X-Squared Privacy Policy How X-Squared collects, uses, shares and protects personal information. Effective date: 8 August 2026 Last updated: 8 August 2026 Public document This Privacy Policy applies to X-Squared services that link to it. X-Squared is operated by X-SQUARED (PTY) LTD, registration number 2026/580243/07. Questions and privacy requests may be sent to hello@x-squared.net. 1. Data we collect 1.1 Information you provide directly • registration information such as name, email address, age or date-of-birth information used to assess eligibility, login credentials and account settings; • profile information such as country, city or region, biography, education, work history, skills, interests, preferences, profile image and links you choose to add; • content and communications such as posts, comments, reactions, messages, EmQuests, replies, attachments, completion evidence and support requests; • recognition and participation information such as EP history, badge activity, confirmations and other service interactions; and • information you provide when contacting support, making a report, filing an appeal or participating in a survey, promotion or sponsored feature. 1.2 Information we collect when you use the service • log, device, browser, network and session information; • cookie, local storage and similar technology information; • usage information such as pages viewed, features used, clicks, time spent, search activity and diagnostic events; and • integrity and security information used to detect abuse, fraud, spam, suspicious access or policy violations. 1.3 Information from others • information another member provides when interacting with you, reporting content, mentioning you or participating in a shared EmQuest; • information from service providers acting on our instructions, limited to their role in hosting, messaging, security, analytics, authentication or support; and • information from a commercial partner only when a campaign, promotion or integration makes the collection clear and a valid legal basis exists. 1.4 Sensitive information Some information a member chooses to share may be sensitive under applicable law. X-Squared does not require unnecessary sensitive information for ordinary use. Members should avoid sharing sensitive information or third-party personal information unless it is genuinely necessary and lawful. 2. How we use your data • to create, maintain and secure accounts and profiles; • to provide the service, including messaging, feeds, posting, EmQuests, matching, notifications, EP and moderation; • to personalise and improve content, recommendations, safety systems and user experience; • to measure performance, diagnose issues, conduct analytics and improve products and operations; • to communicate with you about security, support, changes, legal matters and, where permitted, marketing; • to display and measure clearly labelled advertising, sponsored content, promoted opportunities and paid partnerships in a privacy-conscious way; • to comply with legal obligations, protect rights and safety, prevent abuse and enforce our legal documents; and • to maintain records, backups, audits, business continuity and corporate governance. 2.1 Advertising and sponsorship X-Squared may display contextual advertising, sponsored content, promoted opportunities and paid partnerships. X-Squared does not sell or rent your personal information. Advertising or sponsorship does not entitle a sponsor, advertiser or partner to receive member lists, private message content, EmQuest evidence or protected account data merely because they advertise or sponsor with X-Squared. X-Squared may provide aggregate, de-identified or campaign-level performance metrics that do not reasonably identify an individual. If you intentionally submit information to a sponsor, partner, employer, university or other third party through a X-Squared feature, X-Squared will present a notice identifying the recipient and the purpose of the disclosure at or before the point of collection or sharing. 2.2 Automated systems X-Squared may use rules, ranking logic and automated systems to help with recommendations, matching, integrity, abuse detection, spam control, security and moderation support. Where applicable law gives you rights in relation to qualifying automated decisions, X-Squared will provide the rights required by law. 3. How we share information • with other members according to your settings, the nature of the feature, and the intended audience of your content or communications; • with service providers acting on our instructions for hosting, messaging, support, analytics, authentication, security, storage or other operational purposes; • with commercial partners only where you intentionally engage with the feature or where another valid legal basis applies; • with professional advisers, insurers, auditors or counterparties where reasonably necessary for business operations, transactions or dispute handling; • with authorities, regulators, courts or other parties where required by law or reasonably necessary to protect rights, safety or the integrity of the service; and • in connection with a merger, investment, restructuring, financing, acquisition, asset sale or similar corporate event, subject to applicable law. 3.1 What we do not do • We do not sell or rent your personal information. • We do not use private-message content, EmQuest evidence, safety reports or protected account data as advertising inventory for sale to third parties. • We do not treat advertising or sponsorship as permission to hand commercial partners unrestricted access to member data. 4. Your choices and obligations • You can review and update parts of your profile and settings using available service controls. • You can choose whether to share certain content publicly, with your network or more narrowly where the feature allows. • You can manage cookies and similar technologies through browser settings and any consent tools made available by X-Squared. • You can opt out of marketing communications using the unsubscribe mechanism or by contacting X-Squared. • You may have rights of access, correction, deletion, restriction, objection, portability, withdrawal of consent, complaint and human review depending on your jurisdiction. • You are responsible for sharing only information you are entitled to share and for respecting the rights and privacy of others. 5. Other important information 5.1 Retention X-Squared keeps personal information for as long as reasonably necessary for the purposes described in this Policy, including legal, safety, fraud-prevention, dispute-resolution, tax, accounting, security, backup and audit purposes. Different categories of data may be retained for different periods based on their purpose and legal requirements. 5.2 Security X-Squared uses administrative, technical and organisational safeguards that are appropriate to the service and the risks involved. No service can guarantee absolute security. Members should use strong credentials, keep them confidential and promptly report suspected compromise. 5.3 International transfers X-Squared may process personal information in South Africa and in other countries where X-Squared or its service providers operate. Where applicable law requires transfer mechanisms, contractual protections, adequacy measures, consent or other safeguards, X-Squared will rely on the mechanism required by law. 5.4 Children X-Squared is intended for people aged 18 or older and is not directed to children. If X-Squared learns that it has collected personal information from an ineligible person on the basis of age, it will take appropriate action consistent with applicable law. 5.5 Regional privacy rights United States Residents of certain U.S. states may have privacy rights such as rights to know, access, delete, correct, appeal, and opt out of specified profiling, targeted advertising, sale or sharing practices if those practices are carried out. X-Squared does not sell or rent personal information. If X-Squared later engages in a practice that triggers a required opt-out right, it will provide the notices and controls required by applicable law. California residents may also have rights relating to sensitive personal information, non-discrimination for exercising privacy rights and authorised-agent requests, where applicable. Canada Canadian users may have rights to access and correct personal information and to withdraw consent, subject to legal or contractual restrictions and reasonable notice where applicable. X-Squared aims to provide meaningful privacy notice and appropriate safeguards in line with Canadian private-sector privacy standards. United Kingdom UK users may have rights under UK data protection law, including rights of access, rectification, erasure, restriction, objection, portability and complaint to the Information Commissioner’s Office where applicable. European Economic Area and Netherlands Users in the EEA and the Netherlands may have rights under the GDPR, including rights of access, rectification, erasure, restriction, objection, portability and complaint to a competent supervisory authority. Where required, X-Squared will rely on a lawful basis for processing and use an appropriate transfer mechanism for international transfers. Australia Australian users may have rights to access and correct personal information, and X-Squared seeks to handle personal information in a way that is consistent with the Australian Privacy Principles where they apply. New Zealand New Zealand users may have rights to access and correct personal information and to complain to the Office of the Privacy Commissioner where applicable. United Arab Emirates Users in the UAE may have rights under applicable UAE personal-data legislation, including rights to access, correction, erasure, restriction and complaint where those rights apply. South Africa South African users may have rights under POPIA, including rights of access, correction, deletion, objection and complaint to the Information Regulator where applicable. Other jurisdictions If you are located in another jurisdiction, X-Squared will apply this Policy together with any mandatory local rights that apply to the service or the processing in question. 5.6 Changes to this Policy We may update this Policy from time to time. Material changes will be notified where required by law. The current version is indicated by the effective date and last-updated date at the top of the document. 5.7 Contact Privacy requests, complaints and questions may be sent to hello@x-squared.net.