Privacy Policy - KAR App
Effective date: February 19, 2026
Company: KAR Holdings Ltd.
Contact: humzaaziz1705@gmail.com
Overview
karApp is an internal application designed exclusively for authorized KAR Group managers to submit and manage gas/fuel price information. All users are employees who authenticate using their existing KAR Group credentials.
Important: karApp operates with a zero-data-transfer policy. No personal information is uploaded to external servers or stored beyond what is necessary for the app’s core functionality.
Authentication
- Users authenticate using their existing KAR Group employee accounts
- These credentials are already established through KAR Group’s other company software systems
- Authentication is handled securely between the user’s device and KAR Group’s backend servers
- Session tokens are generated to maintain secure, authorized access to the app
Information We Collect
karApp collects minimal information necessary to operate:
1) Authentication Information
- Employee username and authentication token (used for API authorization)
- These are generated during login using your existing KAR Group account credentials
2) Operational Data
- Gas/fuel price information you view and retrieve
- Operational targets and performance data
- C-Store sales data
- Price survey data you submit
All data collected is necessary only for app functionality - no extraneous personal data is transmitted.
3) Technical Information
- Device/app identifiers necessary to maintain secure sessions
- Request timestamps for security and logging purposes
Data Collection Principles
karApp adheres to a zero-data-transfer policy:
- No personal data is uploaded beyond what is necessary for app functionality
- No location data, device information, or analytics are collected
- No data is sold, rented, or shared with third parties outside KAR Group
How We Use Information
Information is used solely for:
- Authenticating users with their existing KAR Group credentials
- Delivering core app functionality (price surveys, data retrieval)
- Retrieving authorized business data (sales, volumes, targets)
- Maintaining system security and preventing unauthorized access
- Complying with legal and regulatory requirements
Data Storage and Processing
- All data is processed and stored on KAR Group’s internal backend servers only
- No third-party cloud providers or external services access user data
- Data remains within KAR Group’s secure infrastructure
Information Sharing
We do not share information outside of KAR Group:
- Data is accessible only to authorized KAR Group personnel and departments
- No data is shared with external service providers, contractors, or third parties
- No data is sold or rented
- No data is used for marketing or advertising purposes
Data Retention
Information is retained only as long as necessary:
- Authentication tokens: Retained during active sessions, cleared upon logout
- Price survey submissions: Retained per KAR Group’s business records retention policy
- Server logs: Retained for security and troubleshooting purposes
- Account information: Retained during employment and per company policy after termination
Your Rights and Choices
As an authorized KAR Group employee, you have the right to:
- Access: Request access to your data by contacting your administrator
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your data, subject to legal retention requirements
- Contact: Submit requests to humzaaziz1705@gmail.com
Security
karApp implements the following security measures:
- Secure Authentication: Uses established KAR Group credentials and session tokens
- Encrypted Communication: All data transmission uses HTTPS/TLS encryption
- Access Controls: Role-based permissions ensure users only access authorized data
- Secure Backend: Operates exclusively on KAR Group’s internal infrastructure
Children’s Privacy
karApp is intended exclusively for authorized KAR Group employees and is not directed to individuals under 13. We do not knowingly provide access to children.
Data Breach Notification
In the event of a data breach affecting personal information, KAR Group will notify affected individuals in accordance with applicable legal requirements and company policy.
Limitation of External Data Transfer
karApp does not transfer user data to:
- External cloud providers
- Third-party analytics services
- Marketing or advertising platforms
- Any service outside of KAR Group’s infrastructure
All data remains within KAR Group’s secure, internal systems.
Changes to This Policy
We may update this privacy policy at any time. We will update the effective date above and notify users of material changes via email or in-app notification.
Contact Us
For privacy questions, concerns, or requests:
- Email: humzaaziz1705@gmail.com
- Contact: Humza Aziz
Last Updated: February 19, 2026