of Kikoff Inc.

and its
Kikoff Kikoff offers a free credit builder
to jumpstart your financial independence.

This Privacy Policy explains what personal and other data we collect through the Site,
and the
that data, and your choices concerning our data practices. This Privacy Policy forms part
of our Terms of Service, which are available at: https://kikoff.com/terms /.

By providing us with your personal data when using the Services you agree to the data
practices described in this Privacy Policy. If you do not agree to these practices, please
do not access or use the Services. Before you submit any Personal Data (as defined
below) to Kikoff through the Services, please review this Privacy Policy carefully, and
contact us if you have any questions.

Please note that if you create an account with us, our Consumer Privacy Notice applies to
you. Please review our Gramm-Leach-Bliley Consumer Privacy Notice

Information We Collect
Personal Data You Voluntarily Provide Us

Personal Information. When you interact with our Services, apply for a financial product,
contact us with inquiries or create an account to access the Services, we collect
information you voluntarily give us that alone or in combination with other
The Personal Data we collect from you
generally includes your name, email address, social security number, date of birth, bank
account and routing numbers, marital status, household income, credit report data, and
the login credentials you use to create and access an account with us.

Other Information.

In order to help us determine if you qualify for financial products or services, we

may obtain credit reports from consumer credit reporting agencies. If required by
law, we will provide notice and/or obtain your consent to do so.
To prevent fraud, verify your identity, and secure accounts, we may obtain
information about your mobile service from your wireless carrier, such as your
subscriber data (including mobile number, name, address, email, network status,
customer type, customer role, billing type, mobile device identifiers (IMSI and IMEI)
and other subscriber and device details).

LEGAL02/39633010v3
 When you voluntarily provide it to us, we may also use the information you use to
login to your accounts with your financial institutions (such as the username and

Information We Receive Automatically from Your Use

of the Site and App
When you visit, use and interact with the Site or App, we may receive certain
information about your visit, use or interactions that alone cannot identify you. For
example, we may monitor the number of people that visit our Site, peak hours of visits,
which page(s) are visited on our Site, the domains our visitors come from (e.g.,
google.com, yahoo.com, etc.), and which browsers people use to access and visit our
Site (e.g., Firefox, Microsoft Internet Explorer, etc.), broad geographi cal information,
and Site-navigation patterns. In particular, the following information is created and
automatically logged in our systems:

Log data.
visit the Site. Log data inclu
which country you are connecting from when you visit the Site), browser type and
settings, the date and time of your request, and how you interacted with the Site.
Cookies, Pixel Tags and other technologies. Information from cookies, pixel tags
and/or other technologies. These technologies may be placed by us or by third parties
who provide services to us.
about how we use cookies and other technologies.

Please note that both Log Data and cookies may collect the following types of data:

Device information: Includes name of the device, operating system, and browser you
are using. Information collected may depend on the type of device you use and its
settings.
Usage Information. We collect information about how you use our Site and App, such
as the types of content that you view or engage with, the features you use, the actions
you take, and the time, frequency and duration of your activities.

Cookies

piece of information that the computer that hosts our Services gives to your browser
when you access the Services. Our cookies help provide additional functionality to the
Services, including helping us analyze Services usage more accurately. For instance,
our Site may set a cookie on your browser that allows you to access the Services
without needing to remember and then enter a password more than once during a visit

refer to this section for information on how to receive notification when you are
receiving a new cookie and how to turn cookies off. In order to personalize y our use of

LEGAL02/39633010v3
the Site, we use local shared objects, also known as Flash cookies, to display content
based upon what you view. Flash cookies are different from browser cookies
(discussed above) because of the amount and type of information they generate, and
how they store that information. Cookie management tools provided by your browser
will not remove Flash cookies. To learn how to manage privacy and storage settings for
Flash cookies click here.

track links and/or similar technology to note some of the pages you visit on our Site and
to personalize your experience. Pixel tags are a technology similar to cookies that can
be embedded in online content or within the body of an email for the purpose of
tracking activity on websites (for example, to know when content has been shown to
you), or to know when you have viewed particular content or a particular email
message.

Analytics and Tracking Technologies. We may allow third party service providers, to
use cookies or pixels (as noted above) or other tracking technologies (, to help us
understand your use of our Site and collect information about your browsing activities
over time and across different websites. For example, our Site uses Google Analytics
for these purposes. To opt-out of Google Analytics collecting your information, go to
https://chrome.google.com/webstore/detail/google-analytics-opt-
out/fllaojicojecljbmefodhfapmkghcbnh?hl=en.

How We Use Your Information

We use Personal Data and other information for the following purposes:

To provide you with the Services and related customer service, including
communicating with you as necessary in connection with your application for financial
products and services;
To market our products and services to you, or market other products and services to
you that we think may interest you;
To respond to your inquiries, comments, feedback, or questions;
To send administrative information to you, for example, information regarding the
Services, and changes to our terms, conditions, and policies;
To analyze how users interact with our Services so we can provide, maintain,
customize, and improve the content and functionality of the Services;
To enforce the terms of our Terms of Use or Privacy Policy or any other agreement
between us;
To prevent actual or potential fraud, criminal, illegal, wrongful, or harmful activity, or
misuses of our Services, and to ensure the security of our IT systems, architecture and
networks;
To comply with legal obligations and legal process and to protect our rights, privacy,
safety or property, and/or that of our affiliates, you or other third parties;
To conduct and publish market research, e.g., consumer surveys, polls, statistics etc;
To publish user-generated content for use on our Site, social media, or other marketing
platforms, websites, or mobile apps;

LEGAL02/39633010v3
Any other purpose disclosed at the time you provide information or otherwise with your
consent or if you authorize or direct us to release information about you.

Direct Marketing and Online Advertising

We may use your information to contact you in the future to tell you about products or
services we believe may be of interest to you. If we do, each marketing communication
-
marketing communications. In addition, if at any time you wish not to receive any future
marketing communications or you wish to have your name deleted from our mailing
lists, please contact us as indicated below.

We may partner with third party service providers to display advertising on our Site or to
manage our advertising on other sites. These partners may use data technologies such
as cookies and pixels to collect information about your activities on this and other
websites to provide you targeted advertising based upon your interests. We may also
use web beacons to tell when a user is redirected to the Site because of an
advertisement that we ran was clicked on or otherwise interacted with and to better
Service providers we use may track
Site visitors over time and across multiple websites and social media services to
retarget Site visitors. Users logged in to social media programs may be tracked by
service providers who track such users across multiple websites and who may
disregard the privacy settings in your web browsers.

If you wish to not have this information used for the purpose of serving you targeted
ads, you may be able to opt-out by visiting:

http://www.aboutads.info/
https://optout.networkadvertising.org/?c=1

Please note that opting-out will not mean that you will no longer be served advertising.
Instead, you will continue to receive generic ads that are not based on your specific
interests.

Aggregated Data
We may aggregate the information that we collect and use such data for commercial,
statistical and market research purposes, including sharing it with affiliates, third parties
and business partners. This data may include location information derived from your IP
address or, if authorized, from the GPS of your mobile device.

Sharing and Disclosure

We may share personal information with certain third parties without further notice to

LEGAL02/39633010v3
you unless required by law in the following circumstances:

Business Transfers. As we develop our business, we might sell or buy businesses or

assets. In the event of a corporate sale, merger, reorganization, dissolution,
bankruptcy, or similar event, Personal Data may be part of the transferred assets.

Our Affiliates. We may also share your Personal Data with our affiliates for business
purposes, including marketing, as described in this Privacy Policy.

Agents, Consultants, Vendors, and Service Providers. Like many businesses, we

sometimes hire other companies to perform certain business-related functions.
Examples of such functions include mailing information, maintaining databases and
processing payments. Additionally, we may partner with other businesses to market
products or services to you.

Legal Requirements. We may disclose your Personal Data if required to do so by law

or in the good faith belief that such action is necessary to (i) comply with a legal
obligation, legal process, our internal policies, or with prudent legal, data privacy, or
data security practice as we may determine, (ii) protect and defend our rights or
property or the rights or property of others, (iii) prevent actual or potential fraud or
illegal, criminal, wrongful, or harmful activity, (iv) act to protect the safety of users of the
Services or the public, or (v) protect against legal liability. You can review our Gramm -
Leach-Bliley Act Privacy Notice for more information.

We may also share Personal Data with third parties for any purpose described above in
or for any other purpose that has
been disclosed to you or to which you have consented,

Information Access and Choice

You can contact us at [email protected] to do the following at any time:
See what data you provided through the Services, if any.
Change/correct any data you provided through the Services.
Express any concern you have about our use of your data.

Children
The Services are not intended for children who are under 18 years of age and we do
not knowingly collect Personal Data from children under 18. If you are under the age of
18, please do not submit any Personal Data through the Services. We encourage

enforce our Privacy Policy. If you believe we have collected information from a child
who is under 18 please contact us and we will endeavor to delete the information.

LEGAL02/39633010v3
California Privacy Rights
Do Not Track Signals.
signals and operates as described in this Privacy Policy whether or not a DNT signal is
received. If we do so in the future, we will describe how we do so in this Privacy Policy.

Restrictions on Sharing. If you are a California resident and have concluded a

customer relationship with us, you can restrict our sharing of certain information. For
more information, review our California Privacy Notice here.

If we disclose certain Personal Data to third parties who use it for their direct marketing
purposes, you have a right to request further information about the recipients of your
Personal Information. To obtain a list of this information, please contact us at the

Links to Other Websites

This Privacy Policy only applies to information collected by Kikoff through our Services.
The Kikoff Services may contain links to other websites, apps or online services not
operated or controlled by Kikoff
described here do not apply to Third Party Sites. By providing links to Third Party Sites
or services we do not imply that we endorse or have reviewed such websites or
services. We suggest that you contact those sites directly for information about their
data practices and policies.

Security
No Internet or email transmission is ever fully secure or error free. In particular, email
sent to or from us in connection with the Services may not be secure. Therefore, you
should take special care in deciding what information you send to us via email. Please
keep this in mind when disclosing any Personal Data to us via the Internet.

Contact Information
Please feel free to contact us if you have any questions about this Privacy Policy or
information practices:

Email: [email protected]

Effective Date and Updates

This Privacy Policy is effective as of 3/21/2020. If we materially change this Policy, we
will post the revised version here. Your continued use following any changes shall be
deemed to be your acceptance of the changes. We suggest that you check here
periodically for the most up-to-date version of our Privacy Policy.

LEGAL02/39633010v3
 WHAT DOES KIKOFF LENDING, LLC
FACTS ("Kikoff") DO WITH YOUR PERSONAL
INFORMATION?

Why? Financial companies choose how they share your personal information. Federal law gives
consumers the right to limit some but not all sharing. Federal law also requires us to tell you
how we collect, share, and protect your personal information. Please read this notice carefully to
understand what we do.

What? The types of personal information we collect and share depend on the product or service you
have with us. This information can include:
Social Security number and income
Account balances and transaction history
Credit history and employment

How? consumers' personal information to run their everyday

consumers' personal information; the reasons Kikoff

chooses to share; and whether you can limit this sharing.

Reasons we can share your personal information Does Kikoff share? Can you limit this sharing?

For our everyday business purposes

such as to process your transactions, maintain
your account(s), respond to court orders and legal Yes No
investigations, or report to credit bureaus

For our marketing purposes

to offer our products and services to you Yes No

For joint No We don’t share

information about your transactions and experiences No We don’t share

No We don’t share
information about your creditworthiness

No We don’t share

No We don't share

To limit Visit us online: email us at [email protected]

our sharing Please note:
If you are a new customer, we can begin sharing your information 45 days from the date we
sent this notice.

Questions? Email [email protected] or go to

Page 2

Who we are
Who is providing this notice? Kikoff Lending, LLC

What we do
How does Kikoff To protect your personal information from unauthorized access
protect my personal information? and use, we use security measures that comply with federal law.

and buildings.

How does Kikoff We collect your personal information, for example, when you
collect my personal information?
Create an online account or apply for a loan
Obtain a loan or make payments
Link your Kikoff online account to your other financial accounts
We also collect your personal information from others, such as credit
bureaus, affiliates or other companies.

Federal law gives you the right to limit only

information
about your creditworthiness
you
you
State laws and individual companies may give you additional rights to
limit sharing. See below for more on your rights under state law.

What happens when I limit sharing Your choices will apply to everyone on your account.
for an account I hold jointly with
someone else?

Companies related by common ownership or control. They can be

! Kikoff does not share with affiliates

Companies not related by common ownership or control. They can be

companies.
Kikoff does not share with nonaffiliates so they can market
their products to you.

Joint marketing

! Kikoff does not jointly market.