Privacy Policy

1 Scope and company information

Kith Financial, Inc., doing business as Kithcard (“Kithcard,” “we,” “us,” or “our”), provides this Privacy Policy to explain how we collect, use, disclose, and protect personal information through kithcard.com and other Services that link to this policy. Personal information is information that identifies, relates to, or can reasonably be linked to a person or household. Kithcard is a financial technology company, not a bank or credit union.

This policy covers our public website, waitlist, inquiries, and related support and consented communications. It does not itself authorize a credit inquiry, financial account access, or a transaction. If you apply for or receive a financial product, additional privacy notices may apply to you, including a consumer financial privacy notice from Kithcard or the responsible financial institution. Any legally required notice governs the information and activity within its scope; this policy does not replace it. Independent websites and financial providers have their own policies.

2 Information we collect and its sources

Depending on how you use the Services, we collect the following categories from you directly, from your device, or from providers acting on our behalf:

• Contact and inquiry information: name, email address, phone number if supplied, state or ZIP code if requested, waitlist registration details, and information you choose to include in a request. Used for registration, responses, and requested updates.
• Communication and preference information: correspondence, support messages, email preferences, SMS consent or revocation records, and the time, source, disclosure version, and method of enrollment. Used to provide communications, honor choices, and document consent.
• Device and usage information: IP address, browser and device characteristics, referring pages, pages viewed, access times, and technical or security logs. Used to operate, secure, troubleshoot, and understand the performance of the Services. Approximate location may be inferred from IP address.

Our prelaunch forms do not request Social Security numbers, full payment or bank account credentials, credit reports, biometric identifiers, or precise device location. Please do not provide sensitive financial, health, or family information in free-text fields. If you include it in a request, we handle it to address that request, secure our systems, or satisfy legal obligations, rather than use it for advertising.

3 How we use personal information

We use the information described above to maintain the website and waitlist; answer inquiries; send updates you request; provide consented support and verification messages; maintain preference and suppression records; detect fraud, abuse, and security incidents; troubleshoot and improve the Services; establish or protect legal rights; and comply with applicable law. We use information for another purpose only with appropriate notice and consent when required. We do not use this policy as blanket consent to marketing texts, credit checks, or new uses of sensitive information.

4 How we disclose information

We disclose the categories of information described in Section 2 only as relevant to the following purposes and recipients:

• Service providers: hosting, website operations, email and SMS delivery, customer support, security, and service analytics providers that process information on our behalf. Providers must protect the information and use it only for authorized services, subject to applicable law and contractual restrictions.
• Your requested service: a financial provider or other recipient when you specifically ask us to connect you or disclose information, after any required notice or authorization. Joining the general waitlist does not authorize distribution of your information as a marketing lead.
• Legal and protective purposes: courts, regulators, law enforcement, professional advisers, and other recipients where legally required or reasonably necessary to address fraud, security incidents, or legal claims, subject to applicable law.
• Business changes: a successor or prospective successor and its advisers in a merger, financing, reorganization, or asset transaction, subject to appropriate confidentiality and use restrictions and applicable law. The mobile information and SMS consent restrictions below apply to this category as well.

We do not sell personal information, share it for cross-context behavioral advertising, or disclose it to affiliates or other companies for their independent marketing. We do not buy or sell marketing leads. We may create aggregate or deidentified statistics that do not reasonably identify a person; we maintain deidentified information in that form and do not attempt to reidentify it except to test the deidentification process as permitted by law.

5 Mobile information and text message consent

We do not share mobile information with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not sold, rented, shared, or transferred to third parties, affiliates, or lead generators for their own purposes. We may disclose the minimum information needed to messaging service providers that help deliver messages on our behalf, under restrictions preventing their independent marketing or other independent use, or where disclosure is legally required. We do not transfer SMS consent to another sender in a business transaction. A new sender must obtain its own consent before messaging. This section controls over any broader disclosure language in this policy.

We use your number, message content, delivery records, and consent preferences to operate the program you selected, respond to requests, and maintain opt-out records. Reply STOP to opt out or HELP for help, or contact hello@kithcard.com. We may send one final nonpromotional opt-out confirmation. We will not resume messages covered by your opt-out without renewed consent. The Terms of Service describe the program and applicable messaging conditions.

6 Cookies and similar technologies

We use cookies or similar technologies for essential operation, security, and remembering preferences. Where enabled, service analytics help us understand usage and performance under restrictions on providers’ independent use. We do not use advertising pixels or cookies for cross-context behavioral advertising. You can manage cookies in your browser; blocking essential cookies may affect functionality. We do not respond to older browser Do Not Track signals. Where applicable law requires recognition of a recognized universal opt-out signal, such as Global Privacy Control, we honor it for covered processing. Our current practices do not involve sale or targeted advertising to opt out of.

7 Your choices and privacy requests

You may unsubscribe from marketing email using the link in the message, stop SMS as described above, or ask us to update your contact details or remove you from the waitlist. We may retain information needed to honor an opt-out, meet legal requirements, address fraud, or resolve disputes. An email unsubscribe does not automatically stop SMS; an SMS opt-out does not automatically stop emails. You can contact us to request both.

Depending on your state, the information involved, and whether a law applies to us, you may have rights to know about and access personal information; obtain a portable copy; correct inaccuracies; delete information; opt out of sale, targeted advertising, or certain profiling; limit certain uses of sensitive information; and appeal a decision on a request. These rights are subject to legal exceptions, including rules governing financial information. We do not use information covered by this policy for profiling that produces legal or similarly significant eligibility decisions, or use sensitive information for purposes requiring a right to limit under applicable California law.

To submit a request, email hello@kithcard.com with a description of what you are requesting. No account is required. We may verify identity using information already held or other proportionate steps and use verification information only to process the request or for security. Do not send government ID or full financial account details by ordinary email. An authorized agent may submit a request; we may request evidence of authority and verify identity as permitted by law. We do not require verification for an opt-out beyond what applicable law permits.

We will respond within applicable legal deadlines and explain a denial where required. To appeal, email hello@kithcard.com with “Privacy Appeal” in the subject. We will review and respond as applicable law requires, including information on contacting the relevant state attorney general where required. We do not unlawfully discriminate against you for exercising privacy rights. California residents may also contact us about disclosures for others’ direct marketing under California’s Shine the Light law; our current policy prohibits those disclosures.

8 Retention and security

We retain information only as long as reasonably needed for the purposes described in this policy, including maintaining a waitlist relationship, responding to requests, meeting legal and recordkeeping obligations, resolving disputes, and maintaining security. Criteria include the information’s sensitivity, the relationship and purpose, applicable retention periods, and the need to honor suppression requests. We delete or deidentify information when it is no longer needed, subject to lawful retention and backup cycles.

We use administrative, technical, and organizational safeguards designed to protect information and restrict access to authorized personnel and providers with a business need. No internet service is completely secure. Please report suspected security issues to hello@kithcard.com.

9 Children and processing locations

The Services are intended for adults and are not directed to people under 18. We do not knowingly collect personal information from children under 18 through the Services. If you believe a child has provided information, contact us so we can investigate and delete it as appropriate. Services are intended for the United States. We and our service providers may process information in the United States and other locations where they operate, subject to applicable safeguards and law.

10 Changes and contact

We will update this policy and its effective date when practices change, give additional notice of material changes as required, and obtain consent where legally required. A policy update does not retroactively supply consent for a new use. For privacy questions, SMS support questions, requests, or an accessible copy, contact Kith Financial, Inc. doing business as Kithcard at hello@kithcard.com.