Kiva AI Care Privacy Policy

Effective Date: January 1, 2025

This Privacy Policy describes how Kiva AI Care ("Kiva AI Care", "we", "us", or "our") collects, uses, and shares information about you when you visit our website at www.Kiva.ai or use the Kiva AI Care platform for skincare and haircare analysis and diagnosis (collectively the "Service"), or otherwise engage with us.

By using the Service, you agree to the collection and use of information in accordance with this policy. This Privacy Policy is incorporated into and subject to our Terms and Conditions. Please read both carefully before using our Service.

1. Information We Collect

We collect information necessary to provide and improve our Service or as required by law, including:

• Personal Information: Information such as your name, email address, and password when you register for an account.
• Health and Diagnostic Information: Details about your skin type, hair concerns, photos, product preferences, and routines.
• Usage Data: Information about how you interact with and navigate the Service.
• Bookmarks Data: Information about bookmarked products or diagnostic results saved within the platform.
• Correspondence: Information shared when contacting us via email, chat, or other methods.
• Survey Data: Information collected when you participate in surveys about your experience or preferences.
• Promotions: Data you provide when entering contests or promotional events.
• Cookies and Tracking Technologies: Data collected through cookies or similar technologies to enhance user experience and session tracking.

2. How We Use Information

We use your information for purposes including:

• Providing and personalizing our Services, including skincare and haircare diagnostics and recommendations.
• Enhancing and improving the Service and user experience.
• Communicating with you about updates, recommendations, and promotional offers.
• Conducting research and development to improve AI-driven analysis.
• Complying with legal obligations and regulations.
• Operating, protecting, and maintaining the security of our platform.
• Analyzing user behavior for aggregated insights and marketing purposes.
• Providing targeted advertising based on anonymized and aggregated data.

3. Sharing Your Information

We may share your information under the following circumstances:

• Service Providers: With vendors or partners who assist in providing our Services, subject to confidentiality agreements.
• Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your data may be transferred to the new entity.
• Legal Obligations: When required by law or to protect our rights, users, or the public.
• Aggregated Data: With third parties in a de-identified and aggregated format that cannot reasonably identify you.
• Fraud Prevention: To protect against unauthorized access, fraud, or other illegal activities.

4. Health and Wellness Information

We prioritize safeguarding sensitive health-related data:

• Health and diagnostic data is used solely for providing personalized recommendations and improving our AI algorithms.
• We will not share health-related data with third parties for marketing purposes without explicit consent.

5. Data Security and Retention

We implement reasonable organizational, technical, and physical safeguards to protect your data. Your information will be retained only as long as necessary to provide our Services or as required by law. Upon your request, we will delete your data unless retention is required for compliance or legal purposes.

6. Consent for Sensitive Data

We ensure transparency and control for sensitive data collection:

• Explicit consent is required before collecting sensitive data, such as skin and hair condition images.
• Users can withdraw consent at any time, without affecting access to core functionalities.

7. Children's Privacy

Our Services are not intended for individuals under 13 years of age (or the minimum age required by local law). If we become aware of collecting data from children, it will be promptly deleted.

8. User-Generated Content

We clarify how user-generated content is managed:

• Photos, reviews, or other uploads are stored securely and are not shared publicly without explicit permission.
• Permissions are required before using user-generated content for marketing purposes.

9. Third-Party Integrations

We integrate with third-party platforms to enhance the Service:

• Details about data sharing with analytics tools, payment processors, or social media platforms.
• Commitment to ensuring compliance with applicable privacy laws by third-party services.

10. Compliance with Privacy Laws

We adhere to GDPR, CCPA, and other regulations to protect user rights:

• Providing transparency on data collection, processing, and storage.
• Granting users rights to access, correct, delete, or restrict their data.
• Facilitating data portability where applicable.

11. Governing Law and Jurisdiction

This Privacy Policy and any disputes arising under it shall be governed by and construed in accordance with the laws of the State of Delaware, without regard to its conflict of law principles. Any legal actions or proceedings related to this Privacy Policy or the use of our Services shall be brought exclusively in the state or federal courts located in Delaware, and you hereby consent to the jurisdiction and venue of such courts.