Privacy Policy

Last updated: June 26, 2026

This Privacy Policy explains how Copperhead Holdings LLC d/b/a Cariktr ("Cariktr," "we") collects, uses, and shares information when you use the Cariktr app, website (cariktr.com), and related services (the "Service").

1. Information We Collect

You provide:

• Account info: name, email, and authentication identifiers (including via Apple, Google, or Facebook sign-in if you choose them).
• Owner info: vehicle details (year/make/model), persona configuration, and photos you upload.
• Payment info: processed by our payment processor and the app stores; we do not store full card numbers.
• Communications: messages you send us (e.g., support, appeals).

Collected automatically:

• Conversation data: audio, transcripts, and derived "memories" from conversations with Cariktr personas.
• Location: approximate or precise location, used to confirm proximity to a vehicle and for nearby features (with your permission).
• Bluetooth: used to detect a vehicle's beacon to confirm proximity. The beacon is a one-way transmitter and does not collect data about you.
• Device and usage data: device type, app version, IP address, identifiers, and interactions, for analytics, security, and advertising.

2. How We Use Information

• To operate the Service: run conversations, generate the social feed, award points, process orders, and ship hardware.
• To create persona and user "memories" so returning visitors are recognized. Non-sensitive details (e.g., first name, what you drive) may be remembered; we instruct our systems not to store sensitive data (e.g., government IDs, financial accounts, health data).
• To screen uploaded photos for policy compliance before they become public.
• To provide advertising on the free tier (paid subscribers are ad-free).
• To improve and secure the Service, prevent abuse, and comply with law.

3. AI Processing

Conversations and uploaded photos are processed by third-party AI providers (e.g., for speech, language, and content moderation). Public feed posts are generated to exclude personally identifying information about any individual.

4. How We Share Information

• Service providers / sub-processors: hosting, AI, payments, advertising, and analytics — under contracts limiting their use of data.
• Public content: AI-generated feed posts and the content you choose to make public (e.g., vehicle photos, persona) are visible to others.
• Legal / safety: when required by law or to protect rights and safety.
• Business transfers: in connection with a merger, acquisition, or sale of assets.

We do not sell your personal information for money. Depending on your state, certain ad-related sharing may be considered a "sale"/"sharing" — see Section 8.

5. Your Choices

• Microphone, location, Bluetooth, photos: controlled in your device settings.
• Account data: you can request access, correction, or deletion (Section 8).
• Marketing email: opt out via the unsubscribe link.
• Ads: paid subscription removes ads; device-level ad-tracking controls apply.

6. Data Retention

We keep information as long as needed to provide the Service and for legitimate business or legal reasons. Conversation memories persist to support recognition of returning visitors; you may request deletion. If an owner's account lapses, associated data may be deleted after a grace period.

7. Security

We use reasonable technical and organizational measures to protect data. No system is perfectly secure; we cannot guarantee absolute security.

8. Your Privacy Rights (US State & International)

Depending on where you live (e.g., California/CCPA, other US states, or the EU/UK/GDPR), you may have rights to access, correct, delete, or port your data, and to opt out of certain sharing or targeted advertising. To exercise rights, contact privacy@cariktr.com. We will verify your request and respond as required by law. EU/UK users: our legal bases include performance of contract, legitimate interests, consent, and legal obligation.

9. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Because members of the public — including minors — may scan a Cariktr code in public settings, conversations are held to family-friendly safety rules, and we instruct our systems not to solicit personal information. If you believe a child under 13 has provided personal information, contact us at privacy@cariktr.com and we will delete it.

10. International Transfers

We may process data in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers.

11. Changes

We may update this Policy; material changes will be notified in the app or by email.

12. Contact

Copperhead Holdings LLC d/b/a Cariktr — privacy@cariktr.com