MOBILE APP PRIVACY POLICY

EFFECTIVE DATE:  April 9, 2026

KPH Healthcare Services, Inc., doing business as Kinney Drugs ("Kinney Drugs," "we," "us," or "our"), respects your privacy and is committed to being transparent about how we collect, use, and share Personal Information about you.

This Privacy Policy explains our practices when you interact with us through our online services, including when you:

• Visit our websites;
• Use our mobile applications;
• Participate in our tHRiVe rewards program online;
• Communicate with us through our websites or mobile applications; or
• Receive marketing or promotional communications

(collectively, the "Services").

Some information we collect in connection with our pharmacy and healthcare services is regulated by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and related state laws and qualifies as Protected Health Information ("PHI").All PHI is governed exclusively by our Notice of Privacy Practices, not this Privacy Policy. This Privacy Policy applies only to non-PHI information collected through our online Services. For information about how we handle PHI, please refer to our Notice of Privacy Practices [here].

1. INFORMATION WE COLLECT

We collect Personal Information about you when you use our Services. "Personal Information" means information that identifies you or can reasonably be used to identify you, such as your name, email address, or account information. Some features may be used without providing Personal Information, but certain features, such as creating an account, making a purchase, or contacting us, require it.

 

1. Information You Provide to Us

You may provide information directly to us, including:

• Identifiers and contact information: such as your name, mailing address, email address, telephone number, date of birth, and similar identifiers (including account or loyalty program identifiers);
• Account information and preferences: such as username and password, account settings, communication preferences, and saved items or lists;
• Purchase and transaction information: such as products purchased through our online Services, purchase history, digital coupon use, and order confirmations;
• Payment‑related information: such as payment card details submitted for purchase transactions (processed by payment processors) and related billing information;
• Communications: such as customer support inquiries, emails, text messages, chat transcripts, feedback, reviews, surveys, and other content you provide; and
• Inferences and Preferences: such as shopping patterns and behaviors, preferred products, offers, or content derived from your interactions with our Services, including purchase history, loyalty program activity, website or app usage, and engagement with promotions; and
• Other information you voluntarily provide or that is disclosed by you at the time of collection.

2. Information Automatically Collected  

When you use our websites or mobile applications, we (and our service providers) may automatically collect:

• Device and network information: IP address, device identifiers, browser type and settings, operating system, mobile network information, and language preferences;
• Usage and interaction data: pages viewed, links clicked, time spent, search terms within the Services, referring/exit pages, session timestamps, and diagnostic logs; and
• Location Data: general location, such as city or state, based on your IP address, and, if you grant permission through your device or browser settings, we may also collect your precise geolocation to support location-based features like store finder, curbside/pickup, or other functionality.

 

This information is collected for operational purposes, analytics, security, fraud prevention, and to improve the functionality and performance of our Services. 

 

Cookie and Tracking Technologies: We, our service providers, and other third parties use certain cookie identifiers, pixel tags, SDK identifiers, and similar tracking technologies to provide and secure the Services, remember preferences, understand usage, and support marketing and advertising.

 

• Cookies (and similar technologies).  A cookie is a small text file that a website stores on your device when you visit it. Cookies are used to remember information about your visit, such as your preferences or login status, and can help the website recognize you when you return. They are commonly used to support website functionality, personalize your experience, and enable analytics and advertising features. Cookies and similar technologies help us operate the Services, remember user preferences, maintain security, and understand how the Services are used. You may disable cookies through your browser settings, although doing so may affect certain features or functionality.
• Pixels (and similar technologies). A pixel is a tiny, invisible image or snippet of code embedded on a website or in an email. When you visit a page or open an email containing a pixel, it communicates with a server to record information such as your visit, interactions, or device details. Similar technologies, like SDK identifiers and web beacons, function in much the same way by enabling websites and apps to gather analytics data, monitor user engagement, and support features such as advertising or personalization.

 

We may use pixels or similar technologies to measure the performance and reliability of the Services, understand aggregated usage trends, and support security and fraud prevention. Our Services use retargeting pixels from Google, Meta, and other ad networks.

 

We also use web beacons in certain HTML emails to determine whether recipients have opened those emails and/or clicked on links.

 

• Google Maps. Some portions of our Services implement Google Maps/Earth mapping services, including Google Maps API(s) to embed map data.  Google has its own privacy policy and cookie policy over which we have no control.  Your use of Google Maps/Earth is subject to Google’s [Terms of Use], which incorporates Google’s [Privacy Policy].
• Analytics.  We use Google Analytics to collect and process information about your use of the Platform. Google sets cookies on your browser or device, and then your web browser will automatically send information to Google. Google uses this information to provide us with reports that we use to better understand and measure how users interact with our Platform.
• To learn more about how Google uses data, visit Google’s Privacy Policy and Google’s page on “How Google uses data when you use our partners’ sites or apps.” You may download the Google Analytics Opt-out Browser Add-on for each web browser you use, but this does not prevent the use of other analytics tools. To learn more about Google Analytics cookies, visit the “How Google Uses Cookies” page.

            Interactive Features (Chat, Forms, and Customer Support):

Some parts of our Services may include interactive features such as online chat, chatbots (including AI-enabled features), webforms, or managed customer support tools. When you use these features, we may collect and retain the information you submit, along with session information (e.g., timestamps, device identifiers, and diagnostic data) to provide support, improve quality, and maintain records of the interaction.

If you need assistance involving pharmacy or healthcare services, please use the secure channels identified in our Notice of Privacy Practices or contact the pharmacy directly.

3. Information We Receive from Third Parties 

We may receive Personal Information from third parties, including:

• Service Providers: vendors that provide hosting, IT support, fraud prevention, customer support platforms, data analytics, or marketing services.
• Payment processors: confirmation and limited transaction details associated with payments.
• Advertising and marketing partners: information about ad impressions, clicks, and campaign performance.
• Social media platforms: information associated with your interactions with our pages or content, subject to your platform settings and the platform’s policies.
• Publicly available or commercially available sources: e.g., address verification, fraud prevention, or demographic enrichment where permitted by law.

Please note that the Personal Information we collect is covered by this Privacy Policy, but the information third-party websites or social media platforms collect is subject to their own privacy practices. We encourage you to review the privacy policies of other sites you visit, as they may collect your Personal Information.

2. HOW WE USE YOUR PERSONAL INFORMATION

We use and process your Personal Information for the following business purposes and for any other purposes disclosed to you at the time we collect your Personal Information and/or pursuant to your consent:

1. Provide and Operate the Services

• Process online purchases, returns, exchanges, and customer requests;
• Administer the tHRiVe rewards program and provide associated benefits;
• Maintain and service customer accounts, including authentication and account administration; and
• Provide customer support and respond to inquiries.

2. Communicate With You

• Help you find a Kinney Drugs location near your current location if you use our location services;
• Send service-related communications (e.g., transactional emails, account notifications, security notices);
• Send marketing communications and promotional offers consistent with your preferences and applicable law; and
• Conduct surveys and seek feedback to improve our offerings.

3. Personalize and Improve

• Customize content, offers, and experiences based on your interactions and preferences;
• Analyze usage patterns to improve the Services, user experience, and performance; and
• Develop and improve products and services and conduct business intelligence.

4. Security and Fraud Prevention

• Verify transactions and prevent unauthorized access to accounts;
• Detect, prevent, investigate, and respond to fraud, theft, and unauthorized activity;
• Protect the security and integrity of our systems and customers; and
• Monitor, debug, and repair errors and ensure the Services operate properly.

5. Legal and Compliance

• Comply with applicable legal obligations and respond to lawful requests;
• Enforce our Terms of Use and other agreements and policies; and
• Establish, exercise, or defend legal claims, audits, and investigations.

3. HOW WE SHARE YOUR PERSONAL INFORMATION

We may disclose Personal Information in the following circumstances or when you otherwise consent:

1. Service Providers

We disclose Personal Information to service providers who perform services on our behalf (such as hosting, analytics, payment processing, customer support, marketing communications, security, and fraud prevention). These service providers are contractually obligated to use Personal Information only for the purposes for which it was disclosed and to maintain appropriate security measures to protect your Personal Information.

2. Affiliates

We may disclose Personal Information to our subsidiaries and affiliates for operational, administrative, security, and marketing purposes as permitted by applicable law.

3. Advertising and Marketing Partners

We may disclose Personal Information to third parties that use this information to show you tailored ads based on your interests and online activities. These companies may use tracking technologies, such as cookies and similar tools, to collect information about your interactions with our Services and other websites or apps. This helps deliver personalized advertisements and measure their effectiveness, in accordance with applicable laws and your privacy preferences.

4. Social Media Plug-ins

We may disclose Personal Information in connection with social media plug-ins integrated into our Services, such as Meta, X (formerly Twitter), Instagram, LinkedIn, or other platforms. When you interact with these plug-ins, certain information may be shared with the respective social media provider, subject to their privacy policies. These interactions may allow social media platforms to collect information about your activities on our Services and may result in the disclosure of your Personal Information, as permitted by applicable law. We encourage you to review the privacy policies of the relevant social media providers to understand their information handling practices.

5. Legal, Safety, and Rights Protection

We may disclose Personal Information as necessary or appropriate to: comply with applicable laws, regulations, legal processes, or enforceable governmental requests (including subpoenas, court orders, and warrants); respond to lawful requests; protect our rights, property, and safety, and the rights, property, and safety of our users and the public; prevent fraud; and enforce our terms and policies.

6. Business Transfers

If we engage in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, Personal Information may be disclosed or transferred as part of that transaction, consistent with applicable law.

7. Aggregated or De-Identified Information

We and/or our service providers and other third parties may create aggregated or de-identified information from Personal Information for analytics, reporting, research, operational improvements, and other lawful purposes. Where required by law, we will maintain and use such information in de-identified form and take reasonable steps to prevent re-identification when sharing de-identified information with third parties.

8. With Your Consent or At Your Direction

We may disclose Personal Information when you provide your consent or direct us to share Personal Information with third parties. For example, this may occur when you choose to share content on social media platforms, participate in third-party promotions or offers, authorize integrations with third-party services, or otherwise request that we share your Personal Information.

 

4. LINKS TO OTHER WEBSITES

Our Services may contain links to other websites, services, or mobile applications that are not owned or controlled by Kinney Drugs (collectively, "Third Party Sites"), including social media platforms and other third-party services. We may also link to websites or mobile applications controlled by other KPH Healthcare Services, Inc.-owned companies that operate independently of the Services and maintain their own privacy policies.

This Privacy Policy applies only to Personal Information collected through our Services. We are not responsible for the privacy or data practices of Third-Party Sites. We encourage you to review the privacy policies of any third-party sites you visit. Links to Third Party Sites do not constitute endorsement by Kinney Drugs.

5. INFORMATION SECURITY

We implement commercially reasonable administrative, technical, and physical security measures designed to protect Personal Information from unauthorized access, use, alteration, and disclosure. However, you should assume that no data transmitted over the Internet or stored or maintained by us or our third-party service providers can be 100% secure. Therefore, although we believe the measures implemented by us reduce the likelihood of security problems to a level appropriate to the type of data involved, we do not promise or guarantee, and you should not expect, that your Personal Information or private communications will always remain private or secure. We do not guarantee that your Personal Information will not be misused by third parties. We are not responsible for the circumvention of any privacy settings or security features.

If you believe that your Personal Information has been accessed or acquired by an unauthorized person, promptly Contact Us so that necessary measures can be taken.

6. DATA RETENTION

We will retain your Personal Information for as long as needed to provide you Services, or as permitted or required by law. Retention periods may vary depending on the type of Personal Information and the purposes for which it is used. If you wish to cancel your account or request that we no longer use your Personal Information to provide you Services, please contact us at the address and email in the section entitled “How to Contact Us” below. We will retain and use your Personal Information as necessary to comply with our legal obligations, as permitted by law, to resolve disputes, and to enforce our agreements. In accordance with our routine record keeping, we may delete certain records that contain Personal Information you have submitted to us.

7. HOW WE WILL CONTACT YOU

We, our affiliates, and our service providers may communicate with you by email, telephone, or text message as permitted by applicable law. Where required by law, we will obtain your consent before sending marketing or promotional communications. You may choose how we communicate with you and update your preferences as described in the “Your Choices” section below.

 

8. YOUR CHOICES

1. Email.  We may send you email communications related to your use of the Services, including account notices, program information, and, where permitted by law, promotional messages. You may opt out of marketing or promotional emails at any time by using the “unsubscribe” link included in the email. Even if you opt out of promotional emails, we may continue to send non‑promotional, service‑related emails as permitted by law.
2. Text Messages.  If you have enrolled to receive text messages from us, you may opt out at any time by replying "STOP" to any message. You may also manage your communication preferences through your account settings at any time.
3. Mobile Push Notifications.  If you enable mobile push notifications through your device settings, we may send you push notifications related to the Services. You can turn off mobile push notifications at any time by adjusting the notification settings on your mobile device or by contacting us.
4. Location Choices.  You may be able to control the collection of location information through your device or browser settings. If you choose to disable location services, certain features of the Services, such as store locator or location‑based functionality, may not be available. For assistance with location settings, please contact your device manufacturer or mobile service provider.
5. Cookie Preferences.  You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, or to set preferences for certain types of cookies. You may also be able to manage cookies through our cookie preference tool, if available on our website. Please note that disabling cookies may affect the functionality of certain features of our Services.
6. Online Advertising Choices.  You may be able to limit the collection of information for interest-based advertising purposes by third parties through the following tools:
   1. You may opt-out of tracking and receiving tailored advertisements on your mobile device by some mobile advertising companies and other similar entities by downloading the App Choices app at https://youradchoices.com/.
   2. You may opt-out of receiving permissible targeted advertisements by visiting the Network Advertising Initiative (NAI) website by clicking www.networkadvertising.org/managing/opt_out.asp/.
   3. You may opt out of Google Analytics tracking by installing the Google Analytics opt‑out browser add‑on available at https://tools.google.com/dlpage/gaoptout/.

Please be aware that opting out of interest-based advertisements does not eliminate Kinney Drugs advertisements from your online experience. Instead, it ensures that any ads you receive will not be customized based on your individual interests.  

9. CHILDREN’S INFORMATION

Our online Services are not directed to children under the age of 13, and we do not knowingly collect Personal Information from children under 13 through our websites or mobile applications. If we learn that we have collected Personal Information from a child under 13 through our online Services, we will delete that information.

10. DIFFICULTY ACCESSING OUR PRIVACY POLICY

Individuals with disabilities who are unable to usefully access our Privacy Policy online may contact us to inquire how they can obtain a copy of our policy in another, more easily readable format.

11. CHANGES TO THIS PRIVACY POLICY

We reserve the right to change, modify, or amend this Privacy Policy at any time to reflect changes in our products and service offerings, accommodate new technologies, regulatory requirements, or other purposes.  If we modify our Privacy Policy, we will update the “Effective Date” and such changes will be effective upon posting.  It is your obligation to check our current Privacy Policy for any changes.  Your continued use of our Services following the posting of changes constitutes your acceptance of such changes.

12. HOW TO CONTACT US

If you have any questions about this Privacy Policy or the Personal Information we have collected about you, please contact us at the following:

Contact Us Page

 

or

 

Kinney Drugs

6333 State Route 298

East Syracuse, NY 13057

Attn:  Privacy Officer

 

or

 

Email:  privacyofficer@kphhealthcareservices.com

 

or

 

Call 315-287-3600.