Privacy Policy
Effective Date: August 19, 2026
Introduction
This Privacy Policy describes Kriya’s practices regarding the collection, use, and disclosure of personal information you may provide us directly, through the website(s) we operate (“Sites”), or in connection other activities and services that link to this Privacy Policy.
How we use your personal information
We have summarized below how Kriya uses your personal information
| Personal information you provide, or which we collect | What it is used for |
| Contact information Name, email address, street address, and telephone number Other personal information Other personal information made available by you as part of your contact with us. | Responding to your inquiries when you contact us by email. Provide you with information you have sought on Kriya’s business and activities. |
| Job applicants – any contact and other personal information you provide to us when applying for a role with Kriya | Consider you for a position with Kriya and, if you are successful, offering you employment. Managing our recruitment processes. |
| Technical information collected automatically IP address, browser or user agent, and the date and time of your visit, together with the pages you view and the website that referred you to us. This information is recorded in standard server access logs and by our analytics service. | Operating, securing, and maintaining our Sites, including detecting and preventing malicious activity. Understanding, in aggregate, how our Sites are used. See the “Server logs and Site security” and “Analytics” sections below. |
| All personal information you provide or which we collect | Enforcing our legal rights; administration, quality, and training; and regulatory requirements. |
Further details on what we use your personal information for
Responding to your inquiries
Where you have made an inquiry or requested information, we will use your personal information to respond to your inquiry. We may also use your personal information to provide you with other information and materials on Kriya’s products, activities, and business (as described above).
Managing your application for a role in Kriya
We collect and use your personal information (including sensitive personal information) when it is necessary to consider and manage your application to work with us. Our job postings and applications are hosted on a separate careers site operated on our behalf by a third-party recruitment provider, at a domain other than kriyatherapeutics.com. That site sets its own cookies and is governed by that provider’s own privacy and cookie policies, which we encourage you to review. Kriya maintains certain responsibilities for the personal information you submit through that site and handles it in accordance with this Privacy Policy.
Server logs and Site security
Our Sites are hosted for us by a third-party hosting provider, which maintains standard server access logs. These logs record the IP address a request comes from, the browser or user agent used, and the date and time of the request. We and our hosting provider use this information only to operate, secure, and troubleshoot the Sites, including to detect and prevent malicious activity. We do not use it to build a profile of you, we do not combine it with other personal information you provide to us, and we do not use it for advertising. Our hosting provider processes this information on our behalf under terms that limit its use of that information to providing hosting services to us. We keep these logs only for as long as they are needed for these operational and security purposes, and in any event no longer than permitted under applicable law.
Analytics
We use a privacy-focused analytics service, provided by a third-party IT vendor, to understand how our Sites are used. That service does not use cookies and does not store a persistent identifier for you. It records information such as the pages viewed, the website that referred you to us, and general device, browser, and country information, and it reports that information to us only in aggregate. We do not use it to identify you, to build a profile of you, or for advertising. The vendor processes this information on our behalf under terms that limit its use of that information to providing the analytics service to us, and we keep analytics information only for as long as it is needed for this purpose and in any event no longer than permitted under applicable law.
Enforcing legal rights
We may use your personal information to protect our legal rights or enforce agreements, including for purposes such as complying with legal obligations, resolving disputes, or defending ourselves in legal claims.
Administration, quality, and training
We will use your personal information to:
- help administer our business (including in accordance with legal or other obligations we must meet);
- manage our relationship with you;
- maintain quality standards; and
- design and deliver internal training.
Regulatory requirements
Kriya is subject to many legal and regulatory requirements in respect of its activities, worldwide. We will use your personal information wherever required so we can fulfil these requirements.
Who else gets your personal information?
Kriya does not disclose your personal information for a business purpose except as set out in this Privacy Policy. Your personal information is never otherwise sold or shared to third parties.
To help us provide our solutions and services, the personal information described above is disclosed to third parties who provide services to us, including:
- information technology and information services providers;
- other third-party service providers; and
- professional and other third-party advisers.
These third parties can only use your personal information to provide their services to us. They must follow our instructions, and they are not permitted to sell or share your personal information.
If you are applying for a role in Kriya we may also provide your information to relevant state or federal authorities, such as the IRS or FDA, where necessary to (a) discharge any legal obligations we have, (b) if required to do so by law, regulation or court order, and © to respond to governmental and/or law enforcement requests.
Your personal information is not disclosed to anyone else.
In certain circumstances, we may be obliged to disclose your personal information to a public authority in response to a lawful request or to respond to legal process. We will only make such disclosure to the extent such request is lawful.
If you do not wish us to disclose your information to a third party or use it for a purpose that is materially different from the purposes for which it was originally collected or subsequently authorized by you, you can inform us by using the mechanisms detailed in “Your rights” below.
How long do we keep your personal information?
We will only keep your personal information for as long as we are legally required, or if longer, for the period the personal information is needed for the purposes we have collected it.
Transfers of personal data
Kriya is located and established in the United States and Kriya’s collection and use of your personal information is subject to federal and state laws of the United States.
Whether directly or through its Sites, Kriya does not offer goods or services to individuals outside the United States. Kriya does not undertake any activities outside the United States save for the conduct of Clinical Trials. If you are a participant in a clinical trial sponsored by Kriya, please see our Privacy Notices page.
No Cookies
The Kriya website (hosted at www.kriyatherapeutics.com) does not set cookies on your device when you visit our Sites, and we do not use cookies to collect information about you or about your use of our Sites. We also do not use web beacons, pixels, session-recording tools, local storage, or similar tracking technologies, and we do not load third-party advertising, social media, or video embeds on our Sites. The only third-party service that runs on our Sites is the cookieless analytics service described under “Analytics” above.
Our Sites contain links to our profiles on third-party platforms (such as LinkedIn and X), links to news articles published by others, and links to and from other websites we do not own or control. These are ordinary hyperlinks: no widgets, share buttons, or scripts from those platforms load on our Sites, and no information is sent to those platforms unless you choose to click through. These websites have their own privacy policies. Those websites are not covered by this Privacy Policy and may set their own cookies or use other tracking technologies when you visit them.
The statements in this section describe kriyatherapeutics.com. Our careers site is hosted on a separate domain by a third-party recruitment platform and may use cookies. See “Managing your application for a role in Kriya” above.
Children’s Privacy
Kriya’s Sites are not intended for anyone under the age of 18. Kriya does not knowingly collect, use, or disclose personal information from persons under the age of 13.
Your rights
Accessing, deleting, rectifying, and moving your personal information
Depending on the country or state laws that apply to Kriya’s collection and use of your personal information, you may have the right to:
- access your personal information and have disclosed to you what personal information we have collected, used, shared or sold about you, and for what purposes;
- object to our processing of your personal information where our collection and use is based on our legitimate interests;
- require us to delete your personal information;
- opt-out of the sale of your personal information;
- rectify any personal information we hold that is incorrect; and/or
- have your personal information transmitted to a third party.
Where applicable, if you want to exercise these rights, please let us know using the contact mechanisms identified below. We may ask you to provide additional information to verify and complete your request. Subject to the rights you have, and to any legal or other requirements, we will complete your request within thirty (30) days.
Withdrawing consent
Wherever you have provided consent for the collection and use of your personal information you may withdraw that consent at any time using the mechanisms informed to you at the time your consent was provided, or by emailing: privacy@kriyatx.com. If you withdraw your consent, we will not be able to further use your personal information and this will affect how we can interact with you.
Security Measures
We have taken appropriate technical and organizational security measures to protect your personal information against unintentional, unauthorized or unlawful destruction, loss, alteration, disclosure, access, and any other unintentional, unauthorized or unlawful forms of processing under applicable law.
Questions and Complaints
When contacting Kriya regarding any issue, please do not include any personal information (other than your contact information) in the subject line or in the content of your message.
You may contact our Privacy Officer with questions or complaints regarding this Privacy Policy and Kriya’s processing of your personal information via email: privacy@kriyatx.com.
Kriya will reply to complaints within thirty (30) calendar days of their receipt and will attempt resolution in accordance with this Privacy Policy.
Our contact details
Kriya Therapeutics, Inc.
1219 Shiloh Glenn Drive
Durham, NC 27703
United States of America
E: privacy@kriyatx.com
Changes to this Privacy Policy
Kriya may amend this Privacy Policy from time to time. We will post the date of the most recent changes and provide previous versions upon request. If we make significant changes, we will provide a more prominent notice (including email notification if appropriate).