Privacy Policy

‍Last Updated: Oct 29, 2025

Kafene, Inc. and our subsidiaries and affiliates (“Kafene,” the “Company,” “we,” “us” or “our”) respect your privacy and commit to protecting it through our compliance with the practices described in this online privacy notice (“Privacy Policy,” “Policy,” or “Notice”). Please read this policy carefully. If you have questions, comments, or concerns about this Privacy Policy or our processing of personal data, please see the bottom of this Privacy Policy for information about how to contact us.

‍
This Privacy Policy explains our practices with respect to the personal information we collect and process about you. This includes information we collect through, or in association with, our website with a home page located at https://www.kafene.com/, our apps that we may provide, our products and services that we may offer from time to time via our website and/or related apps, our related social media sites, when you visit our physical locations, or otherwise through your interactions with us (the website, apps, products, services, and social media pages, collectively, the ‘Services’).

‍
Please review the following to understand how we process and safeguard personal information about you. By using any of our Services, whether by visiting our website or otherwise, and/or by voluntarily providing personal data to us, you acknowledge that you have read and understand the practices contained in this Privacy Policy.

‍How We Collect Your Personal Information
“Personal information” (or “personal data”) is a broadly defined term whose legal definition varies across jurisdictions. When used in this Policy, “personal information” includes information that is reasonably capable of identifying a particular individual (including through their device) either alone or when combined with information from other sources.

‍
The personal information we collect about you depends on the nature and context of your interaction with our Company and Services. In the past twelve (12) months, we may have collected the below categories of personal information from you:

‍
1. Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, driver’s license number, passport number, or other similar identifiers.
2. Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
3. Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement.
4. Geolocation data.
5. Audio, electronic, visual, thermal, olfactory, or similar information, such as our use of CCTV at our physical location and when you opt-in to recording your telephone call.
6. Professional or employment-related information.
7. Education information (as defined in 20 U.S.C. section 1232g, 43 C.F.R. Part 99).
8. Inferences drawn from any of the information above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
9. Sensitive personal information, such as your social security number, consumer report, and consumer rating.

‍
We will not collect additional categories of personal information other than those categories listed above. If we intend to collect additional categories of personal data, we will provide you with a new notice at or before the time of collection.

How We Use Your Personal Information

We collect and process your personal information for the following business and commercial purposes: 

1. Providing, maintaining, or servicing accounts when you use our virtual lease purchase/rent-to-own services. 

2. Providing customer service (such as when you communicate with our service representatives or features via chat functions, email, text, or phone), processing or fulfilling orders and transactions, verifying customer information, and processing payments.

3. Marketing our products and services to you, including sending you messages about the products and services we offer, which may include rewards, events, and special offers for products and services.

4. When you subscribe to or engage with our newsletters or other electronic communications.

5. Communicating with you by email mail, text message (SMS, MMS), telephone, push notification, and other methods of communication], about products, services, order status, and information tailored to your requests or inquiries. We use third-party service providers for email and text marketing.

6. Auditing related to a current interaction with the consumer and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.

7. Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.

8. Debugging to identify and repair errors that impair existing intended functionality.

9. Short-term, transient use, including, but not limited to, the contextual customization of ads shown as part of the same interaction.
10. Undertaking internal research for technological development and demonstration.

11. Undertaking activities to verify or maintain the quality or safety of the services or devices owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the services or devices owned, manufactured, manufactured for, or controlled by us.

12. Complying with applicable laws, regulations, rules and requests of relevant law enforcement and/or other governmental agencies, or for other purposes, as permitted or required by law.

13. As necessary or appropriate, to protect the rights, property, and safety of our users, us, and other third parties.

14. Making strategic decisions concerning our business operations.

15. To enforce, and review compliance with, the legal terms that govern our offerings in furtherance of our legitimate interest in ensuring adherence to the relevant terms.

16. In any other way we may describe when you provide the information.

We will not use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you with notice and obtaining your consent. When we process personal information about you to comply with legal requirements or to perform our obligations under a contract with you or with our customer through whom you use our offerings, failure to provide such data may prevent or delay our fulfillment of these obligations.

How We Obtain Your Personal Information

• Directly From You. When you provide it to us directly whether online, by email, phone, or in-person, such as when you create an account and use our Services.
• Automatically or Indirectly From You. We automatically collect certain information about your (and your device's) interaction with our Services using various data-gathering and tracking technologies. These technologies include cookies or tracking pixels, web beacons to monitor activity, remarketing tools, and software, iFrames or embedded materials and session recording scripts to monitor activity.
• From Our Service Providers. We also may collect personal information from our third-party service providers, these include identity verification service providers, information databases, and security providers.
• From Third Parties. We may collect personal information from our social media platforms, internet service providers, data analytics providers, and operating systems and platforms.
• From our Business Partners and Merchant Partners. We may collect personal information from our Business Partners and Merchant Partners to facilitate your virtual lease purchase/rent-to-own services.

When and With Whom Do We Share Your Personal Information?

We may share your personal information with the following:

• Our Affiliates. With our affiliates, including our parent company, subsidiaries, joint venturers, or other companies that we control or that are under common control with us.
• Legally Required Parties. Persons to whom we are required by law to provide information, such as our state auditors or pursuant to a subpoena or a court order.
• Our Service Providers. Including our payment provider (Stripe), cloud computing service providers, internet service providers, data backup and security providers, functionality and infrastructure providers, web hosting providers, analytics providers, advertising providers, lead generation providers, marketing consultants, lawyers, accountants, consultants, security professionals, and other similar parties when disclosure is reasonably necessary to comply with our legal and contractual obligations, prevent or respond to fraud or abuse, defend ourselves against attacks, or protect the rights, property, and safety of us, our customers, and the public.
• Authorized Disclosures: To any party when you request or authorize us to share it.

How Long Do We Keep Your Personal Information?

We will retain your personal information only for so long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information; the potential risk of harm from unauthorized use or disclosure of your personal information; the purposes for which we process your personal information and whether we can achieve those purposes through other means; and the applicable legal requirements. 

How Do We Protect Your Personal Information?

We have implemented and maintain commercially reasonable security procedures and practices, appropriate to the nature of the information, to protect your personal information from unauthorized access, destruction, use, modification, or disclosure. However, no security measure is perfect, so we cannot guarantee the security of your personal information.

Examples of our security measures include the following: (i) restricting access to personal information to those workforce members who need to know it; (ii) training our workforce members about the importance of privacy and security of personal information; and (iii) implementing internal policies and procedures governing the collection, use, retention, and disclosure of personal information.

Other Important Information

• Collection of Personal Information from Children. Our Services are not intended for persons under 18 years of age. We do not knowingly collect or process the personal information of individuals under the age of 18. By using the Services, you represent that you are 18 years of age or older or are 16 years of age or older and have valid parental consent to do so. 

• Third-Party Websites and Services. As a convenience, we may reference or provide links to third-party websites and services, including those of unaffiliated third parties, our affiliates, service providers, and third parties with which we do business. When you access these third-party services, you leave our Services, and we are not responsible for, and do not control, the content, security, or privacy practices employed by any third-party websites and services. You access these third-party services at your own risk. This Privacy Policy does not apply to any third-party services; please refer to the privacy policies for such third-party services for information about how they collect, use, and process personal data.

• Business Transfer. We may, in the future, sell or otherwise transfer some or all of our business, operations or assets to a third party, whether by merger, acquisition or otherwise. Personal information we obtain from or about you via the Services may be disclosed to any potential or actual third-party acquirers and may be among those assets transferred.

• Do Not Track. We use analytics systems and providers that process personal information about your online activities over time and across third-party websites or online services, and these systems and providers may provide some of this information to us. We do not currently process or comply with any web browser’s “do not track” signal or similar mechanisms. For more information about the tracking technologies we use, please see our Cookie Notice https://www.kafene.com/legal/cookie-policy 

• International Use. Your personal information will be stored and processed in the United States. If you are using the Services from outside the United States, by your use of the Services you acknowledge that we will transfer your data to, and store your personal data in, the United States, which may have different data protection rules than in your country, and personal data may become accessible as permitted by law in the United States, including to law enforcement and/or national security authorities in the United States. 

What Are Your Privacy Choices?

• Communications Opt-Out. You may opt out of receiving email marketing or other communications from us at any time through a given communications channel by following the opt-out link or other unsubscribe instructions provided in any email message received, by contacting us as at [email protected]. Please note, opting out of promotional emails will not stop you from receiving all emails from the company. For example, we may still send you emails pertaining to your purchases, registrations, consumer surveys and similar transactions.

You may opt out of automated text notifications any time by replying 'STOP,' or any alternative keyword we have shared with you.

You may ask us to unsubscribe from our direct mail promotions and solicitations by contacting us at [email protected] or by calling (855)-420-0747.

• Cookies, Web Tracking, and Advertising. Most web browsers automatically accept cookies by default, but you can alter how your browser responds to cookies by adjusting the settings. You may opt out of certain tracking technologies through your device’s or browser’s cookie and/or advertising settings (including by blocking, deleting, or restricting cookies, or resetting your device’s applicable advertising ID). Consult your device, browser documentation or the below resources for more information about how to do this. 

• Safari (Desktop) and Safari Mobile (iOS).
• Firefox
• Chrome
• Microsoft Edge
• Brave

To opt out of Google Analytics data collection, follow these instructions from Google and you can use the Network Advertising Initiative’s Consumer Opt-Out service and/or the Digital Advertising Alliance’s Consumer Choice Tool.  Please note that blocking, deleting, or restricting cookies may negatively affect the performance or certain functionality of the Services, and opting out of online behavioral advertising will not prevent the delivery of ads, but rather may result in more repetitive and/or less relevant advertisements.

Mobile devices can use device-level information to serve targeted advertising. To learn about your privacy choices for your mobile devices, visit these informational pages from Google (Android) and Apple (iOS)

For more details on the cookies we use, please visit our Cookie Notice https://www.kafene.com/legal/cookie-policy. 

Modifications And Updates To This Privacy Policy

This Privacy Policy replaces all previous disclosures we may have provided to you about our information practices with respect to the Services. We reserve the right, at any time, to modify, alter, and/or update this Privacy Policy, and any such modifications, alterations, or updates will be effective upon our posting of the revised Privacy Policy. We will use reasonable efforts to notify you in the event material changes are made to our processing activities and/or this Privacy Policy, such as by posting a notice on the Services or sending you an email. Your continued use of the Services following our posting of any revised Privacy Policy will constitute your acknowledgement of the amended Privacy Policy. 

Applicability Of This Privacy Policy

This Privacy Policy is subject to Kafene’s Terms and Conditions that govern your use of the Services. This Privacy Policy applies regardless of the means used to access or provide information through the Services. 

This Privacy Policy does not apply to information from or about you collected by any third-party services, applications, or advertisements associated with, or websites linked from, the Services. The collection or receipt of your information by such third parties is subject to their own privacy policies, statements, and practices, and under no circumstances are we responsible or liable for any third party’s compliance therewith. 

How Can You Contact Us?

To ask questions or comment about this privacy policy and our privacy practices, contact us at:

44 West 28th Street 17th Floor New York, NY 10001

email: [email protected]

(855) 420-0747

On our website www.kafene.com at Your Privacy Choices.

Supplemental Notice to Canadian Data Subjects

Canadian laws provide specific rights to our Canadian customers. If you are a Canadian resident, this section applies in addition to all other applicable rights and information contained in this Policy.

We are committed to openness and accountability with respect to how we handle your personal information pursuant to Canadian federal and provincial privacy laws ('Canadian Privacy Law'), including:

• The Personal Information Protection and Electronic Documents Act (PIPEDA)
• Alberta’s Personal Information Protection Act (Alberta PIPA)
• British Columbia’s Personal Information Protection Act (BC PIPA)
• Québec's Act respecting the protection of personal information in the private sector (Québec Act).

Consent. In most cases, we rely on implied consent to collect, use, or disclose your personal information. In some circumstances, including those involving sensitive personal information, we obtain express consent. Where you have provided your consent to the collection, use, and transfer of your personal information (whether orally, in writing, or electronically), you may have the legal right to withdraw your consent under certain circumstances. In addition to the methods described above with respect to your privacy choices, you may withdraw your consent by contacting us at

Please note that if you withdraw your consent, we may not be able to provide you with a particular product or service. We will explain the impact to you at the time to help you with your decision.

Use of Your Personal Information. We will not collect, use, or disclose personal information except for the identified purposes identified above (See Disclosures of Your Personal Information), unless we have received additional consent or the processing is authorized without consent. Where we engage service providers who utilize the personal information we provide to them, we ensure that an agreement is place the ensure compliance with applicable Canadian Privacy Law.

Canadian Access and Challenge Rights Canadian Privacy Law provides the right to receive information about the existence, use, and disclosure of your personal information and be provided access to that information. You may also challenge the accuracy and completeness of your personal information and have it amended as appropriate. Depending on the nature of the challenged information, amendment may involve correction, deletion, or addition of information.

Exercising Your Canadian Privacy Rights. If you have an account with us, you may view and update your account information (as noted above) directly by logging into your account. To submit a request for access to information not contained within your account, or to challenge the accuracy or completeness of your personal information, you may click here or go to Your Privacy Choices on our website www.kafene.com. When submitting a request, we may require that you take additional steps to validate your identity or legal authority. We will begin processing your request once you have completed the verification process.

We have put procedures in place to receive and respond to inquiries about our policies and practices relating to the handling of personal information. We will provide a response to any personal information request within the timeframe required by law. If we cannot substantively respond to your request in a timely manner, we will notify you and state the reason for the delay. Under certain circumstances, we may not be able to fulfill your request, such as when doing so would interfere with our regulatory or legal obligations, where we cannot verify your identity, or if your request involves disproportionate cost or effort. However, we will respond to your request within a reasonable time, as required by law, and provide an explanation.

Additional information about how to exercise your rights under Canadian Privacy Law can be found here:

Office of the Privacy Commissioner of Canada

Website

Toll-free: 1-800-282-1376

Office of the Information and Privacy Commissioner of Alberta

Website

Toll-Free: 1-888-878-4044

Edmonton office: (780) 422-6860

Calgary office: (403) 297-2728

Office of the Information and Privacy Commissioner of British Columbia

Website

Vancouver: (604) 660-2421

Elsewhere in BC: (800) 663-7867

Commission d'acces a' l' information du Quebec Website

Toll-free: 1-888-528-7741

Supplemental Notice to Residents of Nevada

Nevada law permits our users who are Nevada consumers to request that their personal data not be sold (as defined under applicable Nevada law), even if their personal data is not currently being sold. Requests are free of charge, and you make such a request by:

• Contact us at (855) 420-0747 

• Emailing [email protected]

Supplemental Notice to Residents of Colorado, Connecticut, Montana, Oregon, Texas, Utah, and Virginia

This section applies to residents of Colorado, Connecticut, Montana, Oregon, Texas, Utah, and the Commonwealth of Virginia in addition to all other applicable rights and information contained in this Policy. If you are located in Colorado, Connecticut, Montana, Oregon, Texas, Utah, and Virginia, you have certain rights regarding your personal information. The section describes how we collect, use, and share your personal information under the Colorado Privacy Act (CPA), the Connecticut Act Concerning Personal Data Privacy and Online Monitoring (PDPOM), the Montana Consumer Data Privacy Act (MCDPA), the Oregon Consumer Privacy Act (OCPA), the Texas Data Privacy Act (TDPA), the Utah Consumer Privacy Act (UCPA), and the Virginia Consumer Data Protection Act (VCDPA), and your rights with respect to that personal information. As Colorado, Connecticut, Montana, Oregon, Texas, Utah, or Virginia residents, you have some or all of the rights listed below. However, these rights are not absolute, and we may decline your request as permitted by law. You can ask to appeal any denial of your request in the same manner through which you may submit a request.

• To confirm whether or not we are processing your personal information.
• To access your personal information and obtain a copy of it (where the processing is carried out by automated means).
• To correct inaccuracies in your personal information.
• To delete the personal information we have collected from or about you.
• To opt out of the processing of your personal information for purposes of targeted advertising.
• To opt out of the sale of your personal information.
• To opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. You can submit an opt out request here.

Exercising Your Privacy Rights

You may make a request at any time to exercise your privacy rights listed above by:

• Contact us at (855) 420-0747
• Emailing [email protected]
• Selecting Your Privacy Choices on our website

We will respond to your request withing 45 days of receipt (if properly submitted). If we need more time to process and respond to your request, we will notify you of that fact along with the reason for the delay. In all cases we will complete your request within 90 days from the date of our receipt of your properly submitted request. If we decline to act regarding your request, we will inform you of our decision and the reason for it, along with instructions on how you may appeal our decision.

Targeted Advertising

We engage in targeted advertising which means we display ads to our users based on personal information obtained from their activities over time and across nonaffiliated websites and apps. This allows us to serve you more relevant ads that align with your preferences and interests. We feel this creates a more pleasurable experience for our users. However, if you decide you want to opt out of sharing your personal information for targeted advertising purposes, you can opt out here. 

Sales of Personal Information.

Virginia residents acting within their individual capacity may opt out of the sale of their personal information. 'Selling' means we exchange your personal information with third parties in exchange for money.

Based on this definition, we do NOT sell your personal information to third parties.

Supplemental Residents of California

This section applies to residents of the State of California in addition to all other applicable rights and information contained in this Policy. California’s “Shine the Light” law permits our users who are California residents to request and obtain from us a list of what personal information (if any) we disclosed to third parties for their own direct marketing purposes in the previous calendar year and the names and addresses of those third parties. Requests may be made only once per year per person, they must be sent to the email address below and are free of charge. However, we do not disclose personal information protected under the “Shine the Light” law to third parties for their own direct marketing purposes. 

For California residents, please refer to our California Privacy Notice for more information regarding your California rights.

‍

‍