1. Introduction

Luverly, Inc. ("Luverly", "we", "our", "us") is a technology company incorporated and headquartered in California, United States. xTransMatrix Consulting Services Pvt. Ltd. ("xTMX"), Bangalore, India, holds a 51% ownership interest in Luverly, Inc. and acts as our manufacturing and data-controlling partner for operations in India. Luverly owns and operates Knowsy Knows, which comprises three offerings: Knowsy Kraft (custom physical games), Knowsy Konnect (an online multiplayer game offering, available as a white-label deployment), and Knowsy Kontest (a white-label contest engine offering, where full white-labelling is available as an option). This Privacy Policy applies to all three Knowsy Knows offerings and to the knowsyknows.game website.

You may also encounter knowsy.game, which redirects to knowsyknows.game. Both domains are owned and operated by Luverly, Inc. This Privacy Policy covers both.

Knowsy Konnect operates on a VIP (Very Interesting Person) mechanism, in which every participant takes a turn as the VIP and the game becomes about that person. Knowsy Kontest operates on a VFP (Very Famous Person) mechanism, in which Contestants rank topics in the order they believe a designated public figure would.

We process personal data responsibly, lawfully, and transparently. This policy is written to be understood by anyone regardless of their technical or legal background. If you have questions about anything in this document, contact us at support.knowsy@luverly.shop. By accessing any Knowsy Knows offering or visiting knowsyknows.game, you acknowledge that you have read and understood this Privacy Policy.

2. Who This Policy Covers

• Brand Admins are businesses, organisations, and individuals who license the Knowsy Konnect or Knowsy Kontest platform to create and deploy games, contests, or campaigns for their audiences. Brand Admins enter into a direct contractual relationship with Luverly, Inc.
• End Users are individuals who participate in games or interactive experiences deployed by Brand Admins using Knowsy Konnect.
• Contestants are individuals who enter and participate in campaigns deployed by Brand Admins using Knowsy Kontest. Contestants compete for prizes offered and distributed solely by the Brand Admin.
• Website Visitors are individuals who browse knowsyknows.game without being registered Brand Admins, End Users, or Contestants.

Where Brand Admins deploy the platform to their own users, Brand Admins are generally independent data controllers for their users' personal data, and Luverly, Inc. acts as data processor for that data, processing it only on the Brand Admin's instructions and in accordance with our Data Processing Agreements. In certain configurations, where Luverly determines aspects of processing (for example, platform-level analytics methodology or default data retention), Luverly and the Brand Admin may act as joint controllers under applicable law rather than a clean controller-processor split. Where this applies, the parties' respective responsibilities will be set out in the applicable Order Form or a joint controller arrangement.

3. Personal Data We Collect

The categories below represent common types of personal data we collect and are not exhaustive. Depending on the nature of your engagement with Knowsy Knows, we may also collect additional information including but not limited to tax identification details such as GSTIN or EIN, business registration documentation, or other information reasonably required to operate the platform, fulfil legal obligations, or service your account.

3.1 From Brand Admins

• Identity: full name of the account holder and key contacts
• Business information: company legal name, registered address, company description, and website URL
• Contact: business email address and telephone number
• Account credentials: encrypted password and authentication tokens
• Billing: billing contact name, billing address, and payment reference. Full payment card numbers are handled exclusively by our PCI DSS-compliant payment processor and are not stored by Luverly, Inc.
• Platform configuration: branding assets, campaign settings, contest configurations, topic and item content created on the platform
• Usage data: login records, feature usage patterns, dashboard interactions, support communications, and activity logs
• Approval and workflow records: content approval histories, configuration changes, and role assignment records

3.2 From End Users (Knowsy Konnect)

• Identity: name and email address as required by the Brand Admin's platform. In embedded deployments, the Brand Admin passes a verified participant identifier such as a phone number or internal user ID; this identifier is received and stored by Luverly, Inc. in hashed form
• Gameplay data: item rankings submitted per topic, session scores held server-side until leaderboard release, and topic completion status
• Timing data: submission timestamps and time elapsed per topic
• Engagement data: session frequency, session duration, topics accessed, drop-off points within topic flows, and return visit patterns
• Behavioural signals: preference clusters derived from ranking patterns and engagement depth indicators, shared with the Brand Admin as analytics
• Device and technical data: IP address, browser type and version, operating system, device type, and session identifiers

3.3 From Contestants (Knowsy Kontest)

In addition to the same categories as Knowsy Konnect, Knowsy Kontest processes:

• Contest entry data: the verified contestant identifier passed by the Brand Admin's platform at authentication, plus any additional identity fields required by the Brand Admin's contest rules
• Contest ranking data: rankings submitted per topic, with submission timestamps recorded in UTC and displayed to Contestants in their local time at the presentation layer
• Leaderboard data: rank positions calculated at each leaderboard release. Scores are calculated server-side immediately after submission and withheld from Contestants until the leaderboard is released. This is a deliberate, fixed anti-fraud control
• Reward and prize data: reward tier achieved, reward status (Won, Claimed, Pending, or Expired), and where required for prize fulfilment, any contact details provided to the Brand Admin for prize delivery

3.4 From Knowsy Kraft Customers

• Order fulfilment data: full name, shipping address, email address, and telephone number
• Payment reference processed by our third-party payment processor
• Game customisation inputs: topic questions, answer options, brand assets, and design materials submitted during the physical game creation process

3.5 From Website Visitors

• Technical data: IP address, browser type, pages visited, referral URL, and session duration
• Contact form data: name, email address, company name, and message content submitted through the website

4. How We Use Personal Data

4.1 For Brand Admins

• To create, provision, and operate your account and associated games or campaigns
• To authenticate identity and enforce role-based access controls across the platform
• To process billing, issue invoices, and manage your subscription
• To generate and deliver analytics reports, behavioural intelligence dashboards, and campaign performance data
• To communicate account notices, security updates, offering changes, and service announcements
• To provide customer support and resolve technical issues
• To detect and prevent fraud, abuse, or violations of our Terms of Service or Acceptable Use Policy
• To comply with legal obligations including tax reporting, financial record-keeping, and regulatory compliance

4.2 For End Users and Contestants

• To authenticate your identity within the game or campaign using the verified identifier passed by the Brand Admin
• To operate the game or campaign experience on behalf of the Brand Admin
• To calculate proximity scores and timing bonuses based on your submissions
• To manage leaderboard calculation and release at the Brand Admin's configured schedule
• To determine reward eligibility and share winner data with the Brand Admin for prize fulfilment
• To generate individual and aggregated behavioural analytics reports for the Brand Admin
• To deliver notification triggers to the Brand Admin's notification infrastructure where configured
• To prevent fraud and ensure the integrity of results

4.3 For Knowsy Kraft Customers

• To fulfil your physical game order, coordinate production, and manage shipping and delivery
• To process payment and issue receipts or invoices
• To communicate about order status and delivery

5. Legal Basis for Processing

Where we rely on legitimate interests as our basis, we conduct a balancing assessment to ensure those interests are not overridden by the rights and interests of the individuals concerned. Individuals may object to processing based on legitimate interests at any time. Where we rely on consent, individuals may withdraw consent at any time without detriment; withdrawal does not affect the lawfulness of prior processing.

Rankings, scores, and leaderboard positions are calculated automatically by the platform. In most cases this is informational and analytical rather than a decision producing legal or similarly significant effects on an individual. Where a reward carries genuine legal or financial weight, Brand Admins should assess on a case-by-case basis whether GDPR Article 22 or equivalent automated-decision-making rules apply to their specific campaign, and contact support.knowsy@luverly.shop if guidance is needed.

6. Data Sharing and Disclosure

We do not sell personal data. We do not share personal data with third parties for their own marketing, advertising, or commercial purposes. We share data only in the following circumstances:

6.1 With Brand Admins

End user and contestant gameplay data, behavioural analytics, engagement scores, leaderboard positions, and reward eligibility data are made available to the Brand Admin who deployed the relevant game or campaign. Brand Admins are independent data controllers for data they receive about their own users and are bound by our Data Processing Agreement.

6.2 With Service Providers

We engage trusted third-party cloud, database, and payment processing providers to operate the platform. All such providers are bound by data processing agreements restricting their use of personal data to the specific service they provide. Detailed sub-processor information is available on request from support.knowsy@luverly.shop.

6.3 For Legal Compliance

We may disclose personal data where required by law, court order, or directive from a competent regulatory or government authority. We will, wherever lawfully possible, provide advance notice of such disclosure and limit it to what is strictly required.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a material portion of Luverly, Inc.'s assets, personal data may form part of the transferred assets. We will notify affected Brand Admins at least 30 days in advance and will ensure that any successor entity is bound by data protection obligations no less stringent than those in this Privacy Policy.

6.5 Safety and Protection

We may disclose personal data where we reasonably believe it is necessary to prevent serious harm to an individual or to protect the rights, property, or safety of Luverly, Inc., our users, or the general public.

7. Data Residency and International Transfers

Luverly, Inc. is incorporated and headquartered in California, United States, and operates under US law as its primary governing jurisdiction. As of the effective date of this policy, our platform infrastructure is hosted in Mumbai, India. We plan to add hosting in additional regions, including the United States and the European Union, as we onboard clients based in those markets. Any client-specific data residency requirements will be agreed in writing and will take precedence over this general policy statement.

Where personal data originating in the European Economic Area or the United Kingdom is transferred to our India-hosted infrastructure, we are in the process of implementing appropriate safeguards, including Standard Contractual Clauses adopted by the European Commission or the UK International Data Transfer Agreement, as applicable. If this transfer mechanism is a hard requirement for your organisation before onboarding, contact support.knowsy@luverly.shop to confirm current status before signing an Order Form. For transfers involving personal data from other jurisdictions with cross-border transfer requirements, we implement such additional mechanisms as are required by applicable law.

8. Data Retention

Account and gameplay data is currently retained for the duration of the account relationship and deleted upon request. A fixed auto-expiry window for inactive gameplay and telemetry data is on our development roadmap and will be reflected here once implemented. Brand Admins may request earlier deletion at any time by contacting support.knowsy@luverly.shop; deletion requests are acknowledged within 48 hours and completed within 30 days, in line with standard erasure timelines under applicable data protection law.

9. Your Rights

Depending on your location and applicable law, you may hold some or all of the following rights in respect of your personal data:

• Right of access: Request a copy of the personal data we hold about you together with information about how it is processed
• Right to rectification: Request correction of inaccurate or incomplete personal data
• Right to erasure: Request deletion of your personal data where it is no longer necessary, where you withdraw consent, or where you object and we have no overriding legitimate grounds
• Right to restriction: Request that we limit processing of your data in certain circumstances
• Right to data portability: Receive your personal data in a commonly used, machine-readable format where technically feasible
• Right to object: Object to processing based on our legitimate interests or for direct marketing purposes at any time
• Right to withdraw consent: Withdraw consent at any time where processing is consent-based, without affecting the lawfulness of prior processing
• CCPA/CPRA rights (California residents): Right to know, right to delete, right to correct, right to opt out of sale or sharing, right to limit use of sensitive personal information, and right to non-discrimination
• India DPDP Act 2023 rights: Right of access and confirmation, right to correction and erasure, right to grievance redressal, and right to nominate a person to exercise rights in case of incapacity or death

To exercise any right, submit a request to support.knowsy@luverly.shop with your name, the offering you are contacting us about, and a description of the right you wish to exercise. We will respond within 30 days. In complex cases, we may extend this by a further 60 days with prior notification. We may need to verify your identity before processing a request and will not charge a fee for legitimate requests unless they are manifestly unfounded, excessive, or repetitive.

If you have a concern about how we handle your personal data, we encourage you to contact us first at support.knowsy@luverly.shop. We will make every effort to resolve your concern promptly and fairly. Where applicable law provides for recourse to a data protection authority in your jurisdiction and you remain unsatisfied with our response, you retain the right to pursue that avenue.

10. Security

Luverly, Inc. implements technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, destruction, or loss.

Technical measures include: encryption of all personal data in transit using TLS 1.2 or higher; encryption of all personal data at rest using AES-256; contestant identifiers and contact data stored in hashed form; role-based access controls at every level of the platform; strict tenant isolation enforced through forced Row-Level Security (RLS) at the database layer with tenant and user identity derived exclusively from the authenticated JWT, never from client-supplied values; no long-lived credentials in the infrastructure; HTTPS enforced everywhere; and regular automated backups with documented recovery procedures. A third-party penetration test has been conducted and confirmed no cross-tenant data leakage.

Multi-factor authentication for administrative and Brand Admin accounts is not currently implemented; it is on our roadmap. Organisational measures include: access revocation procedures on role change or termination, and documented incident response procedures. No system connected to the internet can be guaranteed to be completely secure. If you believe your data has been compromised, contact us immediately at support.knowsy@luverly.shop.

11. Children

Our offerings and website are not directed at children under 13 years of age and we do not knowingly collect personal data from children under 13. Brand Admins who deploy games or campaigns to audiences that may include minors are responsible for implementing age-verification mechanisms appropriate to their jurisdiction and obtaining verifiable parental or guardian consent where required by applicable law. If we become aware that we have collected personal data from a child under 13 without appropriate consent, we will take immediate steps to delete that data. Contact support.knowsy@luverly.shop immediately if you believe a child has provided personal data without the required consent.

12. Cookies

We use cookies and similar tracking technologies for essential platform functions and analytics. A full cookie consent management tool is not yet live on the site; this is on our roadmap. Our Cookie Policy, accessible via the Website tab above, describes the cookies we currently use and how to manage browser-level preferences in the meantime.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify Brand Admins by email at least 14 days before the changes take effect and will update the effective date shown above. Continued use of the platform after the new effective date constitutes acceptance. If you do not agree with changes, you may terminate your account before the effective date without penalty.

14. Contact

For any questions, concerns, or requests relating to this Privacy Policy or your personal data: support.knowsy@luverly.shop

Luverly, Inc., California, United States of America

In partnership with xTransMatrix Consulting Services Pvt. Ltd., Bangalore, India

1. What Are Cookies

Cookies are small text files placed on your device when you visit a website or use a web application. They enable the site to remember information about your visit such as your preferences, authentication state, and session activity. Similar technologies include local storage, session storage, and pixel tags. Where this policy refers to "cookies" it includes all such similar technologies unless context indicates otherwise. Cookies may be session cookies, deleted when you close your browser, or persistent cookies, which remain on your device for a specified period. They may be first-party cookies set by us or third-party cookies set by services we integrate.

2. Types of Cookies We Use

2.1 Strictly Necessary Cookies

These cookies are essential for the platform to operate. They enable session authentication, security token validation, load balancing, and fraud prevention. You cannot opt out of strictly necessary cookies as without them the services you have requested cannot be delivered. They do not collect information used for marketing purposes.

2.2 Performance and Analytics Cookies

These cookies collect information about how users interact with our platform and website, including which pages are most used, how sessions progress, and where errors occur. Data is aggregated and where possible anonymised. You can opt out through our cookie preference centre.

2.3 Functional Cookies

These cookies remember your choices such as selected language, region, data preferences, and notification dismissals. Disabling them may affect the quality of your experience but will not prevent you from using the platform.

2.4 Marketing and Attribution Cookies (Website Only)

On the public knowsyknows.game website only, we may use third-party marketing and attribution cookies to understand which channels and campaigns drive traffic to the website. These cookies are not used inside the platform and do not track contestants or end users during gameplay. You can opt out via the consent banner on your first visit or through the cookie preference centre at any time.

3. Third-Party Cookies

Some third-party services we integrate may set their own cookies when you use our platform or website. These are governed by the respective third party's own privacy and cookie policies. We do not have direct control over such cookies. Information about relevant third-party data practices is available on request from support.knowsy@luverly.shop.

4. Cookie Duration

5. Managing Your Cookie Preferences

You can manage cookies through the consent banner on your first visit to knowsyknows.game; through your browser settings, where you can block or delete cookies from specific domains; or through opt-out mechanisms provided by third-party analytics providers. Blocking strictly necessary cookies will prevent the platform from functioning. Declining other categories may reduce the quality of certain features but will not prevent access to the platform. Cookie preferences are tied to the specific device and browser through which they are set.

6. Changes to This Policy

We may update this Cookie Policy to reflect changes in our practices or applicable regulations. The effective date above reflects the most recent update. Material changes will be communicated to Brand Admins by email.

7. Contact

For questions about our use of cookies: support.knowsy@luverly.shop

1. Acceptance of These Terms

By accessing or using the knowsyknows.game website, you confirm that you are at least 18 years of age (or the age of majority in your jurisdiction), that you have the legal capacity to enter into a binding agreement, and that you have read, understood, and agree to be bound by these Terms of Use and our Privacy Policy. If you are accessing the website on behalf of an organisation, you represent and warrant that you have authority to bind that organisation to these Terms. If you do not agree, you must not access or use the website. The website is also accessible via knowsy.game, which redirects to knowsyknows.game. Both domains are owned and operated by Luverly, Inc., and these Terms apply equally to access via either domain.

2. About Knowsy Knows and Luverly, Inc.

The knowsyknows.game website is owned and operated by Luverly, Inc., a corporation with its principal place of business in California. Luverly, Inc. owns the Knowsy Knows trademark and all associated offering marks. References to "we", "us", "our", or "Luverly" refer to Luverly, Inc.

3. Permitted and Prohibited Use

You may access and browse the website for personal, informational, and commercial evaluation purposes. You must not:

• Copy, reproduce, republish, upload, post, transmit, or distribute any website content without our prior written permission, except as permitted by applicable copyright law for personal use
• Use automated tools including scrapers, bots, spiders, or crawlers to extract content, data, or metadata from the website
• Attempt to gain unauthorised access to any area of the website, its servers, databases, or connected infrastructure
• Use the website to transmit spam, unsolicited communications, malware, viruses, or any harmful, deceptive, or unlawful material
• Attempt to disrupt, degrade, or impair the performance, availability, or security of the website or any connected systems
• Frame or mirror any part of the website on any other website or application without written authorisation
• Use the website in any manner that could harm the reputation of Luverly, Inc. or any person featured on the website
• Collect personal data about other users without their consent
• Engage in any activity that violates applicable local, national, or international law or regulation

4. Intellectual Property

All content on the knowsyknows.game website including text, graphics, photographs, illustrations, video content, user interface designs, logos, and software is the exclusive property of Luverly, Inc. or its licensors and is protected by applicable intellectual property laws. The Knowsy Knows trademark, Knowsy Konnect trademark, and Knowsy Kontest trademark are the property of Luverly, Inc. Nothing on this website grants any licence or right to use any Luverly, Inc. trademark or brand element without express prior written consent.

5. Third-Party Links

The website may contain links to third-party websites provided for informational convenience only. Luverly, Inc. does not endorse, control, or take responsibility for the content, accuracy, or availability of any third-party website. Accessing third-party websites is at your own risk.

6. Disclaimers

The website is provided on an "as is" and "as available" basis without any warranty of any kind, express or implied. Luverly, Inc. does not warrant that the website will be uninterrupted, error-free, secure, or free from defects or harmful components. Information on the website is for general informational purposes only and does not constitute legal, financial, technical, or professional advice.

7. Limitation of Liability

To the fullest extent permitted by applicable law, Luverly, Inc. and its directors, officers, employees, agents, and licensors shall not be liable for any indirect, incidental, special, consequential, or punitive damages whatsoever arising from your access to or use of the website. Our total aggregate liability for any direct damages arising from your use of the website shall not exceed USD 100. Nothing in these Terms limits any rights you may have under mandatory consumer protection laws in your jurisdiction that cannot be waived by contract.

8. Governing Law and Dispute Resolution

These Terms are governed by the laws of the State of California, United States, without regard to conflict of law principles. Any dispute that cannot be resolved informally shall be subject to binding individual arbitration in Santa Clara County, California, under the rules of the American Arbitration Association, except where either party seeks injunctive relief to protect intellectual property rights or prevent irreparable harm.

9. Changes to These Terms

We reserve the right to modify these Terms at any time. Changes are effective immediately upon posting. Continued use of the website following any update constitutes acceptance of the updated Terms.

10. Contact

support.knowsy@luverly.shop  |  Luverly, Inc., California, United States

1. Overview

This page consolidates our current technical, organisational, and compliance posture in one place. We are an early-stage company, and we would rather tell you plainly where we stand today than overstate our position. Where something is not yet in place, we say so directly and note whether it is on our roadmap.

2. Technical Measures

• Encryption: all personal data is encrypted in transit using TLS 1.2 or higher, and at rest using AES-256
• Tenant isolation: enforced through forced Row-Level Security (RLS) at the database layer, with tenant and user identity derived exclusively from the authenticated JWT, never from client-supplied values. This prevents cross-tenant access even if a client were compromised
• Authentication: JWT-based throughout, with no long-lived credentials stored in the infrastructure
• Transport security: HTTPS enforced at all entry points; no unencrypted access permitted
• Backups: regular automated backups with documented recovery procedures
• Penetration testing: a third-party penetration test has been conducted and confirmed no cross-tenant data leakage. Further testing is planned on an ongoing basis, though we do not yet run this on a fixed annual cadence
• Multi-factor authentication: not currently implemented for administrative or Brand Admin accounts. This is on our roadmap

3. Hosting & Data Residency

As of the effective date of this page, our platform infrastructure is hosted in Mumbai, India, on Google Cloud Platform (GCP) with Supabase as our database layer. We plan to add hosting in additional regions, including the United States and the European Union, as we onboard clients based in those markets.

Where personal data originating in the EEA or UK is transferred to our India-hosted infrastructure, we are in the process of implementing appropriate cross-border transfer safeguards, including Standard Contractual Clauses or the UK International Data Transfer Agreement, as applicable. If a confirmed, executed transfer mechanism is a requirement for your organisation, contact support.knowsy@luverly.shop before signing an Order Form so we can confirm current status.

4. Sub-processors

We engage trusted third-party cloud, database, and payment processing providers to operate the platform, including Google Cloud Platform, Supabase, PayPal, and Stripe. PayPal and Stripe are both independently PCI DSS Level 1 certified. A full, current list of sub-processors by name, location, and function is available on request from support.knowsy@luverly.shop. A formal 30-day advance-notice process for sub-processor changes is not yet in place; we aim to provide notice of material changes as far in advance as practicable and are working toward a documented process.

5. Breach Response

We will notify affected Brand Admins without undue delay upon becoming aware of a personal data breach affecting their data, including the nature of the breach, likely consequences, and mitigation measures taken, to the extent known at the time. A formal, guaranteed notification SLA (such as a fixed 48-hour window) is under active development. Separately, where Luverly acts as controller for its own data (for example, website visitor or Brand Admin account data), a formal process to notify the relevant supervisory authority within GDPR's 72-hour window is also under development rather than fully operational today.

6. Compliance Frameworks

Our policies are built with reference to the principles of GDPR (EU), UK GDPR, India's DPDP Act 2023, CCPA/CPRA, Brazil's LGPD, Canada's PIPEDA, and Australia's Privacy Act 1988. We do not currently hold SOC 2, ISO 27001, or equivalent third-party security certifications. A cookie consent management tool and a CCPA "Do Not Sell or Share" mechanism are not yet live on the website; both are on our roadmap. There is currently no platform-enforced age-gating on Knowsy Kontest entries; Brand Admins remain responsible for age-appropriate targeting under our Acceptable Use Policy.

7. Roadmap, In Progress

In the interest of transparency, here is what we are actively working toward and have not yet completed: multi-factor authentication for admin accounts; hosting expansion into the US and EU; an executed SCC/UK IDTA transfer mechanism for EU/UK data; a documented sub-processor change-notice process; a fixed breach-notification SLA in both directions (to Brand Admins and to regulators); a cookie consent banner; a CCPA opt-out mechanism; a fixed auto-expiry window for inactive gameplay and telemetry data; and formal GDPR governance documentation including a Records of Processing Activities (ROPA), a Data Protection Impact Assessment (DPIA) for behavioural analytics, and an EU/UK Representative or Data Protection Officer. Contact support.knowsy@luverly.shop for the current status of any specific item on this list.

These Terms of Service constitute a binding legal agreement between Luverly, Inc. ("Luverly", "we", "our", "us"), a corporation headquartered in California, and you. They govern your access to and use of Knowsy Konnect, an online multiplayer game offering available as a white-label deployment. They apply to both Brand Admins who license the offering and End Users who participate in games hosted on it. By accessing Knowsy Konnect in any capacity, you agree to be bound by these Terms.

A1. The Offering and Licence

Knowsy Konnect is an online multiplayer game platform operating on a VIP (Very Interesting Person) mechanism. Every participant takes a turn as the VIP, making the game about that person. While one player is the VIP, the others rank five items per topic in the order they believe the VIP would. The VIP then reveals their actual ranking, and scores are calculated based on how closely each player's ranking matched. The offering is available as a white-label deployment: End Users interact with the Brand Admin's brand. White-label capability is available as an option for Brand Admins; those who do not take this option will display a "Powered by Knowsy" attribution.

Luverly, Inc. grants the Brand Admin a limited, non-exclusive, non-sublicensable, non-transferable, revocable licence to access and use Knowsy Konnect during the subscription term solely for the Brand Admin's internal business purposes and for deploying game experiences to their authorised End Users. The offering is licensed, not sold. All rights not expressly granted are reserved by Luverly, Inc.

A2. Brand Admin Obligations

• You are solely responsible for all topics, questions, items, branding assets, and content you create, upload, or publish on the platform. You represent and warrant that you have all necessary rights, licences, and consents to use and publish all such content
• All content you publish must comply with applicable laws in every jurisdiction where you deploy the platform, including advertising standards, consumer protection, data protection, and intellectual property law
• You must obtain and maintain all necessary consents from your End Users before collecting and processing their personal data through the platform
• You must maintain a publicly available privacy policy for your End Users that accurately describes your use of Knowsy Konnect and the data collected through it
• You must ensure that your End Users are at least 13 years old, or obtain verifiable parental or guardian consent for users under 13 where permitted by your jurisdiction's law
• You are responsible for the accuracy of all company, contact, and billing information you provide to Luverly, Inc. and for keeping it current
• You are responsible for the security of your account credentials and for ensuring that all individuals with access to your account operate within their assigned role permissions
• You must promptly notify support.knowsy@luverly.shop if you become aware of any unauthorised access to your account or any incident that may affect the personal data of your End Users

A3. Data, Analytics, and Platform Roles

Gameplay data, behavioural analytics, and engagement reports generated from your Knowsy Konnect deployment are made available to you via the platform dashboard. You are the data controller for your End Users' personal data. Luverly, Inc. processes this data as your data processor, subject to the Data Processing Agreement which forms part of these Terms.

Platform access is governed by four roles. The Platform Admin (Luverly, Inc. team) has full platform visibility and activates all releases after approval. The Systems Super Admin (Brand Admin senior operator) has full edit access and approves all content and configurations before anything goes live. The Systems Admin (Brand Admin ground operator) handles all content entry and configuration but cannot approve or release anything without Systems Super Admin sign-off. Nothing is published or released to End Users without the full approval chain being completed.

A4. Fees, Payment, and Suspension

Access to Knowsy Konnect is subject to the pricing terms agreed at signup or in a separate Order Form. All fees are exclusive of applicable taxes unless stated otherwise. Fees are non-refundable except as expressly stated or required by applicable law. Invoices are due within 30 days of issue. Luverly, Inc. reserves the right to suspend platform access following 14 days of non-payment after written notice, and to terminate the account after 45 days of continued non-payment. Suspended accounts retain data during the suspension period. Luverly, Inc. reserves the right to change pricing upon 60 days' written notice.

A5. Intellectual Property

Luverly, Inc. owns all intellectual property in and to the Knowsy Konnect platform including its source code, algorithms, user interface designs, scoring methodologies, documentation, and all associated trademarks. These Terms do not transfer any intellectual property ownership to you. You retain ownership of all brand assets and content you provide ("Brand Content"). You grant Luverly, Inc. a limited, non-exclusive, worldwide, royalty-free licence to host, reproduce, display, and use your Brand Content solely as necessary to provide the platform services during the subscription term. This licence terminates upon account termination. You must not use the platform to build a competing offering.

A6. Confidentiality

Each party agrees to treat the other party's non-public business information, technical specifications, pricing, customer data, and product roadmap as confidential and not to disclose it to any third party without prior written consent, except as required by applicable law (with prompt prior notice where lawfully possible), or to personnel bound by equivalent confidentiality obligations, or as necessary to exercise rights under these Terms. This obligation survives termination for three years and indefinitely with respect to trade secrets.

A7. Warranties and Service Levels

Luverly, Inc. warrants that it has the right to grant the licence in these Terms, that the platform will perform materially in accordance with its documentation during the subscription term, and that it will implement and maintain security measures consistent with those in the Data Processing Agreement. We target 99.9% uptime during active campaign periods, measured monthly and excluding scheduled maintenance windows communicated at least 48 hours in advance where possible. Except as expressly stated, the platform is provided "as is" and Luverly, Inc. disclaims all other warranties including fitness for a particular purpose, merchantability, and non-infringement.

A8. Limitation of Liability

To the fullest extent permitted by applicable law, neither party shall be liable to the other for any indirect, incidental, special, punitive, or consequential damages, including loss of profits, loss of data, or cost of substitute services. Luverly, Inc.'s aggregate liability to a Brand Admin for all claims during any 12-month period shall not exceed the total fees paid by that Brand Admin in the three calendar months immediately preceding the event giving rise to the claim.

A9. Termination

Either party may terminate these Terms with 30 days' written notice. Luverly, Inc. may terminate immediately in the event of material breach not cured within 14 days of written notice; non-payment; violation of the Acceptable Use Policy; the Brand Admin becoming insolvent; or any use that creates material legal, reputational, or security risk. Upon termination, all licences immediately terminate; data remains available for export from the platform dashboard and is retained thereafter unless deletion is specifically requested (see our Privacy Policy for deletion timelines); and all accrued fees remain payable.

B1. Your Participation

When you participate in a Knowsy Konnect game, you are engaging with an experience created and operated by the Brand Admin who deployed it using the VIP mechanism: each player takes a turn as the VIP and the game becomes about that person. The Brand Admin is responsible for the game content and any prizes or incentives offered. Luverly, Inc. provides the underlying technology and is not responsible for the specific content or commitments made by the Brand Admin. In embedded deployments, your identity is verified by the Brand Admin's authentication system. You will not be required to create a separate Knowsy account.

B2. Scores and Leaderboards

Your score is calculated on the server based on ranking accuracy and submission speed. Scores are not displayed at the time of submission and are revealed only when the leaderboard is released at the time configured by the Brand Admin. This is a deliberate, fixed design choice to prevent score feedback from influencing subsequent submissions.

B3. Your Data

Your gameplay data and behavioural signals are processed by Luverly, Inc. on behalf of the Brand Admin and shared with that Brand Admin. Please refer to the Brand Admin's privacy policy for information about how the Brand Admin uses this data. Luverly, Inc.'s Privacy Policy governs our own processing of your data.

B4. Conduct

You must not attempt to manipulate scores, submit rankings on behalf of other players, use automated tools or bots to interact with the platform, access other players' sessions or data, or take any action that interferes with the fairness, integrity, or security of a game or the platform. Violations may result in disqualification.

B5. Age

You must be at least 13 years old to participate. Some games may impose higher age requirements under applicable local law or Brand Admin policy.

General Provisions

These Terms are governed by the laws of the State of California, United States. Disputes between Luverly, Inc. and Brand Admins shall be resolved by binding individual arbitration in Santa Clara County, California. These Terms, together with the Privacy Policy, Data Processing Agreement, Acceptable Use Policy, and any applicable Order Form, constitute the entire agreement between the parties regarding Knowsy Konnect. Material changes will be communicated to Brand Admin email addresses at least 14 days before they take effect. Contact: support.knowsy@luverly.shop

This Data Processing Agreement ("DPA") is incorporated into and forms part of the Knowsy Konnect Terms of Service. It governs the processing of personal data by Luverly, Inc. on behalf of the Brand Admin in connection with the Knowsy Konnect platform. In the event of conflict between this DPA and the Terms of Service regarding data processing, this DPA prevails.

1. Definitions

• Controller: The Brand Admin, who determines the purposes and means of processing personal data collected from End Users through the Brand Admin's Knowsy Konnect deployment
• Processor: Luverly, Inc., which processes personal data solely on behalf of and under the documented instructions of the Controller
• Personal Data: Any information relating to an identified or identifiable natural person as defined under applicable Data Protection Law
• Processing: Any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, and destruction
• Data Protection Law: GDPR (EU) 2016/679; UK GDPR and UK Data Protection Act 2018; India's Digital Personal Data Protection Act 2023 (DPDP Act); California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA); and any other applicable national or state data protection legislation binding on either party
• Sub-processor: Any third party engaged by the Processor to carry out specific processing activities on behalf of the Controller
• Data Subject: An identified or identifiable natural person to whom the personal data relates

2. Roles, Subject Matter, and Duration

The Processor will process personal data on behalf of the Controller for the purpose of providing the Knowsy Konnect platform services, including game session management, score calculation, leaderboard management, analytics generation, notification trigger delivery, and platform support. Processing will continue for the duration of the Knowsy Konnect Terms of Service and for the retention periods specified in Section 8.

3. Categories of Data and Data Subjects

4. Controller Instructions and Compliance

The Processor will process personal data only on documented instructions from the Controller. Primary instructions are embodied in this DPA, the Terms of Service, and the configuration settings applied within the platform. The Controller may provide additional written instructions at any time. If the Processor reasonably believes any instruction would cause it to infringe applicable Data Protection Law, the Processor will promptly notify the Controller and may suspend acting on that instruction until the Controller confirms its lawfulness in writing. The Processor will not process personal data for its own independent purposes including profiling, advertising, or any commercial use other than providing platform services to the Controller.

5. Technical and Organisational Security Measures

The Processor implements and maintains the following security measures:

• Encryption of all personal data in transit using TLS 1.2 or higher at all times
• Encryption of all personal data at rest using AES-256 encryption
• Contestant identifiers and contact data stored in hashed form
• Role-based access controls at platform and infrastructure level
• Strict tenant isolation enforced through forced Row-Level Security (RLS) at the database layer, with tenant and user identity derived exclusively from the authenticated JWT, never from client-supplied values, preventing cross-tenant access even in the event of a compromised client
• JWT-based authentication throughout; no long-lived credentials in the infrastructure
• HTTPS enforced at all entry points; no unencrypted access permitted
• Platform hosted on trusted third-party cloud and database infrastructure
• Regular automated backups with documented recovery procedures
• A third-party penetration test has been conducted and confirmed no cross-tenant data leakage; further testing is planned on an ongoing basis
• Personnel with access to personal data are subject to confidentiality obligations

6. Sub-processors

The Controller hereby grants general authorisation for the Processor to appoint sub-processors for the purpose of providing the platform services. The Processor engages trusted third-party cloud, database, and payment processing providers. A current list identifying specific sub-processors by name, location, and function is available on request from support.knowsy@luverly.shop. As an early-stage company, a formal 30-day advance-notice process for sub-processor changes is not yet in place; we aim to provide notice of material changes as far in advance as practicable and are working toward a documented notice process. All sub-processors are bound by data protection obligations no less stringent than those in this DPA.

7. Data Subject Rights

Where the Processor receives a Data Subject rights request directly, it will acknowledge receipt and forward it to the Controller within 3 business days without acting independently, unless otherwise instructed or required by applicable law. The Processor will provide reasonable technical assistance to enable the Controller to fulfil its obligations to respond within the timescales required by applicable law. Where the Controller instructs the Processor to action a request directly, the Processor will confirm completion within 10 business days.

8. Personal Data Breach Notification

The Processor will notify the Controller without undue delay upon becoming aware of a personal data breach affecting data processed under this DPA. The notification will include, to the extent available: the nature of the breach including categories and approximate number of Data Subjects affected; contact details of the data protection point of contact; likely consequences of the breach; and measures taken or proposed to address and mitigate it. Where complete information is not immediately available, the Processor will provide what is available and supplement as soon as practicable. A formal, guaranteed notification timeline is under active development; Controllers with a specific SLA requirement should raise it in their Order Form.

9. Retention and Deletion

Upon termination of the Terms of Service, the Processor will, at the Controller's election, securely delete or return all personal data within 30 days, unless applicable law requires longer retention. Written confirmation of deletion including the method used is provided on request. The Controller may request deletion of specific categories at any time by writing to support.knowsy@luverly.shop; the Processor will confirm completion within 10 business days.

10. International Data Transfers

Luverly, Inc. is a California-headquartered entity. As of the effective date of this DPA, platform infrastructure is hosted in Mumbai, India, with additional regions planned as client geography requires. Any client-specific data residency commitments will be set out in the applicable Order Form or written addendum to this DPA. Where personal data originating in the EEA or UK requires cross-border transfer protections for transfer to our India-hosted infrastructure, the Processor is in the process of implementing Standard Contractual Clauses adopted by the European Commission or the UK International Data Transfer Agreement, as applicable. Controllers requiring confirmation of an executed transfer mechanism before onboarding should contact support.knowsy@luverly.shop.

11. Audit Rights

Upon 30 days' written notice, the Controller may request an audit of the Processor's data processing activities and security measures as they relate to the Controller's personal data, no more than once per calendar year absent documented grounds for a specific compliance concern. The cost of any audit is borne by the Controller unless the audit reveals material non-compliance by the Processor. As an early-stage company, we do not currently hold SOC 2, ISO 27001, or equivalent third-party certifications; audit requests are handled manually, with the Processor providing relevant documentation and access on a best-efforts basis, without a guaranteed turnaround time at this stage. The parties will agree in good faith on the scope and format of any audit.

12. Liability and Contact

Each party's liability under this DPA is subject to the limitation of liability provisions in the Knowsy Konnect Terms of Service. All DPA-related communications: support.knowsy@luverly.shop. This DPA is governed by the laws of the State of California, United States, subject to mandatory requirements of applicable Data Protection Law.

This Acceptable Use Policy ("AUP") is incorporated into the Knowsy Konnect Terms of Service. It defines the conditions under which Brand Admins may use the platform. Violations may result in content removal, account suspension, or account termination without refund at Luverly, Inc.'s discretion.

1. Permitted Uses

• Creating and deploying branded multiplayer VIP-mechanism games for genuine commercial or internal audiences
• Collecting behavioural intelligence and engagement data from consenting participants in compliance with applicable data protection law
• Building audience understanding through game-based interaction in a transparent and non-deceptive format
• Deploying games across supported channels: live events, QR codes, embedded iframes, website embeds, or direct links
• Generating analytics, audience segmentation data, and campaign performance reports for internal business use
• Running branded HR, employee engagement, onboarding, or internal culture experiences
• Conducting market research, product feedback collection, or audience preference mapping through game-based formats

2. Prohibited Content

• Content that is false, misleading, deceptive, or likely to confuse participants about the nature of what they are participating in
• Content that is defamatory, harassing, intimidating, threatening, abusive, or invasive of any person's privacy
• Content that infringes any third party's copyright, trademark, patent, trade secret, right of publicity, or other intellectual property rights
• Content that constitutes or promotes illegal activity, including fraud, money laundering, unlicensed gambling, or incitement to violence
• Sexually explicit, obscene, or pornographic content of any kind
• Content that promotes, glorifies, or incites hatred, discrimination, or violence based on any characteristic protected by applicable law
• Content designed to manipulate, psychologically harm, exploit, or coerce participants
• Content that contains or promotes any individual's personal data without their explicit consent
• Content targeted at children under 13 without compliant verified parental consent mechanisms
• Content that misrepresents the identity, views, or opinions of any real individual without their consent

3. Prohibited Technical Use

• Attempting to reverse-engineer, decompile, disassemble, or otherwise derive the source code or underlying algorithms of the platform
• Probing, scanning, or testing the vulnerability of the platform's infrastructure or security systems without prior written authorisation
• Interfering with or disrupting the integrity, performance, or availability of the platform or any connected systems
• Using the platform to transmit malware, viruses, ransomware, spyware, or any other malicious or harmful code
• Attempting to access any other Brand Admin's account, data, or campaign configurations without authorisation
• Creating or managing artificial, bot, or automated End User accounts to manipulate gameplay results, analytics, or leaderboards
• Overloading the platform with automated, excessive, or abusive request volumes
• Circumventing, disabling, or tampering with any security, access control, or authentication feature
• Using the platform to build or assist in building any offering that competes with Knowsy Konnect

4. Data Use Obligations

• You must have a valid and documented lawful basis under applicable data protection law before collecting personal data from any End User through the platform
• You must maintain a publicly accessible, compliant privacy policy for your End Users that accurately discloses your use of Knowsy Konnect and how that data is used
• Where applicable law requires explicit consent before collecting certain categories of personal data, you are responsible for obtaining and recording that consent before collection begins
• You must not sell, rent, exchange, or transfer End User personal data collected through the platform to any third party for their own commercial use
• You must not use gameplay or behavioural data to engage in any form of unlawful discrimination
• You must handle all data subject rights requests from your End Users in compliance with applicable law and your DPA obligations
• If any game topic or question references a real individual's name, likeness, identity, or attributed opinions, you must have that individual's prior explicit written consent

5. Enforcement

Luverly, Inc. reserves the right to investigate suspected violations. Where a violation is confirmed or reasonably suspected, we may issue a formal warning; require removal of offending content within a specified timeframe; temporarily suspend the Brand Admin's access; permanently terminate the account; and/or report the matter to relevant law enforcement or regulatory authorities. We will use reasonable efforts to provide prior notice before taking enforcement action except where doing so would be unsafe, would allow further harm, or is prohibited by applicable law. Account termination for AUP violation does not entitle the Brand Admin to a refund of any fees paid. To report a suspected AUP violation: support.knowsy@luverly.shop

These Terms of Service govern access to and use of Knowsy Kontest, a white-label contest engine offering where full white-labelling is available as an option. They are provided by Luverly, Inc. and apply to both Brand Admins who license, configure, and operate campaigns on the platform and Contestants who enter and participate in those campaigns. By accessing Knowsy Kontest in any capacity, you agree to these Terms in full.

A1. What Knowsy Kontest Is

Knowsy Kontest is a contest engine that operates on a VFP (Very Famous Person) mechanism. Contestants rank five items per topic in the order they believe a designated public figure would rank them, from most preferred to least preferred. Scores are calculated based on ranking proximity to the VFP's actual preferences and submission speed. There are no objectively correct answers. The scoring system is fixed across the platform and is not configurable per client, per campaign, or per topic. Full white-labelling is available as an option: Contestants interact with the Brand Admin's brand. Brand Admins who do not take the white-label option will display a "Powered by Knowsy" attribution. Luverly, Inc. provides the technology platform only and is not the sponsor, co-sponsor, or prize provider for any campaign operated on this platform.

A2. Licence

Luverly, Inc. grants the Brand Admin a limited, non-exclusive, non-sublicensable, non-transferable, revocable licence to access and use Knowsy Kontest during the subscription term solely for operating campaigns for the Brand Admin's designated audience. The offering is licensed, not sold. All provisions regarding fees, intellectual property, confidentiality, warranties, limitation of liability, and termination in the Knowsy Konnect Terms of Service (Sections A4 through A9) apply equally to Knowsy Kontest and are incorporated here by reference.

A3. VFP Obligations

The VFP is the individual whose genuine preferences form the basis of the campaign. Brand Admins are solely and entirely responsible for all VFP-related matters, including:

• Securing the VFP's prior explicit written consent, or that of their duly authorised legal representative, before naming, depicting, or attributing rankings or opinions to them in any campaign
• Ensuring the VFP's attributed rankings entered into the platform are genuine, accurate, and approved by the VFP or their authorised representative before being published to Contestants
• Ensuring the use of the VFP's name, likeness, image, voice, and attributed views complies with all applicable personality rights, right of publicity, defamation, and intellectual property laws in every jurisdiction where the campaign is accessible
• Not misrepresenting, fabricating, or materially distorting the VFP's actual views, preferences, or rankings in any published campaign material or promotional communication
• Not implying that the VFP commercially endorses the Brand Admin's products, services, or brand absent a separate written endorsement agreement expressly covering that claim

Luverly, Inc. bears no liability for any claims by or on behalf of any VFP arising from the Brand Admin's use of the VFP's identity or attributed opinions on the platform.

A4. Prize and Reward Obligations

• The Brand Admin is solely responsible for defining, funding, and distributing all prizes within the timeframe stated in the published official campaign rules
• The Brand Admin must comply with all applicable laws governing prize promotions, sweepstakes, competitions, and giveaways in every jurisdiction from which the campaign accepts entries
• The Brand Admin must publish complete, accurate, and legally compliant official campaign rules before the campaign opens for entries. Luverly, Inc.'s Contest Rules Template must be used as the basis for official rules
• The Brand Admin must handle all Contestant queries, complaints, and disputes relating to prizes fairly and in accordance with the published rules
• The Brand Admin is responsible for all tax reporting and withholding obligations associated with prizes

Winner identification data is made available to the Brand Admin through the campaign archive at Home, then All Campaigns, then Past Campaigns within the dashboard. The Brand Admin is solely responsible as data controller for all further processing of winner data.

A5. Access Roles and Approval Workflow

The Knowsy Kontest platform enforces a mandatory approval chain. Nothing is published or released to Contestants without it being completed.

• Platform Admin (Luverly, Inc. team): Full platform visibility; onboards clients; activates releases after Systems Super Admin approval; has no role in client content creation
• Systems Super Admin (Brand Admin senior operator): Full edit access within the client instance; approves all topic sets, item sets, release schedules, leaderboard timing, and reward configurations before anything goes live; receives in-platform notifications for all approval requests; approves all reward dispatch before any reward is sent to a winner
• Systems Admin (Brand Admin ground operator): Handles all content entry and configuration; content can be entered manually or imported via bulk Google Sheet upload; cannot approve or release anything without Systems Super Admin sign-off; three seats included per client instance by default
• Contestant: Authenticated end user who participates in the campaign; anonymous participation is not permitted

All approvals are actioned within the platform. No external communication between roles is required for the approval process to complete.

A6. Reward Configuration and Tracking

The platform supports tier-based periodic rewards, where different prize tiers are awarded based on leaderboard position at each leaderboard release, and a flat end-of-campaign grand prize for the overall campaign winner, both of which can operate simultaneously. All reward configurations must be approved by the Systems Super Admin before activation. All reward dispatch must be individually approved by the Systems Super Admin via in-platform notification before any reward is sent. The platform tracks reward status per Contestant as Won, Claimed, Pending, or Expired. Reward fulfilment logistics are managed entirely outside the platform by the Brand Admin.

A7. White-Label and Branding

Full white-labelling is available as an option for Brand Admins. Each Brand Admin receives a fully isolated brand skin with configurable elements including logo, primary and accent colours, typography, background assets, VFP banner images, loading and results screens, and all UI copy and microcopy. Changes to one client's branding have no effect on any other client instance. Brand Admins who do not take the white-label option will display "Powered by Knowsy" attribution on their campaign interface.

A8. Limitation of Liability

In addition to the general limitation of liability provisions from the Knowsy Konnect Terms of Service, Luverly, Inc. is expressly not liable for: any prizes, rewards, or campaign obligations owed by the Brand Admin to Contestants regardless of the circumstances; any claims by or on behalf of any VFP arising from the Brand Admin's use of their identity on the platform; any regulatory penalties arising from the Brand Admin's failure to comply with applicable prize promotion law; or any Contestant claims arising from the Brand Admin's campaign rules, prize structure, or fulfilment failures.

B1. What You Are Entering

When you participate in a Knowsy Kontest campaign, you are entering a competition run and sponsored by the Brand Admin, not by Luverly, Inc. The Brand Admin is responsible for the campaign, its rules, its prizes, and all obligations arising from your participation. Luverly, Inc. provides the technology platform the campaign runs on and is not a party to the campaign relationship between you and the Brand Admin. Your participation is governed by both these Terms and the Brand Admin's published official campaign rules.

B2. How Scoring Works

Each topic presents five items for you to rank in the order you believe the VFP would rank them. Your score is calculated on two components: proximity to the VFP's actual ranking, where a completely reversed ranking scores zero, and submission speed, where faster submissions earn additional points. Scores are not shown at the time of submission. Scores are revealed only when the leaderboard is released at the time configured by the Brand Admin. This delayed disclosure is a deliberate, fixed platform behaviour to maintain campaign integrity and prevent score-gaming of subsequent submissions. It cannot be modified by Brand Admins. Rankings are final once submitted and cannot be edited, changed, or withdrawn.

B3. Prizes

All prizes are offered, funded, and distributed by the Brand Admin. Luverly, Inc. bears no responsibility for prize availability, fulfilment, delivery, quality, tax implications, or any related disputes. All prize queries must be directed to the Brand Admin using the contact details published in the official campaign rules.

B4. Your Data

Your rankings, scores, submission timestamps, and gameplay data are processed by Luverly, Inc. on behalf of the Brand Admin and shared with that Brand Admin. Your contact details and prize eligibility status may be shared with the Brand Admin if you are a prize winner. Please refer to the Brand Admin's privacy policy. Luverly, Inc.'s Privacy Policy governs our own processing of your data.

B5. Conduct

You must not submit rankings on behalf of any other person, use automated tools or bots, attempt to manipulate or reverse-engineer the scoring system, create or use multiple accounts for the same campaign, share authentication credentials with others, engage in collusion, or take any action that undermines the fairness, integrity, or security of the campaign. Violations may result in disqualification.

B6. Age

You must be at least 13 years old to participate. Individual campaigns may impose higher age requirements under applicable local law. By submitting an entry, you confirm that you meet the applicable age requirement.

General Provisions

The general provisions from the Knowsy Konnect Terms of Service regarding governing law, entire agreement, severability, waiver, and changes apply equally to Knowsy Kontest. Contact: support.knowsy@luverly.shop | Luverly, Inc., California, USA

This DPA forms part of the Knowsy Kontest Terms of Service. It supplements and is to be read together with the Knowsy Konnect DPA. All definitions, general obligations, security measures, sub-processor rules, breach notification requirements, audit rights, and international transfer mechanisms from the Knowsy Konnect DPA apply equally here unless expressly varied below.

1. Parties, Roles, and Subject Matter

The Brand Admin is the Data Controller for all personal data collected from Contestants through the Brand Admin's Knowsy Kontest deployment. Luverly, Inc. is the Data Processor, processing Contestant data solely on documented instructions from the Brand Admin. The subject matter of this DPA is the processing of Contestant personal data necessary to operate campaigns on the platform, including contest entry management, score calculation, leaderboard management, reward eligibility determination, analytics generation, and notification trigger delivery.

2. Categories of Personal Data Processed

3. Prize Winner Data and Controller Responsibility

Winner identification data including Contestant names, contact details, prize tier achieved, and claim status is made available to the Brand Admin through the campaign archive. The Brand Admin is solely responsible as data controller for all subsequent processing of winner data for prize distribution, tax reporting, audit purposes, and any other prize-related function. Luverly, Inc.'s role regarding prize winner data terminates when the data is made available to the Controller through the campaign archive.

4. Data Residency

Luverly, Inc. is a US-headquartered entity and operates under US law as its primary governing jurisdiction. Where data is hosted in specific geographic regions, this reflects performance and client-preference considerations. Our infrastructure regions are subject to change as our operations evolve, and we do not warrant permanent data localisation in any specific region absent a written commitment in the applicable Order Form or written addendum to this DPA. Any client-specific data residency requirements will be agreed in writing and will take precedence over this general provision.

5. India DPDP Act 2023 Considerations

Where the platform processes personal data of data principals in India, the following additional considerations apply:

• The Brand Admin, as data fiduciary, is responsible for ensuring a valid consent notice meeting the requirements of the DPDP Act 2023 is presented to Indian Contestants before their personal data is collected. The Processor will provide reasonable technical assistance in implementing an appropriate consent mechanism within the platform interface where feasible
• Consent notices for Indian Contestants should be in clear and plain language, specify the purpose of processing, identify the data fiduciary, and provide information on how to access, correct, and erase personal data
• The Processor will assist the Brand Admin in responding to data principal rights requests under the DPDP Act 2023, including rights of access, correction, and erasure, within the timelines required under that Act
• The Processor will support the Brand Admin in fulfilling any applicable obligations to the Data Protection Board of India arising from this processing relationship
• Any specific data localisation requirements applicable to Indian personal data under the DPDP Act 2023 will be addressed through a written addendum to this DPA upon the Board's issuance of binding localisation rules

6. Tenant Isolation and Score Data Security

Each Brand Admin's Knowsy Kontest instance is fully isolated from all other instances. No data from one Brand Admin's campaigns is accessible to any other Brand Admin's instance or to any personnel other than authorised Luverly, Inc. Platform Admins. Each campaign's data is stored separately within the client instance. The scoring system processes and holds score data server-side without exposing it to Contestants until the scheduled leaderboard release. This control is fixed and cannot be disabled or modified by Brand Admins.

7. Retention and Deletion

Upon termination of the Knowsy Kontest Terms of Service, all Contestant personal data will be securely deleted or returned within 30 days, subject to legal retention requirements. Written confirmation of deletion is provided on request. The Brand Admin may request earlier deletion at any time by writing to support.knowsy@luverly.shop.

8. Contact

For all DPA queries relating to Knowsy Kontest: support.knowsy@luverly.shop

This AUP is incorporated into the Knowsy Kontest Terms of Service. All prohibitions and obligations in the Knowsy Konnect Acceptable Use Policy apply equally to Knowsy Kontest. This document sets out additional rules specific to the VFP mechanism, the campaign format, and prize promotion compliance.

1. Permitted Uses

• Running branded campaigns featuring a VFP whose participation rights have been properly and verifiably secured in advance
• Collecting Contestant behavioural and preference data as part of a lawful campaign with appropriate consent mechanisms and privacy disclosures in place
• Offering genuine prizes and rewards to Contestants, funded and fulfilment-ready before the campaign opens
• Deploying campaigns at live events, online, via app integration, QR code, or any other supported channel
• Using campaign analytics for internal business intelligence, strategy, and audience segmentation

2. VFP Consent and Use Rules

• You must obtain and retain the VFP's prior explicit written consent, or that of their duly authorised legal representative, before using their name, image, likeness, voice, or attributed opinions in any campaign. This consent must specifically cover the use of the VFP's identity in a ranking-based contest format
• The VFP's attributed rankings entered into the platform must be genuine and accurate, and must have been reviewed and signed off by the VFP or their authorised representative before being published to Contestants. Luverly, Inc. may request written evidence of VFP consent and approval at any time
• You must not misrepresent, fabricate, invent, or materially distort the VFP's actual views, preferences, or rankings in any material published to Contestants or in any promotional communication about the campaign
• You must not use the VFP's identity in a manner that is defamatory, sexually explicit, disparaging, or otherwise likely to harm their reputation or violate applicable personality rights or defamation law in any jurisdiction where the campaign is accessible
• You must not imply that the VFP commercially endorses your brand, products, or services absent a separate written endorsement agreement covering that claim
• If the VFP's consent is withdrawn at any time after the campaign has launched, you must immediately notify support.knowsy@luverly.shop. Luverly, Inc. may suspend or terminate the campaign if continued operation would expose either party to material legal risk

3. Campaign, Prize, and Legal Compliance Rules

• All campaigns must have complete, legally compliant official rules published and publicly accessible before the campaign opens for entries. You must use Luverly, Inc.'s Contest Rules Template as the basis and complete all required fields before publishing
• Your official rules must accurately state: all prizes and their approximate retail value; eligibility requirements; the entry method and deadline; the scoring methodology; the winner selection process; the prize fulfilment timeline; how disputes are resolved; governing law; and a contact for prize queries
• You must comply with all applicable laws governing prize promotions, sweepstakes, competitions, lotteries, and giveaways in every jurisdiction from which your campaign accepts entries
• You must fund all prizes in full before the campaign opens. You must not advertise, promise, or imply prizes that you cannot afford to fulfil
• You must distribute all prizes within the timeframe stated in your published official rules
• You must handle all Contestant prize disputes fairly, transparently, and in accordance with your published official rules

4. Contestant Protection Obligations

• You must not collect personal data from Contestants beyond what is reasonably necessary for the stated campaign purpose and what is disclosed in your official rules and privacy policy
• You must provide Contestants with a clear, accessible, and responsive contact method for prize queries, complaints, and data rights requests
• You must not use Contestant behavioural data to engage in any form of unlawful discrimination
• You must not sell or transfer Contestant personal data to any third party for their own commercial use

5. Enforcement

Luverly, Inc. reserves the right to immediately suspend any campaign we reasonably believe violates applicable prize promotion law, the VFP consent requirements, or the official rules requirements above; to require changes to official rules before a campaign reopens; and to request evidence of VFP consent at any time. Suspension does not entitle the Brand Admin to a refund of platform fees. The Brand Admin remains solely responsible for all prize and Contestant obligations arising from the campaign up to the point of any suspension or termination. To report a suspected AUP violation: support.knowsy@luverly.shop

NO PURCHASE NECESSARY TO ENTER OR WIN. A PURCHASE WILL NOT INCREASE YOUR CHANCES OF WINNING.

1. Sponsor

[BRAND ADMIN LEGAL ENTITY NAME], a [ENTITY TYPE] incorporated under the laws of [JURISDICTION], with its registered address at [REGISTERED ADDRESS] ("Sponsor"). This campaign is operated using the Knowsy Kontest platform provided by Luverly, Inc., California, USA. Luverly, Inc. is not a sponsor, co-sponsor, or prize provider and bears no responsibility for any aspect of this campaign or its prizes.

2. Eligibility

This campaign is open to legal residents of [ELIGIBLE COUNTRIES AND REGIONS] who are at least [MINIMUM AGE] years of age at the time of entry. [DESCRIBE ANY ADDITIONAL ELIGIBILITY REQUIREMENTS.] The following individuals are not eligible: employees, directors, officers, and contractors of Sponsor, Luverly, Inc., and their respective affiliates; and immediate family members (spouse, domestic partner, parent, sibling, and child regardless of where they reside) and members of the same household as any such person. This campaign is void in [LIST ANY EXCLUDED JURISDICTIONS] and wherever else prohibited or restricted by applicable law.

3. Campaign Period

• Entry opens: [DATE, TIME, AND TIMEZONE]
• Entry closes: [DATE, TIME, AND TIMEZONE]
• Topic release schedule: [DESCRIBE, for example: Topic 1 on Tuesdays at 9:00 AM, Topic 2 on Fridays at 9:00 AM each week]
• Leaderboard release schedule: [DESCRIBE, for example: every Sunday at 6:00 PM]
• Final results announced: [DATE AND TIME]
• Prize fulfilment deadline: [DATE]

Sponsor's servers are the official time-keeping device for this campaign. All campaign times are stored in UTC and displayed to Contestants in their local time. Entries received after the stated closing time for any topic will not be scored for that topic.

4. How to Enter

During the Campaign Period, access the campaign via [CAMPAIGN URL, QR CODE, OR APP NAME]. You must [DESCRIBE AUTHENTICATION METHOD]. Once authenticated, you will see the active topics for the current campaign week. For each topic, rank the five items presented in the order you believe [VFP NAME] would rank them, from most preferred (1) to least preferred (5). Submit your complete ranking before the topic window closes. Partial submissions are not accepted and will not be scored. Rankings are final once submitted and cannot be changed or withdrawn. Multiple accounts, automated submissions, and submissions on behalf of others are prohibited and will result in disqualification.

5. Scoring

Scores are calculated automatically after submission and are not revealed to Contestants until the scheduled leaderboard release. Each submission is scored on two components: proximity to [VFP NAME]'s actual ranking, where a completely reversed ranking scores zero, and submission speed, where faster submissions earn additional points. [DESCRIBE OR REFERENCE THE FULL SCORING FORMULA.] In the event of a tied score, [DESCRIBE TIE-BREAKING METHOD].

6. Prizes

Total approximate retail value of all prizes over the full campaign period: [TOTAL ARV AND CURRENCY]. Prizes are non-transferable. No cash substitution is permitted except at Sponsor's sole discretion. Sponsor reserves the right to substitute a prize of equal or greater value if any stated prize becomes unavailable.

7. Winner Selection, Notification, and Verification

Winners are determined by final leaderboard rankings as of the close of each leaderboard release period for periodic prizes or the campaign close date for the grand prize. Winners will be notified via [METHOD] within [NUMBER] days. Prior to receiving any prize, winners may be required to: complete and return an affidavit of eligibility and release of liability; provide age verification; provide tax information as required by applicable law; and consent to the publication of their username in connection with campaign results. Failure to comply within [NUMBER] days of notification may result in prize forfeiture and selection of an alternate winner.

8. Prize Fulfilment

All prizes are fulfilled solely by Sponsor. Luverly, Inc. bears no responsibility for prize fulfilment, delivery, quality, availability, or any prize-related disputes. All prize queries must be directed to [SPONSOR CONTACT EMAIL OR URL]. Prize-related taxes and duties are the sole responsibility of the winner.

9. Data and Privacy

Personal data collected during this campaign is processed in accordance with Sponsor's Privacy Policy [SPONSOR PRIVACY POLICY URL] and Luverly, Inc.'s Privacy Policy at knowsyknows.game. By entering, Contestants consent to Sponsor's use of their gameplay data for analytics, audience research, and internal business purposes as described in those policies. Winners consent to the publication of their username in connection with campaign results and leaderboard announcements.

10. Intellectual Property

All intellectual property in the campaign including topics, item descriptions, and the campaign interface is owned by Sponsor or its licensors. The Knowsy Kontest platform and technology are owned by Luverly, Inc. By entering, Contestants grant Sponsor a non-exclusive, royalty-free, worldwide licence to use their username for campaign result announcements for a period of 12 months after the campaign period ends.

11. Limitation of Liability and Release

By entering, each Contestant agrees, to the fullest extent permitted by applicable law, to release and hold harmless Sponsor and Luverly, Inc. and each of their respective officers, directors, employees, agents, and successors from any and all claims, damages, losses, costs, and liabilities arising out of participation in this campaign; acceptance, possession, or use of any prize; any technical failures or interruptions in the campaign platform; or any act or omission of Sponsor. Neither Sponsor nor Luverly, Inc. is responsible for late, lost, incomplete, garbled, or misdirected entries.

12. Disqualification

Sponsor and Luverly, Inc. reserve the right to disqualify any Contestant who violates these rules or the Knowsy Kontest Terms of Service; uses automated tools or bots; submits entries on behalf of others; creates multiple accounts; manipulates or attempts to manipulate the campaign mechanics or scoring system; provides false eligibility information; or engages in any conduct that undermines the fairness or integrity of the campaign.

13. Modification and Cancellation

Sponsor reserves the right to modify, suspend, postpone, or cancel this campaign at any time for any reason, with reasonable prior notice where practicable.

14. Governing Law and Disputes

This campaign and these rules are governed by the laws of [SPONSOR'S JURISDICTION]. Any dispute that cannot be resolved informally shall be submitted to [ARBITRATION, THE COURTS] of [JURISDICTION]. Contestants agree to resolve disputes on an individual basis and waive the right to participate in any class action or representative proceeding.

15. General

These rules constitute the complete, official, and binding rules for this campaign. In the event of any inconsistency between these rules and any promotional materials, these rules prevail. Questions and prize queries should be directed to [SPONSOR CONTACT EMAIL]. Sponsor's decisions on all campaign matters are final and binding.

This campaign is operated using the Knowsy Kontest platform provided by Luverly, Inc., California, USA. Luverly, Inc. is not the campaign sponsor and is not responsible for any aspect of this campaign or its prizes.