Effective date: July 18, 2025
At Muncho, safeguarding your privacy is our priority. Familiarize yourself with the details below to understand our approach to handling your personal data. By engaging with our Services, you recognize and agree to the terms described in this Privacy Policy, granting us permission to gather, process, and distribute your information as specified.
Always note that when using Muncho's Services, you're also bound by our Terms of Use, which includes this Privacy Policy. Any undefined terms in this Policy are clarified in our Terms of Use.

 

Overview
This Privacy Policy details our handling of Personal Data obtained when you engage with our Services. Here, "Personal Data" refers to any information associated with or identifying an individual, often termed as" personally identifiable information "or" personal information" under relevant data protection laws and guidelines. The policies of entities not owned or directed by us, or individuals not under our supervision, are not included within this Privacy Policy.

 

How We Obtain Your Personal Data
We gather your Personal Data from the following sources:
Directly from You:
◦When you voluntarily share such information with us, and
◦As a result of your engagement with our Services when certain Personal Data is automatically recorded.

From Third Parties (“Third Parties”) who share information about you with us, such as: 
◦Service providers. For instance, we may collaborate with analytics providers to understand your interactions with our Services, or other third parties might aid us in offering customer support.
◦Linked social media. If you link your social media accounts with our Services or login through a third-party platform, be aware that some details or content from those accounts might be integrated into your account with us.
◦Marketing allies. Some of our service providers who support our marketing and promotional endeavors share insights about your interactions with our web platforms, apps, products, services, advertisements, or communications.

Types of Personal Data We Gather
Below is a list specifying the types of Personal Data we've accumulated, both currently and in the previous twelve (12) months. In subsequent sections of this Privacy Policy, we will refer to these types using labels such as" Category A. Personal Identifiers".

  

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

More About How We Collect Your Personal Data
Automated Data Collection
Our Services employ cookies and related technologies like pixel tags, web beacons, and JavaScript, collectively referred to as "Cookies." These allow our servers to identify your browser, track your interaction with our Services, analyze user patterns, and refine our offerings. Cookies are tiny data bits, mostly text, stored on your device when you access our Services. We might also integrate the data we gather with information from third parties, which might have placed their own Cookies on your devices. Presently, our use of Cookies means we do not recognize “Do Not Track” browser requests.
We deploy various Cookies:
1.    Essential Cookies: Crucial for certain features or services you request. For instance, they allow access to secure parts of our services. Disabling them might limit some functionalities.
2.    Functional Cookies: Remember your Service-related choices and settings. They let us tailor our content, remember preferences like language, and recognize return users.
3.    Performance/Analytical Cookies: Help us understand user behavior on our Services, like page views or visit or numbers. They also measure our ad campaign efficiency. We might use tools like Mix panel or Looker for device metrics and analytics.
4.    Retargeting/Advertising Cookies: Track online activity to provide more relevant advertisements. More details are in the section “Information about Interest-Based Advertisements.”
You can manage Cookie preferences in your browser's settings. Most browsers let you disable Cookies or decide on their acceptance. Deleting Cookies might mean manually resetting some preferences during subsequent visits, potentially hindering some functionalities.
For a deeper dive into Cookie management and deletion, please visit http://www.allaboutcookies.org/.
About Interest-Based Advertisements:
We might display advertisements and permit third-party advertising networks, including agencies, technology vendors, and research entities, to showcase ads via our Services. These ads might be oriented towards users matching specific profiles or showcasing certain behaviors or preferences ("Interest-Based Ads"). The data behind these ads, which might include Personal Data, can be sourced from user activity on our Services, third-party services, or provided by you.
This tracking could span various services and times, even after you exit our Services.
To facilitate this, we or our partners might use Cookies and web beacons‒files from ad networks delivered through our Services. These beacon said in anonymous, aggregate research,  reporting, and ad targeting. They also let these networks present tailored ads to you on different platforms. Such beacons enable these ad networks to interact with or set their Cookies on your browser, similar to accessing a web page from their domain.
We ad here to the Digital Advertising Alliance’s (“DAA”) guidelines for Online Behavioral Advertising. Alongside the Network Advertising Initiative (“NAI”), multiple marketing and media bodies have devised a self-regulation strategy to give users a clearer picture and greater management over behavior-driven ads spanning various online platforms. For choices about Interest-Based Ads,including opt-out options from certain behavioral ads, please visit the DAA’s or NAI’s opt-out pages at http://www.networkadvertising.org/choices/ or  www.aboutads.info/choices.

Utilization of Your Personal Data
We leverage your Personal Data to improve, enhance, comprehend, personalize, and administer our Services.
Your Personal Data aids using:
•    Addressing the intent for which you shared the information.
•    Engaging with you about our Services, including announcements, updates, or opportunities.
•    Offering support and help related to our Services.
•    Establishing and overseeing your Account or user profiles.
•    Customizing content and communications based on your inclinations, inclusive of relevant offers and ads.
•    Handling orders or other transactions.
•    Addressing user queries and meeting their requests.
•    Refining and expanding our Services through research, testing, analysis, and innovation.
•    Safeguarding against illicit, harmful actions, ensuring our Services' security and integrity.
•    Meeting legal, contractual duties, settling disputes, and upholding our Terms of Use.
•    Adhering to law enforcement and other mandatory legal, regulatory directives.
•    Other professional objectives disclosed during data collection or as mandated by data protection regulations like the California Consumer Privacy Act (CCPA).
We won't gather new Personal Data categories or utilize previously gathered data for substantially divergent or unrelated aims without notifying you.
Should you provide communication means, such as an email address, we may reach out with promotional offers or updates regarding Service usage. For instance, email openings can be confirmed by us to refine our Services. If you'd rather not receive our communications, kindly communicate your preference to info@muncho.ai.
Handling and Disclosure of Your Personal Data
Business-Related Disclosures of Personal Data
We collect and upload users' Phone Number information via Unionpay SDK. For specific operational purposes, we share your Personal Data with service providers and relevant entities:
•    Auditing linked to ongoing interactions and related operations, such as counting unique ad viewers, validating ad placements, ensuring ad impression quality, and ensuring adherence to guidelines and standards.
•    Detecting and counteracting security breaches, malicious or deceptive actions, and pursuing perpetrators of such activities.
•    Debugging to pinpoint and rectify issues affecting the intended functionality.
•    Brief, immediate usage of Personal Data, ensuring it's not employed by third parties for constructing consumer profiles or modifying your user experience beyond the current transaction.
•    Delivering services, including account management, order processing, customer support, payment processing, marketing and advertising services, analytics, and other similar functions.
•    Engaging in research for tech enhancement and demonstrations.
•    Activities that ensure or improve the quality or safety of our services or devices that we own, have produced for us, or oversee.
Data acquired via our short code program remains confidential and isn't shared with third parties for marketing purposes.
Your Personal Data is shared with the following entities:
•    Service providers, encompassing::
◦ Payment handlers.
◦ Food service integration platforms, including restaurant POS vendors.
◦ Ad consortiums.
◦ Security and fraud prevention experts.
◦ IT and communication providers.
◦ Data analytics companies.
◦ Temporary staffing and contract professionals.
•    Entities that may gain access to your Personal Data through business transitions, like mergers or acquisitions.
•    Other entities based on your guidance, such as:
◦ Other users (if you share information publicly or for transaction purposes).
◦ Social media platforms (if actively engaged through our Services).
◦ Third-party business allies accessible via our Services.
◦ Any other party you grant permission to.
In the past year, we've shared these categories of your Personal Data for operational reasons:
A. Personal identifiers.
B. Customer records identified by state law.
C. Protected classification characteristics under state or federal law.
D. Commercial information.
F. Internet or other similar network activity information.
G. Geolocation data.
J. Non-public education information.
K. Inferences drawn from other personal information.
L. Age or date of birth.
In this section, we employ the term "sell" as articulated by the CCPA. We might share your Personal Data with third-party entities, including analytics providers, to facilitate our Muncho services. Although we don't receive financial compensation from our analytics partners, such sharing might be interpreted as a "sale" under relevant privacy regulations. We sell your Personal Data, but you retain the right to decline such sales (refer to the “Your Rights” segment below for opt-out details).
In the previous year, the categories of your Personal Data we've sold to third parties include:
A. Personal identifiers.
B. Customer records identified by state law.
C. Protected classification characteristics under state or federal law.
D. Commercial information.
F. Internet or other similar network activity information.
G. Geolocation data.
J. Non-public education information.
K. Inferences drawn from other personal information.
L. Age or date of birth.
Protecting and Storing Your Personal Data
We prioritize safeguarding your Personal Data against unauthorized access, usage, and disclosure by implementing suitable physical, technological, organizational, and administrative security protocols based on the nature of the Personal Data and our processing methods.
It's essential that you also contribute to the security of your data, such as by choosing strong passwords, limiting device and browser access, and ensuring you log out after using your account.
While we are committed to data protection, complete online data security isn't guaranteed. Except where mandated by law, we aren't liable for any unintended disclosure, theft, loss, or damage to your information.  We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

Children's Personal Data
As highlighted in our Terms of Use, we intentionally avoid collecting Personal Data from children under 16. If you're below this age, please refrain from registering or using our Services or sending any Personal Data. If we become aware of collecting data from someone under 16, we'll promptly delete it. If you suspect a child under 16 has shared data with us, please inform us at info@muncho.ai 

Rights of California Residents
For those residing in California, you're entitled to the rights explained in this section. For guidance on exercising these rights, refer to the subsequent “Exercising Your Rights” section. In case of discrepancies between this section and other Privacy Policy provisions, the more data-protective clause prevails for California residents. Queries can be directed to info@muncho.ai

Access
You can request details about our Personal Data collection and usage over the past year. We'll disclose:
•    Categories of Personal Data collected
•    Origins of the collected Personal Data
•    Our purpose for collecting or selling your Personal Data
•    Third parties with whom we've shared your Personal Data
•    Specific pieces of your Personal Data collected
If your Personal Data has been shared for business reasons in the past year, we'll list the types of data shared with each third-party category.
If we sold your Personal Data within the last year, we'll indicate which categories were acquired by each third-party category.

Deletion
You can request the deletion of your Personal Data. Under the CCPA, exceptions exist — for instance, retaining your Personal Data might be necessary for service provision or to finalize a requested action. If such exceptions apply, we might refuse your deletion request.

Exercising Your Rights
For exercising the above rights, your request should:
1.    Verify your identity based on the collected Personal Data, and
2.    Sufficiently detail your request.
A request meeting these conditions is deemed a “Valid Request.” We might not address incomplete requests. Personal Data from a Valid Request will only be used to verify your identity and address your request. An account isn't necessary for a Valid Request.
We aim to address Valid Requests within 45 days of receipt. While typically free, excessive or unfounded Valid Requests might incur fees. If applicable, we'll inform you of the fee and its justification before addressing your request.
Valid Requests can be sent to our email: info@muncho.ai 

Opting Out of Personal Data Sales
Commitment to Fair Practices
Exercising your rights under the CCPA won't subject you to discriminatory treatment by us. Specifically:
•    We won't withhold our products or services.
•    We won't modify the prices or rates you're charged.
•    We won't offer you a diminished quality of goods or services.
Nevertheless, in compliance with data privacy laws (including the CCPA), we might offer varied Service tiers, which may have differential pricing, quality, or rates. These differences correspond to the value of the Personal Data we obtain from you.

Additional State-specific Privacy Rights
For California Residents:
Pursuant to California Civil Code Sections 1798.83–1798.84, residents of California have the right to request that we avoid sharing Personal Data with third parties for those parties' direct marketing objectives.
For such requests, reach out to us at info@muncho.ai. 

For Nevada Residents:
If you reside in Nevada, you can opt out from the sale of certain Personal Data that may be sold or licensed to third parties.
To exercise this right, contact us at info@muncho.ai with "Nevada Do Not Sell Request" in the subject line. Please provide your name and associated account email address.

Updates to the Privacy Policy
As we continually aim to enhance our Services, this Privacy Policy may require periodic updates. We’ll notify you of significant changes by posting a notice on the Muncho.co website, emailing you, or through other suitable methods.
If you have opted out of receiving legal notice emails from us (or if we don’t have your email address), you’re still bound by these notices. Using the Services after modifications indicates your consent to the updated Privacy Policy. The application of collected information adheres to the Privacy Policy active at the time of collection.

Get in Touch
Any disputes related to this Privacy Policy will be resolved according to the dispute resolution terms outlined in our Terms of Use.
For queries or remarks about this Privacy Policy, or if you'd like to discuss our collection and use of your Personal Data, or any associated rights, kindly reach out to us at: info@muncho.ai 

Xiaocun, Inc.