Information in relation to our SDK providers

Our SingaporeAir and Kris+ applications use the software development kits (“SDKs”) of the following suppliers. During your use of the specific functions of our applications, we may share or disclose your personal information to the following SDK suppliers in order to achieve the following scenarios or service purposes.

SingaporeAir application

Name

Description / Purpose

Personal Information Collected

Permission Required

Privacy Policy Link

1. Iovation

Fraud Detection

  • Device identifier
  • IP address
  • No additional permissions

https://www.transunion.com/privacy/iovation

2. AliPay

AliPay Payment

  • IMEI/IMSI
  • SIM card serial number/MAC Address
  • Android ID
  • Network information
  • Geographic location information
  • Read mobile phone information
  • Read network information

https://opendocs.alipay.com/open/54/01g6qm 

3. Panasonic

In-flight Entertainment Integration

  • Device identifier
  • Device location

https://www.panasonic.aero/privacy-policy/ 

4. Qualtrics

VoC Feedback

  • Name
  • Email address
  • Device identifier
  • No additional permissions

https://www.qualtrics.com/privacy-statement/ 

5. PressReader

E-Library Integration

  • IP address
  • Device locale (language and country)
  • No additional permissions

https://care.pressreader.com/hc/en-us/articles/205818089-Privacy-Policy

6. Quantum Metric

Testing and Troubleshooting

  • Device ID
  • KrisFlyer number
  • Address information
  • Telephone number
  • Passenger name
  • Email address
  • Date of birth
  • Frequent flyer number
  • Passport information 
  • Application activity
  • No additional permissions

https://www.quantummetric.com/legal/privacy-policy

7. Insider

Cross Channel Customer Experience and Marketing

  • KrisFlyer number and Registered customers number in hashed form
  • Device model
  • Carrier (cell phone provider)
  • App version
  • Operating System version
  • Device language
  • Time zone
  • Connection (type)
  • Battery
  • Location
  • Device token
  • Purchased products
  • Clicks on products
  • Gender
  • KrisFlyer tier
  • Location opt-in status
  • Marketing push notification opt-in status
  • Has Google Pay/Apple Pay
  • Last push notification
  • Advertising ID
  • No additional permissions

https://useinsider.com/product-privacy-policy/ 

https://academy.useinsider.com/docs/regarding-app-privacy-details-on-app-store 

8. zDefend (Zimperium Mobile SDK – Runtime Protection)

Fraud & Threat Detection

  • OS version
  • Device model
  • App tampering status
  • Network configuration
  • Indicators of compromise
  • Geolocation
  • Access network state
  • Access Wi-Fi state
  • Detect screen capture and recording
  • Read, manage, and write external storage
  • Read phone state
  • Query all packages
  • Allow arbitrary loads
  • Access geolocation

https://zimperium.com/privacy-policy

9. NuDetect

Fraud & Threat Detection

  • KrisFlyer number (hashed)
  • Email address (hashed)
  • First name (hashed)
  • Last name (hashed)
  • Mobile number (hashed)
  • Date of birth (hashed)
  • Cookies
  • Mobile device identifier
  • Device info: Screen resolution, Build SDK, Model, Battery, Time zone, OS version, Manufacturer
  • SIM card's info: Carrier/Operator, SIM country, Brand
  • Behavioral-based data such as keystroke timing, device accelerometer, scroll position and mouse-location
  • No additional permissions

https://www.mastercard.us/en-us/vision/corp-responsibility/commitment-to-privacy/privacy.html

Kris+ application

Name

Description / Purpose

Personal Information Collected

Permission Required

Privacy Policy Link

1.Firebase

  • Remote Config - push version label for iOS
  • Core - Firebase mandatory
  • Analytics - Event capturing for business metrics
  • Dynamic Links - Deep link support for app
  • Crashlytics - crash info for developers
  • Performance - metrics for app performance    
  • Crashlytics installation UUID
  • Crash traces
  • Device Model, Operating System, Carrier, Locale/Language
  • IP address
  • Firebase installation ID
  • Mobile ad ID
  • App version
  • No additional permissions

https://firebase.google.com/support/privacy

2. Branch IO

Ad Conversion Aggregation Platform (Google ads/Facebook) Currently used for tracking installs/reinstalls

  • Device metadata (screen size, operating system)
  • IP address
  • Identifiers (IDFA, UDID, etc.)
  • Engagement data (clicks, installs, reinstalls)
  • App Tracking Transparency opt-in (IDFA)
  • Internet

https://branch.io/policies/privacy-policy

3. Insider

Marketing (target push notifications and smart recommendations)

  • KrisFlyer number in hashed form
  • Gender
  • KrisFlyer tier
  • Location opt-in status
  • Push notification opt-in status
  • Using E Pay status (has Apple/Google pay)
  • Device language
  • Last push notification
  • Insider SDK version
  • Device model
  • Operating System version
  • UDID
  • First time open
  • Last time open
  • Device token
  • Push notification
  • Advertising ID
  • Carrier
  • App version
  • Location
  • Location
  • Push notifications
  • Internet

https://useinsider.com/product-privacy-policy/