TERMS OF SERVICE

These Terms of Service (the "Terms") govern your access to and use of the services of Safirum AG ("Safirum", "we", "us", "our"). They apply to all of the following services (together the "Services"):

• (a) the website www.safirum.com, including its press and investment pages (the "Website");
• (b) the invitation, registration and admission pages for our events at safirum.mbco.io/launch, including the identity check, the admission pass and the door check-in ("Event Registration");
• (c) the Safirum user area, today at safirum.mbco.io/user and later at www.safirum.com/user, where you can open an account, sign in, link wallets and request whitelisting (the "User Area");
• (d) the Safirum mobile apps for iOS and Android, once we release them (the "Apps");
• (e) our internal administration panel (the "Panel"), as far as we give persons access to it.

By using the Services, opening an account or accepting these Terms in a registration form, you ("you", "User") agree to these Terms. If you do not agree, please do not use the Services.

The issuing, holding, transfer and redemption of CHF-S, and any other services that Safirum provides to qualified counterparties, are governed by separate contractual documentation (the "CHF-S Documentation"). The CHF-S Documentation prevails over these Terms. These Terms are not an offer of CHF-S and give you no right to acquire, receive or redeem CHF-S.

If specific terms apply to a particular Service or event and you accept them, they prevail over these Terms for that Service or event. Our Privacy Policy at www.safirum.com/privacy explains how we process personal data. It is information, not part of this contract.

Safirum AG is a Swiss public limited company (Aktiengesellschaft) with its registered office in Risch, Canton of Zug, registered with the Commercial Register of the Canton of Zug under UID CHE-131.711.876.

Safirum AG is a financial intermediary within the meaning of Art. 2 para. 3 of the Swiss Federal Act on Combating Money Laundering and Terrorist Financing (AMLA) and a member of the Financial Services Standards Association (VQF), a self-regulatory organisation recognised by the Swiss Financial Market Supervisory Authority FINMA (membership number 101343, member since 28 April 2026).

Safirum AG does not hold a licence from FINMA as a bank or as a financial institution.

Further information is available in the Imprint at www.safirum.com/imprint.

You may use the Event Registration, the User Area and the Apps only if:

• (a) you are at least 18 years old and have full legal capacity;
• (b) you are not a person named on a sanctions list of Switzerland, the European Union, the United Nations, the United Kingdom or the United States, and you are not owned or controlled by such a person;
• (c) you are not resident in, and do not act from, a country or territory that is subject to comprehensive sanctions under those lists;
• (d) the law that applies to you allows you to use the Services.

If you act for a company or another legal entity, you confirm that you are authorised to bind it, and "you" then also means that entity. We may limit the Services, or parts of them, to certain countries or groups of persons, and we may refuse access to any person at our discretion, in particular to meet our legal duties.

To use the User Area or the Apps, you need an account. You can sign in with a one-time e-mail code, with a linked Google, X or Apple account, or with a wallet signature. Each account is for one person only. You may not share your account, open accounts for other persons without their authority, or hold several accounts to get around a limit.

You must give us accurate and complete information and keep it up to date. You are responsible for keeping your e-mail account, your devices and your sign-in methods secure, and for all activity under your account unless it is caused by our fault. Tell us at once at info@safirum.com if you suspect misuse. We will never ask you for your password, seed phrase or private key.

We may verify your identity at any time, also again later, and ask for further information or documents. We may refuse to open an account, refuse a request, or suspend or close an account, in particular if you do not pass the identity check, if the information you gave is wrong or incomplete, if our legal duties require it, if you breach these Terms, or if we have reasonable grounds to suspect misuse.

If your identity check was completed without the chip of your document, we may ask you to confirm it with a transfer of CHF 1.00 from a bank account in your own name to our bank account, with the reference we give you. This transfer is not a fee: we send the amount back to the account it came from once the transfer has been matched with your identity check or reviewed by us, also if it does not match. Until this step is complete, we may hold back requests that need a verified identity, such as whitelisting.

The Services work with self-custodial wallets on the Solana blockchain, such as Phantom or Solflare. You alone control the private keys and the seed phrase of your wallets. We never hold your keys, never hold your funds in the User Area or the Apps, and cannot sign transactions for you.

If you lose your keys or seed phrase, we cannot recover them or the assets in the wallet. Transactions on the blockchain are final. We cannot reverse, cancel or change them, including transfers to a wrong address. Check every address, amount and transaction before you sign it.

You link a wallet to your account by proving that you control it, for example by signing a message. Your first verified wallet becomes your master wallet. If you name a wallet without such a proof, you confirm that you control it or are authorised by its owner to have it whitelisted, and you are responsible for that statement.

CHF-S can only be held and transferred by wallets that are on the CHF-S whitelist. The whitelist is kept on the Solana blockchain. Each whitelisted wallet has its own public entry, and the token checks on every transfer that both the sending and the receiving wallet are whitelisted, except for transfers that Safirum makes with its token controls (section 13(d)).

A whitelisting request is not an approval. We decide on each request at our discretion, in particular after the identity check and the checks required by law. We may reject a request without giving reasons, unless the law requires us to give them.

Whitelisting allows a wallet to hold and transfer CHF-S within the rules of the token. It gives you no right to buy, receive or redeem CHF-S from Safirum, and no right to any other service. Those rights, if any, arise only from the CHF-S Documentation.

We may remove a wallet from the whitelist at any time, in particular if the law, a court or an authority requires it, if sanctions apply, if your identity check expires, changes or is withdrawn, if you breach these Terms, if we suspect misuse, if your account is closed, or for other objective reasons. Where the law and the circumstances allow, we will tell you in advance. While a wallet is not whitelisted, no CHF-S can be transferred to or from it, except by Safirum with its token controls (section 13(d)). If a removed wallet still holds CHF-S, please contact us.

Creating a whitelist entry on the blockchain costs SOL: a deposit for the storage of the entry (rent) and a network fee for the transaction that creates it. Unless the Service says that whitelisting is free, you pay these costs. Before you confirm a request, we show you the amount in SOL, the wallet that must pay it, the Safirum wallet that receives it and the memo the payment must carry. Your wallet app adds the network fee for your own payment transaction, which you also bear.

In the User Area, you pay from your master wallet. Your request is reviewed only after we have found the payment on the blockchain. You pay when you confirm the request, either from your connected wallet or with your own tools, in which case you give us the transaction signature. There is no deadline, and you can cancel a request that you have not paid.

Where an App offers to whitelist your first wallet free of charge, Safirum pays the costs. This offer is limited to one wallet per verified person, may depend on the identity check with the chip of your document, on device checks and on daily limits, and may be changed or ended for the future. Further wallets are paid by you from your own wallet app, as described above.

Once the whitelist entry has been created, the amount you paid is not refundable. This also applies if the wallet is later removed from the whitelist. By design of the whitelist program, the deposit of a removed entry returns to the Safirum wallet that removes it, not to you.

Payments are not refundable. This also applies if we reject a request after you have paid for it, unless the law requires a refund. A payment that is lower than the amount shown does not complete the request. If you believe you paid by mistake, paid too much or paid for a request we rejected, contact us at info@safirum.com. Any refund we make goes to the wallet that paid, and we may deduct the network fee of the refund transaction.

Our events are for invited guests only. Your invitation, access code and admission pass are personal and not transferable. To register, you must enter your name as shown on your identity document, pass our identity check, register a Solana wallet address and accept the terms of the event. Registration may close at a set date or when all places are taken.

An invitation or registration gives you no right to attend. We may refuse admission, or ask you to leave, in particular if you cannot show the identity document you used for the check, if your name does not match, if the check was not passed, if there are no places left, for reasons of safety or of the law, or if you do not follow the instructions of our staff or the venue.

We may change the date, time, venue or programme of an event, or cancel it. We will tell registered guests by e-mail. Subject to section 17, we do not reimburse costs you incur in connection with an event, such as travel.

If we transfer CHF-S to guests at an event, we do so free of charge as part of the event. The transfer is not a sale and not an offer to the public. Holding, transferring and redeeming such CHF-S is subject to the CHF-S Documentation and to section 6. We may make the transfer depend on your wallet being whitelisted and on your identity check, and we may cancel it if the law requires.

We grant you a personal, non-exclusive, non-transferable and revocable licence to install and use the Apps on devices that you own or control, for your own use of the Services and within the rules of the app store from which you downloaded them. You may not copy, modify, decompile or redistribute the Apps, except where the law expressly allows it.

These Terms are between you and Safirum, not Apple or Google. Apple and Google are not responsible for the Apps or their content, give no warranty for them, have no duty to provide maintenance or support, and are not responsible for claims relating to the Apps. Apple and its subsidiaries are third-party beneficiaries of these Terms with respect to the iOS App and may enforce them against you. The rules of the app stores also apply.

We may release updates. Some updates may be required to keep using the Apps, for example for security reasons. The functions of the Apps may differ from those of the User Area on the web. The Apps never hold your private keys. You approve wallet actions in your own wallet app.

You agree not to:

• use the Services in breach of the law, of sanctions, or of the rights of others;
• use the Services for money laundering, terrorist financing, fraud or to get around sanctions;
• give false information, use another person's identity or documents, or help another person to get around our identity check;
• open several accounts or use several devices to obtain more than one free whitelisting, or otherwise get around a limit;
• attempt to gain unauthorised access to the Services, to accounts of others, or to related systems or networks;
• interfere with, overburden or damage the Services, or test them for weaknesses without our prior written consent;
• use robots, scrapers or other automated means to access the Services without our prior written consent, except our documented command-line options;
• send unlawful, harmful or misleading content through the Services;
• pretend to be Safirum, or use our names or logos in a way that may mislead others.

The content of the Services is provided for general information purposes only. It does not constitute:

• an offer, a solicitation, a recommendation or an invitation to purchase, subscribe to, sell or otherwise transact in any financial instrument, security, token, currency or other product or service;
• legal, tax, accounting, investment or other professional advice; or
• the basis for any investment decision.

The Services are not directed at, and the information they contain is not intended for, any person in any jurisdiction where access to, use of or distribution of the information would be contrary to applicable law or regulation. It is your responsibility to make sure that your access to and use of the Services is permitted under the laws that apply to you.

Nothing in the Services is directed at retail investors or the general public for the purpose of soliciting deposits or investments. Where Safirum offers services in connection with CHF-S, such services are made available only to banks, state-supervised companies or institutional investors with professional treasury management, in accordance with Art. 5 para. 2 of the Swiss Banking Ordinance (BankV).

An account, an identity check, a whitelisting, an event registration or a transfer of CHF-S at an event is neither an offer nor the acceptance of a deposit. CHF-S is not a bank deposit.

The Services may contain forward-looking statements regarding Safirum's plans, products, markets, financials and regulatory status. Such statements are based on assumptions and information available at the time of publication. Actual results, regulatory outcomes and market developments may differ materially. Safirum assumes no obligation to update forward-looking statements except as required by law.

Using blockchain-based services involves risks. Use the Services only if you understand them. In particular:

• (a) Blockchain and the Solana network: the network may be slow, congested, attacked or unavailable, and transaction costs may change. Transactions are public and final.
• (b) Smart contracts and upgradeable programs: the whitelist and the mint governor are programs on the blockchain. They may contain errors. Safirum can upgrade them, and an upgrade can change how they work.
• (c) Transfer restriction: CHF-S moves only between whitelisted wallets, except for transfers Safirum makes with its token controls (see (d)). If your wallet, or the wallet of the person you want to pay, is not whitelisted or is removed, transfers fail.
• (d) Token controls: the CHF-S token gives Safirum control functions. Depending on the CHF-S Documentation and the configuration of the token, they can include freezing token accounts, pausing all transfers, moving or burning CHF-S held in any wallet, charging a transfer fee and changing the token information. We use these functions only as provided in the CHF-S Documentation or where the law, a court or an authority requires it.
• (e) Issuance: new CHF-S can be created only through mint orders that several signers must approve. In the current configuration, each order needs four of five approvals. The configuration may change.
• (f) Wallets and third-party wallet apps: the security of your wallet depends on you and on the provider of your wallet app. Loss or theft of your keys can lead to the total loss of the assets in the wallet.
• (g) Phishing and fraud: criminals may imitate Safirum, our websites, our e-mails or our Apps. Use only the addresses named in section 1 and the official app store listings. We will never ask for your seed phrase or private key.
• (h) Regulatory change: laws and their application may change and may restrict or end the Services or CHF-S in some or all countries.
• (i) Tax: you are responsible for your own taxes. Using the Services may have tax consequences.
• (j) No deposit protection: CHF-S and SOL are not bank deposits. They are not covered by Swiss depositor protection or any other deposit guarantee scheme. Safirum AG does not hold a licence from FINMA as a bank.

The Services work together with services of third parties, in particular wallet apps such as Phantom and Solflare, sign-in with Google, X and Apple, identity verification by Sumsub, Solana network access providers (RPC providers) and the app stores of Apple and Google. These third parties act under their own terms and privacy policies. We do not control them and are not responsible for their availability, content, security or acts, subject to section 17. Links to third-party websites are provided for convenience only, and you use those websites at your own risk.

All content of the Services (in particular text, images, graphics, logos, trademarks, designs, software and the layout) is owned by Safirum or its licensors and is protected by intellectual property laws. Except as expressly permitted by these Terms or by applicable law, you may not reproduce, distribute, modify, publicly display, transmit, sell or otherwise exploit any such content without the prior written consent of Safirum.

"Safirum" and "CHF-S" and any associated logos are trademarks or trade names of Safirum AG. All other trademarks referenced in the Services are the property of their respective owners.

To the extent permitted by law, we provide the Services "as is" and "as available", without any warranty, express or implied. In particular, we do not promise that:

• the Services will be available at all times, without interruption, error-free or secure, or that they will reach any level of uptime;
• the content of the Services is complete, accurate, current or free from defects;
• the Services are free from viruses or other harmful components;
• a request will be approved, or that a function will remain available.

Warranties that the law makes mandatory remain unaffected.

Nothing in these Terms limits or excludes our liability:

• (a) for damage caused by unlawful intent or gross negligence (Art. 100 para. 1 of the Swiss Code of Obligations, CO);
• (b) for injury to life, body or health;
• (c) where the law, including mandatory consumer protection law of the country where you live, does not allow it to be limited or excluded.

Subject to the paragraph above and to the extent the law allows:

• (a) we are not liable for damage caused by slight negligence;
• (b) we are not liable for indirect or consequential damage, lost profits, lost savings, lost data or business interruption;
• (c) we exclude liability for our auxiliaries (Art. 101 para. 2 CO);
• (d) we are not liable for damage caused by events on the blockchain or the Solana network, by the acts of third-party services (section 14), by the loss or misuse of your keys or sign-in methods, by an address or amount you entered wrongly, or by the lawful use of the measures described in sections 4, 6 and 20;
• (e) our total liability for all claims arising out of or in connection with the Services is limited to the fees you paid to us in the 12 months before the event that gave rise to the claim, or CHF 100, whichever is higher. Network fees and rent paid on the blockchain count as fees paid to us only to the extent they were paid to a Safirum wallet.

These limits also apply to the personal liability of our directors, officers, employees and auxiliaries.

To the extent the law allows, you will compensate us for losses and reasonable costs, including reasonable legal fees, that we incur because a third party or an authority makes a claim against us as a result of your culpable breach of these Terms or of the law.

We are not liable for failing to perform or for delays caused by events beyond our reasonable control. Such events include failures, forks or congestion of the Solana network, outages of hosting, e-mail, verification or other providers, cyber attacks despite reasonable protection, natural events, epidemics, war, unrest, strikes, and acts or orders of authorities, including sanctions.

You can stop using the Services and ask us to close your account at any time by writing to privacy@safirum.com or by using the deletion function in the User Area or the Apps once it is available.

We may suspend your access, block functions or close your account with immediate effect if there is good cause, in particular for the reasons in sections 4 and 6, or if the law requires it. We may also end the Services or close your account without giving reasons, with 30 days' notice by e-mail.

When an account is closed, we may remove its wallets from the whitelist (section 6). We keep the records that the law requires us to keep (see our Privacy Policy). Sections 7, 11, 13 and 15 to 29 continue to apply after the account is closed.

We may change, extend, limit or stop the Services or parts of them, in particular to meet legal requirements, to improve security or to develop them further.

We may change these Terms. We publish the current version at www.safirum.com/terms, with the date of the last update. If we make material changes, we will inform account holders by e-mail at least 30 days before they take effect. If you do not agree, you may close your account before the changes take effect. If you continue to use the Services after that date, the new Terms apply to you. Changes required by law or to protect the security of the Services may take effect sooner.

Information on the processing of personal data in connection with the Services is set out in our Privacy Policy at www.safirum.com/privacy.

We send notices to the e-mail address linked to your account or your registration, or we show them in the User Area or the Apps. A notice sent by e-mail counts as received when it reaches that address. Please send notices to us at info@safirum.com, and data protection requests to privacy@safirum.com.

You may not transfer your rights or obligations under these Terms without our prior written consent. We may transfer them to a company that takes over all or part of our business, provided that your rights are not reduced. We will inform you of such a transfer.

If any provision of these Terms is held to be invalid or unenforceable, the remaining provisions remain in full force and effect. The invalid or unenforceable provision is replaced by a valid and enforceable provision that comes closest to the purpose of the original provision, to the extent the law allows.

If we do not enforce a right or a provision of these Terms, or enforce it late, this does not mean that we waive it.

These Terms, together with the documents named in section 1, are the entire agreement between you and Safirum on the Services. They replace any earlier terms for the Website. There are no oral side agreements.

These Terms are available in English, German, French and Italian. If the versions differ, the English version prevails.

These Terms and any non-contractual obligations arising out of or in connection with them are governed by Swiss law, excluding its conflict-of-laws rules and the United Nations Convention on Contracts for the International Sale of Goods (CISG). If you are a consumer, the mandatory protection of the law of the country where you live remains unaffected where that law applies.

To the extent permitted by law, the exclusive place of jurisdiction for any dispute arising out of or in connection with these Terms is Zug, Switzerland. Mandatory places of jurisdiction under applicable law remain unaffected, in particular the right of consumers to sue and to be sued at the courts of their place of residence.