Privacy Policy

Effective date: 7 September 2026

Kuberhunt Edge is owned and operated by Kuberhunt Treasure Private Limited ("Kuberhunt", "we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, store, and safeguard your personal information when you use the Kuberhunt Edge app ("Edge" or the "App"). By using Edge, you consent to the practices described here. This policy forms part of, and should be read with, our Terms of Use.

1. Legal Basis (DPDP Act, 2023)

We process your personal data in accordance with the Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the rules made under it. Where we rely on your consent as the lawful basis for processing, that consent is free, specific, informed, and unambiguous, and you may withdraw it at any time as described in Section 6. Kuberhunt acts as the Data Fiduciary for the personal data it collects through the App.

2. Information We Collect

2.1 Information you provide

• Identity and contact: full name, email address, phone number.
• KYC details required to activate an Edge subscription: PAN, Aadhaar (via a secure KYC provider), date of birth, and address.
• Subscription and consent records: the plan you choose, your SEBI-compliant consent, and the timestamp of your acceptance.

2.2 Payment information

Payments are processed by our authorised payment partners — Apple (for in-app purchases on Apple devices) and Razorpay (on other platforms). We receive a confirmation and a transaction reference, but we do NOT collect or store your full card number or Apple ID credentials; those are handled by the respective payment provider under its own terms and privacy policy.

2.3 Information collected automatically

• Device and app data: device model, operating system, app version, and a push-notification token.
• Usage data: how you interact with Edge, which features you use, and diagnostic/crash logs used to keep the App reliable.
• Session recordings: we record how the App’s screens are used, so we can see where something is confusing or broken and fix it. This runs on PostHog, analytics software we host on our own servers — the recordings are not sent to any third party or advertising partner. Screens showing identity documents, payment or bank details, sign-in codes and profile information are masked, and are never captured. You can switch this off at any time under Settings > Privacy.

3. How We Use Your Information

We use your personal information to:

• Create and secure your account and verify your identity through KYC.
• Activate, deliver, and manage your Edge subscription and the research Calls within it.
• Process payments, renewals, invoices, and refunds.
• Send service communications — transaction confirmations, renewal reminders, and important notices about Edge.
• Provide customer support and respond to your requests.
• Detect and prevent fraud and abuse, and comply with our legal and regulatory obligations.

4. Sharing With the Edge Partner

If you subscribe to Kuberhunt Edge, you expressly consent, under the DPDP Act, 2023, to our sharing the following personal data with the relevant SEBI-registered Research Analyst partner ("Edge Partner") — currently Investology (SEBI RA Reg. No. INH000015297):

• Your name, email address, and phone number.
• Your KYC identifiers required for the Edge Partner's own SEBI recordkeeping (including PAN).
• Your subscription status and consent records.

This data is shared only so the Edge Partner can deliver its research to you and meet its own SEBI Research Analyst recordkeeping, KYC, and audit obligations. The Edge Partner processes this data as an independent Data Fiduciary under its own privacy policy and applicable SEBI regulations. You may withdraw this consent at any time by cancelling your Edge subscription and contacting us as set out in Section 9; withdrawal does not affect processing already carried out or records the Edge Partner is required by law to retain.

5. Other Disclosures

We may also disclose your information to:

• Service providers acting on our behalf (payment processors, KYC verification, cloud hosting, analytics, and communications) under contractual confidentiality obligations.
• Regulators, law-enforcement, or courts where required by applicable law or to protect our legal rights.
• A successor entity in connection with a merger, acquisition, or reorganisation, subject to this policy.

We do NOT sell your personal information.

5A. Advertising and Campaign Measurement

We work with AppsFlyer Ltd. as our measurement partner to understand which of our own marketing campaigns brought you to the app, and to make referral and offer links open in the right place. For this purpose we share the following with AppsFlyer, and with the advertising platforms we run those campaigns on (currently Meta and Google):

• Device identifiers, including your device advertising identifier where you have permitted it, and an app installation identifier.
• App activity, such as the screens and content you open, searches you run, and when you register.
• Purchase events — the plan purchased and the amount paid. We never share card, bank, or UPI details with these partners.

On iOS, your device advertising identifier is used only if you allow tracking when your device asks. If you decline, the app works exactly the same and we receive only aggregated, non-identifying campaign measurement from Apple. You can change this choice at any time in iOS Settings > Privacy & Security > Tracking, and on Android in Settings > Privacy > Ads.

You may also withdraw consent for this measurement inside the app, under Settings > Privacy, without affecting your subscription or any other feature. We do not use this data to make automated decisions about you, and we do not share your research holdings, portfolio, or KYC documents with any advertising partner.

6. Your Rights and Choices

Subject to the DPDP Act, you have the right to:

• Access and obtain a summary of the personal data we hold about you.
• Request correction or completion of inaccurate or incomplete data.
• Withdraw consent and request deletion of your account and data.
• Nominate another individual to exercise your rights in the event of death or incapacity.

To exercise any of these rights, contact us at support@kuberhunt.com. We will respond within 30 days and may verify your identity before acting. Some information may be retained where required by law or for legitimate business purposes.

7. Data Retention

We retain your personal information for as long as your account is active and your Edge subscription is in effect, and thereafter only as long as necessary to provide the Service, comply with our legal, tax, and SEBI-related obligations, resolve disputes, and enforce our agreements. When no longer needed, we securely delete or anonymise it. To request account deletion, contact support@kuberhunt.com.

8. Security and Children

We use reasonable technical and organisational measures — including encryption in transit and access controls — to protect your information. No method of transmission or storage is fully secure, so we cannot guarantee absolute security. Edge is not intended for anyone under 18 years of age, and we do not knowingly collect data from children; if we learn that we have, we will delete it promptly.

9. Contact and Grievances

For any privacy question, request, or complaint, contact:

• Privacy Team: support@kuberhunt.com
• Kuberhunt Treasure Private Limited, 601, Spaces 912, Pleasant Park, Mira Road, Mumbai 401107
• Phone: +91 93265 33502

We will respond to your inquiry within 30 days.

For privacy or data-handling concerns relating to data shared with our Kuberhunt Edge partner, you may also contact the Edge Partner's grievance officer:

• Investology — Grievance Officer: Neelima Pillai, compliance@investology.in. Registered office: VO 872, WeWork NESCO IT Park, 10th Floor, Building 4, Nesco IT Park, Western Express Highway, Goregaon (East), Mumbai, Maharashtra 400063.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified within the App or by email. Your continued use of Edge after the changes take effect constitutes acceptance of the updated policy.