Mobile App Privacy Policy

TERMS OF USE

Last Updated: July 14, 2026

Scope and Relationship to Terms

At KORE Solutions, Inc. (“KORE,” “we,” “us,” or “our”), we respect privacy and are committed to protecting personal information. This Mobile App Privacy Policy (“Policy”) explains how we collect, use, disclose, retain, and protect personal information in connection with KORE mobile applications and related services (collectively, the “App”).

This Policy is a privacy notice, not a standalone contract. The KORE Mobile App Terms of Use govern access to and use of the App, including user responsibilities, acceptable use, user-submitted content, photo-specific disclaimers, warranty disclaimers, indemnity, limitation of liability, and other risk-allocation terms.

The App is intended for internal business and professional use by authorized KORE personnel, contractors, and other approved internal users. The App is not intended for general consumer use, public commercial use, or use by children.

The App is currently intended for availability in the United States and Canada. If KORE later expands availability or changes App functionality, KORE may update this Policy and the related Terms of Use as appropriate.

Personal Information We Collect

We collect limited personal information and technical information reasonably necessary to provide, operate, secure, support, troubleshoot, and improve the App. Depending on App configuration and use, we may collect the following categories of information:

The App may allow users to upload, store, and modify photos. KORE collects only photos users choose to submit through the App and does not access an entire photo library unless the user grants permission through device settings. Photos may contain personal, confidential, location, metadata, third-party, customer, jobsite, equipment, property, or regulated information, depending on the photo and device settings.

KORE does not strip EXIF/GPS metadata from uploaded photos. Accordingly, photos may retain embedded metadata generated by the device used to capture the image, including date, time, device information, and location information where such metadata exists in the uploaded file.

Users are responsible for reviewing photos and submitted content before submission; obtaining necessary rights, permissions, consents, and notices; and avoiding unnecessary, excessive, sensitive, confidential, or third-party information. KORE does not verify, authenticate, monitor, or assume responsibility for user-submitted content except as required by law.

Unless separately disclosed and enabled, we do not knowingly collect payment information, full mailing addresses, phone numbers, mobile contacts, microphone recordings, or advertising identifiers for marketing purposes.

App Permissions and Device Settings

The App may request access to device features such as camera or photo access only as needed for App functionality. Before requesting camera or photo permission, the App should provide a just-in-time explanation describing why access is requested and reminding users to upload only content they are authorized to provide.

Users can manage App permissions through device settings. If a user declines or disables certain permissions, some App features may not function as intended.

How We Use Information

• Authenticate users and provide account access.
• Operate, maintain, secure, troubleshoot, and improve the App.
• Enable users to upload, store, modify, view, manage, or otherwise use photos and workflow records.
• Provide service-related communications and respond to support requests.
• Maintain internal account, project, service, support, audit, acceptance, administrative, and security records.
• Detect, investigate, prevent, or respond to fraud, misuse, unauthorized access, security incidents, technical issues, or legal/compliance concerns.
• Comply with legal obligations, enforce rights, preserve evidence, and establish, exercise, or defend legal claims.

We do not use email addresses, uploaded photos, photo metadata, or user-submitted content for marketing newsletters, promotional communications, targeted advertising, cross-context behavioral advertising, or sale to third parties.

We do not use uploaded photos to train artificial intelligence models unless we provide separate notice and obtain any legally required consent.

We may use de-identified, aggregated, or anonymized information derived from App information for analytics, research, product improvement, security, performance, operational insights, and other lawful internal business purposes. Such information does not identify an individual.

How We Disclose Information

We do not sell personal information. We do not share personal information with advertising networks, data brokers, or marketing platforms. We may disclose limited personal information to the following categories of recipients as reasonably necessary to operate, maintain, secure, support, or improve the App:

• Cloud hosting and infrastructure providers that host or process App data on our behalf.
• Diagnostic, crash reporting, logging, OpenTelemetry, performance monitoring, security, and support providers used to identify, troubleshoot, investigate, and resolve technical, security, or operational issues.
• Authorized internal administrators, support, security, IT, legal, compliance, or operational personnel who need access to support authorized App workflows, account administration, service activity, security, or support requests.
• Legal authorities, regulators, courts, law enforcement, professional advisors, insurers, auditors, or legal counsel where reasonably necessary for legal, compliance, security, insurance, audit, or risk-management purposes.
• Successor entities or transaction parties in connection with an actual or proposed merger, acquisition, financing, restructuring, sale of assets, or similar transaction, subject to appropriate controls.

Where required by applicable law, KORE enters into appropriate contractual arrangements with service providers requiring them to process personal information only for authorized purposes, maintain appropriate safeguards, restrict unauthorized use or disclosure, and return, delete, or protect personal information when services end, subject to legal retention requirements.

Acceptance Records and App Access Logs

To support enforceability, compliance, security, and auditability, KORE may collect and retain acceptance, acknowledgment, permission, and access records. These records may include user ID, account email, organization/account ID, document version, document URL or hash, acceptance method, timestamp, IP address where available, device type, operating system, app version/build, diagnostic application identifier, session identifier, identity provider/session ID where available, and result status such as accepted, declined, revoked, failed, expired, or superseded.

Acceptance records are used to document agreement to the Terms of Use, acknowledgment of this Policy, manage App access, support legal compliance, respond to disputes, investigate security issues, and administer internal deployments.

Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law, internal policy, a governing agreement, litigation hold, regulatory requirement, security investigation, employment requirement, audit need, or other legitimate business purpose.

• Account/user information is retained while the account is active and as needed for administration, support, security, legal compliance, dispute resolution, or business records.
• Uploaded photos, modified photos, and associated metadata are retained as reasonably necessary for App functionality, operational records, internal workflows, legal compliance, dispute resolution, or legitimate business purposes.
• Technical, diagnostic, and OpenTelemetry data is retained for a period reasonably necessary for troubleshooting, security, performance, audit, legal, or operational purposes.
• Acceptance and acknowledgment records may be retained for the life of the user account plus at least six (6) years, or longer where required by law, a governing agreement, litigation hold, dispute, audit, regulatory inquiry, or security investigation.

When information is no longer needed, KORE will delete, anonymize, de-identify, or otherwise handle it in accordance with applicable law and retention practices.

Security

KORE maintains reasonable administrative, technical, physical, and organizational safeguards designed to protect personal information from unauthorized access, disclosure, alteration, loss, misuse, or destruction. These safeguards are designed to be appropriate to the nature of the information, internal-use deployment, the size and scope of operations, and applicable legal requirements.

No method of electronic transmission, storage, or processing is completely secure. KORE cannot guarantee absolute security, but KORE takes reasonable steps designed to protect information. In the event of a security incident affecting personal information, KORE will take steps required under applicable law.

Privacy Rights

Depending on location and applicable law, individuals may have rights regarding personal information. To exercise rights, contact KORE using the information in the “Contact Us” section. KORE may need to verify identity and authority before responding. KORE will respond within the timeframe required by applicable law.

Canadian residents

• Access personal information KORE holds about them.
• Request correction of inaccurate or incomplete personal information.
• Withdraw consent, subject to legal, contractual, employment, operational, and reasonable notice restrictions.
• Ask questions or make complaints about KORE’s privacy practices.

United States residents

Depending on applicable state law, residents may have rights to know, access, correct, delete, obtain a portable copy, opt out of certain processing where applicable, appeal certain decisions, and avoid discrimination or retaliation for exercising privacy rights. Because the App is currently for internal business use only and is not used for sale, targeted advertising, or cross-context behavioral advertising, some statutory rights may not apply to current App practices.

California Privacy Disclosure

During the preceding 12 months, KORE may have collected the following categories of personal information in connection with the App: identifiers; user-submitted content; internet/electronic network, device, app, diagnostic, crash, performance, session, OpenTelemetry, and similar technical information; photo/EXIF/GPS metadata when present; and acceptance, acknowledgment, permission, administrative, support, and access records.

KORE does not sell personal information, share personal information for cross-context behavioral advertising, or use sensitive personal information for purposes requiring limitation rights under California law.

International Data Transfers

Personal information may be transferred to, stored in, or accessed from countries other than the country, province, state, or region where the user is located, including the United States and Canada. Where required by applicable law, KORE uses appropriate safeguards for cross-border transfers, which may include contractual obligations, data processing agreements, and other safeguards requiring service providers to protect personal information and use it only for authorized purposes.

Children’s Privacy

The App is intended for internal business or professional use and is not directed to children. KORE does not knowingly collect personal information from children through the App. If KORE becomes aware that a child has provided personal information, KORE will take reasonable steps to delete it promptly unless retention is required or permitted by law.

Changes to This Policy

KORE may update this Policy from time to time. Updates will be posted within the App, on KORE’s website, through an app-store listing, or through another appropriate notice method. If KORE makes material changes to this Policy or App privacy practices, KORE will provide additional notice, obtain consent where required, and/or require re-acknowledgment through the App where appropriate.

Contact Us

Privacy Officer
KORE Solutions, Inc.
Email: security@kore.solutions
Mailing Address: 555 Oakdale Rd
Toronto, ON M3N 1W7