Privacy Policy for Kinago

Effective Date: 03/22/2025

Last Updated: 03/22/2025

Introduction

Welcome to Kinago. This Privacy Policy outlines how Kinago (“Kinago,” “we,” “our,” or “us”) collects, uses, discloses, and safeguards your information when you use our platform, which includes our website, mobile applications, and related services. We are committed to protecting your privacy and ensuring that your personal information is handled securely and responsibly. By accessing or using Kinago, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.

1. Scope of This Policy

This Privacy Policy applies to all users of the Kinago platform, including:

• Customers: Individuals who browse, book, and purchase products or services from local businesses through Kinago.

• Businesses/Vendors: Local businesses that list their products or services on Kinago to reach customers.

• Service Providers/Drivers: Individuals or entities that fulfill orders, provide delivery services, or perform tasks as facilitated by Kinago.

• Visitors: Individuals who visit our website or use our applications without creating an account.

Kinago is designed to support a wide array of local businesses, including retailers, restaurants, service providers, and vendors. Our platform enables customers to browse, book, and buy locally instantly, fostering a vibrant local economy.

2. Information We Collect

We collect various types of information to provide and improve our services:

a. Information You Provide

• Personal Information: Name, email address, phone number, profile photo.

• Account Credentials: Passwords and authentication details.

• Payment Information: Credit/debit card details (processed securely via Stripe) and billing address.

• Business Information: For vendors, this includes business name, description, location, operating hours, and relevant licenses or certifications.

• Order and Booking Details: Purchase history, appointment times, delivery instructions.

• Customer Support Interactions: Communications with our support team, including inquiries and feedback.

b. Information Collected Automatically

• Device Information: IP address, browser type, operating system, device identifiers.

• Usage Data: Pages visited, time spent on the platform, features used, and other interaction data.

• Location Data: Geolocation information, if you grant us permission to access your device's location.

c. Information from Third Parties

• Social Media Platforms: If you choose to link your social media accounts, we may collect information from those accounts.

• Payment Processors: Information related to your transactions processed by Stripe.

• Marketing Partners: Data from partners to enhance our marketing efforts and provide tailored experiences.

3. How We Use Your Information

• We use the information we collect for various purposes, including:

  • Providing Services: Facilitating transactions, processing payments, and delivering products or services.

  • Personalization: Customizing your experience by presenting content and offerings tailored to your preferences.

  • Communication: Sending transactional emails, responding to inquiries, and providing customer support.

  • Marketing: Sending promotional materials, offers, and newsletters (you can opt out at any time).

  • Analytics: Analyzing usage patterns to improve our platform's functionality and user experience.

  • Security: Detecting and preventing fraudulent activities, ensuring the security of our platform.

  • Compliance: Adhering to legal obligations and enforcing our terms and policies.

4. Legal Basis (GDPR)

• If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

  • Consent: When you have given us explicit consent to process your data for specific purposes.

  • Contractual Necessity: When processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.

  • Legal Obligation: When processing is necessary to comply with a legal obligation.

  • Legitimate Interests: When processing is necessary for our legitimate interests, provided your interests and fundamental rights do not override those interests.

5. Your GDPR Rights
If you are an EEA resident, you have the following rights regarding your personal data:

• • Access: Request access to your personal data and obtain information about how we process it.

  • Rectification: Request correction of inaccurate or incomplete data.

  • Erasure: Request deletion of your personal data under certain circumstances.

  • Restriction: Request restriction of processing under specific conditions.

  • Data Portability: Receive your data in a structured, commonly used format and transfer it to another controller.

  • Objection: Object to processing based on legitimate interests or for direct marketing purposes.

  To exercise these rights, please contact us at privacy@kinago.com.

6. CCPA Rights (California)
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• • Right to Know: Request information about the categories and specific pieces of personal data we have collected about you.

  • Right to Delete: Request the deletion of your personal data, subject to certain exceptions.

  • Right to Opt-Out: Opt-out of the sale of your personal data. (Note: Kinago does not sell personal data.)

  • Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your CCPA rights.

  To exercise these rights, please contact us at privacy@kinago.com.

7. Sharing of Information
We do not sell your personal data. We may share your information with:

• • Service Providers: Third-party vendors who perform services on our behalf, such as payment processing (e.g., Stripe), data analysis, email delivery, hosting services, customer service, and marketing assistance.

  • Business Partners: Local businesses and vendors to fulfill your orders or bookings.

  • Legal Obligations: Authorities or other entities when required by law or to protect our rights and safety.

8. Mobile App Permissions

• Our mobile apps (Customer, Business, Driver, Order Display, QR-Ordering, etc.) may request access to:

  • Location Services: To match customers with nearby businesses, estimate delivery distances, and enable QR code location-specific ordering.

  • Camera: For scanning QR codes, profile photo uploads, receipt images.

  • Microphone: Only if using voice search or call-in support features.

  • Push Notifications: To send updates on orders, deliveries, and marketing promos.

  • Storage & Files: To cache images, store receipts, or upload media for business storefronts.

9. Loyalty & Referral Programs

When you participate in Kinago’s loyalty programs, referral campaigns, or promotional offers, we may track:

• Referral sources and invite codes

• Coupon redemption and loyalty points earned or spent

• Campaign participation data (opt-in timestamps, rewards earned)

This data is used solely to administer and improve our promotional systems and is never sold or shared beyond what’s necessary for fulfillment.

10. QR Code Ordering

For businesses utilizing Kinago’s QR ordering and tableside apps, we may collect:

• Table/Location identifiers

• Service requests (e.g. order, help, refill)

• Session time and tipping behavior

This data improves in-store service, reduces wait times, and supports staff performance metrics.

11. White-Labeled Apps

Some businesses operate white-labeled Kinago stores or apps under their own branding. Kinago still manages and protects all personal data collected through these stores under this Privacy Policy.

If a private-branded app links to additional business-specific policies, we recommend reviewing those as well for clarity on business-specific data use (e.g., in-house loyalty programs, niche delivery policies).

12. Cookies & Tracking

We use essential, performance, and marketing cookies, plus tools like Google Analytics, Meta Pixel, and Firebase. You can adjust cookie settings in your browser at any time.

13. Data Security

• Encryption (SSL) and secure data transfer
• Password hashing and MD5 Encryption
• Stripe PCI-compliant payment processing
• Limited access to personal data internally

14. Data Retention

We retain your data while your account is active or as needed for legal, operational, or security purposes. You may request deletion at any time.

15. Children's Privacy

Kinago is not intended for children under 13. We do not knowingly collect data from minors without verifiable parental consent. If we become aware that we have collected data from a child under 13, we will take steps to delete such information promptly.

16. International Transfers

If you are accessing Kinago from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other jurisdictions where our servers or service providers are located. These jurisdictions may not have the same data protection laws as your country of residence.

However, we take appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy. For users in the EEA or UK, such transfers are made using standard contractual clauses approved by the European Commission or other lawful mechanisms.

17. Your Choices

• Opt-out of email/SMS/push via settings or links
• Request account/data deletion
• Edit app permissions on your device
• Uninstall the app at any time

18. Changes to This Policy

We may update this Privacy Policy periodically. Major changes will be communicated via in-app notice, email, or website alert. Continued use after changes constitutes acceptance.

19. Contact Us

Kinago Privacy Team
Email: privacy@kinago.com
Website: www.kinago.com

20. Final Notes

This Privacy Policy complies with GDPR, CCPA, and other major privacy frameworks. For any legal requests or escalations, please contact our Data Protection Officer at the email address above.