Company MASHROUA AL-THALITH ASHAR For IT Systems

TERMS AND CONDITIONS OF USE

Governing the "Thirteen" Mobile Application and Related Services

Effective Date: July 27, 2026

Jurisdiction: Kingdom of Saudi Arabia

Preamble and Acceptance

PLEASE READ THESE TERMS AND CONDITIONS CAREFULLY. THEY CONTAIN IMPORTANT PROVISIONS, INCLUDING A LIMITATION OF THE COMPANY'S LIABILITY AND YOUR OBLIGATION TO INDEMNIFY THE COMPANY, WHICH AFFECT YOUR LEGAL RIGHTS.

These Terms and Conditions ("Terms") form a legally binding agreement between you ("User," "you," or "your") and Company MASHROUA AL-THALITH ASHAR For IT Systems, a company registered in the Kingdom of Saudi Arabia ("KSA" or the "Kingdom") under Commercial Registration No. 4030367847 , with its registered office at 7562 23513-3569 7567, Jeddah, Kingdom of Saudi Arabia ("Company," "we," "us," or "our"). These Terms govern your access to and use of the mobile application known as "Thirteen" and any related websites, features, and services (collectively, the "Services").

By downloading, installing, registering for, accessing, or otherwise using the Services, or by clicking "I Agree" (or a similarly worded acknowledgment) when creating an Account, you confirm that you have read, understood, and agree to be bound by these Terms and by our Privacy Policy, which is incorporated into these Terms by reference. If you do not agree, you must not access or use the Services.

1. Definitions

"Account" means the registered user profile a User creates to access the Services.

"Anonymous Mode" or "Anonymous Window" means the recurring, automatically triggered period, currently occurring approximately every one hundred eighty (180) minutes and lasting approximately thirteen (13) minutes, during which display names and profile identifiers of members of a Group are hidden from other members of that Group within the Services.

"Applicable Law" means the laws, royal decrees, regulations, and binding guidance in force in the Kingdom of Saudi Arabia, including without limitation the Personal Data Protection Law and its Implementing Regulations (the "PDPL"), the Anti-Cybercrime Law, the E-Commerce Law, and any rules issued by the Communications, Space and Technology Commission ("CST"), the Saudi Data and Artificial Intelligence Authority ("SDAIA"), the National Cybersecurity Authority ("NCA"), or any other competent Saudi authority.

"Company Parties" means the Company and its directors, officers, employees, agents, affiliates, contractors, and licensors.

"Content" means all text, graphics, logos, audio, video, software, and other material made available through the Services by the Company or its licensors.

"Group" means a private chat group created by Users within the Services.

"Personal Data" has the meaning given to it under the PDPL, being any data that identifies or can reasonably be used to identify a natural person.

"User Content" means any message, text, image, video, voice note, or other material a User creates, sends, posts, or stores through the Services.

2. Acceptance of These Terms

Your access to and use of the Services is conditioned on your acceptance of and compliance with these Terms. These Terms apply to all visitors, Users, and others who access or use the Services.

We reserve the right, at our sole discretion, to modify or replace these Terms at any time, as further described in Section 18. Your continued use of the Services after any such change constitutes your acceptance of the revised Terms.

3. Eligibility and Age Requirements

3.1 General Eligibility

You may only create an Account and use the Services if you are at least eighteen (18) years of age and have the legal capacity to enter into a binding contract under Applicable Law. By using the Services, you represent and warrant that you meet this requirement, that all registration information you submit is accurate and truthful, and that you have not been previously suspended or removed from the Services.

3.2 Verification and Enforcement

We may request proof of age or identity at any time and may suspend or terminate any Account that we reasonably believe does not meet these eligibility requirements, without liability to you.

4. Account Registration and Security

To use certain features of the Services, you must register for an Account. You agree to: (a) provide accurate, current, and complete information; (b) maintain and promptly update that information; (c) maintain the confidentiality and security of your Account credentials; and (d) accept responsibility for all activity that occurs under your Account, whether or not authorized by you.

You must notify us immediately at [email protected] of any unauthorized use of your Account or any other breach of security. We are not liable for any loss or damage arising from your failure to safeguard your Account credentials.

5. Description of the Services; The Anonymous Mode Feature

5.1 The Services

The Services allow Users who know one another to form private Groups and exchange text messages, images, videos, and voice notes.

5.2 Anonymous Mode Mechanics

As a core feature of the Services, each Group automatically enters Anonymous Mode approximately every one hundred eighty (180) minutes, for a duration of approximately thirteen (13) minutes. During Anonymous Mode:

• the display name, profile picture, and other identifying information of each member of the Group are hidden from other members of that Group for the duration of the window;

• only text messages may be sent; voice notes, images, videos, and other media attachments are disabled by the Company and cannot be shared by Users until Anonymous Mode ends; and

• at the conclusion of the thirteen (13)-minute window, the Group automatically returns to standard, named chat mode, and all identifying information is restored to view.

5.3 No User Opt-Out; Company Discretion

Anonymous Mode is triggered automatically by the Company's systems and is not a feature Users may individually enable, disable, or decline for a specific Group while remaining a member of that Group. The Company reserves the right to modify, adjust, suspend, or discontinue the frequency, duration, or availability of Anonymous Mode, in whole or in part, at any time and without prior notice, including in response to safety, legal, or regulatory considerations.

6. Nature of Anonymity; No Exemption from Liability

6.1 Limited and Cosmetic Anonymity Only

Anonymous Mode hides your display name and profile identifiers from other members of a Group only. It does not make your identity anonymous to the Company. Every message you send, including during Anonymous Mode, remains associated with your Account through the Company's internal systems and logs, as further described in Section 14.

6.2 No Legal Anonymity; No Reduction in Liability

Anonymous Mode does not create, and must not be understood to create, any form of legal anonymity. Use of Anonymous Mode does not exempt you from liability for defamation, harassment, threats, invasion of privacy, impersonation, or any other unlawful conduct under the Anti-Cybercrime Law (including Article 3 thereof, which addresses defamation and privacy violations committed through information technology), the PDPL, or any other Applicable Law, regardless of whether your identity was hidden from other Group members at the time of the conduct.

6.3 Your Acknowledgment

By using Anonymous Mode, you acknowledge and agree that:

• messages you send during Anonymous Mode remain subject to these Terms, including the User Conduct provisions in Section 7, in full;

• you remain solely and personally responsible, including under Applicable Law, for the content of your communications sent during Anonymous Mode;

• the Company may identify you internally, and may unmask, disclose, suspend, or terminate your Account, in response to a report, suspected violation of these Terms, or valid legal process, as described in Sections 9 and 14; and

• the Company does not guarantee that other Users will not attempt to guess, infer, or improperly expose your identity during Anonymous Mode, and the Company is not responsible for such conduct by other Users except as set out in Section 16.

6.4 Built-In Safeguards

To reduce, though not eliminate, the risk of misuse, the Company disables voice note, image, and video sharing during Anonymous Mode, restricting communication to text only, as described in Section 5.2. This is a risk-mitigation measure implemented at the Company's discretion and is not, and must not be relied upon as, a guarantee against misuse of Anonymous Mode by other Users.

7. User Conduct and Prohibited Uses — Zero-Tolerance Policy

You are solely responsible for your conduct and for all User Content you send or share through the Services, whether or not sent during Anonymous Mode. You agree that you will not, and will not attempt to, whether directly or through a third party:

• engage in harassment, cyberbullying, threats, intimidation, or stalking of any person;

• defame any person, or publish false statements of fact that harm or are likely to harm another person's reputation or honor;

• post or transmit hate speech, or content that incites discrimination, hostility, or violence on the basis of race, religion, sect, gender, nationality, disability, or other protected characteristic;

• impersonate any person or entity, or falsely state or imply an affiliation with any person or entity, including by using another User's identity or exploiting the temporary anonymity of Anonymous Mode to mislead others about who is speaking;

• disclose another person's private or personal information without that person's consent (doxxing), including photographs, recordings, contact details, or location information;

• send unsolicited sexual content, engage in sexual harassment, or post any content that sexualizes, exploits, or endangers a minor, which is absolutely prohibited under all circumstances;

• post content that is unlawful, obscene, or otherwise offends public order, religious values, or public morals, or that otherwise violates the Anti-Cybercrime Law or any other Applicable Law;

• use Anonymous Mode, or the temporary concealment of identity it provides, as a means to engage in any of the conduct described in this Section 7 that you would not otherwise engage in under your own name;

• upload viruses, malware, or other harmful code, or attempt to interfere with, disrupt, or gain unauthorized access to the Services or other Users' Accounts; or

• use the Services for any illegal purpose or in violation of any Applicable Law.

Violation of this Section 7 is treated by the Company as a zero-tolerance matter. The Company may, at its sole discretion and without prior notice, remove content, restrict a User's access to Anonymous Mode specifically, or suspend or terminate the offending Account, as described in Sections 9 and 10, and may report conduct that may constitute a criminal offense to the competent Saudi authorities.

8. User Content and License Grant

You retain ownership of the intellectual property rights in the User Content you create. By sending, posting, or storing User Content through the Services, you grant the Company a limited, non-exclusive, royalty-free, worldwide license to host, store, transmit, reproduce, and display that User Content solely to the extent necessary to operate, maintain, secure, and improve the Services, to enforce these Terms, and to comply with Applicable Law.

You represent and warrant that you own or otherwise control all rights necessary to grant this license, and that your User Content and your use of the Services do not and will not violate these Terms, the rights of any third party, or any Applicable Law.

The Company has no obligation to pre-screen, monitor, or edit User Content, but reserves the right, at its sole discretion, to review, remove, or restrict access to any User Content at any time and for any reason, including where the Company believes in good faith that the content violates these Terms or Applicable Law.

9. Content Moderation, Reporting, and Enforcement

9.1 Reporting Mechanism

The Services provide an in-app mechanism for reporting abusive conduct or content, accessible from within a Group and from individual messages, including messages sent during or shortly after Anonymous Mode. Reports may also be submitted to [email protected] . Where a User reports a message sent during Anonymous Mode, the Company may access its internal logs to identify the sending Account for the purpose of investigating the report, notwithstanding that the sender's identity was hidden from other Group members at the time.

9.2 Review and Available Actions

Upon receiving a report or otherwise becoming aware of a suspected violation, the Company may, at its sole discretion and without prior notice or liability to you, take any of the following actions: issue a warning; remove or restrict access to specific User Content; temporarily or permanently restrict a User's ability to participate in Anonymous Mode; suspend or terminate the Account; and, where the Company believes a criminal offense may have occurred, report the matter and provide relevant information to the Public Prosecution, the CST, or other competent Saudi authority.

9.3 No Guaranteed Timeline

While the Company will make reasonable efforts to review reports promptly, the Company does not guarantee any specific response time and is not liable for harm arising from content that has not yet been reviewed or removed.

10. Suspension and Termination

We may suspend, restrict, or terminate your access to the Services, in whole or in part, at any time, with or without notice and with or without cause, including where we believe you have violated these Terms, created legal exposure or risk for the Company, or where required by Applicable Law. Upon termination, your right to use the Services will immediately cease, and Sections 6 through 8 and 12 through 21 of these Terms will survive termination.

You may deactivate your Account at any time by contacting [email protected] We may continue to retain certain information after deactivation as required by Applicable Law or as described in our Privacy Policy.

11. Intellectual Property Rights

The Services and all Content (excluding User Content), including the "Thirteen" name, logo, and all related trademarks, are the property of the Company or its licensors and are protected under Applicable Law, including applicable intellectual property protections in the Kingdom. Subject to your compliance with these Terms, the Company grants you a limited, non-exclusive, non-transferable, revocable license to access and use the Services for your personal, non-commercial use. You may not copy, modify, distribute, sell, or create derivative works based on the Services or Content, or reverse engineer any aspect of the Services, except as expressly permitted by Applicable Law.

12. Third-Party Content and Services

The Services may reference, link to, or interoperate with third-party content, products, or services. The Company does not control and is not responsible for third-party content or services, and your use of them is at your own risk and subject to their own terms and privacy practices.

13. Privacy and Data Protection

13.1 Relationship to Our Privacy Policy

Our collection, use, storage, and disclosure of Personal Data is described in our Privacy Policy, which is incorporated into these Terms by reference. Where these Terms and the Privacy Policy conflict on matters of data protection, the Privacy Policy controls.

13.2 PDPL Compliance

We process Personal Data in accordance with the PDPL and its Implementing Regulations, under the oversight of SDAIA. We rely on your consent, the necessity of processing to provide the Services, and/or other lawful bases recognized under the PDPL, as described in our Privacy Policy.

13.3 Your Rights

Subject to the conditions and exceptions set out in the PDPL, you have the right to access, correct, and request deletion of your Personal Data, to withdraw consent, and to object to certain processing. You may exercise these rights by contacting us at [email protected] or, if appointed, our Data Protection Officer at [email protected]

13.4 Children's Data

Where the processing of Personal Data of a User who has not yet reached full legal capacity is permitted under Section 3.2, we will process that data only with the consent of a parent or legal guardian, verified using appropriate measures, and in accordance with the PDPL's requirements for consent given on behalf of a person lacking legal capacity.

13.5 Cross-Border Data Transfers

Personal Data collected through the Services is primarily stored at UAE, KSA. Where Personal Data is transferred outside the Kingdom, such transfer will be made only in accordance with the PDPL and the Regulation on Transfer of Personal Data outside the Kingdom, including by relying on an adequacy determination, appropriate contractual or technical safeguards, or another basis recognized by SDAIA.

13.6 Data Breach Notification

In the event of a personal data breach that poses a risk to your Personal Data or your rights and interests, we will notify SDAIA within seventy-two (72) hours of becoming aware of the breach, and will notify you without undue delay where the breach is likely to result in harm to you, in each case in accordance with the PDPL and its Implementing Regulations.

14. Data Retention and Cooperation with Law Enforcement

14.1 System Logs During Anonymous Mode

Although Anonymous Mode hides display names from other Group members, the Company retains internal system logs linking every message, including messages sent during Anonymous Mode, to the Account that sent it. These logs are retained for the periods described in our Privacy Policy, or for such longer period as required by Applicable Law.

14.2 Disclosure in Response to Legal Process

The Company may access, preserve, and disclose Account information, including message content and logs relating to Anonymous Mode, where it believes in good faith that disclosure is reasonably necessary to: (a) comply with a valid order, subpoena, or request issued by a competent Saudi court, the Public Prosecution, CST, or another authorized Saudi governmental or regulatory authority; (b) enforce these Terms; (c) detect, investigate, or prevent fraud, security incidents, or technical issues; or (d) protect the rights, property, or safety of the Company, its Users, or the public, in each case as permitted or required under Applicable Law, including the Anti-Cybercrime Law and the PDPL.

14.3 No Guarantee of Anonymity from Authorities

Anonymous Mode conceals your identity from other Users only. It provides no protection from, and is not a barrier to, lawful requests for information made by a competent Saudi authority.

15. Disclaimers of Warranties

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, THE SERVICES AND ALL CONTENT ARE PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS, WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

The Company does not warrant that the Services will be uninterrupted, secure, or error-free, that Anonymous Mode will conceal a User's identity from other Users in every circumstance (including where another User independently identifies or guesses at the sender), or that the Services will be free of harmful conduct by other Users.

16. Limitation of Liability

16.1 Exclusion of Certain Damages

To the fullest extent permitted by Applicable Law, in no event will the Company Parties be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, goodwill, or other intangible losses, arising out of or relating to your access to or use of, or inability to access or use, the Services, including any dispute between Users or any misuse of Anonymous Mode by another User.

16.2 Liability Cap

To the fullest extent permitted by Applicable Law, the Company Parties' aggregate liability arising out of or relating to these Terms or the Services will not exceed the greater of (a) SAR 10,000 or (b) the total amount, if any, you paid to the Company for the Services in the [three (3)] months preceding the event giving rise to the claim.

16.3 Carve-Outs

Nothing in this Section 16 limits or excludes liability that cannot be limited or excluded under Applicable Law, including liability for the Company's own fraud, gross negligence, or willful misconduct, or for death or personal injury directly caused by the Company's own acts.

17. Indemnification

To the fullest extent permitted by Applicable Law, you agree to indemnify, defend, and hold harmless the Company Parties from and against any claims, damages, losses, liabilities, penalties, and expenses (including reasonable legal fees) arising out of or relating to:

• your use or misuse of the Services, including Anonymous Mode;

• any User Content you send, post, or store through the Services;

• any claim by a third party that your conduct, including conduct during Anonymous Mode, constitutes defamation, harassment, invasion of privacy, or another violation of that person's rights;

• any regulatory investigation, penalty, or enforcement action arising from your violation of Applicable Law, including the Anti-Cybercrime Law or the PDPL, in connection with your use of the Services; or

• your violation of these Terms.

The Company reserves the right to assume the exclusive defense and control of any matter otherwise subject to indemnification by you, in which case you agree to cooperate with the Company's defense of that claim.

18. Modifications to the Services and These Terms

We may modify, suspend, or discontinue the Services, including the frequency, duration, or existence of Anonymous Mode, at any time without liability to you. We may also revise these Terms from time to time. Where a change is material, we will provide notice through the Services or by email at least 3 days before the change takes effect, except where an immediate change is required for legal, security, or safety reasons. Your continued use of the Services after a revised version of these Terms takes effect constitutes acceptance of the revised Terms.

19. Governing Law and Jurisdiction

These Terms, and any dispute arising out of or relating to them or to the Services, are governed by and construed in accordance with the laws of the Kingdom of Saudi Arabia. Subject to Section 20, the competent courts of Kingdom of Saudi Arabia, will have exclusive jurisdiction over any such dispute.

20. Dispute Resolution

If a dispute arises between you and the Company relating to these Terms or the Services, you agree to first contact us at [email protected] and attempt to resolve the dispute informally and in good faith for a period of thirty (30) days. If the dispute is not resolved within that period, either party may bring the dispute before the competent courts identified in Section 19. Nothing in this Section prevents either party from seeking urgent injunctive relief, or from lodging a complaint with a competent Saudi regulator, including the CST or the Ministry of Commerce, at any time.

21. General Provisions

21.1 Severability

If any provision of these Terms is held invalid or unenforceable, that provision will be limited or eliminated to the minimum extent necessary, and the remaining provisions will remain in full force and effect.

21.2 No Waiver

Our failure to enforce any right or provision of these Terms will not be considered a waiver of that right or provision.

21.3 Assignment

You may not assign or transfer these Terms without our prior written consent. We may assign these Terms without restriction, including in connection with a merger, acquisition, or sale of assets.

21.4 Entire Agreement

These Terms, together with our Privacy Policy and any other policies incorporated by reference, constitute the entire agreement between you and the Company regarding the Services.

21.5 Language

These Terms are made available in both English and Arabic. In the event of any discrepancy or conflict between the two versions, the Arabic version shall prevail to the extent required by Applicable Law.

21.6 Notices

We may provide notices to you through the Services, by email to the address associated with your Account, or by posting a notice within the App. Notices to the Company should be sent to [email protected]

21.7 Force Majeure

Neither party will be liable for any failure or delay in performance to the extent caused by circumstances beyond that party's reasonable control.

22. Contact Information

If you have questions about these Terms, please contact us at:

Company MASHROUA AL-THALITH ASHAR For IT Systems

Email: [email protected]

Data Protection / Privacy inquiries: [email protected]