Data Protection Assessment (DPA)

3.1-1.a.A. Which Platform Data does the application use to disadvantage certain people? 3.1-1.a.B. How does the application use Platform Data to disadvantage certain people? 3.1-1.a.C. When did the application start using Platform Data in this way?

3.1-2.a.A. Which Platform Data does the application use to make decisions? 3.1-2.a.B. How does the application use Platform Data to make decisions? 3.1-2.a.C. When did the application start using Platform Data in this way?

3.1-3.a.A. Which Platform Data does the application use for activities related to surveillance? 3.1-3.a.B. How does the application use Platform Data for activities related to surveillance? 3.1-3.a.C. When did the application start using Platform Data for this purpose?

3.1-4.a.A. What types of Platform Data do you sell or license? 3.1-4.a.B. Which permissions, features, capabilities or other channels does this application use to access and collect that Platform Data? 3.1-4.a.C. List all entities, businesses and third parties to whom you are selling or licensing Platform Data and explain the purpose of sharing it in each case. 3.1-4.a.D. When did you start selling or licensing Platform Data?

3.1-4.b. You indicated above that you share Platform Data with service providers. Please check the boxes below to indicate which service providers you share Platform Data with. Google (ex. Play Store, Firebase, Cloud, AdMob, Analytics) Amazon (ex. Amazon Web Services) Salesforce (ex. Heroku, Marketing Cloud) Apple (ex. App Store) Microsoft (ex. App Center, Azure, Playfab) Github AppLovin (ex. Adjust) Appsflyer Stripe Twilio (ex. Segment, SendGrid) Other

3.1-4.c. Do you have a written agreement with each of the service providers you share Platform Data with? Yes No

3.1-4.c.i. Please check the boxes below to indicate the type of language contained in your written data agreements with service providers. Select all that apply. Language requiring service providers to only use Platform Data to provide the service requested by you. Language requiring service providers to only use Platform Data as instructed by you. Language prohibiting service providers to share Platform Data with third parties unless instructed by you. Language prohibiting service providers to process Platform Data for their own purposes or for any third parties. Language requiring service providers to delete the Platform Data received from you when you cease using their service.

3.1-4.c.iv. Do you know about any instances where your service providers, and/or any of their sub-service providers (if any), have acted in a way that is inconsistent with Kryotech Ltd. Terms? Yes No

3.1-4.c.v. If you stop using a service provider or sub-service provider, do your agreements with them specify how and when that service provider must delete data that they have received from you? Yes No

3.1-4.c.vi. If you stop using a service provider or sub-service provider, how do you ensure that they delete the Platform Data that they received from you?