UGREEN NAS APP Center Violation Penalty Rules

I. Criteria for App Violation Determination

An app violation refers to any act whereby an application, during its listing or operation in the APP Center, breaches applicable laws and regulations or platform rules, including but not limited to violations specified in these criteria for determining app violations.

1. App Quality

Apps shall be fully functional, operate stably, and provide a good user experience. Any app that contains significant defects, deliberately degrades quality to circumvent review, or fails to function properly on NAS devices shall be deemed non-compliant in terms of quality. App violations related to app quality include but are not limited to the following circumstances:

- Core functions cannot be used normally, or the app frequently crashes or quits unexpectedly;

- An app has obvious performance issues, such as memory leaks, persistent lag, or abnormal resource consumption that affects the stable operation of the device;

- An app displays properly only on certain device models or resolutions, while the interface is severely distorted or displays garbled characters on other device models or resolutions;

- An app is clearly a placeholder app, a shell app, or a repetitively assembled app;

- An app remains in an abnormal state for an extended period after being listed in the APP Center and is not promptly fixed;

- An app only contains web page redirects and provides no independent functionality; and

- An app interferes with the user experience through frequent pop-ups, forced redirections, etc.

2. Fraud and False Advertising

Apps must truthfully and accurately present their functions and services. False or misleading information shall not be used to induce downloads, use, or payment, including exaggerating functions, fabricating data, or hiding charges. App violations related to fraud and false advertising include but are not limited to the following circumstances:

- The functions advertised lack reasonable technical or factual basis;

- The app creates a sense of urgency through fake discounts, countdown timers, etc., to induce payment;

- An app uses misleading buttons or redirection designs to force users to click on ads or subscribe for services;

- The app causes user misoperations, forced actions, or a poor experience in which users find it hard to exit the app due to an app's interface design;

- An app fabricates its reputation among users through download manipulation, fake reviews, or incentivizing positive reviews, or exhibits a large number of abnormal positive reviews with highly similar content;

- An app claims official or third-party certification or endorsement but fails to provide authorization documentation;

- An app disguises itself as a system update or security alert to induce users to download it; or

- An app misleads users into installing non-essential apps under the pretense of "official plugins" or "system-essential components".

3. Violation of Public Order and Good Morals (Obscene, Pornographic, or Violent Content)

All content in apps must comply with public order and good morals. Apps shall not disseminate inappropriate, harmful, or clearly unsuitable information for the general public, especially minors. App violations related to violation of public order and good morals include but are not limited to the following circumstances:

- An app contains pornographic content, sexual descriptions, sexual innuendo, or lures users to adult services;

- An app displays vulgar or indecent language, insulting imagery, or vulgar images;

- An app displays or encourages violent or bloody content without proper age rating or warning;

- An app disseminates hate speech, discriminatory remarks, or incites or demonstrates illegal or dangerous behaviors;

- An app contains large amount of soft porn content or traffic-redirecting accounts that direct users to inappropriate information;

- An app directly displays scenes of animal abuse or extreme violence without prior warning;

- An app's comment section or community area contains long-standing content that violates the rules without any moderation mechanism;

- An app uses vulgar titles or vulgar emojis within the app for traffic-redirecting marketing; and

- An app continuously delivers inappropriate content to users through plugins, content libraries, or similar mechanisms.

4. Inappropriate Content Involving Minors

Apps involving minors must implement protective measures, including age-appropriate content, behavioral guidance, data protection, and parental supervision. App violations related to inappropriate content involving minors include but are not limited to the following circumstances:

- An app fails to set reasonable age ratings for sensitive content, or the rating mechanism is merely a formality;

- An app collects or uses minors’ personal information without obtaining legal authorization or parental consent;

- An app fails to implement age-appropriate filtering for violent, adult, gambling, or similar content;

- An app induces minors to make recharges or tips, or social interactions;

- A social app does not restrict strangers from sending private messages to minors;

- An app's minor mode only changes the interface without any substantive functional restrictions;

- A game app fails to implement anti-addiction mechanisms, such as without time limits or nighttime access restrictions; and

- No parental control or supervision tools are provided for an app that clearly targets minors as its primary user group.

5. Privacy and Data Protection

When processing users’ personal information, apps shall adhere to the principles of legality, legitimacy and necessity, and protect users’ rights and interests as personal information subjects through notification and by obtaining users’ consent. App violations related to privacy and data protection include but are not limited to the following circumstances:

- An app fails to provide a privacy policy, or the privacy policy is difficult to access;

- An app collects sensitive personal information without obtaining users' consent;

- An app requests permissions beyond service needs or fails to clearly explain the permission usage;

- An app shares data with third parties without disclosure or without obtaining users' consent;

- An app fails to implement reasonable security measures, resulting in a risk of data leakage;

- A utility app forces enabling location without necessity;

- An app is launched without a privacy policy prompt, and the policy is hidden within secondary pages;

- An app fails to promptly notify users in the event of a data leakage;

- An app shares data with third-party SDKs without disclosing their data processing rules, or fails to provide a list of third-party SDKs (as required in certain regions, such as the Chinese mainland); and

- An app encrypts, locks, hides, or refuses to return data stored on users' NAS devices without legitimate reasons.

6. Intellectual Property Infringement

Apps must respect the intellectual property rights of others and ensure that the content, logos, and technologies adopted are legal and compliant. App violations related to intellectual property infringement include but are not limited to the following circumstances:

- An app uses third-party images, audio, video, text, and other content without authorization;

- An app uses trademarks, brands, or official logos of other entities without permission;

- The name, icon, or interface design of an app is highly similar to that of a well-known product, likely to cause confusion;

- An app uses third-party materials but fails to prove their legitimate sources;

- An app uses well-known IP character images without authorization;

- The name of an app is highly similar to that of a well-known product;

- An app directly uses video clips from movies and TV shows as content;

- The UI design of an app is highly similar to a prior work; and

- An app uses third-party fonts or materials but cannot provide authorization documentation.

7. Others

In addition to the circumstances described above, any act that violates laws, regulations, or platform policies, or harms platform security and user rights and interests, shall be deemed as a violation. For example,

- An app violates other platform policies, such as imposing OS‑specific constraints or engaging in improper advertising practices;

- An app fails to report and fix security‑related anomalies as required;

- An app modifies, deletes, or damages the integrity of the basic environment provided by UGREEN;

- An app enables remote access ports without authorization, posing security risks to the NAS;

- An app updates code or functionality via scripts, plug-ins, online hotfixes, or similar methods but fails to resubmit the update for review or clearly inform users of the updated content; and

- An app causes a large number of user complaints against UGREEN due to developer-related reasons (e.g., limited customer service capacity, excessively low service efficiency).

II. App Violation Penalty Rules

UGREEN will conduct a comprehensive assessment of violations and determine the corresponding penalties based on the following factors. These factors aim to ensure fair and reasonable handling and to differentiate between varying degrees of severity based on the actual circumstances. However, UGREEN reserves the right of final interpretation to handle violations based on specific situations and to adapt to dynamic adjustments of the platform rules.

1. Nature and Severity of Violations

UGREEN will place primary emphasis on assessing the actual or potential impact of violations on user rights and interests (such as privacy leakage or financial losses), platform security (such as malicious code injection or exploitation of system vulnerabilities), and the public interest (such as the dissemination of harmful content or false information).

• Minor violation: The violation involves only technical flaws or unintentional negligence having limited impact on users.
• Moderate violation: The violation causes inconvenience or potential risks to a certain range of users, such as moderate disruption resulting from improper functional design.
• Severe violation: The violation causes significant harm, such as large-scale data leakage or the proliferation of harmful content, representing highly destructive scenarios.

2. Scope and Consequences of Impact

UGREEN will focus on the actual harm caused to users (e.g., user volume and feedback), UGREEN's reputation (e.g., negative public opinion), and the legitimate rights of third parties (e.g., intellectual property infringement). UGREEN will assess violations based on quantitative data (e.g., download volume, complaint rate) and qualitative feedback.

• Minor violation: The impact is limited to a small number of users, without significant adverse consequences.
• Moderate violation: The violation affects a moderate number of users or causes some controversy, but does not yet disrupt the overall operational order of the platform or harm the public interest.
• Severe violation: The impact is widespread or causes irreversible damage, producing a long-term or structural negative effect on the protection of user rights, UGREEN's brand image, or the legitimate rights and interests of third parties.

3. Violation Frequency and History

UGREEN distinguishes between first-time violations and repeat violations, and applies stricter measures for multiple violations involving the same app, the same developer, or associated accounts. In addition, the interval between violations and developers' overall compliance history will be taken into account. Under special circumstances (such as voluntary reporting), UGREEN may consider imposing a lesser penalty at its discretion.

• Minor violation: The app commits a first-time violation with no prior history, which is likely an isolated inadvertent error.
• Moderate violation: An app has two to three violations or minor historical issues, indicating potential deficiencies in the developer’s internal management or insufficient understanding of platform rules.
• Severe violation: The app has four or more violations, or repeated violations, reflecting that the developer and the app may pose ongoing or systemic risks.

4. Degree of Subjective Fault

UGREEN will make a comprehensive determination as to whether a developer acted with subjective malice, based on the chain of evidence including submission records, behavioral patterns, and relevant technical traces. On this basis, UGREEN reserves reasonable discretion in interpreting the criteria for determining "malice".

• Minor violation: A developer exhibits no subjective malice and the violation arises from negligence or misunderstanding of the rules—for example, unintentional deviations caused by inadequate understanding of platform rules during initial development.
• Moderate violation: A developer shows some intent to circumvent rules without deliberate malice—for example, certain feature designs attempt to bypass review but do not constitute systematic deception.
• Severe violation: A developer exhibits clear malicious conduct (e.g., systematic fraud), such as repeated operations deliberately deceiving review through disguised code or false declarations.

5. Attitude and Cooperation in Rectification

UGREEN will comprehensively evaluate developers' cooperation during the investigation, rectification, and communication process (e.g., timeliness of responses, completeness of evidence provided) as well as the effectiveness of rectification (e.g., whether the issue is fully resolved). UGREEN encourages developers to proactively communicate with it, but the final evaluation is based on their actual performance.

• Minor violation: A developer actively cooperates with UGREEN and implements effective rectification. UGREEN may adjust the penalty to a warning or waive further penalties.
• Moderate violation: A developer shows average cooperation or the rectification requires multiple iterations. As a result, UGREEN may extend the app's removal period.
• Severe violation: A developer refuses to cooperate with UGREEN or the rectification is ineffective. As a result, UGREEN may escalate the penalty to permanent measures.

When handling reports and appeals, UGREEN will make a procedural judgment solely based on the information available and platform rules, and such judgment does not constitute a final determination of the relevant legal liability. The legal liability for the app and its related conduct shall still be borne by the app developer/operator in accordance with the law.

III. App Violation Penalty Measures

UGREEN reserves the right to take one or more of the following actions against an individual app and/or its developer based on the penalty principles:

- Warning and rectification deadline: Issue a written rectification notice to a developer, requiring the developer to complete the rectification and submit an updated version of the app within a specified period.

- Function or access restrictions: Restrict invitation features, suspend recommendation displays, or disable access to certain functions.

- Removal from platform: Remove the app from the platform. Users who have already installed it may continue to use it but cannot receive updates. For severe or repeated violations, UGREEN may permanently remove the app and terminate its operation.

- Developer account handling: For developers with repeated violations or malicious conduct, take measures including temporary or permanent account restrictions, account suspension, or termination of cooperation.