Privacy Policy

This Privacy Policy governs the Chai Garam mobile application and any associated services provided or operated by Kasfi Traders (collectively, the “Application”). For purposes of this Privacy Policy, Kasfi Traders shall be referred to as the “Service Provider,” “we,” “us,” or “our.”

1. Information Collection and Use

When you download, access, or use the Application, certain information may be collected automatically or provided by you. Such information may include, without limitation:

• Your device’s Internet Protocol (IP) address;
• The pages or sections of the Application that you access, together with the date and time of access and the duration of such access;
• The amount of time you spend using the Application; and
• Information relating to the mobile operating system installed on your device.

The Service Provider may retain and process information provided by users or collected automatically for the purposes described in this Privacy Policy.

The Service Provider may use information provided by users to communicate important service-related information, legally required notices, and, where permitted by applicable law, promotional or marketing communications.

Certain features or functions of the Application may require users to provide personally identifiable information. Any information requested or provided for such purposes will be retained and processed in accordance with this Privacy Policy and applicable law.

2. Cookies and Similar Tracking Technologies

The Application and, where applicable, third-party software development kits (SDKs), may employ cookies, pixels, SDKs, and comparable tracking or technological mechanisms to facilitate functionality, perform analytics, improve services, or support service delivery.

Where applicable law requires user consent for non-essential cookies or tracking technologies, such technologies will be used only after obtaining the required consent.

3. Your Privacy Rights

Subject to applicable law, you may have the right to request access to personal information maintained about you, request correction of inaccurate information, or request deletion of your personal data.

Where processing is based on your consent, you may also withdraw such consent. To exercise any applicable privacy right or submit a related request, please contact us at kastconsole@gmail.com.

4. California Privacy Rights — CCPA/CPRA

If you are a resident of California, you may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), including the right to:

• Know what categories of personal information are collected;
• Request deletion of personal information, subject to applicable exceptions;
• Opt out of the sale or sharing of personal information, where applicable; and
• Receive equal treatment and not be discriminated against for exercising your privacy rights.

California residents may submit requests concerning these rights by contacting kastconsole@gmail.com.

5. Third-Party Access

The Service Provider may transmit aggregated and anonymized information to external service providers or other third parties for purposes such as analyzing usage, improving the Application, and enhancing related services.

Where personal information is shared with third parties, such information may be disclosed only as permitted by this Privacy Policy, applicable agreements, or applicable law.

6. International Data Transfers

The Service Provider and its third-party service providers may process or transfer personal information in jurisdictions other than the country in which you reside, including jurisdictions outside the European Economic Area (EEA).

Where applicable law imposes requirements or safeguards concerning international transfers of personal data, the Service Provider will implement an appropriate legally recognized transfer mechanism. Such mechanisms may include:

• Standard Contractual Clauses (SCCs) approved by the European Commission;
• Applicable adequacy decisions or other legally recognized transfer mechanisms; or
• User consent where such consent is legally required and permitted.

Because data protection requirements may vary between jurisdictions, the Service Provider will implement appropriate safeguards where required by applicable law and obtain any legally necessary consent.

7. Disclosure of Information

The Service Provider may disclose User Provided Information and Automatically Collected Information in the following circumstances:

• Legal obligations: Where disclosure is required by applicable law, regulation, subpoena, court order, or other valid legal process;
• Protection of rights and safety: Where the Service Provider, acting in good faith, determines that disclosure is reasonably necessary to protect its rights, the safety of users or other individuals, investigate suspected fraud, or respond to a lawful governmental request; or
• Service providers: To trusted third-party service providers performing services on behalf of the Service Provider, provided that such providers are not independently authorized to use the disclosed information for their own purposes and have agreed to comply with applicable confidentiality and privacy requirements.

8. Opt-Out and Uninstallation

You may discontinue further collection of information by removing the Application from your mobile device.

Uninstalling the Application prevents the Application from continuing to collect information from that device. However, uninstalling the Application does not automatically erase information that may previously have been transmitted to the Service Provider or third parties.

You may request deletion of applicable personal information or withdraw consent, where processing is consent-based, by contacting kastconsole@gmail.com.

9. Data Retention

The Service Provider retains information only for periods considered reasonably necessary for the purposes for which such information is processed, subject to applicable legal requirements. Current retention periods are as follows:

• User Provided Data: Retained for the period during which you use the Application and for up to 12 months thereafter, unless a longer period is required by law.
• Automatically Collected Data: Retained for up to 24 months from the date of collection, unless a longer retention period is necessary for legal or regulatory compliance.
• Aggregated and Anonymized Data: May be retained indefinitely because such information is no longer reasonably capable of identifying an individual.
• Legally Required Data: Retained for the period mandated by applicable law or legal obligations.

Subject to applicable legal requirements, you may request deletion of your personal information. If you wish to request deletion of User Provided Data submitted through the Application, please contact kastconsole@gmail.com.

Certain information may be necessary for the proper operation or functionality of the Application and may therefore be subject to applicable retention requirements.

10. Children’s Privacy

The Application is not directed toward children under 16 years of age, or such higher minimum age as may be prescribed by applicable law. The Service Provider does not knowingly solicit personal information from children or intentionally market the Application to children.

The Service Provider does not knowingly collect personally identifiable information from children. Children are advised not to submit personal information through the Application or related services.

Parents and legal guardians are encouraged to supervise their children’s use of the Internet and to instruct them not to provide personal information through the Application or related services without appropriate permission.

If you believe that a child has provided personally identifiable information to the Service Provider, please contact us at kastconsole@gmail.com so that appropriate action may be taken.

Where legally permitted and required, individuals under 16 must obtain consent from a parent or legal guardian before providing personal information.

11. Security

The Service Provider takes reasonable measures designed to protect the confidentiality, integrity, and security of information that it processes and maintains.

Such safeguards may include appropriate physical, electronic, and procedural security measures intended to reduce the risk of unauthorized access, disclosure, alteration, or destruction of information.

12. Data Breach Notification

In the event of a security incident or data breach involving personal information, the Service Provider will provide notification to affected individuals and/or relevant authorities where and to the extent required by applicable law.

Where legally required, such notification may include information concerning the nature of the incident and the measures being taken to investigate, mitigate, or address it.

13. Amendments to This Privacy Policy

The Service Provider reserves the right to amend or update this Privacy Policy periodically.

Any revised version will be published with an updated effective date. Where a material change requires consent under applicable law, the Service Provider will obtain the required consent before implementing such change.

Previous versions of this Privacy Policy may be made available upon request by contacting kastconsole@gmail.com.

14. Consent

Where the processing of personal information is based upon consent, consent will be obtained through an affirmative action or opt-in associated with the relevant feature or activity.

You may withdraw consent at any time, subject to applicable law. Withdrawal of consent will not affect the lawfulness of processing conducted before such withdrawal.

Where information is processed on another lawful basis, such processing will continue in accordance with the applicable lawful basis and the terms of this Privacy Policy.

15. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the Service Provider’s privacy practices, you may contact: