Privacy Policy

Last Updated and Effective Date: [Insert Date]

1. Introduction and Scope

This Privacy Policy (the "Policy") sets forth the comprehensive data protection practices and procedures of [Your Company Name], doing business as Kukirin Dashboard ("Company," "we," "our," or "us"). This document outlines how we collect, process, utilize, transmit, and safeguard the personal and non-personal data of individuals ("User," "you," or "your") who access or utilize the Kukirin Dashboard mobile application, associated website, and related services (collectively, the "Services").

We are resolutely committed to maintaining the confidentiality, integrity, and security of your personal information in strict accordance with applicable global data protection regulations, including but not limited to the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). By accessing, downloading, or utilizing our Services, you explicitly acknowledge that you have read, understood, and agree to be bound by the terms detailed within this Policy.

2. Categories of Information We Collect

In order to provide, optimize, and maintain the functionality of our Services, we may collect the following categories of information, which may include personally identifiable information (PII):

2.1. Information You Voluntarily Provide

• Account Registration Data: When you register an account, we collect your name, email address, password hash, and other relevant contact details necessary for identity verification and account management.
• Profile Information: Voluntarily submitted demographic data, profile photographs, and user preferences.
• Communication Data: Information contained within any correspondence, inquiries, or support requests you direct to our customer service infrastructure.

2.2. Automatically Collected Device and Usage Data

• Telemetry and Hardware Data: When connected to a supported Kukirin electric scooter, the App collects hardware telemetry, including but not limited to, real-time speed, battery voltage, odometer readings, thermal sensor data, and current riding mode status.
• Device Specifications: Operating system version, unique device identifiers (e.g., IMEI, MAC address), hardware model, network state, and application crash diagnostics.
• Interaction Metrics: Granular data regarding your interaction with the App interface, feature usage frequency, and session durations.

2.3. Data Collected via Specific Device Permissions

Pursuant to mobile operating system requirements, the App requests explicit authorization to access certain hardware subsystems. The collection of this data is strictly contingent upon your affirmative consent:

• Precise Geolocation and Bluetooth: We require access to fine and coarse location services to facilitate Bluetooth Low Energy (BLE) discovery algorithms, essential for pairing the App with your scooter hardware. Furthermore, geolocation data is utilized to render ride tracking maps, calculate velocity metrics, and compile trip itineraries.
• Microphone and Audio Processing: To facilitate voice-activated command execution, the App requires microphone access. Audio streams are captured transiently and transmitted securely to our designated natural language processing partners (e.g., ElevenLabs) for instantaneous transcription and intent parsing. Audio files are not persistently retained post-transcription.
• Contacts Subsystem: The App may request access to your device's contact list to enable social ride sharing, emergency contact designation, or peer-to-peer referral functionalities. Address book data is processed locally and is not broadly ingested into our central servers.
• Camera and Media Storage: Access to the camera optical sensor and local file system is necessitated for profile photo uploads, QR code scanning (for hardware provisioning), and the localized caching of exported diagnostic reports.

3. Legal Basis and Purpose for Data Processing

We process your data strictly on the following legal bases and for the specified commercial purposes:

• Performance of a Contract: To fulfill our obligations in providing the core functionalities of the Kukirin Dashboard, including hardware synchronization, real-time telemetry display, and user authentication.
• Legitimate Business Interests: To conduct aggregate statistical analysis, troubleshoot software anomalies, enhance algorithmic performance, and ensure the cryptographic security of our infrastructure.
• Consent: For the processing of highly sensitive data categories, such as precise geolocation and biometric audio streams, processing is executed solely upon your explicit, revocable consent.
• Legal Compliance: To comply with applicable statutory obligations, respond to lawful subpoenas, or enforce our Terms of Service.

4. Disclosure and Sharing of Information

We unequivocally assert that we do not sell, rent, or lease your personally identifiable information to third-party data brokers or marketing conglomerates. Your data may only be disclosed under the following strictly defined circumstances:

• Third-Party Service Providers: We employ rigorously vetted vendors to facilitate our operations, including cloud hosting providers, mapping APIs (e.g., OpenStreetMap/Leaflet), voice processing architectures (e.g., ElevenLabs), and analytics platforms. These entities are bound by stringent Data Processing Agreements (DPAs) and are authorized to utilize your data solely for the provision of their contracted services to us.
• Corporate Reorganization: In the event of a merger, acquisition, asset liquidation, or corporate restructuring, user data may be transferred as a core business asset, subject to the continuity of the privacy protections outlined herein.
• Legal and Regulatory Mandates: We may disclose your information to law enforcement agencies or judicial authorities if we establish a good-faith belief that such action is imperative to comply with a legal mandate, protect the vital interests of any individual, or defend our intellectual property rights.

5. Data Retention Protocols

Your personal data is retained exclusively for the duration necessary to fulfill the operational purposes delineated in this Policy. Hardware telemetry and localized ride data are primarily stored on your device. Account-level data stored on our servers will be securely expunged or irreversibly anonymized upon account deletion or after a protracted period of account inactivity, in accordance with our internal data lifecycle management policies.

6. Security Infrastructure

We deploy robust, industry-standard cryptographic protocols, including Transport Layer Security (TLS) for data in transit, and advanced encryption standards (AES) for data at rest. While we continuously iterate on our security architecture to mitigate vulnerabilities, we cannot warrant absolute algorithmic immunity against sophisticated cyber-intrusions. You remain responsible for maintaining the confidentiality of your account credentials.

7. User Rights and Data Autonomy

Depending on your geographic jurisdiction, you are granted extensive statutory rights regarding your personal data, which may include:

• Right of Access and Portability: The right to request a comprehensive dossier of the personal data we currently hold about you, delivered in a structured, machine-readable format.
• Right to Rectification: The right to mandate the correction of any inaccurate, obsolete, or incomplete personal data.
• Right to Erasure (Right to be Forgotten): The right to compel the deletion of your personal data from our active databases, subject to certain legal exceptions.
• Right to Restrict Processing: The right to object to the processing of your data for specific purposes, including automated profiling and direct marketing.

To exercise any of these rights, please direct a formal inquiry to our Data Protection Officer using the contact information provided below. We pledge to respond to all authenticated requests within thirty (30) calendar days.

8. Policy Regarding Minors

The Services are explicitly not directed toward, nor intended for use by, individuals under the age of thirteen (13), or the applicable age of digital consent within your jurisdiction. We systematically prohibit the intentional collection of data from minors. Should we detect the inadvertent acquisition of such data, it will be immediately purged from our infrastructure.

9. International Data Transfers

Your data may be transferred to, and processed within, geographic locations outside of your province, country, or jurisdiction of residence, where data protection statutes may diverge from those in your locale. By utilizing the Services, you consent to such trans-border data flows, governed by appropriate safeguards such as Standard Contractual Clauses (SCCs).

10. Modifications to this Policy

We reserve the unilateral right to amend, revise, or restructure this Privacy Policy at our discretion to reflect evolving legal landscapes or operational shifts. Substantive modifications will be communicated via prominent in-app notifications or direct email correspondence prior to taking effect. Your continued use of the Services subsequent to such updates constitutes binding acceptance of the revised Policy.

11. Contact Information

Should you require further clarification regarding this Privacy Policy, or wish to invoke your data rights, please contact our Data Privacy Team at:

• Corporate Entity: [Your Company Name]
• Email Address: [Your Support/Privacy Email Address]
• Website URL: [Your Website URL]
• Mailing Address: [Your Physical Business Address, Optional]