Sallar Lite — Terms of Use

Effective date: 2026-10-25
Last updated: 2026-10-25

Operator: Astral Hodling OÜ, Lõõtsa tn 5, 11415 Tallinn, Estonia

Contact: contact@sallar.io

---

1. Acceptance of These Terms

These Terms of Use constitute a legally binding agreement between you and Astral Hodling OÜ governing your access to and use of the Sallar native applications, Sallar Lite for mobile devices (iOS and Android) and Sallar Desktop for desktop computers (macOS and Windows) (together, the App), and associated services provided through it.

By downloading, installing, accessing, or using the App, you acknowledge that you have read and understood these Terms and agree to be bound by them.

If you do not agree to these Terms, you must not use the App.

Our Privacy Policy explains how personal data is collected, processed, protected, retained, and deleted. It should be read together with these Terms.

Use of the App is also subject to our End User License Agreement (EULA) and any applicable requirements of the platform through which the App is distributed.

Nothing in these Terms excludes or limits rights that cannot lawfully be waived under applicable consumer protection, data protection, or other mandatory laws.

2. About the Service

Sallar Lite is a utility application that enables compatible devices to participate in a distributed computing network and, where available, allows users to contribute voluntarily to the verification and analysis of publicly accessible information through the Tasks feature.

2.1. Network Functionality

The App enables users to connect compatible devices to a distributed network operated by Sallar and contribute available computing resources to supported workloads.

These may include network operations, technical processing, and AI-related workloads, where supported.

Available functionality may include:

• Device pairing and connection management.
• Starting and stopping network participation.
• Displaying device connection status.
• Viewing basic device hardware specifications.
• Displaying operational indicators, including Epoch and Uptime.
• Managing network-related settings.

Detailed network-wide node statistics and historical node information are not provided through the current mobile interface.

Technical information necessary for network operation, verification, security, and reliability may continue to be processed by the underlying infrastructure.

2.2. Voluntary Tasks

The App may provide an optional Tasks feature supporting structured verification and analysis of publicly accessible information from social media platforms. Tasks form part of a community-powered, distributed analytical workflow: participating users carry out individual verification steps, while Sallar coordinates assignments and processes the results.

Sallar identifies the public sources to be examined and assigns specific activities to participating users.

Tasks may involve:

• Visiting designated public social media accounts.
• Checking whether new content has been published.
• Confirming the presence or absence of new posts.
• Providing links to publicly accessible posts.
• Examining posts or comments identified through earlier submissions.
• Capturing or selecting screenshots for local text recognition.
• Answering structured questions concerning publicly available information.

Related Tasks may be completed by the same participant or assigned to different participants.

The resulting information may support market research, competitive intelligence, counterparty research, industry monitoring, verification of public communications, and analytical reporting.

Screenshots remain on the user's device. Where screenshot processing is required, text recognition is performed locally, and only the extracted text necessary for verification and analysis is transmitted, together with technical recognition details (the recognition engine, the languages used, the operating-system version and the time the recognition took) and a cryptographic fingerprint (SHA-256 hash) of each screenshot, which does not reveal its content, as described in our Privacy Policy.

Where supported, successfully completing a Task and having its result verified and accepted by Sallar increases the participant's priority for eligible compute workload assignments in Sallar's web and desktop applications, subject to the conditions in Section 5A.4 and the applicable terms of those services. This is not a cash payment or a guarantee that any workload will be assigned.

Tasks are governed by the additional conditions in Section 5A.

2.3. Nature of the App

Sallar Lite is not a financial product.

The App does not provide cryptocurrency trading, brokerage, investment services, deposits, withdrawals, digital asset custody, or payment functionality.

Operational indicators displayed within the App describe technical activity, device status, or task-related information.

Related web and desktop applications and services, where available, are governed by their own applicable terms. These Terms describe how verified Tasks completed in the App may affect priority for compute assignments in those services, but do not override their eligibility, security, scheduling, or other applicable requirements.

Priority Points assigned to a Task describe the urgency of that Task; they are not a user's earned points or credits. A compute-priority increase arising from verified Task completion is a separate operational scheduling benefit, not a payment, transferable asset, or guarantee of computing work, revenue, or other financial return.

The availability of individual features may depend on device compatibility, operating-system limitations, regional availability, applicable law, and operational requirements.

3. Eligibility

By using the App, you confirm that:

• You are at least sixteen (16) years old, or meet any higher minimum age required by applicable law.
• You have the legal capacity or necessary authorisation to enter into these Terms.
• You are not prohibited from accessing the App under applicable law, including relevant sanctions and export-control requirements.
• Information you voluntarily provide is accurate and not intentionally misleading.
• You will use the App only for lawful purposes and in accordance with these Terms.

The App is not directed to children under sixteen (16).

Certain features may be restricted or unavailable based on age, region, device compatibility, applicable law, or third-party platform requirements.

4. Device Pairing and App Profile

4.1. Device Pairing

To use network functionality, you may need to pair your device with a mother node using a pairing code or QR code provided by Sallar or an authorised network operator.

Pairing establishes the technical association required for supported network functions.

The App may generate a device or installation identifier during initial setup to recognise the same installation across sessions.

You may optionally provide an email address for service communications, technical support, or security notices, as described in our Privacy Policy.

4.2. User Responsibilities

You are responsible for:

• Protecting your device, pairing codes, and access credentials.
• Using the App only on devices you own or are authorised to operate.
• Maintaining reasonable security measures on your device.
• Avoiding unauthorised modifications intended to manipulate technical activity or verification results.
• Promptly notifying us of suspected unauthorised pairing, lost credentials, or device compromise.

Suspected incidents may be reported to contact@sallar.io.

4.3. Pairing Restrictions

We may refuse, restrict, suspend, or revoke pairing where reasonably necessary because of:

• Suspected fraud or abuse.
• Invalid or compromised credentials.
• Device integrity failures.
• Security threats.
• Technical manipulation.
• Violations of these Terms or applicable law.

Such measures will be proportionate to the circumstances and subject to applicable legal requirements.

4.4. Tasks Availability

Access to Tasks may depend on supported functionality, technical compatibility, regional availability, and operational conditions.

Pairing a device does not guarantee the availability of Tasks or create an entitlement to receive any particular Task.

Where specific technical eligibility requirements apply, they are determined by the supported functionality and communicated through the App.

5. Acceptable Use

You agree to use Sallar Lite lawfully and in a manner that does not compromise the App, its infrastructure, other users, or third parties.

You must not:

• Use the App for unlawful, fraudulent, deceptive, harmful, or abusive purposes.
• Violate applicable laws, regulations, intellectual property rights, privacy rights, or other third-party rights.
• Access accounts, devices, networks, systems, or information without authorisation.
• Interfere with, disrupt, overload, damage, or impair the App or its associated infrastructure.
• Introduce malware, ransomware, spyware, or other malicious software.
• Conduct unauthorised network scanning, exploitation, denial-of-service attacks, or similar activities.
• Operate unauthorised proxies, VPN relays, traffic tunnels, spam infrastructure, or similar services through the App.
• Falsify, replay, inject, manipulate, or suppress workload results, runtime responses, device signals, uptime measurements, participation indicators, or technical verification data.
• Circumvent pairing, authentication, attestation, workload-verification, security, or anti-abuse mechanisms.
• Access, retain, disclose, reconstruct, or use confidential workload information or protected technical materials outside their authorised purpose.
• Reverse-engineer, decompile, disassemble, or attempt to extract protected source code, except where permitted by mandatory applicable law.
• Copy, redistribute, sublicense, sell, lease, or modify the App without appropriate authorisation.
• Sell, share, or transfer pairing credentials or protected App access to unauthorised third parties.
• Use bots, scripts, automated clients, emulators, or other non-human means to access protected App functionality unless expressly authorised by us.
• Frame, mirror, or reproduce protected App interfaces or associated web resources without appropriate authorisation.
• Scrape or automatically extract non-public information from protected App interfaces, backend endpoints, workload systems, or technical resources without authorisation.
• Use confidential network information, protected workload outputs, or proprietary technical materials to reproduce or exploit protected Sallar services without authorisation.
• Use the App in safety-critical circumstances where its failure could cause death, injury, or serious physical or environmental damage.

These restrictions do not prohibit lawful independent development, legitimate competition, use of publicly available information, or activities expressly permitted by applicable law or open-source licences.

Tasks-Specific Restrictions

When participating in Tasks, you must not:

• Submit intentionally false, fabricated, or manipulated information.
• Alter screenshots or extracted text to misrepresent the original content.
• Misrepresent the source, publication date, meaning, or context of a post.
• Submit private communications, passwords, authentication credentials, or access-restricted information obtained without authorisation.
• Deliberately include unrelated, unnecessary, or unlawfully obtained personal information.
• Circumvent access restrictions or security measures imposed by third-party platforms.
• Use Tasks to facilitate unlawful surveillance, harassment, impersonation, spam, or artificial manipulation of social media engagement.
• Manipulate task validation, priority indicators, deadlines, or submission-processing mechanisms.
• Use automated submission methods where human participation is required, unless expressly authorised.
• Submit information that you are not lawfully permitted to access or provide.

Sallar Lite never requires users to disclose private messages, social media passwords, authentication codes, or private account access information to complete Tasks.

We may investigate suspected violations and take proportionate measures, including rejecting submissions, restricting Tasks, limiting network functionality, suspending pairing, or terminating access.

Where appropriate and legally permitted, serious incidents may be reported to competent authorities.

5A. Voluntary Tasks

5A.1. Purpose

The Tasks feature enables users to voluntarily contribute to the verification and analysis of publicly accessible information from social media accounts.

Tasks may support:

• Monitoring of public communications and published information.
• Verification of newly published posts.
• Identification of relevant sources and publication dates.
• Assessment of the accuracy and consistency of publicly available content.
• Analysis of public communications and observable trends.
• Market and industry research.
• Competitive intelligence and business analysis.
• Counterparty research and verification.
• Preparation of analytical findings, summaries, and reports.

Tasks are not intended to access private accounts, obtain confidential information, or manipulate engagement on social media platforms.

Sallar determines the public sources and the analytical requirements associated with each Task.

5A.2. Voluntary Participation

Participation in Tasks is voluntary.

Users may choose whether to accept an available Task and may leave a Task through the available App controls.

The availability of a Task does not create an obligation to complete it.

Failure to complete a Task does not, by itself, constitute a violation of these Terms.

Declining or disabling Tasks does not, by itself, prevent the use of otherwise available network functionality; however, it does not provide any new compute-priority benefit from Task completion.

Tasks may expire, become unavailable, or be withdrawn before completion.

5A.3. Task Assignment and Types

Sallar designates the public social media accounts or specific content to be examined.

Tasks may be divided into related stages.

Public account verification

Users may be instructed to visit a designated public social media account and determine whether new content has been published.

Depending on the Task, users may confirm whether a new post exists or whether no relevant new content is available.

Post identification

Where a new or relevant post is identified, users may be asked to provide its publicly accessible URL.

The submitted link may be used by Sallar to coordinate subsequent verification or content-analysis Tasks.

Content examination

The same user or another participant may be assigned a Task concerning a previously identified public post.

Such Tasks may involve examining the content of the post, its publicly accessible comments, or specific information contained in the publication.

Text extraction

Users may capture or select a screenshot and crop it to the relevant text.

Text recognition is performed locally on the device, and only the extracted text required for the Task is submitted to Sallar, with the technical recognition details and screenshot fingerprint described in our Privacy Policy.

Structured questions

Tasks may also require answers concerning publication dates, numbers, factual statements, or other observable information.

Each Task may display instructions, estimated duration, submission requirements, priority, and remaining completion time.

Where supported, the First available function selects the highest-ranked available Task according to the order supplied by the service.

5A.4. Priority System and Compute Assignment Priority

Task Priority Points

Tasks may be assigned Priority Points according to their operational urgency and completion deadlines.

Tasks with shorter completion deadlines generally receive higher Priority Points, while Tasks with longer deadlines receive lower scores.

Priority Points are used to organise available Tasks, indicate their urgency, and support task selection and execution. They are attributes of the Tasks, not points earned by participants, and do not themselves represent money, rewards, or compute-assignment priority.

Priority for compute workloads in Sallar web and desktop applications

Successfully completing a Task whose submission is verified and accepted by Sallar increases the participant's priority for eligible compute workload assignments in Sallar's web and desktop applications, where these services support the benefit and the participant can be associated with the relevant account or device.

This compute-assignment priority is distinct from the Priority Points displayed on Tasks. A high-urgency Task does not, solely because of its displayed Priority Points, establish a particular amount or duration of increased compute priority.

The benefit affects scheduling priority among eligible participants. It does not guarantee assignment of any particular workload, a minimum workload volume, a fixed queue position, a specific duration of priority, payment, or any financial outcome. The actual allocation of workloads remains subject to availability, device compatibility, network conditions, security and integrity requirements, operational scheduling, and the applicable terms of the web or desktop service.

Rejected, invalid, fraudulent, or otherwise unaccepted submissions do not qualify for this increase. Priority status may be corrected or withdrawn if an accepted submission is subsequently invalidated or if misuse is established, subject to applicable law and the relevant service terms.

Where needed to apply the benefit, Sallar may process a limited record of verified Task participation and current compute-priority eligibility in accordance with Section 5A.6 and the Privacy Policy. Neither screenshots nor original OCR text need to be retained to provide the benefit.

5A.5. Screenshots and On-Device Processing

Screenshots selected or captured for Tasks remain on the user's device.

The App does not upload original screenshots to Sallar servers.

Where supported, users may select screenshots through the operating system's image or file selection interface, share them with the App, and crop them locally.

Users are instructed to crop screenshots to the content relevant to the Task, excluding account identifiers, usernames and profile pictures other than those of the account named in the Task, and any unrelated information.

Optical character recognition (OCR) is performed on the device.

For screenshot-based Tasks, only the extracted text required for verification and analysis is transmitted to Sallar, together with technical recognition details (the recognition engine, the languages used, the operating-system version and the time the recognition took) and a cryptographic fingerprint (SHA-256 hash) of each screenshot, which does not reveal its content.

Other Tasks may involve submitting public post links or structured answers.

The App does not automatically scan the user's photo library, continuously monitor the screen, or upload unrelated files.

Users remain responsible for managing screenshots stored on their devices.

5A.6. Submission Verification and Analytics

Submitted information may undergo automated technical and analytical verification.

Verification may include:

• Checking whether the required public content exists.
• Confirming relevant publication activity.
• Assessing whether submitted information corresponds to the assigned Task.
• Comparing observations relating to the same public source or post.
• Detecting duplicate or inconsistent submissions.
• Assessing publication timing, relevance, and content accuracy.
• Identifying incomplete or outdated information.

Sallar processes submitted OCR text using its own analytical model.

Temporary storage of raw content

Raw OCR text and temporary content-processing information are kept in the Tasks database only until the submissions concerning the same Task reach a final verification outcome (consensus), and are then deleted. Where no final outcome is reached, they are deleted at the latest 7 days after submission.

This includes temporary comparisons of submissions concerning the same public content.

Raw OCR content is not written to application logs or persistent caches. Database backups may contain it for up to 7 days, until they are overwritten.

Once raw content has been deleted, further verification relies only on verification outcomes that do not contain the original text, or on separately retained public source references.

Public source references and coordination

Public social media account references, post links, publication metadata, and other information necessary to coordinate related Tasks may be retained separately from raw OCR content.

These records may be used to:

• Assign subsequent Tasks.
• Identify previously examined public sources.
• Coordinate verification across different participants.
• Avoid unnecessary duplicate assignments.
• Verify the origin and relevance of information.
• Support analytical reporting.

Public source references and coordination records are subject to the retention and deletion limits in our Privacy Policy.

References to monitored public accounts are reviewed for continued necessity at least every six months. References no longer required for an active monitoring or verification purpose are deleted within 30 days, unless a lawful retention requirement applies.

Public post links are deleted within 90 days after completion of the related Tasks and verification, and no later than 180 days after their initial registration, unless a specific legal obligation requires longer retention.

Analytical results

Sallar's analytical model extracts information relevant to the defined research purpose while minimising unnecessary personal data.

The processing may produce:

• Factual observations.
• Topic classifications.
• Relevant publication and event information.
• Market and industry findings.
• Business and competitive analysis.
• Statistical observations.
• Trends and analytical conclusions.

Analytical outputs are assessed to minimise the possibility of identifying natural persons.

The system is designed to retain analytical findings that do not reasonably identify individuals rather than original submitted text.

Information that remains capable of reasonably identifying a natural person continues to be treated as personal data and remains subject to applicable legal requirements.

Analytical findings and reports produced through Tasks are used internally by Sallar.

Task participation and cross-service priority records

The Tasks feature does not maintain permanent, itemised user-specific histories of completed Tasks or archives of the original submitted text.

Temporary submission-processing information is deleted once verification is final, and at the latest 7 days after submission.

To apply the compute-priority benefit described in Section 5A.4, Sallar may process a limited record confirming accepted Task participation, the associated eligible installation or account, and the participant's current compute-priority or eligibility status. Where supported, this limited status may be made available to the relevant Sallar web and desktop services for workload scheduling and verification. It does not include original screenshots or raw OCR content.

These records are distinct from the analytical content of submissions and are subject to the applicable data minimisation, retention, deletion, and user-rights information in our Privacy Policy.

Records necessary for source coordination and service security are processed separately in accordance with our Privacy Policy.

5A.7. Submission Acceptance

Submitting information does not guarantee that a Task result will be accepted.

Submissions may be rejected where they are:

• Incomplete or inaccurate.
• Duplicated.
• Outdated or submitted after the applicable deadline.
• Inconsistent with Task instructions.
• Technically invalid.
• Intentionally manipulated.
• Unlawfully obtained.
• Incompatible with applicable privacy, security, or third-party rights requirements.

Where supported, the App may display the result of technical validation or provide an opportunity to correct a submission.

Rejection of an individual submission does not, by itself, establish a violation of these Terms.

Only Tasks that have been successfully completed and accepted after applicable verification can provide the compute-assignment priority benefit described in Section 5A.4.

5A.8. Public Content and Third-Party Rights

Tasks may reference publicly accessible social media accounts, posts, comments, and related public information.

Such content remains subject to applicable intellectual property laws, privacy laws, and the terms of the relevant platform.

Users must access and provide information lawfully.

Public accessibility does not automatically authorise unrestricted reproduction, extraction, redistribution, or commercial exploitation.

Users must not bypass access restrictions or obtain information through unauthorised means.

If a Task appears to require unlawful conduct or an infringement of third-party rights, users should not complete it and may report the issue to Sallar.

Sallar remains responsible for establishing appropriate legal grounds for its own processing and analytical use of submitted information, as further described in Section 8 and our Privacy Policy.

5A.9. Availability

Tasks may vary according to:

• Region and platform availability.
• Public-content accessibility.
• Device compatibility.
• Operational needs.
• Technical requirements.
• Applicable law and third-party restrictions.

We do not guarantee a minimum number of Tasks or continued availability of any particular Task.

Tasks may be modified, withdrawn, expired, or restricted where reasonably necessary for accuracy, security, compliance, or service operation.

Users may receive optional general notifications about available Tasks, subject to their notification preferences and operating-system permissions.

6. Network Participation

The App enables compatible devices to contribute computing resources to a distributed network operated by Sallar.

Participation may depend on:

• Device capabilities and performance.
• Hardware integrity and attestation.
• Operating-system limitations.
• Network connectivity and stability.
• Available workloads.
• Geographic region.
• Technical trust and reliability indicators.
• Security and compliance requirements.

We may assign, prioritise, limit, reject, throttle, pause, or discontinue workloads based on these factors.

Where supported in Sallar's web and desktop applications, verified Task completion can also affect the scheduling priority of eligible compute assignments, as described in Section 5A.4. This does not bypass technical, security, or operational eligibility checks, or guarantee a workload. Any such effect on web and desktop services remains subject to their applicable terms.

6.1. Operational Indicators

The App may display device connection status, Epoch, Uptime, basic hardware specifications, and Start/Stop controls.

These indicators provide technical information concerning the device and its current network activity.

Detailed network-wide node statistics and historical node information are not provided through the current mobile interface.

Backend services may continue to process technical information necessary to maintain, secure, and verify network operations.

6.2. Technical Verification

Workload results, technical measurements, and operational indicators may be reviewed, corrected, recalculated, excluded, or invalidated where reasonably necessary to address:

• Inaccurate or invalid processing.
• Technical errors.
• Manipulated signals or outputs.
• Security incidents.
• Fraud or abuse.
• Network integrity concerns.

No particular workload volume, participation duration, availability level, or technical result is guaranteed.

6.3. Stopping Network Participation

Users may stop network participation through available App controls.

Where supported, participation may also end through unpairing or uninstalling the App.

Certain pending operations, temporary files, logs, or security records may remain briefly where necessary for safe shutdown, fraud prevention, diagnostics, or legal compliance.

Such technical records are separate from raw Tasks OCR content and are handled in accordance with our Privacy Policy.

6.4. Independent Relationship

Network participation does not, by itself, create an employment, contractor, partnership, agency, joint venture, franchise, fiduciary, or representative relationship between the user and Astral Hodling OÜ.

Users are not authorised to act on behalf of the company without separate authorisation.

7. Hardware, Device Requirements, and Resource Usage

7.1. Network Resources

During active network participation, the App may use:

• Processor and memory resources.
• Network bandwidth.
• Temporary storage and cached files.
• Configuration data and technical logs.
• Hardware verification and device security features.
• Operating-system mechanisms necessary to support permitted participation sessions.
• Foreground notifications or wake locks where supported and necessary.

Network participation may increase processor load, memory use, battery consumption, device temperature, or network traffic.

The actual impact depends on the device, operating system, workload, and network conditions.

7.2. Tasks Resources

Tasks may use:

• System file and image selection.
• Operating-system sharing functionality.
• Local screenshot cropping.
• On-device OCR.
• Temporary local storage.
• Network connectivity for extracted text, link, or answer submissions.
• Optional notifications.

Original screenshots are not uploaded to Sallar servers.

Temporary files created on the user's device are distinct from the server-side processing described in Section 5A.

The App processes screenshot content locally and transmits only the information required for the relevant Task.

7.3. User Responsibilities

Users are responsible for:

• Using compatible devices they own or are authorised to operate.
• Complying with applicable carrier, manufacturer, operating-system, employer, school, or institutional requirements.
• Monitoring device performance during network participation.
• Stopping participation if a device becomes unstable or unsafe.
• Applicable electricity, mobile data, roaming, bandwidth, or other costs associated with use of the App.

7.4. Device Security

Where supported and implemented, the App may use Android Hardware Key Attestation, Apple App Attest, DeviceCheck, Secure Enclave-related mechanisms, or other platform security technologies.

Devices without suitable hardware-backed verification may be restricted from certain network workloads.

Security and attestation mechanisms reduce technical risks but cannot guarantee detection of every form of manipulation, fraud, or unauthorised activity.

8. Intellectual Property

8.1. Sallar Intellectual Property and Licence

The Sallar Lite application, Sallar name, logos, user interface, protected source code, distributed software components, documentation, proprietary technical materials, and related intellectual property belong to Astral Hodling OÜ or its licensors.

The App is licensed, not sold.

The scope of the licence is governed by our EULA.

Subject to applicable law, that licence permits ordinary, authorised use of the App, including participation in supported Network and Tasks functionality.

It does not authorise resale, unauthorised redistribution, sublicensing, or independent commercial exploitation of the App itself.

Participation in the Sallar ecosystem through authorised functionality is not, by itself, an unauthorised commercial redistribution of the App.

Open-source components remain governed by their respective licences, which prevail with respect to those components where required.

8.2. Third-Party Content

Public posts, comments, photographs, images, and other content accessible through publicly available social media accounts may be protected by copyright, database rights, privacy rights, or other applicable laws.

Such content remains subject to the rights of its respective owners.

Users do not acquire ownership of third-party content merely by viewing it, capturing a screenshot, or extracting text.

Submitting information through Tasks does not transfer third-party intellectual property rights to Sallar.

8.3. User Submissions

Users retain the rights they lawfully hold in their own original contributions.

To the extent users possess the necessary rights, they grant Sallar a limited, non-exclusive authorisation to receive, temporarily process, verify, and analyse their submitted information for the purposes described in these Terms and our Privacy Policy.

This authorisation is limited to the rights the user actually possesses.

It does not constitute a licence to third-party content where the user lacks authority to grant one.

Users must not knowingly provide unlawfully obtained or intentionally infringing materials.

8.4. Sallar's Responsibility for Analytical Processing

Sallar is responsible for establishing appropriate legal grounds for its own processing and analytical use of content obtained from publicly accessible social media accounts.

Where protected works or database materials are involved, processing must rely on an applicable authorisation, statutory exception, limitation, or other lawful basis.

Where relevant, this may include applicable text-and-data-mining provisions, subject to their legal conditions, lawful-access requirements, and any valid reservation of rights.

The public availability of content or its submission by a user does not independently establish unrestricted rights to reproduce, store, distribute, or commercially exploit that content.

The App is designed to process extracted information temporarily and retain analytical conclusions rather than original screenshots or permanent archives of submitted text.

Public source references may be retained separately for task coordination and verification within the limits described in our Privacy Policy.

This processing design does not remove the need to comply with applicable intellectual property and data protection laws.

8.5. Analytical Results

Sallar may generate analytical observations, summaries, classifications, and other outputs from lawfully processed public information.

Such results may be used internally for analytical purposes, subject to applicable law and third-party rights.

Sallar does not claim ownership of the underlying third-party content solely by generating analytical results.

Analytical findings are intended to exclude information that could reasonably identify natural persons.

Public account references, post links, and other information that remains capable of identifying natural persons continue to be subject to applicable legal requirements.

Nothing in these Terms authorises unrestricted reproduction or redistribution of protected third-party materials.

9. Third-Party Services and Stores

The App may be distributed through:

• Solana dApp Store.
• Google Play.
• Apple App Store.
• Direct download from Sallar's website (desktop computers).

Use of the App may also be subject to applicable distribution-platform requirements.

These Terms govern the relationship between you and Astral Hodling OÜ and do not replace mandatory platform-specific rights.

9.1. Solana Mobile

Where the App is obtained through the Solana dApp Store, Solana Mobile Inc. and its affiliates are not parties to these Terms and are not responsible for maintenance, support, or claims relating to the App, except where required by applicable law or platform terms.

9.2. Apple

Where the App is obtained through the Apple App Store, Apple is not a party to these Terms.

Astral Hodling OÜ remains responsible for the App and applicable support obligations, subject to our EULA, mandatory law, and relevant platform requirements.

9.3. Google

Where the App is obtained through Google Play, Google is not a party to these Terms and is not responsible for providing maintenance or support, except where required by applicable law or platform requirements.

9.4. Social Media Platforms

Tasks may involve access to publicly available information from social media accounts hosted on independent platforms.

These platforms operate under their own terms and privacy policies.

Users must comply with applicable requirements when accessing content.

Sallar does not control the independent operation, availability, or data processing practices of those platforms.

A Task does not authorise users to circumvent platform restrictions, access private information, or violate third-party rights.

Sallar may restrict or withdraw Tasks where applicable platform requirements, rights restrictions, or legal obligations prevent their lawful operation.

The lawful analysis of publicly accessible information remains subject to applicable legal requirements, including intellectual property and data protection law.

9.5. Other External Services

The App may rely on services provided by operating-system vendors, device manufacturers, infrastructure providers, and authorised technical service providers.

Their operation may affect compatibility, notifications, security checks, or service availability.

We are not responsible for failures attributable solely to independent third-party services beyond our reasonable control, except where applicable law provides otherwise.

10. Availability and Changes to the Service

We aim to provide a reliable service but cannot guarantee uninterrupted or error-free availability.

The App, network functionality, or Tasks may be affected by maintenance, security incidents, infrastructure failures, operating-system restrictions, technical limitations, legal requirements, or third-party service changes.

We may introduce, modify, restrict, suspend, or discontinue features for valid operational reasons, including:

• Maintaining security and service integrity.
• Correcting errors or technical incompatibilities.
• Adapting to changes in operating systems or infrastructure.
• Preventing fraud and abuse.
• Meeting legal or regulatory requirements.
• Improving service reliability and functionality.
• Managing available network capacity and workloads.
• Addressing third-party platform restrictions.

These changes may include:

• Modifying supported devices or operating systems.
• Adjusting network participation requirements.
• Changing workload allocation or verification mechanisms.
• Updating Task instructions, deadlines, eligibility, or the effect of verified Task completion on compute-assignment priority, where permitted under applicable law and service terms.
• Expiring, rejecting, or withdrawing Tasks.
• Replacing infrastructure or security components.
• Updating source verification or analytical processing methods.
• Restricting public information sources where required for legal or technical compliance.

Where reasonably possible and legally required, material changes will be communicated in advance through the App, website, email, or another appropriate channel.

Consumer Protections

Where applicable consumer law governs a modification to a digital service supplied over time, we will comply with the relevant requirements concerning valid reasons, clear information, permitted changes, and termination rights.

Where a modification negatively affects a consumer's access to or use of the service beyond a minor extent, we will provide the advance notice and termination options required by applicable law.

Nothing in this section permits arbitrary or unfair contractual changes or removes mandatory consumer rights.

11. Disclaimers

To the maximum extent permitted by applicable law, the App and associated services are provided on an as-available basis.

We do not guarantee that:

• The App will operate without interruptions or errors.
• Every device will support all features.
• Every device will qualify for particular workloads.
• Network participation will produce a specific operational result.
• Every Task will remain available until its displayed deadline.
• Every submission will be accepted.
• A completed Task will be accepted or produce any particular amount or duration of increased compute priority.
• An increase in compute priority will result in any particular assignment volume, income, or financial benefit.
• Public information obtained from third-party platforms will always be accurate, complete, current, or available.
• Every analytical finding will be free from errors or limitations.
• All fraud, abuse, or security issues will be detected.
• Network participation will be free from additional battery use, processor load, or network costs.

Task verification and analytical processing are designed to improve the accuracy and reliability of information but cannot guarantee the correctness of every observation or conclusion.

These disclaimers do not limit statutory guarantees, conformity requirements, or other rights that cannot be excluded under applicable law.

12. Limitation of Liability

12.1. General Principles

Liability arising from the App, network participation, or Tasks is determined in accordance with applicable law.

To the extent legally permitted, Astral Hodling OÜ is not responsible for indirect or consequential losses arising exclusively from circumstances outside its reasonable control.

This may include certain losses associated with:

• Independent third-party service interruptions.
• External network failures.
• Unsupported device configurations.
• Unauthorised modifications by users.
• Unlawful use of the App.
• Failure to follow reasonable security requirements.

These exclusions do not apply where the loss results from a breach of our own legal obligations or where exclusion would be prohibited by law.

12.2. Consumer Users

Nothing in these Terms excludes, limits, or restricts liability toward consumers where such limitation would be unlawful or unfair.

Consumers retain all mandatory rights and remedies available under applicable law, including rights relating to:

• Digital service conformity.
• Consumer protection.
• Data protection.
• Unfair contractual terms.
• Defective products or services.
• Fraud, intentional misconduct, or other legally non-excludable liability.

No contractual monetary liability cap applies to consumer claims to the extent that such a cap would restrict mandatory rights or remedies.

12.3. Business Users

Where a user acts for purposes relating to their trade, business, or profession, and only to the extent permitted by applicable law, liability for indirect, incidental, special, consequential, or punitive losses may be excluded.

For such business users, our aggregate contractual liability arising from the App or these Terms will not exceed EUR 100 or the amount paid directly to us for the App during the preceding twelve (12) months, whichever is greater, except where such a limitation is unenforceable.

This limitation does not apply to liability that cannot lawfully be excluded or limited.

12.4. Non-Excludable Liability

Nothing in these Terms excludes or limits liability for:

• Fraud or fraudulent misrepresentation.
• Wilful misconduct.
• Gross negligence where liability cannot lawfully be limited.
• Death or personal injury caused by negligence where applicable.
• Any other liability that cannot be excluded or restricted under mandatory law.

13. Your Responsibility and Indemnity

Users are responsible for their own unlawful, fraudulent, intentionally harmful, or otherwise culpable conduct when using the App.

This may include:

• Intentional manipulation of network signals or Task submissions.
• Unauthorised access to systems or information.
• Distribution of malicious software.
• Deliberate circumvention of security measures.
• Unlawful disclosure of confidential information.
• Knowing infringement of third-party rights.
• Submission of intentionally falsified or unlawfully obtained materials.

Where legally enforceable, users may be required to compensate Sallar for direct, reasonably foreseeable losses caused by such conduct.

Any contractual indemnity obligation applies only to the extent permitted by applicable law and requires an appropriate legal basis and causal connection.

Limitations of User Responsibility

Users are not automatically responsible for:

• Legal defects in Tasks designed or assigned by Sallar.
• Unlawful processing independently undertaken by Sallar.
• Errors arising solely from Sallar's infrastructure or verification systems.
• Ordinary mistakes made in good faith without an independently established basis for liability.
• Claims caused by Sallar's own unlawful conduct or breach of statutory duties.

Nothing in these Terms transfers Sallar's responsibilities as a service provider or data controller to participating users.

Mandatory consumer and data protection rights remain unaffected.

14. Suspension and Termination

14.1. Voluntary Termination

You may stop using the App at any time.

Where supported, you may stop network participation, unpair your device, or delete your App profile.

Personal data deletion procedures are described in our Privacy Policy.

14.2. Restrictions and Suspension

We may restrict or suspend access where reasonably necessary because of:

• Violations of these Terms or applicable law.
• Fraudulent or manipulated submissions.
• Security threats or unauthorised activity.
• Technical integrity failures.
• Abuse of Task validation, compute-priority eligibility, or network participation mechanisms.
• Unlawful disclosure or processing of information.
• Legal or regulatory obligations.
• Circumstances making continued provision technically or legally impracticable.

Restrictions may apply to specific Tasks, the Tasks feature, device pairing, network participation, or the App as a whole.

Where proportionate, access to one feature may be restricted without automatically disabling unrelated functionality.

14.3. Notice and Review

Where reasonably possible and legally appropriate, we will provide notice of material restrictions, suspension, or termination.

Immediate action may be necessary where advance notice would compromise security, fraud prevention, compliance, or service integrity.

Users may contact us to request clarification or review of a restriction.

14.4. Consequences of Termination

Termination does not affect rights or obligations arising before termination.

Provisions concerning intellectual property, liability, applicable law, dispute resolution, and other matters intended to survive termination continue to apply where legally appropriate.

Personal data will be handled in accordance with our Privacy Policy and applicable law.

15. Changes to These Terms

We may update these Terms for valid reasons, including:

• Introducing or modifying App functionality.
• Changes to network operation or Tasks.
• Security and technical requirements.
• Changes in applicable law or regulation.
• Changes to necessary third-party infrastructure.
• Improvements to service reliability and user protection.
• Changes to public information verification and analytical processing where legally permitted.

The latest effective date and update date will appear at the beginning of the document.

Material changes will be communicated through the App, our website, email, or another appropriate channel where reasonably possible and as required by applicable law.

Where legally required, advance notice will be provided in a durable medium and users will have the applicable right to terminate the agreement or exercise another statutory remedy.

Continued use of the App after revised Terms become effective may constitute acceptance only where legally permitted.

Where affirmative acceptance is required, we will request it.

Users who do not agree to revised Terms may discontinue use of the App.

Changes will not retroactively remove accrued rights or mandatory consumer protections.

16. Governing Law and Disputes

These Terms and related non-contractual obligations are governed by the laws of Estonia, subject to applicable mandatory legal provisions.

Disputes arising from or relating to these Terms or the App will be handled by competent courts in accordance with applicable jurisdiction rules.

Where Estonian courts have jurisdiction, proceedings may be brought before the competent courts of Estonia.

Consumer Rights

Consumers residing in the European Union retain the protection of mandatory consumer laws applicable in their country of residence.

Nothing in these Terms deprives consumers of the right to bring proceedings before a competent court in their country of residence where such a right is provided by applicable law.

Consumers may also have access to competent consumer protection authorities and alternative dispute resolution procedures.

Before initiating formal proceedings, we encourage users to contact us to seek an appropriate resolution.

Nothing in this section restricts mandatory legal remedies or access to competent supervisory authorities.

17. Miscellaneous

17.1. Entire Agreement

These Terms, together with our EULA and applicable contractual notices, govern the use of Sallar Lite.

Our Privacy Policy explains how personal data is processed and should be read together with these Terms.

The Privacy Policy does not replace a lawful basis for data processing or any consent required under applicable law.

These documents supersede prior agreements concerning the same subject matter to the extent legally permitted.

17.2. Document Hierarchy

In the event of a conflict between these Terms and the EULA concerning service operation, network participation, Tasks, App profile functionality, acceptable use, suspension, or liability, these Terms prevail, except where mandatory law or applicable Distribution Platform requirements provide otherwise.

The EULA primarily governs the software licence and rights relating to the Licensed Application.

Sections 2.2 and 5A.4 describe the cross-service effect of accepted Tasks on compute-assignment priority. The actual availability and allocation of compute workloads in Sallar's web and desktop applications remain governed by the terms applicable to those services, without limiting rights conferred by mandatory law.

The Privacy Policy describes personal data processing, retention, deletion, and applicable privacy procedures.

In matters concerning personal data, the specific processing arrangements and retention periods described in the Privacy Policy apply, subject to mandatory data protection law.

Nothing in this contractual hierarchy limits statutory data protection rights or obligations.

Where mandatory legal requirements conflict with a contractual provision, the applicable mandatory requirements prevail.

17.3. Severability

If any provision is determined to be invalid or unenforceable, the remaining provisions will continue to apply to the extent permitted by law.

An invalid provision will not be automatically replaced in a manner that deprives consumers of statutory protections.

17.4. No Waiver

Failure by Sallar to enforce any provision of these Terms shall not constitute a waiver of its right to enforce that provision or any other provision in the future.

17.5. Assignment

Users may not transfer contractual rights or obligations where such transfer would require prior consent under applicable law.

We may transfer our contractual rights or obligations to an affiliate or successor in connection with a merger, acquisition, restructuring, or transfer of business, provided that the transfer does not unlawfully reduce user rights or mandatory consumer protections.

17.6. Independent Relationship

Use of the App, network participation, or voluntary completion of Tasks does not, by itself, establish an employment, contractor, partnership, agency, joint venture, franchise, fiduciary, or representative relationship.

Users are not authorised to act on behalf of Astral Hodling OÜ without separate authorisation.

17.7. Language and Interpretation

These Terms are provided in English.

Where translations are made available, they are intended to assist users in understanding the Terms.

Mandatory language, interpretation, and consumer protection requirements remain unaffected.

18. Contact

For questions, complaints, legal notices, or requests concerning these Terms, contact:

Astral Hodling OÜ
Lõõtsa tn 5
11415 Tallinn
Estonia

Email: contact@sallar.io

---

© 2026 Astral Hodling OÜ — Sallar Lite. All rights reserved.

Sallar Lite — Privacy Policy

Effective date: 2026-10-25
Last updated: 2026-10-25

Operator / Data Controller: Astral Hodling OÜ, Lõõtsa tn 5, 11415 Tallinn, Estonia

Contact: contact@sallar.io

---

1. Scope

This Privacy Policy applies to the Sallar native applications, Sallar Lite for mobile devices (iOS and Android) and Sallar Desktop for desktop computers (macOS and Windows) (together, the App), and associated services provided through the App.

The App may be distributed through third-party application stores, including the Solana dApp Store, Google Play, and the Apple App Store, and, for desktop computers, by direct download from Sallar's website.

Sallar Lite provides two principal categories of functionality:

• Network functionality: Connecting compatible devices to a distributed computing network, supporting computational workloads, network operations, device verification, and connection management.
• Voluntary Tasks: Enabling users, where available, to verify publicly accessible information from social media platforms through structured activities supporting research and analytics.

Tasks may support public-information monitoring, market research, competitive intelligence, industry analysis, counterparty research, and the preparation of analytical reports. Tasks operate through a community-powered, distributed workflow in which participants perform individual verification steps and Sallar coordinates and analyses their submissions.

Where supported, an accepted and verified Task may increase the participant's priority for eligible compute workload assignments in Sallar's web and desktop applications. This is a scheduling benefit, separate from the Priority Points shown for individual Tasks, and does not guarantee any workload, payment, or financial outcome.

This Privacy Policy explains what personal data we process, the purposes and legal bases of processing, how information is protected, how long it is retained, when it may be shared, and the rights available to affected individuals.

This Policy applies to processing performed through the App by Sallar and authorised service providers acting on its behalf, including the limited processing and communication of verified participation or compute-priority status described below. Sallar's web application may be subject to its own privacy notice for the processing it performs independently of the App.

This Privacy Policy should be read together with our Terms of Use.

2. About Us

The data controller responsible for processing personal data is:

Astral Hodling OÜ
Lõõtsa tn 5
11415 Tallinn
Estonia

Email: contact@sallar.io

Astral Hodling OÜ determines the purposes and means of personal data processing through Sallar Lite and its associated services.

For privacy-related questions, requests, or complaints, you may contact us using the email address above.

3. Information We Collect

We follow the principle of data minimisation and process only information necessary for the specified purposes of providing, operating, securing, and improving the App and supporting its analytical functionality.

The information processed depends on the features used.

3.1. App Installation and Device Information

We may process:

• An App-generated device or installation identifier.
• Device model and basic hardware specifications.
• Operating system and App version.
• Device compatibility and configuration information.
• Basic connection and operational status.
• Technical information necessary for App functionality and service continuity.

The installation identifier helps recognise the same installation across sessions.

The mobile interface displays device-level hardware information and connection status. Detailed network-wide node statistics and historical node information are not provided through the current mobile interface.

Technical information necessary for backend network operation, security, and verification may continue to be processed independently of the information displayed in the App.

3.2. Optional Contact Information

You may voluntarily provide an email address for:

• Service-related communications.
• Technical support.
• Security notifications.
• Privacy and data protection requests.
• Important operational or legal notices.

Providing an email address is optional unless necessary to respond to a request or provide a service initiated by you.

The applicable legal basis depends on the purpose, including consent under Article 6(1)(a) GDPR, performance of a contract under Article 6(1)(b), legitimate interests under Article 6(1)(f), or compliance with a legal obligation under Article 6(1)(c).

3.3. Device Pairing and Network Participation

Where necessary for network functionality, we may process:

• Device pairing and unpairing status.
• Pairing method and related timestamps.
• Mother node identifiers.
• Pairing code and QR code verification metadata.
• Device connection status.
• Session start and stop events.
• Basic activity counters and participation status.
• Uptime-related technical signals.
• Workload assignment, execution, and verification status.
• Runtime responses and workload result metadata.
• Technical measurements, errors, and operational events.

This information supports network connectivity, workload execution, operational reliability, security, and technical verification.

The removal of detailed node statistics from the mobile interface does not necessarily eliminate the processing of technical information required by the underlying network.

3.4. Device Security and Technical Diagnostics

Where available and implemented, we may process:

• Hardware attestation and device integrity results.
• Platform security and verification signals.
• Pairing and workload verification information.
• Crash reports and error logs.
• Application and infrastructure diagnostics.
• IP addresses and connection timestamps.
• Server request metadata.
• Authentication and security events.
• Information necessary to detect fraud, abuse, or technical manipulation.

This information is used to operate, secure, troubleshoot, and maintain the App and its related infrastructure.

Device security information is not used for biometric identification.

Authentication tokens and sign-in secrets are excluded from crash reports.

3.5. Voluntary Tasks and Public Information

The optional Tasks feature enables users to participate voluntarily in the verification and analysis of publicly accessible information from social media platforms.

Sallar designates the public social media accounts or content to be examined and assigns specific activities to participating users.

Depending on the Task, users may be asked to:

• Visit a designated public social media account.
• Check whether a new post has been published.
• Confirm the presence or absence of new content.
• Submit a link to a newly identified public post.
• Examine content identified through a previous submission.
• Extract text from a public post or its comments.
• Answer structured questions concerning publicly available information.

Related Tasks may be completed by the same participant or assigned to different participants.

Participation is voluntary. Users may decline or disable Tasks without thereby losing access to otherwise available network functionality. Tasks can be disabled at any time in the App's Settings; disabling stops checks for available Tasks and Task notifications and gives up a Task in progress. Disabling Tasks prevents new Task participation but does not automatically erase information previously processed lawfully; applicable retention and deletion rules remain in effect.

Public source references and task coordination

To coordinate related Tasks, Sallar may process:

• Public social media account references.
• Public post URLs and identifiers.
• Publication dates and relevant source metadata.
• Task identifiers and instructions.
• Task status, Priority Points, and deadlines.
• The social media platforms a user indicates they can open, without usernames or credentials for those platforms.
• Operational information necessary to assign and verify related Tasks.

Priority Points describe each Task's urgency, generally in relation to its completion deadline. They are not a balance of points earned by participants and do not themselves establish compute-assignment priority.

Public account references and post links may be retained for the limited periods described in Section 8.

These references are separate from the original OCR text and do not constitute a permanent archive of submitted post content.

Where source references identify or may reasonably identify natural persons, they are treated as personal data under applicable law.

Verified Task participation and compute-assignment priority

Where this benefit is supported and a participant can be associated with an eligible Sallar web or desktop account or device, we may process only the information necessary to grant, verify, adjust, and apply compute-assignment priority following an accepted Task. This may include:

• An existing account, profile, installation, or other pseudonymous linkage identifier needed to associate the participant with an eligible Sallar service.
• A minimal confirmation that the relevant Task submission was verified and accepted, without storing its original text or screenshots.
• The participant's current compute-priority or eligibility status, and limited technical information necessary to apply or correct that status.
• Limited integrity or anti-abuse information necessary to prevent fraudulent priority claims.

Such information is separate from Task Priority Points and analytical content. It is not used to build a permanent, itemised history of Tasks completed by the participant. Where supported, only the limited status and linkage information needed for scheduling may be made available to the relevant Sallar web or desktop service. Original screenshots, raw OCR content, and full Task answers are not transferred for this purpose.

The availability and use of compute-assignment priority remain subject to the applicable terms and privacy notices of the relevant services. No association with another Sallar service is created for this benefit unless technically supported and necessary to apply it.

Screenshots and on-device processing

For content extraction Tasks, users may capture or select screenshots of publicly accessible posts or comments.

Users are instructed to crop screenshots to the relevant content and to exclude account identifiers, usernames and profile pictures other than those of the account named in the Task, and any unrelated information.

Screenshots remain on the user's device and are not uploaded to Sallar servers.

Optical character recognition (OCR) is performed locally on the device.

For screenshot-based submissions, only the text extracted on the device that the relevant Task requires is transmitted to Sallar, together with technical recognition details (the recognition engine, the languages used, the operating-system version and the time the recognition took) and a cryptographic fingerprint (SHA-256 hash) of each screenshot, which does not reveal its content. The positions of text on the image and the image's dimensions are not transmitted.

Each submission is signed with a key stored on the device. The installation identifier, the device's public key and the signature are transmitted with it, so that Sallar can verify that the submission came unaltered from the App installation.

Other Tasks may require submitting public post links or structured answers.

The App does not automatically scan the user's photo library, continuously monitor the screen, or upload unrelated images and files.

Information temporarily processed

Depending on the Task, submitted information may include:

• Text extracted from public posts or comments.
• Publicly available statements and factual information.
• Publication dates and contextual information.
• References to public social media content.
• Structured answers relevant to the Task.

Some submitted information may temporarily contain personal data, even when obtained from publicly accessible sources.

Information we never request

Sallar Lite never requests private messages, passwords, account credentials, authentication codes, private account access, or access-restricted information through Tasks.

Users are not required to disclose private communications or provide social media login credentials.

If such information is submitted, you may ask us to delete it by writing to contact@sallar.io.

3.6. Task Verification and Analytics

Submitted OCR text and other relevant Task information are processed using Sallar's own analytical model.

The processing supports:

• Verification of publicly available information.
• Confirmation of relevant publication activity.
• Assessment of submission accuracy and completeness.
• Comparison of observations concerning the same public content.
• Detection of duplicate, outdated, or inconsistent information.
• Identification of relevant facts, topics, events, and trends.
• Preparation of analytical findings and reports.
• Minimisation and removal of unnecessary personal information.

Temporary storage until verification

Raw OCR text and temporary content-processing information are kept in our Tasks database only until the submissions concerning the same Task reach a final verification outcome (consensus). They are then deleted. Where no final outcome is reached, they are deleted at the latest 7 days after submission.

This includes temporary comparisons of submissions concerning the same public content.

Raw OCR content is not written to application logs or persistent caches, and raw submission bodies are excluded from request logging and diagnostic records.

Database backups made by our hosting provider may contain raw OCR content for up to 7 days, until they are overwritten. Backups are not used for ordinary active processing.

Once raw OCR content has been deleted, subsequent verification relies only on verification results that do not contain the original text, or on separately retained source references.

Analytical extraction and minimisation

Sallar's analytical model processes submitted information to extract facts, contextual meaning, and analytical conclusions relevant to the specified research purpose.

The processing is designed to remove unnecessary personal identifiers and avoid retaining original submitted text.

Analytical outputs may concern:

• Public announcements and communications.
• Market and industry developments.
• Business activities and competitive positioning.
• Information relevant to counterparty research.
• Publication patterns and observable trends.
• Events and relationships relevant to analytical reporting.

Before lasting retention, analytical outputs are assessed for unnecessary personal information and the possibility of identifying natural persons.

Direct identifiers, unnecessary personal details, and information not required for the analytical purpose are excluded.

Removing names or usernames does not automatically make information anonymous. Where an analytical result may still reasonably identify a natural person, it remains personal data and is subject to applicable legal requirements.

Only findings that do not reasonably identify natural persons are intended for lasting retention as anonymous analytical outputs.

Task participation and priority records

The Tasks feature does not maintain permanent, itemised user-specific histories of completed Tasks or archives of original submissions.

Temporary submission-processing information is not retained as an individual participation history. Where a compute-priority benefit is supported, a limited accepted-participation confirmation, linkage identifier, and current priority or eligibility status may be retained as described in Sections 3.5 and 8.2. Those records do not contain screenshots or raw OCR content and are not a per-Task completion history.

Task coordination records and general security logs are processed separately as described in this Policy.

3.7. Notifications

The App may provide optional notifications concerning new Tasks or relevant service events.

Before a user enables Tasks, the App may check with Sallar's Tasks service whether Tasks are available for the user's account, in order to show their number on the Tasks tab and, where notifications are allowed, to notify the user. This check uses the account and installation identifiers, the App version and platform, whether the App is in use, and the notification token; it does not send any submission content. Once a user disables Tasks in Settings, these checks and Task notifications stop.

Where necessary, we may process technical push notification identifiers to deliver notifications.

Notifications contain general service information and do not include submitted OCR text, screenshots, or detailed personal information.

Users may manage notification permissions through the App and operating-system settings. Notification permission is optional and is not a condition for completing Tasks or receiving an otherwise available compute-priority benefit.

Notification tokens are retained only while necessary for the enabled notification service and are removed according to Section 8.

3.8. Support Communications

When you contact us, we may process:

• Information included in your message.
• Contact details voluntarily provided.
• Relevant technical or verification information necessary to respond.
• Records of our response.

This information is used to provide support, respond to privacy requests, investigate security concerns, and comply with applicable legal obligations.

4. What We Do Not Collect

The App does not automatically access or collect:

• Precise GPS or other dedicated device location data.
• Contacts, calendar entries, SMS, or call logs.
• Private messages or browsing history.
• Unselected personal photographs, videos, or unrelated files.
• Payment card or banking information.
• Microphone recordings.
• Biometric information for personal identification.
• Advertising identifiers for cross-app tracking.

IP addresses may be processed for network communications and security and may indirectly indicate an approximate geographical region.

Camera and Screenshot Access

Where the camera is used for QR pairing, it processes pairing codes locally. Camera images are not uploaded or retained as photographs.

For Tasks, screenshots remain on the user's device. Only locally extracted OCR text, with the technical recognition details and screenshot fingerprints described in Section 3.5, is transmitted when required for a screenshot-based submission. Neither screenshots nor raw OCR content are needed to maintain the separate compute-priority status described in Section 3.5.

The App does not continuously monitor the screen, access private conversations, or automatically collect unrelated device content.

Sallar never requires users to provide passwords, private messages, authentication credentials, or personal account access information through Tasks.

Computational Workloads

Network workloads may involve technical, operational, public, synthetic, encrypted, or otherwise limited information selected by Sallar or authorised network operators.

Such information is processed for the intended operation of the network.

Necessary technical metadata may be retained for verification, security, troubleshooting, and service integrity.

Sensitive Personal Data

We do not intentionally request special categories of personal data through Tasks.

Publicly accessible posts or comments may nevertheless contain information concerning matters protected under Article 9 GDPR.

Public availability alone does not remove applicable data protection requirements.

Processing of special-category personal data is permitted only where an applicable Article 9 condition and a valid legal basis are satisfied.

5. How We Use Your Information

We process information for specified and legitimate purposes, subject to an applicable legal basis.

5.1. App and Network Operation

Information may be used to:

• Provide and maintain the App.
• Recognise installations across sessions.
• Pair and unpair devices.
• Connect devices to the distributed network.
• Assign, execute, verify, or troubleshoot workloads.
• Maintain device and network integrity.
• Display relevant device information and connection status.

Legal basis: Article 6(1)(b) GDPR, where processing is necessary to perform our agreement with the user.

Article 6(1)(f) GDPR may also apply where processing is necessary for our legitimate interests in maintaining secure and reliable infrastructure.

5.2. Tasks and Submission Verification

Information may be processed to:

• Prepare and assign voluntary Tasks.
• Identify relevant public information sources.
• Receive links, extracted text, and structured answers.
• Coordinate related Tasks concerning the same public source.
• Verify submission accuracy and completeness.
• Compare observations from different submissions.
• Detect duplicate, outdated, or inconsistent information.
• Perform technical validation and prevent abuse.
• Determine whether a Task has been completed, verified, and accepted.
• Where supported, establish or update the limited compute-priority status of an eligible, associated web or desktop account or device.
• Verify, correct, or withdraw an incorrectly awarded priority status when necessary for service integrity.

Raw OCR content is retained only until the relevant Tasks reach a final verification outcome, and at the latest for 7 days (see Section 3.6).

Public source references and necessary coordination information are handled separately.

Legal basis: Article 6(1)(b) GDPR, where processing is necessary to provide the Tasks functionality requested by a participating user.

Article 6(1)(f) GDPR may apply to proportionate processing necessary for accuracy, verification, security, and service integrity.

Cross-service compute-assignment priority

Where a user voluntarily participates in Tasks and uses an eligible associated Sallar web or desktop service, we may process a limited accepted-participation confirmation and current priority or eligibility status to apply the scheduling benefit described in our Terms of Use. This processing is based on Article 6(1)(b) GDPR where necessary to provide the benefit under the applicable service arrangement. Where proportionate security, validation, or fraud-prevention processing is necessary, Article 6(1)(f) GDPR may apply.

Task Priority Points measure task urgency and are not a personal rating, currency, or financial account balance. Compute-assignment priority is a separate operational scheduling factor, does not itself grant a right to workloads or income, and does not replace device, security, or workload-eligibility checks. Any separate processing undertaken by the web or desktop service is described in its applicable privacy notice.

5.3. Public Information Research and Analytics

Information obtained through Tasks may be used for:

• Monitoring publicly accessible information.
• Verifying public announcements and published statements.
• Market and industry research.
• Competitive intelligence and business analysis.
• Counterparty research and verification.
• Identifying relevant business events and market developments.
• Analysing public communications and observable trends.
• Preparing analytical findings, summaries, and reports.

The analytical processing is carried out using Sallar's own model.

Original OCR text is retained only until verification is final, at the latest for 7 days, and is then deleted (see Section 3.6).

Analytical processing is designed to minimise identifiable personal information and retain non-identifying findings.

Legal basis: Where the processing involves personal data obtained from publicly accessible sources, Article 6(1)(f) GDPR may apply to Sallar's legitimate interests in lawful public-information research, business analysis, and verification.

The application of this basis requires an assessment of:

• The legitimacy of the pursued interest.
• The necessity of the processing.
• The proportionality of the information processed.
• The context and reasonable expectations surrounding the source.
• The potential impact on affected individuals.
• Appropriate safeguards and data minimisation measures.

Public availability alone does not establish an unrestricted right to process personal data.

Where special-category information is involved, the relevant conditions of Article 9 GDPR must also be satisfied.

5.4. Security and Fraud Prevention

We may process necessary technical information to:

• Detect unauthorised access.
• Prevent fraudulent or manipulated submissions.
• Verify device and network integrity.
• Investigate security incidents.
• Protect infrastructure and users.

Legal basis: Article 6(1)(f) GDPR, based on our legitimate interests in security, fraud prevention, and service reliability, or Article 6(1)(c) GDPR where processing is required by law.

5.5. Communications, Support, and Legal Compliance

We may process necessary information to respond to requests, deliver service notices, investigate technical issues, improve reliability, and comply with legal obligations.

Depending on the purpose, processing may rely on Article 6(1)(a), (b), (c), or (f) GDPR.

Where processing is based on consent, consent may be withdrawn at any time.

We do not use App data for behavioural advertising or solely automated decisions producing legal or similarly significant effects concerning individuals.

Automated technical verification of Task submissions does not, by itself, constitute such decision-making.

5.6. Data Minimisation and Necessity

Information necessary to provide particular functionality is limited to the purposes described in this Policy.

Device and pairing data are necessary where relevant network functionality requires device recognition or verification.

Task submissions are voluntary. If the information required for a particular Task is not provided, that Task cannot be completed or verified.

Optional contact information and notifications are not required for unrelated App functionality.

We do not request unnecessary personal information merely to enable participation in voluntary Tasks. Where a cross-service compute-priority benefit is supported, a limited existing account or installation association and priority-status record may be necessary to apply it; this processing is described in Sections 3.5, 5.2, 6, and 8.2.

6. Sharing Your Information

We do not sell or rent personal data.

For purposes of assigning eligible compute workloads, we may make limited verified-participation and compute-priority status available to Sallar-operated web or desktop services, together with the account or device association necessary to apply it. We do not transfer original screenshots, raw OCR content, or complete Task answers for this purpose. Any processing by those services that falls outside the scope of the App is subject to their applicable privacy notices.

Information may be disclosed where necessary and lawful to:

• Hosting, infrastructure, database, storage, security, logging, monitoring, and email providers acting on our behalf.
• Technical providers supporting network operation, security, maintenance, and verification.
• Push notification service providers where necessary to deliver enabled notifications.
• Public authorities, courts, regulators, or law enforcement bodies where legally required.
• Professional advisers where necessary for legal, accounting, compliance, security, or dispute-resolution purposes.
• Successors in connection with a merger, acquisition, restructuring, or business transfer, subject to applicable safeguards.

Service providers acting on our behalf are subject to appropriate contractual confidentiality, security, and data-protection obligations.

Tasks and Analytical Results

Raw OCR information is processed by Sallar's own analytical model rather than an external third-party AI analysis service.

Original screenshots are not uploaded to Sallar.

Raw OCR submissions are not disclosed to external clients for independent analytical purposes.

Analytical findings and reports generated through Tasks are used internally by Sallar. The limited cross-service priority-status communication described above is operational and is not a disclosure of analytical findings or original Task content.

Reports are designed to contain non-identifying analytical results rather than original submitted content or unnecessary personal information.

Any future disclosure of personal data for additional purposes will be subject to an appropriate legal basis, transparency requirements, and any other safeguards required by applicable law.

We do not share App data with advertising networks, data brokers, or third-party advertising analytics providers.

7. Third-Party Platforms and Operating-System Services

The App may be distributed through the Solana dApp Store, Google Play, and the Apple App Store, and, for desktop computers, by direct download from Sallar's website.

Solana Mobile, Google, Apple, device manufacturers, and operating-system providers may independently process certain information when users download, install, update, or use the App.

Such processing is governed by their respective terms and privacy policies.

The App may use operating-system functionality for:

• QR pairing.
• File and screenshot selection.
• On-device OCR.
• Push notifications.
• Device integrity verification.
• Crash handling and security features.
• Application updates.

Social Media Platforms

Tasks may direct users to publicly accessible social media accounts and content hosted on independent platforms.

Users access these services under their respective terms and privacy policies.

Sallar does not control the independent data processing performed by these platforms.

The App does not require users to provide social media passwords, private messages, authentication credentials, or account access information.

Public source references and information submitted through Tasks are processed as described in this Policy.

This Policy governs processing performed through the App by Sallar and authorised service providers acting on its behalf, including the limited communication of accepted-participation or priority-status information to eligible Sallar services. Independent processing by the web or desktop applications is governed by their applicable privacy notices.

8. Where Data Is Stored and How Long We Keep It

Personal data is primarily processed within the European Economic Area using infrastructure operated by us or service providers acting on our behalf.

Where personal data is transferred outside the EEA, we rely on an applicable legal transfer mechanism, including adequacy decisions under Article 45 GDPR or Standard Contractual Clauses under Article 46(2)(c) GDPR, together with supplementary safeguards where necessary.

Information about applicable safeguards may be requested using our contact details.

We retain personal data only for as long as necessary for the purposes described in this Policy, subject to applicable legal obligations.

8.1. App, Network, and Support Data

Installation, profile, and pairing data

Retained while the relevant installation or service profile remains active, followed by limited retention where necessary for security, fraud prevention, legal obligations, or technical integrity.

Optional email address

Retained for the period necessary for the relevant communication or support purpose, subject to applicable deletion requests and legal requirements.

Diagnostic data

Retained for up to 90 days, after which it is deleted or anonymised unless longer retention is necessary for a documented security investigation, fraud prevention, legal compliance, or dispute resolution.

Operational and network participation data

Retained for up to 12 months, unless longer retention is necessary for workload verification, service integrity, security, legal compliance, or dispute resolution.

Device security and trust data

Retained while necessary for security and verification, generally no longer than 12 months after the associated App profile becomes inactive, unless a longer period is justified.

Connection and security logs

Retained for up to 12 months, unless longer retention is necessary for security investigations, fraud prevention, abuse prevention, legal compliance, or dispute resolution.

Support communications

Generally retained for no longer than 24 months after the matter is closed, unless longer retention is required by law or necessary for dispute resolution.

Backup copies

Retained through limited rolling backup cycles and not used for ordinary active processing.

These retention rules concern network, security, and support information and do not authorise persistent storage of raw OCR content.

8.2. Tasks and Analytical Processing

Screenshots

Screenshots remain on the user's device and are not uploaded to Sallar servers.

Users may manage or delete locally stored screenshots through the device and operating-system functionality.

Raw OCR

Raw OCR text and temporary content-processing information are kept in the Tasks database only until the relevant Tasks reach a final verification outcome, and are then deleted. Where no final outcome is reached, they are deleted at the latest 7 days after submission.

They are not written to application logs or persistent caches. Database backups may contain them for up to 7 days, until those backups are overwritten.

The system does not maintain a permanent archive of raw OCR submissions.

Public social media account references

References to monitored public social media accounts may be retained while the relevant account remains subject to active monitoring or analytical verification.

The necessity of retaining these references is reviewed at least every six months.

References that are no longer required for an active monitoring or verification purpose are deleted within 30 days, unless continued retention is required by law or supported by another documented lawful purpose.

Public post links

Post links may be retained where necessary to assign related Tasks, verify information, and complete the associated analytical process.

They are deleted within 90 days after completion of the related Tasks and verification, and no later than 180 days after their initial registration, unless a specific legal obligation requires longer retention.

Public source references that identify natural persons remain subject to applicable data protection requirements throughout their retention period.

Task verification and coordination records

Operational records may contain task identifiers, processing status, source references, and non-identifying validation outcomes.

These records are maintained only as necessary to coordinate and verify the relevant Tasks. They are not used to create permanent, itemised user-specific histories of Task participation.

Records no longer necessary for coordination or verification are removed according to the applicable source-reference retention rules.

Verified Task participation and cross-service compute-priority records

Where the compute-priority benefit is supported, a limited accepted-participation confirmation, existing account or installation association, and current priority or eligibility status may be retained while necessary to establish, apply, and verify an active benefit in the eligible Sallar web or desktop service.

When the benefit expires, is withdrawn, or is no longer applicable, these records are deleted or anonymised once any necessary scheduling reconciliation and limited security or anti-abuse verification have been completed, unless continued retention is legally required or justified for a specific documented purpose. Applicable web and desktop services may separately process their own operational workload records under their respective privacy notices.

These limited records do not include original screenshots, raw OCR content, full Task answers, or a permanent, itemised record of each completed Task.

Notification identifiers

Push notification identifiers are retained while required for the enabled notification service.

Where notification delivery is deactivated or a token becomes invalid, associated identifiers are removed when no longer required, normally within 30 days of the relevant change being recorded by our systems.

Analytical results

Only findings that do not reasonably identify natural persons are intended for lasting retention as anonymous analytical information.

Analytical results may include factual observations, classifications, statistics, trends, summaries, and conclusions used in internal reports.

Before retention, results are assessed for unnecessary personal details and the possibility of re-identification.

Analytical information that remains capable of reasonably identifying a natural person is not treated as anonymous and remains subject to the GDPR.

Effectively anonymised findings may be retained for as long as they remain relevant for legitimate analytical purposes.

Task activity history

The Tasks feature does not maintain permanent, itemised user-specific task completion histories. Temporary submission-processing information is deleted once verification is final, and at the latest 7 days after submission.

The limited current compute-priority or eligibility status described above may be retained for its separate operational purpose, without storing a full per-Task completion history.

8.3. Data Deletion and Backups

Personal data that is no longer necessary is deleted or anonymised, subject to applicable legal obligations and justified retention requirements. The limited cross-service priority-status records described in Section 8.2 are also subject to these principles; disabling Tasks does not automatically require deletion of an existing valid status, but it prevents new Tasks from being completed through the disabled feature.

Backup copies of operational and support information are removed through established rolling backup cycles.

Deletion from active systems does not necessarily result in immediate deletion from every existing backup. Backup data is not used for ordinary active processing during the remaining backup retention period.

Raw OCR content may remain in database backups for up to 7 days after its deletion from active systems, until those backups are overwritten.

9. Your Rights

Subject to applicable law, individuals have the right to:

• Access: Request confirmation of whether personal data is processed and obtain access under Article 15 GDPR.
• Rectification: Request correction of inaccurate or incomplete personal data under Article 16 GDPR.
• Erasure: Request deletion of personal data where Article 17 GDPR applies.
• Restriction: Request restriction of certain processing activities under Article 18 GDPR.
• Objection: Object to processing based on legitimate interests under Article 21 GDPR.
• Portability: Request personal data in a structured, commonly used, machine-readable format where the conditions of Article 20 GDPR apply.
• Withdrawal of consent: Withdraw consent where processing relies on consent, without affecting processing lawfully performed before withdrawal.

To exercise these rights, contact:

contact@sallar.io

We may request proportionate identity verification before fulfilling requests involving personal data.

We respond within the periods required by applicable law, generally within one month. Where legally permitted, this period may be extended by up to two additional months because of the complexity or number of requests.

Personal Data in Public Content

Individuals whose personal data appears in publicly accessible content processed through Tasks may exercise applicable data protection rights. Users may also request information about, or correction or deletion of, their associated compute-priority or eligibility records where the GDPR provides such rights.

Such requests are assessed according to the GDPR, taking account of the nature, purpose, and duration of processing.

Where personal data is obtained indirectly, we assess and fulfil applicable transparency obligations under Article 14 GDPR.

Any legally permitted exception to individual notification is applied only where its requirements are satisfied and appropriate safeguards are provided.

Temporary processing does not remove applicable data protection rights or obligations.

Complaints

Individuals may lodge a complaint with a competent data protection supervisory authority.

As the controller is established in Estonia, complaints may be addressed to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

Individuals in the EEA or the United Kingdom may also contact the competent authority in their jurisdiction where applicable.

Additional rights provided by applicable national law will be respected.

10. Account and Data Deletion

Users may request deletion of their App profile, installation-related information, and associated personal data.

Requests may be submitted through:

• In the App: Settings → Delete account.
• By email: contact@sallar.io.

If an email address is associated with the App profile, users may submit a request using that address.

We may request reasonable verification information to prevent unauthorised deletion.

Verified deletion requests are processed without undue delay, normally within 30 days, subject to applicable legal exceptions and extensions permitted by law.

Following deletion, personal data is removed from active systems unless continued retention is required by law or remains necessary for a documented lawful purpose.

Limited information may be retained where necessary for security investigations, fraud prevention, workload verification, legal compliance, or dispute resolution.

Backup copies of retained operational information are removed through their rolling retention cycle and are not available for ordinary active processing.

Tasks

Original screenshots are not stored by Sallar and cannot be deleted from the user's device through a server-side deletion request.

Raw OCR text and temporary content-processing information are deleted once the relevant Tasks reach a final verification outcome, and at the latest 7 days after submission.

The Tasks feature does not maintain permanent, itemised user-specific histories of completed Tasks. Where applicable, a limited record of current compute-priority or eligibility status may be processed and deleted under Section 8.2.

Public account references, post links, and related coordination information are processed and deleted according to Section 8.

Requests concerning personal data appearing in publicly accessible content may be submitted to our contact address.

Uninstalling the App or disabling Tasks does not automatically delete all information previously processed by backend services. Deleting an App profile does not necessarily delete a separate Sallar web account, whose data and deletion procedures may be governed by its own privacy notice. Users may request deletion of their personal data under the applicable procedures and legal requirements.

11. Security

We apply administrative, technical, and organisational safeguards designed to protect information against unauthorised access, disclosure, alteration, loss, or destruction.

These safeguards include:

• Encryption of data in transit.
• Access controls and restricted internal access.
• Infrastructure monitoring.
• Security logging.
• Fraud and abuse detection.
• Device and pairing verification.
• Technical measures protecting the App and backend infrastructure.
• Time-limited retention of raw OCR content, deleted once verification is final and at the latest after 7 days.
• Data minimisation and restrictions on persistent storage of Task content.
• Restricted access to the limited account linkage and compute-priority status required for eligible cross-service workload scheduling.

Where available and implemented, the App may use Android Hardware Key Attestation, Apple App Attest, DeviceCheck, Secure Enclave-related mechanisms, or other platform security technologies.

These mechanisms support device integrity, pairing verification, workload verification, and network security.

Authentication tokens and sign-in secrets are excluded from crash reports.

Task Data Security

Screenshots are processed locally and are not uploaded to Sallar servers.

Participants are instructed to exclude account identifiers other than those of the account named in the Task, and unrelated information, when cropping screenshots.

Submitted OCR text is processed using Sallar's own analytical model.

Raw OCR content is excluded from logs and diagnostic records. It is kept in the Tasks database only until verification is final, and at the latest for 7 days, and may remain in database backups for up to 7 days after that, until they are overwritten.

Public account references and post links necessary for coordination are handled separately and retained only according to the limits described in Section 8.

Analytical processing is designed to minimise identifying information and retain non-identifying results.

Where supported, verified Task completion affects only a limited account-linked compute-priority or eligibility status; it does not require persisting or forwarding original screenshot content or raw OCR text to the web or desktop services.

Access to the processing infrastructure is restricted to authorised technical operations.

No security measure can guarantee absolute protection.

Personal Data Breaches

Where a personal data breach is likely to result in a risk to individuals' rights and freedoms, we notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach, in accordance with Article 33 GDPR.

Where the breach is likely to result in a high risk to affected individuals, we notify them without undue delay in accordance with Article 34 GDPR, unless an applicable legal exception applies.

12. Children

The App is not directed to children under the age of 16.

We do not knowingly provide the App to users below the applicable minimum age or intentionally collect personal data directly from children.

Publicly accessible posts and comments may incidentally contain information relating to minors.

We do not intentionally request such information through Tasks. Where encountered, it is subject to applicable legal requirements and appropriate minimisation and protection measures.

If you believe personal data relating to a child has been processed inappropriately, contact:

contact@sallar.io

We will assess the circumstances and take appropriate action in accordance with applicable law.

13. Third-Party Advertising and Analytics

Sallar Lite does not embed third-party advertising, third-party advertising analytics, or cross-app tracking technologies.

We do not sell personal data to advertising networks or data brokers.

The analytical functionality supported by Tasks concerns the verification and analysis of publicly accessible information.

These activities may support market research, competitive intelligence, counterparty research, industry monitoring, and analytical reporting.

This functionality is separate from behavioural advertising and does not involve creating advertising profiles of App users. The separate compute-assignment priority derived from accepted Tasks is used for operational workload scheduling and not for advertising targeting.

Technical and operational measurements necessary to maintain and secure the App may still be processed as described in this Policy.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• App functionality.
• Data processing practices.
• Analytical activities.
• Cross-service compute-priority functionality and related account-linkage or verification processing.
• Security and infrastructure.
• Applicable laws and regulatory requirements.
• Privacy and data protection procedures.

The latest version and effective date will be displayed at the beginning of this document.

Material changes will be communicated through the App where reasonably possible or another appropriate communication channel.

Where applicable law requires consent for a new processing activity, we will obtain it before beginning that processing.

Updated provisions apply from the effective date stated in the revised Privacy Policy.

15. Contact

For questions, requests, or complaints regarding this Privacy Policy or our processing of personal data, contact:

Astral Hodling OÜ
Lõõtsa tn 5
11415 Tallinn
Estonia

Email: contact@sallar.io

---

© 2026 Astral Hodling OÜ — Sallar Lite. All rights reserved.