The user agrees to automatically provide the information listed below in order to discover new and difficult-to-detect information security threats and their sources, as well as intrusion threats; to promptly take measures to increase the security of the information being stored and processed using the Computer; and to receive information and advertising materials about information security:

Information about agreements accepted in the application:

• Agreement ID
• Agreement version ID
• Flag indicating whether the agreement was accepted
• Time when the flag indicating whether the agreement was accepted was modified

Information for operation of My Kaspersky:

• User’s email address
• User’s password
• Authorization context
• Captcha identifier
• Captcha type
• User’s reply to captcha
• Locale
• One-time password for two-factor authentication
• Unique user identifier on My Kaspersky
• Unique device identifier on My Kaspersky
• Unique temporary device identifier on My Kaspersky
• Region
• Flag indicating whether the user agrees to provide his / her e-mail address to receive personalized marketing offers
• Flag indicating whether Privacy Statement was accepted
• One-time password to connect the application automatically
• Activation code
• Application ID on My Kaspersky
• Application ID
• Application version
• Application locale
• General information about the user's device: unique device identifier on My Kaspersky, device’s network name, device type, operating system type, operating system version
• General information about licenses used in the application: license type, current license status, service information about license, activation error, license expiration date and time, feature array
• Device token type
• Service ID
• Unique ID of user-device binding on My Kaspersky

Information about Wi-Fi networks:

• Wi-Fi network SSID
• SHA256 hash of the MAC address (BSSID) of the Wi-Fi access point
• MD5 hash of the MAC address (BSSID) of the Wi-Fi access point
• Flag indicating whether the device is plugged in
• Flag indicating whether a DNS name is available
• Device type
• Product version
• Product identifier
• Hash of the UID and BSSID
• Hash of the UID and SSID
• Hash of the UID, BSSID, and SSID
• List of available Wi-Fi access points
• Resulting security category of the network in the product
• Resulting publicity category of the network in the product
• DHCP settings
• Signal level
• Hash sum of the local IPv4 address
• Hash sum of the local IPv6 address
• Captive portal URL
• Local time when the connection was started
• Status of VPN client settings
• Connection types supported by the access point

Information about device firmware:

• Operating system
• Device model
• Build ID for displaying to the user
• Firmware fingerprint
• Firmware identifier
• Product/hardware manufacturer
• Full product name
• Build type, for example, "user" or "eng"
• Current development codename or the string "REL" for production builds
• Incremental number of the build
• Flag indicating whether the device is rooted
• Hash of user’s device identifier
• User identifier on My Kaspersky

Information about the application installation event:

• Application identifier in Kaspersky Lab services
• Product locale
• Partner identifier for which the build was released
• Operating system type
• Operating system major version
• Operating system minor version
• Build number
• Device type, system value of device model
• Date and time of application first launch
• Device identifier
• Installation identifier

Information about VPN installation available on the device:

• VPN installation identifier
• VPN license state

Information about the update request:

• Type of the Software
• Version of the Software
• Configuration ID
• Result of the update request
• Error code

Information provided in redirect links:

• Link purpose
• Product locale
• Product group
• Product version
• Operating system
• Device identifier
• Identifier of the service accessed by the product
• User ID
• My Kaspersky infrastructure accessed by the product
• Temporary token
• Flag indicating the type of target link
• License ID
• Partner name

Information to determine Wi-Fi access point reputation:

• Wi-Fi network SSID
• SHA256 hash sum of the MAC address (BSSID) of the Wi-Fi access point
• MD5 hash sum of the MAC address (BSSID) of the Wi-Fi access point
• Authentication type
• Encryption type
• Hash (SHA256) of the device ID and BSSID
• Hash (SHA256) of the device ID and SSID
• Hash (SHA256) of the device ID, SSID, and BSSID
• Signal quality
• Connection types supported by the access point
• List of available Wi-Fi access points
• DHCP and DHCP IPv6 settings
• Captive portal URL
• Array of WPS parameters for WPS-enabled Wi-Fi access points

Information about certificate verification request for an external resource:

• Website URL
• Website IP address
• Website certificate hash
• Certificate type
• Certificate contents

Information about SHA1 hash of user’s e-mail address to check for possible data leaks

The user agrees to automatically provide the information listed below in order to improve software quality:

VPN session parameters:

• VPN session duration (in seconds)
• VPN server virtual location
• Product’s operation mode
• Reason for starting VPN session
• Incoming traffic volume
• Outgoing traffic volume
• Reason for session interruption

Information about the quality of KSN services:

• KSN service identifier
• Statistics for successful packets
• Statistics for unsuccessful packets
• Statistics for packet time
• Statistics for packet number
• Number of connections from cache
• Number of successful connections
• Number of unsuccessful connections
• Number of successful transactions
• Number of unsuccessful transactions
• Time distribution of successful connections
• Time distribution of unsuccessful connections
• Time distribution of successful transactions
• Time distribution of unsuccessful transactions
• Service request identifier
• Number of service requests
• Number of service requests from cache
• Number of requests canceled because of network problems
• Number of requests canceled because of inactive service
• Number of requests canceled because of an invalid path
• Time distribution of successful requests
• Time distribution of canceled requests
• Time distribution of requests that timed out
• Time histogram

To improve software quality and assess the effectiveness of adaptive scenarios, the user agrees to automatically provide the information listed below:

Result of VPN adaptive scenario:

• Adaptive scenario identifier
• Action to perform when adaptive scenario is activated
• User’s action
• VPN server virtual location
• Product’s operation mode
• Trigger for the adaptive scenario
• SHA256 hash of the VPN installation identifier and the trigger

To provide application functionality according to purchased license or subscription, you agree to submit the following data:

Information about purchase receipt:

• SKU
• Date and time of the purchase
• Product package name
• Receipt name
• Purchase token
• Digital signature of the purchase
• Status of the purchase

For all of the purposes listed above, the User agrees to automatically provide the information listed below:

Information about installation:

• Product version
• Device ID
• Installation ID
• Product type

Information about the operating system:

• Operating system type
• Operating system major version
• Operating system minor version
• Build number
• Processor type

To support two-step verification on My Kaspersky, you need to provide a security code sent to your device in an SMS message.

To ensure the security of your My Kaspersky account, you need to provide the CAPTCHA characters.

The Rightholder may use the received data to generate reports on information security risks.
Kaspersky Lab protects any received information as prescribed by law and the applicable rules of Kaspersky Lab. Information is transmitted over encrypted communication channels.

Information received by the VPN Provider directly from the Software and the Rightholder.
The VPN Provider has to verify the legality of access to its services during Your use of the Software. To do so the VPN Provider has to process and receive the following information about the license You have acquired, and the Computer where You have installed the Software:

• Authorization tokens to connect software to provider infrastructure services
• Temporary authorization data to start the VPN session
• Unique pc software installation identifier
• Unique account identifiers to record the VPN traffic in the provider's system
• User device type
• Types of network protocols used for the VPN
• Information about the geographic location of the VPN server

The VPN Provider processes information in accordance with its privacy policy. You can find and read its complete content at https://www.pango.co/privacy/.
To improve application performance, you agree to submit the following data to AppCenter service automatically:

• Information about user: user ID.
• Bundle identifier, bundle version and short bundle version string of your app.
• Device type, CPU architecture, version of the operating system and language.
• Timestamp when the crash happened.
• Information about software: app version and UUID to prevent duplicate crash reports.
• If an exception was thrown, the exception’s plain text class name and message value.
• Low level crash data: instruction pointer, method or function names, signal data, pointer registers and information about loaded binary images.
• Information about cellular service provider: carrier name, country.

Data is sent to AppCenter service over an encrypted channel. Information about how data is processed in AppCenter is published at: https://privacy.microsoft.com/en-US/PrivacyStatement/.
During use of the Software, the following data will be sent to AppsFlyer automatically and on a regular basis in order to achieve the declared purpose:

• User’s computer information: device brand, model, type, factory image name, platform extension, country code, language, currency code; OS SDK version, CPU architecture, CPU ABI architecture, device display, battery charge type, battery level.
• Sensors data: accelerometer, magnetometer; information about the network type connection, service provider, mobile operator.
• Name and version of the installed software, Google install referrer, a flag whether uninstall tracking is enabled, GCM token.
• Date, time and name of the event about which data is sent, time between launches, event parameter, event counter, unique AppsFlyer transaction ID.
• Information about Advertiser ID: Advertiser ID, a flag indicating a way Advertising ID is collected, a flag indicating whether Advertiser ID is enabled.
• Information about the AppsFlyer used in the software: AppsFlyer key, AppsFlyer events API version, presence of other AppsFlyer SDKs, unique AppsFlyer installation ID, AppsFlyer SDK version, a flag indicating whether AppsFlyer was pre-installed on the device, GCD conversion data timing.

Data is forwarded to AppsFlyer over a secure channel. Information about how data is processed in AppsFlyer is published at: https://www.appsflyer.com/privacy-policy/.
During use of the Software, the following data will be sent to BigQuery automatically and on a regular basis in order to achieve the declared purpose:

Information about Software installed on the Computer:

• Software version
• Name of the store where the application was obtained
• Timestamp of the first launch of the software
• Package name and version
• Pseudonymous app-instance identifier
• Application ID in Firebase services
• Application platform and ID

Information about the use of the Software:

• Event type and value

Information about the User’s computer where the Software is installed:

• Computer brand, category, model
• Information about the language (locale) of the operating system

Information about the User:

• Country of residence
• Campaign and name of channel that attracted the User

IDFA or IDFV (in case if it is impossible to extract IDFA)

Data is forwarded to BigQuery over a secure channel. Information about how data is processed in BigQuery is published at: https://cloud.google.com/terms/data-processing-terms/.

To improve software quality and analyze the target audience, you agree to automatically provide the following depersonalized and aggregated information to the Firebase service:

• Information about Software installed on the Computer: instance ID, version, name of the store where the application was obtained, timestamp of the first launch of the Software, app foreground or background state, app package name, a pseudonymous app-instance identifier, network, and the following corresponding information: response codes, payload size in bytes, response times, duration times for automated traces.
• Information about the use of the Software: event type and value.
• Information about the Users’ Computer where the Software is installed: Computer brand, category, model and orientation, RAM and disk size, version and language (locale) of the operating system; information about whether the application was first opened in the last 7 days or more than 7 days ago.
• Carrier, radio/network information, IP address, geography, locale/language, signal strength, jailbroken or rooted status of device, battery level and battery-charging state.
• IDFA, IDFV.
• Information about the User: User’s age category and gender, country of residence, and list of interests.

Data is forwarded to Firebase over a secure channel. Information about how data is processed in Firebase is published at: https://www.firebase.com/terms/privacy-policy.html/.
Data is sent to AppsFlyer and Firebase services over an encrypted channel.
Access to the information and protection of the information are governed by the corresponding terms of use of the AppsFlyer and Firebase services.