Kyte collects such data from the time an order is requested until it is finished, and any time the Apps are running in the foreground (app open and on-screen). Order recipients may use the Kyte Apps without enabling collection of location data from their mobile devices. However, this may affect certain features in the Kyte apps. For example, a customer who has not enabled precise location data will have to manually enter their delivery address.

• Transaction information: We collect transaction information related to the use of our services, including the type of services requested or provided; order details (such as date and time, requested drop off addresses, and items ordered); and payment transaction information (such as amount charged and payment method). We also associate a user's name with that of anyone who uses their promotion code.
• Usage data: We collect data about how users interact with our services. This includes access dates and times, app features or pages viewed, browser type, and app crashes and other system activity.
• Device data: We collect data about the devices used to access our services, including the hardware models, device IP address or other unique device identifiers, operating systems and versions, software, preferred languages, advertising identifiers, device motion data, and mobile network data.
• Communications data: We collect data regarding phone, text or in-app communications between users that are enabled through the Kyte Apps. This includes date and time, as well as the content of text or in-app messages. We may also collect the content of phone calls solely where users are notified in advance that the call may be recorded.

3. Data from other sources. These include:

   • Users participating in our referral programs. For example, when a user refers another person, we receive the referred person's data from that user.
   • Kyte business partners through which users create or access their Kyte account, such as payment providers or social media services.
   • Kyte business partners in connection with debit or credit cards issued by a financial institution in partnership with Kyte to the extent disclosed in the terms and conditions for the card.
   • Vendors who help us verify users' identity, background information, and eligibility to work, or who screen users in connection with sanctions, anti-money laundering, or know-your-customer requirements.
   • Insurance, vehicle, or financial services providers for drivers and/or delivery persons.
   • Publicly available sources.
   • Marketing service providers or data resellers whose data Kyte uses for marketing or research.
   • Law enforcement officials, public health officials, and other government authorities.

Kyte performs the above activities on the grounds that they are necessary to fulfill the terms of our agreements with users, are compatible with such uses, or on the grounds that they are necessary for purposes of Kyte's and its users' legitimate interests.

2. Safety and security. We use data to help maintain the safety, security, and integrity of our services and users. This includes:

   • verifying users' identity and eligibility to provide deliveries, including through reviews of background checks, to help prevent use of our services by unsafe drivers and/or riders.
   • Similarly, order recipients may be required to provide their age and an image of their government issued identification to verify their eligibility to order and receive alcohol deliveries.
   • using device, location, user profile, usage, and other data to prevent, detect, and combat other types of fraud. This includes identifying fraudulent accounts or uses of our services, preventing use of our services by unauthorized delivery persons, verifying user identities in connection with certain payment methods, and preventing and combating unauthorized access to users' accounts. In some cases, such as when a user is determined to be abusing Kyte's referral program or has submitted fraudulent documents, such behavior may result in automatic deactivation or deactivation after human review. To object to such a deactivation, please contact Kyte customer support.
   • sharing user name, location, phone number, vehicle details and other relevant information with third-party companies that support the management and de-escalation of interpersonal conflicts that may occur between users while in the process of making a delivery.

Kyte performs the above activities on the grounds that they are necessary to fulfill the terms of our agreements with users, and/or for purposes of the legitimate safety and security interests of Kyte, our users and members of the general public.

3. Customer support. Kyte uses the information we collect (which may include call recordings) to provide customer support, including to investigate and address user concerns and to monitor and improve our customer support responses and processes.

Kyte performs the above activities on the grounds that they are necessary to fulfill the terms of our agreements with users or for purposes of Kyte's legitimate interest in monitoring and improving its customer support services.

4. Research and development. We use data for testing, research, analysis, product development, and machine learning to improve the user experience. This helps us make our services more convenient and easy-to-use, enhance the safety and security of our services, and develop new services and features.

Kyte performs the above activities on the grounds that they are necessary for purposes of Kyte's legitimate interests in improving and developing new services and features.

5. Enabling communications between users. For example, a delivery person may contact an order recipient with information about their order.

Kyte performs the above activities on the grounds that they are necessary to fulfill the terms of our agreements with users.

6. Marketing and Advertising. Kyte uses data to market its services. This may include:

   • Sending emails, text messages, push notification, and in-app messages or other communications marketing or advertising Kyte products, services, features, offers, promotions, sweepstakes, news and events.
   • Displaying Kyte advertising on third party apps or websites. Measuring the effectiveness of Kyte's ads, and of third party ads displayed in Kyte's apps or in connection with our services.
   • Kyte performs the above activities on the grounds that they are necessary for purposes of Kyte's legitimate interests in informing users about Kyte services and features or those offered by Kyte partners.

7. Non-marketing communications. Kyte may use data to send surveys and other communications that are not for the purpose of marketing the services or products of Kyte.

Kyte performs the above activities on the grounds that they are necessary to fulfill the terms of our agreements with users, or for purposes of Kyte's and its users' legitimate interests in informing users about events that may have an impact on their use of Kyte services.

8. Legal proceedings and requirements. We use data to investigate or address claims or disputes relating to use of Kyte's services, to satisfy requirements under applicable laws, regulations, or operating licenses or agreements, or pursuant to legal process or governmental request, including from law enforcement.

Kyte performs the above activities on the grounds that they are necessary for purposes of Kyte's legitimate interests in investigating and responding to claims and disputes relating to use of Kyte's services and features, and/or necessary for compliance with applicable legal requirements.

Kyte retains user data for as long as necessary for the purposes described above, including to provide its services and comply with legal obligations. The period for which we retain user data is determined by the type of data, the category of user to whom the data relates, and the purposes for which we collected the data.

The length for which Kyte retains user data may further be determined by legal and regulatory requirements, purposes of safety, security, and fraud prevention, or by issues relating to the user's account such as an outstanding credit or an unresolved claim or dispute.

Users may request deletion of their accounts at any time. Kyte may retain user data after a deletion request due to legal or regulatory requirements or for reasons stated in this policy.

Users may request deletion of their account at any time by contacting us at privacy@kyte.aero.

Following an account deletion request, Kyte will delete the user's account and data, unless they must be retained due to legal or regulatory requirements, for purposes of safety, security, and fraud prevention, or because of an issue relating to the user's account such as an outstanding credit or an unresolved claim or dispute. Because we are subject to legal and regulatory requirements relating to delivery persons, this generally means that we retain their account and data for the applicable statutory retention period after a deletion request. For order recipients, their data is generally deleted within 90 days of a deletion request, except where retention is necessary for the above reasons.

We understand the importance of information security and take reasonable measures to protect the security and confidentiality of your information in line with industry standards. We use SSL (Secure Sockets Layer), an industry-standard encryption method. We do NOT keep your credit card information on file. While we realize this is potentially less convenient for future ordering, we feel that the safest way to protect your credit card information is not to store it, but request it each time you purchase.

Please note that email is not encrypted and not considered a secure way to transmit your credit card information. We will never ask you for your credit card information by email.

We do not solicit or knowingly collect personal information from anyone under the age of 18. If you are a parent or guardian and discover that your child has been using our systems, please inform us using the contact information below and we will remove it from our systems. We have no knowledge that we sell the data of minors under 16 years of age.

Please note however that we may be barred by law from disclosing certain sensitive information in response to your request.

No Discrimination. We will not discriminate against a California resident because the California resident exercised any of the rights described above.