Kite Foundation Privacy Policy

Last Updated: October 28, 2025

1. Introduction

This privacy policy (“Privacy Policy”) describes how Kite Foundation (“Kite”, “we”, “us” or “our”) collect, use, store, and share your information when (1) you access and/or use our websites, mobile applications, or other digital properties we own and operate, including https://kite.foundation/ or https://gokite.ai/; (2) you communicate with us in any manner, including by email, direct messaging, telephone, and/or in person (“Communications”); and (3) we interact with certain third party partners.

Please note the following sections that include important disclosures related to our Website:

  • Cookies, Advertising, and Tracking Technology Disclosures. To learn more about how our Websites, Products[MH1] , and Communications use cookies and related technologies (including from third parties), see Automatic Information Collection Technologies below.
  • Your Choices Disclosures. To learn more about your choices concerning your information, see Your Choices below.

If you are resident of certain states or countries, you may be entitled to additional rights. Please see the following quick-links below for easy access to additional information for such residents:

  • European Residents: If you are a resident of Europe, including a member state of the European Union or the United Kingdom, please see our Additional Information for European Residents below.

2. What Type Of Information Do We Collect?

Depending on how you interact with our Websites, the nature of our Communications, and how we may interact with certain third party partners, we may collect the following pieces of your information:

  • Basic Identifying Information. Information you choose to provide through our Website such as your full name, postal address, e-mail address, phone number, and other similar identifiers.
  • Device Identifier and other Unique Identifiers. Information such as your device identifier, internet protocol (IP) address, cookies, beacons, pixel tags, mobile ad identifier, and other unique identifiers.
  • Internet or Other Network Activity. Information such as your browsing or search history, and other information regarding your interactions with our Websites, emails, and advertisements.
  • User Content. Information such as your Communications with us and any other content you provide, such as social media profiles, photographs of receipts, images, videos, survey responses, comments, product reviews, testimonials, and other content.
  • Inferences. Information such as inferences drawn from or created based on the information identified above.

You may choose to voluntarily provide other information to us that we do not request, and, in such instances, we have no control over what categories of personal information such disclosure may include. Any additional information provided by you to us is provided at your own risk.

3. How Do We Collect Your Information?

We collect your information in three ways: (1) directly from you when you use our Website and communicate with us; (2) automatically using online technologies when you engage with our Website, and Communications; and (3) from our third party partners.

  • Directly from you. We collect information directly from you when you enter your information on our Websites, access our content, engage in Communications with us, or sign-up to receive emails, text messages, or certain other Communications from us.
  • Automatically Using Online Technologies. When you visit our Website, open or click on emails we send you or related Communications, or interact with our advertisements, we or other third parties may automatically collect certain information about you using online tracking technologies such as cookies, pixels, web beacons, software developer kits, and related technologies. For more information, see Automatic Information Collection Technologies below.
  • From Our Partners. We collect information from our third party partners, data analytics providers, marketing or advertising providers, fraud prevention service providers, and vendors that provide services.

4. Automatic Information Collection Technologies

A. Technologies Used

We implement the following technologies on our Website:

  • Cookies. Cookies are small bits of data cached or stored on your computer based on Internet activity. Information collected through cookies may be obtained directly by or shared with third parties so that those third parties can provide analytics and advertising services to us. We use first party and third party cookies and other tools to monitor individual activity in aggregate to improve the Website. The information we gather includes IP address, user language, the operating system, browser type, the presence/absence of “flash” plug-ins, screen resolution, connection type, browsing behavior, and information that identifies the cookie.

  • Analytic Tools. Analytic tools include technologies or software services that collect, measure, and analyze data about how users interact with our Website, clicks, and user behavior, which is then used to improve site functionality and user experience.

    B. Purpose For Using Automatic Information Collection Technologies

  • Functionality, Support and Security. Some of the online tracking technologies like the cookies we use for a variety of functionality and support purposes, such as to facilitate navigation, display information more effectively, personalize your experience such as recognize you when you leave or return to our Website, maintain the security of our Websites, manage your account, prevent crashes, fix bugs, save your preferences, and assist with basic Website functions and other performance functions.

  • Site Analytics. We use service providers for site analytic services, to best understand how our Website is being used and to make improvements to our Website, including the following services:

    • Google Analytics. We use Google Analytics, to help us understand how users access and use the Websites through the use and sharing of cookies. You can learn about Google’s practices by going to www.google.com/policies/privacy/partners/.

For information about your choices related to automatic data collection technologies and your ability to opt out of certain sharing of information, please see Your Choices below.

5. How Do We Use Your Information?

We use your information for a variety of purposes, including to:

· Provide our Websites to You. We use your information to provide our Websites to you, including to: (1) facilitate your access and use of our Websites; (2) process feedback related to the Website and any content or offerings we make available; (3) send you notifications; (4) answer your Communications; and (5) perform other related business functions.

· Communicate with You. We use your information to engage in Communications with you, such as to respond to your requests, inquiries, issues, feedback, and to provide customer service.

· Market and Advertise. We use your information for marketing and advertising purposes, including sending marketing, advertising, and promotional communications to you by email, text message, or postal mail. We also use your information to show you advertisements on our Website.[DUS2]

· Conduct Analytics and Personalization. We use your information to conduct research and analytics, including to improve our Websites and services. We also use your information to understand your interaction with our Websites, advertisements, services, and our Communications with you. We also use your information to personalize your experience, to save you time when you visit our Websites and use our services, to better understand your needs, and to provide personalized recommendations for our services.

· Security and Fraud Prevention. We use your information to detect, investigate, prevent, or take action regarding possible malicious, deceptive, fraudulent, or illegal activity, including fraudulent transactions. We also use your information to enforce our terms and procedures, prevent against security incidents, and prevent the harm to other users of our Website or services.

· Legal Obligations. We use your information to comply with our legal and regulatory obligations, to establish and exercise our rights, and to defend against legal claims.

· Business Functions. We use your information to support our core business functions, including to maintain records related to business management, loss prevention, collecting amounts owed, and identifying and repairing errors or problems in the Websites.

6. How Do We Disclose Your Information?

We may disclose or share your information with affiliated and non-affiliated third-parties, including in the following scenarios:

  • With your Consent. We may disclose or share your information with your consent, which may be obtained in writing; online, through “click-through” agreements; when you accept the terms of use on our Websites; orally, either in person or on the phone; or by other means.
  • In a Business Transfer. We may disclose or share your information as part of a corporate business transaction, such as a merger or acquisition, joint venture, corporate reorganization, financing, or sale of Kite assets, or in the unlikely event of insolvency, bankruptcy, or receivership, in which such information could be transferred to third parties as a business asset in the transaction.
  • To Non-Affiliated Third Parties. We may disclose or share your information with certain non-affiliated third parties to facilitate your access and use of our Websites and to provide us with certain business functions, including but not limited to sharing your information with brand partners, internet service providers, advertising networks, data analytics providers, governmental entities, operating systems and platforms, social media networks, and other service providers who provide us a service (e.g., customer service, auditing, marketing, debugging to identify and repair errors that impair existing intended functionality on our Websites, and/or protecting against malicious, deceptive, fraudulent, or illegal activity).
  • For Legal Process And Protection. We may disclose or share your information to satisfy any law, regulation, legal process, governmental request, or where we have a good faith belief that access, use, preservation or disclosure of such information is reasonably necessary to: (1) enforce or apply our agreements; (2) protect our interests, property, or safety of others; (3) in connection with claims, disputes, or litigation; and (4) to protect our Websites.

7. How Do We Protect Your Information?

Although no system can guarantee the complete security of your information, we take all commercially reasonable steps to ensure your information is protected in alignment with all applicable laws and regulations, as appropriate to the sensitivity of your information.

8. How Long Do We Keep Your Information?

We keep your information for as long as is necessary in accordance with the purpose for which it was collected, our business needs, and our legal and regulatory obligations. If we dispose of your information, we will do so in a way that is secure and appropriate to the nature of the information subject to disposal.

9. Links To Third Party Sites

Our Websites may contain links to third party websites and services. Please note that these links are provided for your convenience and information, and the websites and services may operate independently from us and have their own privacy policies or notices, which we strongly suggest you review.

10. Your Choices

A. Communications

The following is information about how to opt out of receiving certain communications from us, depending on means of delivery:

  • E-mails. You can opt-out of receiving promotional emails from us at any time by: (1) following the instructions as provided in emails to click on the unsubscribe link; or (2) emailing us at the email address set out in the Contact Us section below with the word UNSUBSCRIBE in the subject field of the email. Please note that you cannot opt-out of non-promotional emails, such as those about your account, transactions, servicing, or our ongoing business relations.

  • Phone and SMS Text Messaging. You can opt-out of receiving text messages or calls to your phone number at any time by: (i) for text messages, texting “STOP” in response to any text message you receive from us or contacting us as set out in the Contact Us section below and specifying you want to opt-out of text messages; and (ii) for calls, requesting opt-out during any call you receive from us or contacting us as set out in the Contact Us section below and specifying you want to opt-out of calls.

  • Push Notifications. If you have opted-in to receive push notification on your device, you can opt-out at any time by adjusting the permissions in your device or uninstalling our mobile application.

    B. Cookies and Tracking Technologies

The following disclosures relate to your choices in connection with cookies and other tracking technologies:

Please be aware that if you disable or remove tracking technologies, some parts of the Service[MH3] may not function correctly.

C. Analytics and Interest-Based Advertising.

Google provides tools to allow you to opt out of the use of certain information collected by Google Analytics at https://tools.google.com/dlpage/gaoptout and by Google Analytics for Display Advertising or the Google Display Network at https://www.google.com/settings/ads/onweb/.

The companies we work with to provide you with targeted ads are required by us to give you the choice to opt out of receiving targeted ads. Most of these companies are participants of the Digital Advertising Alliance (“DAA”) and/or the Network Advertising Initiative (“NAI”). To learn more about the targeted ads provided by these companies, and how to opt out of receiving certain targeted ads from them, please visit: (i) for website targeted ads from DAA participants, https://www.aboutads.info/choices; (ii) for app targeted ads from DAA participants, https://www.aboutads.info/appchoices; and (iii) for targeted ads from NAI participants, https://www.networkadvertising.org/choices/. Opting out only means that the selected participants should no longer deliver certain targeted ads to you, but does not mean you will no longer receive any targeted content and/or ads (e.g., in connection with the participants’ other customers or from other technology services).

D. Legal Rights for European Residents

If you are a European resident, please see the Additional Information for European Residents below for additional disclosures related to your legal rights.

11. Children

Our Website is not intended for children under the age of 13. This includes any links to other websites that we provide for our convenience. We don’t knowingly collect the information of children under 13 for any reason.

12. Changes to Our Privacy Policy

We may change this Policy from time to time. Any and all changes will be reflected on this page, and where appropriate provided in person or by another electronic method. The effective date will be stated at the top of this Policy. You should regularly check this page for any changes to this Privacy Policy.

13. Accessibility

If you require a copy of this Privacy Policy in an alternative format, please Contact Us.

14. Contact Us

If you have any comments or questions, please contact us through the following methods:

Email: operations@kite.foundation

15. Additional Information for European Residents

A. Role and Data Controller Contact Details

The General Data Protection Regulation (“GDPR”) and data protection laws in Europe distinguish between organizations that process personal information for their own purposes (known as “controllers”) and organizations that process personal information on behalf of other organizations (known as “processors”).

We act as a controller with respect to personal information collected from you as you engage with our Website or via Communications with us. If you have questions with respect to our processing of your information as a controller, you can contact us by email at the email address set forth in the section entitled Contact Us above.

B. Lawful Basis for Processing

The GDPR and data protection laws in Europe require a “lawful basis” for processing personal information. Our lawful bases include the following:

· To Fulfill Obligations in the Agreement Between You and Kite. To use our Websites, you and Kite entered into an agreement under the applicable terms of use, and in order for us to fulfill our obligations with respect to providing our Websites under such agreement, we must collect your personal information to provide the necessary functionality. The information we collect and how it is used by us is further detailed in the sections entitled What Type of Information Do We Collect? and How We Use Your Information? above.

· To Pursue Our Legitimate Interests. Our legitimate interests include, among others, understanding how our Website is functioning, improving our Website or services, developing new products and services, and preventing fraud. To pursue the foregoing, we process personal information. Where we rely on a legitimate interest to process personal information, we carry out a balancing test to weigh the legitimate interest against your right to protection of your personal information; however, our processing of your personal information will never override your fundamental rights and freedoms, and you can always exercise your right to object to such processing.

· Consent. In certain situations where you provide us with consent, we may process your personal information.

· To Comply with the Law. In limited circumstances, we may process personal information in order to comply with legal obligations. To the extent we have received such information from third parties with whom we have agreed to certain contractual requirements or obligations (e.g., standard contractual clauses), we will use our reasonable efforts to dispute the disclosure of personal information, unless legally required to do so.

If the GDPR applies and your data is transferred by us outside the UK or the EEA to the United States or any other country, we will transfer your personal information subject to appropriate safeguards, such as an adequacy decision by the European Commission on the basis of Article 45 of Regulation (EU) 2016/679 or Standard Contractual Clauses, as provided from time to time by the European Commission. You can receive additional information about where your personal information is transferred and the appropriate safeguards by contacting us.

C. Your Data Subject Rights

· Your Rights. If you are a data subject under the GDPR, subject to certain conditions, you have the right to:

  • Access, rectify, or erase any personal information we process about you;
    • Data portability – that is, asking us to transfer your personal information to any third party of your choice;
    • Restrict or object to our processing of your personal information; and
    • Where applicable, withdraw your consent at any time for any processing of your personal information.

You may exercise your rights by submitting a written request to us at the address set out in the Contact Us section above. We will respond to your request within 30 days. We may request specific information from you to help us confirm your identity and process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions.

Please note that we retain information as necessary to fulfil the purposes for which it was collected, and may continue to retain and use information even after a data subject request for purposes of our legitimate interests, including as necessary to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements.

D. Complaints

If you have a complaint about our use of your personal information or our response to your request(s) regarding your personal information, you may submit a complaint to the Data Protection Supervisory Authority in your jurisdiction. We would, however, appreciate the opportunity to address your concerns before you approach a data protection regulator and welcome you to first direct an inquiry to us.

In addition to our contact details set out above, you can also contact our Designated Individual Overseeing Compliance of this Privacy Policy by emailing operations@kite.foundation