Privacy Policy

Effective date: 2026-10-09

ZNRUN TECH LIMITED ("we", "us") operates the MiniEpi platform: the website miniepi.com, the regional sites (tw01.miniepi.com (Taiwan), hk01.miniepi.com (HK), my01.miniepi.com (MY), sg01.miniepi.com (SG), kr01.miniepi.com (Korea), us01.miniepi.com (United States)) and the MiniEpi apps (together, the "Service"). This policy explains what personal data we collect, how we use and share it, how we protect it, and the rights you have. By using the Service you acknowledge that you have read and understood this policy.

1. Data controller

The controller of your personal data is ZNRUN TECH LIMITED, registered at ROOM B3,19/F,TUNG LEECOMMERCIAL BUILDING,91-97JERVOIS STREET,SHEUNG WAN HONG KONG, contact support@miniepi.com. The regional sites are operated by the same entity; where an "Operator information" notice on a site differs from this policy, that notice governs for that site.

2. What we collect

• Device identifier: a random ID created in your browser or app the first time you open the Service, used to recognise your account. It is not derived from hardware serial numbers or personal characteristics.
• Email address and nickname: provided when you sign in with an email verification code.
• Third-party sign-in data: if you sign in with Google, Facebook or Apple, we receive your name, email address and the user ID that service assigns, used only to identify and create your account. We do not receive your friends list and never post on your behalf.
• Tax or invoice details: entered by you only if you need a company invoice (optional).
• Transaction data: order number, items, amount, currency, time of payment and the transaction ID of the payment provider or app store. Card numbers and other payment credentials are processed by the payment provider or app store; we do not store them.
• Network and device information: IP address, country and city (as provided by the content delivery network), browser or app version, operating system, screen size and language settings.
• Usage records: viewing, favourites, unlocks, top-ups and subscriptions, and your correspondence with support.
• Attribution: when you arrive through an advertisement or a shared link, the source and click parameters carried by that link.

3. Purposes and legal bases

• Providing and maintaining the Service (performance of a contract): recognising your account, crediting and deducting coins, activating membership, remembering your viewing position, syncing across devices.
• Processing transactions (contract and legal obligation): completing payments, sending receipts or invoices, handling refunds and disputes, keeping transaction records as tax law requires.
• Customer support (contract): answering your questions, feedback and complaints.
• Security and fraud prevention (legitimate interest): detecting abnormal traffic, preventing fraud, chargeback abuse and misuse, protecting licensed content.
• Analytics and improvement (legitimate interest): analysing usage in aggregated or de-identified form to improve recommendations and playback.
• Advertising measurement (your consent, withdrawable at any time): sending de-identified or hashed events to advertising platforms to measure campaigns and avoid double counting; see section 8.

4. Who we share data with

We do not disclose your personal data to third parties except:

• Payment providers and app stores: Stripe, PayPal, Antom / Alipay+, XPay and their acquiring merchants (as shown at checkout), and Apple App Store and Google Play for in-app purchases.
• Infrastructure providers: cloud hosting, object storage, content delivery networks (for example Cloudflare) and email delivery providers, acting only on our instructions.
• Sign-in providers: Google, Facebook and Apple, only when you choose to sign in with them.
• Advertising platforms such as Meta, which receive only de-identified or hashed event data (section 8).
• Authorities and courts: where required by law, court order or due process. Our procedure for government data requests is described on the Contact page.
• Corporate transactions: in a merger, acquisition or asset transfer your data may be transferred to the successor under equivalent protection; we will notify you in advance.

5. International transfers

Our servers are located in Hong Kong; video and image storage and content delivery nodes are located in the United States and other regions; payment, email and advertising providers may be located outside your country. Your data may therefore be transferred outside your country or region. We require our providers by contract to apply equivalent safeguards.

6. Retention

• Account data: for as long as your account exists; deleted when you delete your account (see "How to delete your account").
• Transaction records: for the period required by the tax and consumer-protection laws of your region (generally five to seven years), then deleted or de-identified.
• Access logs: thirty days, with IP addresses stored as hashes.
• Analytics events: stored under an internal account ID without name or email; aggregated or deleted when no longer needed.

7. Your rights

You may access, obtain a copy of, correct or complete your personal data, ask us to stop collecting, processing or using it, and ask for its deletion. You may withdraw consent at any time (without affecting processing before withdrawal) and opt out of marketing messages.

How: sign in and go to "Me → Account" to edit your data or delete your account, or email support@miniepi.com; we respond within thirty days. Where the law requires us to keep certain data (for example transaction records) we may decline deletion for that period and will tell you why.

• Taiwan: these rights follow Article 3 of the Personal Data Protection Act.
• Korea: under the Personal Information Protection Act you may request access, correction, deletion and suspension of processing; personal data of children under 14 is collected only with the consent of a legal guardian. The privacy officer can be reached at the support address above.
• EEA and UK: under the GDPR / UK GDPR you also have the right to data portability and to lodge a complaint with your supervisory authority.
• Other regions: you may exercise the rights granted by your local law; where local law protects you more than this policy, local law prevails.

8. Cookies, local storage and advertising pixels

• We use browser local storage and cookies to keep your device identifier, sign-in state and preferences; the Service does not work properly without them.
• The websites may load pixels or conversion tools from advertising platforms such as Meta to measure campaigns and avoid double counting; the events sent are de-identified or hashed. You can limit this tracking in each platform's personalised-advertising settings or on your device. The apps do not load advertising pixels.
• To protect the Service we may restrict suspicious traffic (for example automated scripts); those records do not contain plain IP addresses.

9. Security

We protect your data with encryption in transit, access control, audit logging and data minimisation. Payment data is handled by certified payment providers or app stores and is never stored by us. No internet service can be completely secure; if a data breach occurs we will notify you and the competent authority as the law requires.

10. Children

The Service is not directed at minors. In Taiwan, users under 18 must use the Service with the consent of a legal guardian; in Korea, users under 14 and, elsewhere, users below the local age of consent may not use the Service without such consent. If you learn that we have collected a minor's data without the required consent, tell us and we will delete it promptly.

11. Third-party sites and payment pages

During payment you may be taken to the pages of a payment provider or app store; data you enter there is governed by that provider's privacy policy. We are not responsible for the content or privacy practices of external sites.

12. Changes

We may revise this policy. Revisions are published on this page with an updated effective date; material changes are announced in the Service, in the app or by email.

13. Contact

For any question or request about this policy or your personal data, email support@miniepi.com.

Operator