of our application.

The CCPA also requires businesses that share personal information to provide an opt-out mechanism. Under the CCPA, sharing is defined as targeting advertising to a consumer based on that consumer's personal information obtained from the consumer's activity across websites. We share information for these purposes to provide more relevant and tailored advertising regarding our services.

As part of this advertising, we may share identifiers (such as IP addresses and email addresses), internet or other electronic network activity information (such as browsing interactions on our site), and commercial information (such as the fact that a browser visited a page directed to people considering a subscription to our services) with advertising platforms and networks. You can opt out of any activities that may be considered selling or sharing by clicking "Do Not Sell or Share My Personal Information" on our website homepage or in the Privacy Settings of our application.

4. Data Retention

We retain your personal information only as long as necessary for the legal basis relied upon and as permitted by applicable law.

California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) requires us to disclose information regarding the categories of personal information and sensitive personal information we have collected about California consumers, the categories of sources from which the information was collected, the business or commercial purposes for which the information was collected, and the categories of parties to whom we disclose personal information.

Throughout our Privacy Policy, we describe the specific pieces of personal information and sensitive personal information we collect, the sources of that information, and how we disclose it. Under the CCPA, we must also provide you with the categories of personal information and sensitive personal information we collect and disclose for business or commercial purposes. The categories are identical to those listed in Section 1 above under "Categories of Personal Information."

The purposes for which we use your personal information and the sources of that information are described in the main Privacy Policy. We describe our information disclosure practices, including disclosure to third parties as defined by the CCPA, in the Privacy Policy.

Rights of California Residents

California residents have the following rights under the California Consumer Privacy Act (CCPA) in addition to those listed in our Privacy Policy, and you have the right to be free from unlawful discrimination for exercising your rights under the Act:

• Right to request that we disclose certain information and explain how we have collected, used, and shared your personal information over the past 12 months
• Right to request that we correct inaccurate personal information we maintain about you
• Right to request that we delete your personal information collected from you, subject to certain exceptions

Certain information may be exempt from such requests under applicable law. We require certain types of information to provide the application and sites to you. If you request deletion of such information, you may no longer be able to access or use the application and sites.

To exercise any of the rights listed above, please email our Data Protection Officer at dpo@tumile.me. You may be required to verify your identity before we fulfill your request. We may request additional information from you to match with our existing records to verify your identity, depending on the nature of the request and the sensitivity of the information sought. You may also designate an authorized agent to make a request on your behalf. To do so, you must provide us with written authorization or a power of attorney signed by you for the agent to act on your behalf. You will still need to verify your identity directly with us.

Sales and Sharing

The CCPA requires businesses that sell personal information to provide an opt-out mechanism. As discussed above, some interpretations suggest that when a website uses third-party cookies or similar technology for analytics or advertising purposes, this may constitute a sale under the CCPA if third parties have some ability to use, disclose, or retain data to improve their service. While we do not believe these are sales as defined under the CCPA, you can opt out of this activity by visiting the "Do Not Sell or Share My Personal Information" link.

The CCPA also requires businesses that share personal information to provide an opt-out mechanism. Under the CCPA, sharing is defined as targeting advertising to a consumer based on that consumer's personal information obtained from the consumer's activity across websites. To opt out of such sharing, please visit the "Do Not Sell or Share My Personal Information" link.

Please note that we also respond to and abide by opt-out preference signals sent through the Global Privacy Control. Any opt-out preferences you have exercised will only apply to the specific device and browser on which you made them. For more information on how to use the Global Privacy Control, visit www.globalprivacycontrol.org.

We do not knowingly sell or share the personal information of children under 16 years of age.

Sensitive Personal Information

The CCPA allows you to limit the use or disclosure of your sensitive personal information as defined in the CCPA if used for certain purposes. Please note that we do not use or disclose sensitive personal information other than for purposes for which you cannot opt out under the CCPA.

Retention of Personal Information

See our Privacy Policy for information regarding retention of personal information.

Notice of Financial Incentive

We may provide certain rewards or incentives for providing your email address or referring friends and contacts, and may occasionally conduct sweepstakes and contests where participants may provide personal information in return for a chance to win or compete for prizes. Additionally, from time to time, as part of a joint promotion with a third party, we may, if you participate in such a promotion, disclose your contact information to the third party to allow them to market their products or services to you. Where this is a condition for participation in a promotion, we will inform you before you enter the promotion. Please follow instructions provided to you by third parties to unsubscribe from their messages.

You can opt into these incentives, sweepstakes, contests, or promotions by taking the requested action. Your participation is completely voluntary, and you have the right to withdraw from these incentives at any time. If you decide not to participate in these financial incentives, you can refrain from taking the requested actions.

The specific reward or incentive offered, if any, is made available to you when you provide the requested information or submit a review. The monetary value of the reward or incentive is a reasonable approximation of the monetary value of the information you provide us. We have arrived at this estimate based on consideration of multiple factors, including: (1) revenue generated by us in developing insights about our customers; (2) expenses incurred by us in operating the incentives; and (3) our reasonable assessment of revenue we may generate as a result of referrals or other personal information provided to us by our users.

Shine the Light

California's Shine the Light law, Civil Code Section 1798.83, requires certain businesses to respond to requests from California customers asking about the businesses' practices related to disclosing personal information to third parties for the third parties' direct marketing purposes. If you wish to inquire about any rights you may have under California Civil Code Section 1798.83, you can contact us at Dpo@tumile.me.

2. Colorado

Colorado law provides Colorado residents with the following rights:

Right to Access

You have the right to know and see what personal data we have collected about you in a usable format.

Right to Delete

You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.

Right to Correct

You have the right to request that we correct inaccurate personal data.

Right to Opt Out of Targeted Advertising and Sale of Personal Data

You have the right to opt out of targeted advertising and the sale of your personal data as defined under Colorado law.

Exercising Your Colorado Privacy Rights Making Access, Deletion, and Correction Requests

Certain information may be exempt from such requests under applicable law. We require certain types of information to provide the application and sites to you. If you request deletion of such information, you may no longer be able to access or use the application and sites.

To exercise any of the rights listed above, please email our Data Protection Officer at dpo@tumile.me. You may be required to verify your identity before we fulfill your request. We may request additional information from you to match with our existing records to verify your identity, depending on the nature of the request and the sensitivity of the information sought. You may also designate an authorized agent to make a request on your behalf. To do so, you must provide us with written authorization or a power of attorney signed by you for the agent to act on your behalf. You will still need to verify your identity directly with us.

Making Requests to Opt Out of Targeted Advertising or Sale of Personal Data

To submit a request to opt out of targeted advertising or the sale of your personal data, you may click on the "Do Not Sell or Share My Personal Information" link in our website footers or in our application settings. We also respond to and abide by opt-out preference signals sent through the Global Privacy Control.

Authorized Agents

You may designate an authorized agent to make a request on your behalf. To do so, you must provide us with written authorization or a power of attorney signed by you for the agent to act on your behalf. You will still need to verify your identity directly with us.

To exercise any of your rights listed above, make an appeal of our decision regarding the exercise of your rights, or ask a question about our privacy policies, please email our Data Protection Officer at dpo@tumile.me.

3. Connecticut

Connecticut law provides Connecticut residents with the following rights:

Right to Access

You have the right to know and see what personal data we have collected about you in a usable format.

Right to Delete

You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.

Right to Correct

You have the right to request that we correct inaccurate personal data.

Right to Opt Out of Targeted Advertising and Sale of Personal Data

You have the right to opt out of targeted advertising and the sale of your personal data as defined under Connecticut law.

Exercising Your Connecticut Privacy Rights Making Access, Deletion, and Correction Requests

Certain information may be exempt from such requests under applicable law. We require certain types of information to provide the application and sites to you. If you request deletion of such information, you may no longer be able to access or use the application and sites.

To exercise any of the rights listed above, please email our Data Protection Officer at dpo@tumile.me. You may be required to verify your identity before we fulfill your request. We may request additional information from you to match with our existing records to verify your identity, depending on the nature of the request and the sensitivity of the information sought. You may also designate an authorized agent to make a request on your behalf. To do so, you must provide us with written authorization or a power of attorney signed by you for the agent to act on your behalf. You will still need to verify your identity directly with us.

Making Requests to Opt Out of Targeted Advertising or Sale of Personal Data

To submit a request to opt out of targeted advertising or the sale of your personal data, you may click on the "Do Not Sell or Share My Personal Information" link in our website footers or in our application settings. We also respond to and abide by opt-out preference signals sent through the Global Privacy Control.

Authorized Agents

You may designate an authorized agent to make a request on your behalf. To do so, you must provide us with written authorization or a power of attorney signed by you for the agent to act on your behalf. You will still need to verify your identity directly with us.

To exercise any of your rights listed above, make an appeal of our decision regarding the exercise of your rights, or ask a question about our privacy policies, please email our Data Protection Officer at dpo@tumile.me.

4. New Jersey

Pursuant to the New Jersey Internet Dating Safety Act, Tumile may perform background screenings on its community members as defined by New Jersey law.

https://www.njconsumeraffairs.gov/statutes/internet-dating-safety-act.pdf

If an Internet dating service conducts criminal background screenings on all of its communicating members, then the service shall disclose, clearly and conspicuously, to all New Jersey members that the service conducts a criminal background screening on each member prior to permitting a New Jersey member to communicate with another member. The disclosure shall be provided on the website pages used when a New Jersey member signs up. A disclosure under this subsection shall be in bold, capital letters in at least 12-point type. If an Internet dating service conducts criminal background screenings, then the service shall disclose whether it has a policy allowing a member who has been identified as having a criminal conviction to have access to its service to communicate with any New Jersey member; shall state that criminal background screenings are not foolproof; that they may give members a false sense of security; that they are not a perfect safety solution; that criminals may circumvent even the most sophisticated search technology; that not all criminal records are public in all states and not all databases are up to date; that only publicly available convictions are included in the screening; and that screenings do not cover other types of convictions or arrests or any convictions from foreign countries.

5. Oregon

Oregon law provides Oregon residents with the following rights:

Right to Access

You have the right to know and see what personal data we have collected about you in a usable format.

Right to Delete

You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.

Right to Correct

You have the right to request that we correct inaccurate personal data.

Right to Opt Out of Targeted Advertising and Sale of Personal Data

You have the right to opt out of targeted advertising and the sale of your personal data as defined under Oregon law.

Exercising Your Oregon Privacy Rights Making Access, Deletion, and Correction Requests

Certain information may be exempt from such requests under applicable law. We require certain types of information to provide the application and sites to you. If you request deletion of such information, you may no longer be able to access or use the application and sites.

To exercise any of the rights listed above, please email our Data Protection Officer at dpo@tumile.me. You will be required to verify your identity before we fulfill your request. We may request additional information from you to match with our existing records to verify your identity, depending on the nature of the request and the sensitivity of the information sought. You may also designate an authorized agent to make a request on your behalf. To do so, you must provide us with written authorization or a power of attorney signed by you for the agent to act on your behalf. You will still need to verify your identity directly with us.

Making Requests to Opt Out of Targeted Advertising or Sale of Personal Data

To submit a request to opt out of targeted advertising or the sale of your personal data, you may click on the "Do Not Sell or Share My Personal Information" link in our website footers or in our application settings. We also respond to and abide by opt-out preference signals sent through the Global Privacy Control.

Authorized Agents

You may designate an authorized agent to make a request on your behalf. To do so, you must provide us with written authorization or a power of attorney signed by you for the agent to act on your behalf. You will still need to verify your identity directly with us.

To exercise any of your rights listed above, make an appeal of our decision regarding the exercise of your rights, or ask a question about our privacy policies, please email our Data Protection Officer at dpo@tumile.me.

6. Texas

Texas law provides Texas residents with the following rights:

Right to Access

You have the right to know and see what personal data we have collected about you in a usable format.

Right to Delete

You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.

Right to Correct

You have the right to request that we correct inaccurate personal data.

Right to Opt Out of Targeted Advertising and Sale of Personal Data

You have the right to opt out of targeted advertising and the sale of your personal data as defined under Texas law.

Exercising Your Texas Privacy Rights Making Access, Deletion, and Correction Requests

Certain information may be exempt from such requests under applicable law. We require certain types of information to provide the application and sites to you. If you request deletion of such information, you may no longer be able to access or use the application and sites.

To exercise any of the rights listed above, please email our Data Protection Officer at dpo@tumile.me. You may be required to verify your identity before we fulfill your request. We may request additional information from you to match with our existing records to verify your identity, depending on the nature of the request and the sensitivity of the information sought. You may also designate an authorized agent to make a request on your behalf. To do so, you must provide us with written authorization or a power of attorney signed by you for the agent to act on your behalf. You will still need to verify your identity directly with us.

Making Requests to Opt Out of Targeted Advertising or Sale of Personal Data

To submit a request to opt out of targeted advertising or the sale of your personal data, you may click on the "Do Not Sell or Share My Personal Information" link in our website footers or in our application settings. We also respond to and abide by opt-out preference signals sent through the Global Privacy Control.

Authorized Agents

You may designate an authorized agent to make a request on your behalf. To do so, you must provide us with written authorization or a power of attorney signed by you for the agent to act on your behalf. You will still need to verify your identity directly with us.

To exercise any of your rights listed above, make an appeal of our decision regarding the exercise of your rights, or ask a question about our privacy policies, please email our Data Protection Officer at dpo@tumile.me.

7. Utah

Utah law provides Utah residents with the following rights:

Right to Access

You have the right to know and see what personal data we have collected about you in a usable format.

Right to Delete

You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.

Right to Opt Out of Targeted Advertising and Sale of Personal Data

You have the right to opt out of targeted advertising and the sale of your personal data as defined under Utah law.

Exercising Your Utah Privacy Rights Making Access, Deletion, and Correction Requests

Certain information may be exempt from such requests under applicable law. We require certain types of information to provide the application and sites to you. If you request deletion of such information, you may no longer be able to access or use the application and sites.

To exercise any of the rights listed above, please email our Data Protection Officer at dpo@tumile.me. You will be required to verify your identity before we fulfill your request. We may request additional information from you to match with our existing records to verify your identity, depending on the nature of the request and the sensitivity of the information sought. You may also designate an authorized agent to make a request on your behalf. To do so, you must provide us with written authorization or a power of attorney signed by you for the agent to act on your behalf. You will still need to verify your identity directly with us.

Making Requests to Opt Out of Targeted Advertising or Sale of Personal Data

To submit a request to opt out of targeted advertising or the sale of your personal data, you may click on the "Do Not Sell or Share My Personal Information" link in our website footers or in our application settings. We also respond to and abide by opt-out preference signals sent through the Global Privacy Control.

To exercise any of your rights listed above, make an appeal of our decision regarding the exercise of your rights, or ask a question about our privacy policies, please email our Data Protection Officer at Dpo@tumile.me.

Utah Online Dating Safety Act Fraud Ban Notification

Pursuant to the Utah Online Dating Safety Act, Tumile is required to provide to a Utah member a fraud ban notification if the Utah member has received and responded to a message from a banned member as defined by Utah law.

Tumile will provide the following information about the banned member:

• Information that a member is a banned member or the subject of a fraud ban
• The banned member's username, identification number, or other profile identifier
• The reason that the online dating service provider initiated the fraud ban of the banned member

8. Virginia

Virginia law provides Virginia residents with the following rights:

Right to Access

You have the right to know and see what personal data we have collected about you in a usable format.

Right to Delete

You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.

Right to Correct

You have the right to request that we correct inaccurate personal data.

Right to Opt Out of Targeted Advertising and Sale of Personal Data

You have the right to opt out of targeted advertising and the sale of your personal data as defined under Virginia law.

Exercising Your Virginia Privacy Rights Making Access, Deletion, and Correction Requests

Certain information may be exempt from such requests under applicable law. We require certain types of information to provide the application and sites to you. If you request deletion of such information, you may no longer be able to access or use the application and sites.

To exercise any of the rights listed above, please email our Data Protection Officer at dpo@tumile.me. You will be required to verify your identity before we fulfill your request. We may request additional information from you to match with our existing records to verify your identity, depending on the nature of the request and the sensitivity of the information sought. You may also designate an authorized agent to make a request on your behalf. To do so, you must provide us with written authorization or a power of attorney signed by you for the agent to act on your behalf. You will still need to verify your identity directly with us.

Making Requests to Opt Out of Targeted Advertising or Sale of Personal Data

To submit a request to opt out of targeted advertising or the sale of your personal data, you may click on the "Do Not Sell or Share My Personal Information" link in our website footers or in our application settings. We also respond to and abide by opt-out preference signals sent through the Global Privacy Control.

To exercise any of your rights listed above, make an appeal of our decision regarding the exercise of your rights, or ask a question about our privacy policies, please email our Data Protection Officer at dpo@tumile.me.