PRIVACY POLICY.

Effective Date: 19 October 2026 Last Updated: 19 October 2026 Website: https://flycarcoin.com Data Controller / Data Fiduciary: FlyCar Coin Team Privacy Contact: [email protected] Grievance Contact: [email protected]

1. Introduction

FlyCar Coin ("FlyCar Coin," "we," "us," or "our") respects the privacy of individuals who visit our official Website and interact with its available features.

This Privacy Policy describes how we collect, use, store, disclose, protect and manage personal information in connection with the FlyCar Coin Website.

It also explains the rights available to individuals under applicable privacy and data-protection laws.

Our approach is guided by transparency, purpose limitation, data minimization, security and responsible information management.

This Privacy Policy applies to personal information processed by or on behalf of the Website operator.

It does not automatically govern the independent processing activities of social-media platforms, cryptocurrency wallets, blockchain networks, exchanges, launchpads or other third parties.

2. Scope

This Privacy Policy may apply when you:

• Visit or browse the Website.
• View images, announcements or other content.
• Contact the Project through an available form or email address.
• Voluntarily subscribe to updates, if offered.
• Interact with Website preferences.
• Use any future community-submission functionality.
• Access Website links directing you to external services.
• Interact with official Project communications in ways that cause us to receive personal information.

The Website's precise data practices depend on which features and services are enabled.

We will not treat proposed future features as currently operational unless they have actually been implemented.

3. Personal Information We May Collect

3.1 Information You Voluntarily Provide

Depending on available Website features, you may provide:

• Name or display name.
• Email address.
• Contact details.
• Message content.
• Voluntary community feedback.
• Support inquiries.
• Submitted media or creative content.
• Marketing preferences.

We do not require visitors to submit information that is unnecessary for the feature they are using.

3.2 Technical and Usage Information

When you access the Website, certain technical information may be processed by our hosting provider, security systems or other enabled services.

This may include:

• IP address.
• Browser type and version.
• Device type.
• Operating system.
• Access date and time.
• Requested pages.
• Referring website.
• Technical error messages.
• Security-related request information.
• Cookie or session identifiers, where used.

Technical information may constitute personal data when it identifies or can reasonably be linked to an individual.

3.3 Analytics Information

If analytics technology is enabled, we may process information such as:

• Page visits.
• Aggregate visitor counts.
• Content interactions.
• Navigation paths.
• Device categories.
• Approximate geographic region.
• Website performance measurements.
• Referral sources.

We will identify relevant analytics providers and consent requirements in our published cookie information.

We will not represent analytics as anonymous when the underlying information can identify or single out a visitor.

3.4 Blockchain Wallet Information

The current Website may provide token-related information without requiring wallet connection.

If wallet-connect functionality is introduced in the future, this Privacy Policy must be updated before deployment.

Relevant information may then include:

• Public wallet address.
• Connected blockchain network.
• Public transaction references.
• Wallet connection status.
• Public blockchain activity directly necessary for the feature.

A public wallet address may constitute personal information when it can be associated with an identifiable individual.

We do not require your private key or recovery phrase for ordinary Website access.

You should never disclose seed phrases or private keys through Website forms or community messages.

4. Information We Do Not Intentionally Request

For ordinary browsing and community interaction, we do not intentionally request:

• Cryptocurrency private keys.
• Wallet recovery phrases.
• Banking passwords.
• Government identification numbers.
• Payment card security codes.
• Sensitive financial credentials.
• Unnecessary medical information.
• Other unnecessary sensitive personal details.

Do not send such information to our general contact channels.

If an authorized future feature legitimately requires additional categories of information, we will provide specific disclosures and appropriate protections before collecting them.

5. Purposes of Processing

We may process personal information to:

1. Operate and maintain the Website.
2. Deliver requested Website features.
3. Respond to visitor inquiries.
4. Manage voluntary subscriptions.
5. Publish authorized community submissions.
6. Improve usability and performance.
7. Detect fraudulent or harmful activity.
8. Prevent unauthorized access.
9. Maintain operational and security logs.
10. Investigate technical incidents.
11. Meet applicable legal obligations.
12. Establish, exercise or defend legal claims.
13. Deliver optional marketing communications where permitted.

We will not use personal information for materially incompatible purposes without the necessary legal basis or consent.

6. Legal Basis for Processing

The legal basis for processing depends on the applicable jurisdiction and the specific activity.

Where the EU or UK GDPR applies, potential legal bases may include:

• Consent.
• Performance of a contract.
• Compliance with legal obligations.
• Legitimate interests, where applicable and not overridden by individual rights.

We will identify the appropriate basis for each relevant processing activity rather than treating every basis as interchangeable.

Where India's Digital Personal Data Protection framework applies, processing will be conducted pursuant to applicable consent requirements or another basis permitted by the law.

Consent may be withdrawn through the method provided for the applicable processing activity, subject to lawful exceptions.

Withdrawal of consent does not automatically invalidate processing lawfully undertaken before the withdrawal.

7. Cookies and Similar Technologies

The Website may use cookies or similar technologies for legitimate functions.

7.1 Essential Cookies

Essential technologies may support:

• Security.
• Session integrity.
• Administrative authentication.
• Fraud prevention.
• Basic Website operations.
• Visitor preference persistence.

These technologies are used only as necessary for their stated functions and subject to applicable law.

7.2 Analytics Cookies

If enabled, analytics technologies may help us understand Website performance and visitor interactions.

Where applicable law requires consent for analytics cookies, they will not be activated before valid consent has been obtained.

7.3 Marketing and Third-Party Cookies

The Website may link to third-party social-media platforms.

Links alone do not necessarily result in third-party tracking on the Website.

If embedded media, social widgets or advertising technologies are introduced, the relevant processing will be disclosed before deployment.

Where required, users will be able to accept, reject or change non-essential cookie choices.

7.4 Cookie Controls

Visitors may manage supported cookie choices through the Website's consent interface, if one is required and implemented.

Browser settings may also allow cookies to be restricted or deleted.

Disabling essential cookies may affect functions that depend on them.

A detailed cookie inventory should identify the actual technology, provider, purpose, retention and consent category before publication.

8. Third-Party Service Providers

We may use external service providers for functions such as:

• Website hosting.
• Content delivery.
• Image storage.
• Database hosting.
• Security monitoring.
• Email delivery.
• Analytics.
• Error reporting.
• Technical maintenance.

Only providers actually used by the deployed Website should be listed in the published provider inventory.

We seek to limit service-provider access to information reasonably necessary for their tasks.

Where required, we will establish appropriate contractual, confidentiality and data-protection arrangements.

A service provider's involvement does not remove our responsibilities under applicable law.

9. Social-Media Platforms

FlyCar Coin may maintain official accounts on platforms including X, Telegram, Discord and other services.

If you access those platforms through our Website, your interactions with them may be governed by their respective privacy policies.

We do not automatically receive all information associated with your account.

We may receive information that you voluntarily share, publicly submit, or that the platform lawfully makes available to us through configured functionality.

We are not responsible for privacy practices independently determined by third-party platforms.

10. Public Blockchain Transparency

Blockchain networks may permanently store public transaction information.

Depending on the network, public information may include wallet addresses, transaction hashes, token transfers, smart-contract interactions and timestamps.

Blockchain data may remain publicly accessible after a user stops interacting with a particular website.

We generally cannot remove or alter information independently recorded on decentralized blockchain networks.

Where we control an off-chain record linking an identifiable person to blockchain activity, applicable privacy rights may apply to that off-chain record.

Requests involving blockchain data will be evaluated based on the information we actually control and applicable law.

11. Information Sharing and Disclosure

We do not sell personal information to advertisers as part of the currently intended Website operating model.

We may disclose information when reasonably necessary to:

• Authorized service providers.
• Infrastructure or security vendors.
• Professional advisers under appropriate confidentiality obligations.
• Competent public authorities when legally required.
• Investigators or authorities responding to legitimate legal processes.
• A successor operator in a lawful organizational restructuring, with required safeguards and notice.

We will not disclose more information than reasonably necessary for the applicable purpose.

We do not assume that publicly visible blockchain information is private or confidential.

Any materially different data-sharing activity must be disclosed and lawfully implemented before activation.

12. International Data Transfers

Our hosting, storage or technical service providers may operate across different countries.

Where personal information is transferred internationally, we will assess applicable legal requirements and adopt necessary safeguards.

When relevant, these may include contractual protections, approved transfer mechanisms or other safeguards required by law.

The availability of a service worldwide does not mean every international transfer is automatically permitted.

We will identify the actual hosting and processing locations before publication.

13. Data Security

We aim to implement reasonable technical and organizational measures proportionate to the information processed.

Such measures may include:

• Encrypted transmission.
• Access controls.
• Secure administrative authentication.
• Limited access privileges.
• Software security updates.
• Restricted infrastructure permissions.
• Logging and monitoring.
• Backups.
• Security incident investigation.
• Appropriate vendor security assessments.

No internet-connected system can be guaranteed completely secure.

Visitors should use trusted devices, verify official domains and remain alert to phishing attempts.

Any public statement about a particular security certification, encryption standard or audit must reflect the controls actually implemented and verified.

14. Data Retention

We will retain personal information only for as long as reasonably necessary for its disclosed purposes or required by applicable law.

Retention periods may differ by category.

For example:

• Contact inquiries may be retained until resolution and for an appropriate documented follow-up period.
• Voluntary marketing subscriptions may remain active until withdrawal, subject to necessary suppression records.
• Security logs may be retained according to documented security and legal requirements.
• Administrative audit records may be retained for accountability and incident investigation.
• Cookies may expire according to their configured durations.

Information no longer needed should be deleted, anonymized or otherwise lawfully disposed of, subject to legitimate exceptions.

Backups may require controlled deletion cycles.

15. Children's Privacy

The Website is not intended to facilitate token-related participation by minors.

Token-related interactive features are intended for persons aged 18 or older, or such higher age as applicable law requires.

We do not knowingly seek personal information from children for marketing or token-related activities.

If we become aware that personal information has been collected contrary to applicable requirements, we will take appropriate steps to address it.

Where applicable law imposes special requirements concerning children's personal information, those requirements will take precedence.

Parents or guardians may contact us regarding suspected collection involving a child.

16. Your Privacy Rights

Depending on your location and applicable law, you may have rights to:

• Obtain information about our processing activities.
• Request access to personal information.
• Request correction or completion.
• Request erasure where legally available.
• Withdraw consent.
• Object to certain processing.
• Restrict certain processing.
• Receive portable data where applicable.
• Lodge complaints with an appropriate regulator.
• Exercise additional rights provided by applicable law.

These rights may be subject to lawful conditions, exceptions and verification requirements.

We will not charge prohibited fees or impose unnecessary barriers to valid requests.

17. Privacy Requests

To submit a privacy request, contact:

Privacy Email: [email protected]

Your request should identify the type of privacy assistance sought.

We may request information reasonably necessary to confirm identity and prevent unauthorized disclosure.

We will respond within timelines required by applicable law.

If we cannot fulfill a request, we will provide an appropriate explanation where legally required.

18. Marketing Communications

If FlyCar Coin offers optional email updates, visitors should be given clear information about what they are subscribing to.

Where necessary, prior consent will be obtained.

Marketing communications will include an unsubscribe mechanism or equivalent method where required.

Unsubscribing from optional marketing will not necessarily prevent essential legal, security or service communications relating to an ongoing relationship.

We will not purchase and indiscriminately import contact lists without an appropriate lawful basis.

19. Automated Decision-Making and Profiling

The planned Website does not require solely automated decisions producing legal or similarly significant effects on ordinary visitors.

If such functionality is introduced, we will assess the relevant legal requirements and update this Policy.

Standard Website analytics or content-personalization functionality must not be represented as advanced automated decision-making without examining its actual operation.

20. Data Breaches and Security Incidents

If a personal-data incident occurs, we will investigate and respond in accordance with applicable law.

Where required, we will notify competent authorities and affected individuals within applicable timeframes.

The nature and timing of notification depend on the relevant legal regime, effective statutory provisions and incident circumstances.

We will not promise a universal notification deadline that conflicts with specific legal obligations.

21. External Websites

The Website may link to independent third-party websites.

We do not control their collection, storage or use of personal information.

Visitors should review the policies of any external service before providing personal information or authorizing a blockchain transaction.

22. Changes to This Privacy Policy

We may update this Privacy Policy when:

• Website functionality changes.
• New service providers are introduced.
• Personal-data practices change.
• Legal obligations change.
• Additional blockchain features are enabled.
• New security or retention arrangements are introduced.

The updated policy will display its effective date.

Where required, we will provide additional notice or obtain renewed consent.

23. Applicable Law and Regulatory Rights

This Policy operates subject to applicable data-protection legislation.

Depending on the facts and jurisdiction, relevant laws may include India's Digital Personal Data Protection Act and associated rules, the GDPR, or other applicable privacy frameworks.

References to these laws do not represent an assertion that every law necessarily applies to every visitor or every processing activity.

Data-subject and regulatory rights remain available where mandated by law.

24. Privacy Contact and Grievance Redressal

Project: FlyCar Coin Data Controller / Data Fiduciary: FlyCar Coin Team Privacy Contact: [email protected] Grievance Contact: [email protected] Official Website: https://flycarcoin.com

We encourage privacy concerns to be submitted through official Project channels.

We will handle complaints in accordance with the procedures and timelines required by applicable law.

25. Privacy Commitment

FlyCar Coin's goal is to build a fun and engaging community without requiring unnecessary collection of personal information.

Visitors should be able to enjoy publicly available artwork, memes and announcements without being required to disclose wallet credentials, sensitive financial information or unnecessary personal details.

We will seek to keep privacy practices understandable, proportionate and transparent as the Project develops.