Athlete House Privacy Policy

Athlete House LLC ("Athlete House," "we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, process, and disclose your information in connection with your access to and use of the Athlete House platform, website (athlete-house.com), mobile application, and related services (collectively, the "Platform"). This Policy applies to all users of the Platform, including athletes, parents or legal guardians, trainers, and visitors. By using the Platform, you agree to the collection and use of information in accordance with this Policy. If you do not agree with the terms of this Privacy Policy, please do not use our Platform.

This Privacy Policy applies to: • Personal information we collect through our website at athlete-house.com • Our mobile application • Our sports training marketplace services • Communications between Athlete House and users • Payment processing activities This Policy does not apply to the practices of third parties that we do not own or control, including our payment processors, background check providers, or other service providers, except as described in this Policy.

We collect several types of information from and about users of our Platform: INFORMATION YOU PROVIDE DIRECTLY Account Registration Information: • Full name, email address, and password • Date of birth (to verify age eligibility and COPPA compliance) • Phone number • Profile photo (optional) • Location/city For Trainers: • Professional credentials and certifications • Biography and sports specialties • Social media profile links • Banking and tax information for payment processing (collected by Stripe, our payment processor) • Consent for background check authorization For Parents/Guardians of Minors: • Parent or guardian name and contact information • Verification information for parental consent • Minor's name and date of birth Payment Information: • Credit card or debit card details (processed and stored by Stripe; we do not store raw card data) • Billing address • Transaction history Communications: • Messages sent through our in-platform messaging system • Customer support inquiries and responses • Feedback and reviews INFORMATION WE COLLECT AUTOMATICALLY When you use our Platform, we automatically collect: • Log data (IP address, browser type, pages visited, date/time stamps) • Device information (device type, operating system, unique device identifiers) • Usage data (features used, searches performed, bookings made) • Cookies and similar tracking technologies (see Section 12) • Location information (city/region level, derived from IP address) INFORMATION FROM THIRD PARTIES • Payment processors (Stripe): Transaction status and fraud signals • Background check providers: Results of background screening for Trainers • Social media platforms: Profile information if you connect social accounts • Analytics providers: Aggregated usage and behavior data

We use the information we collect for the following purposes: PLATFORM OPERATION AND SERVICES • Creating and managing your account • Connecting athletes and trainers on the marketplace • Processing bookings, payments, and refunds • Facilitating in-platform messaging between users • Providing customer support SAFETY AND TRUST • Conducting and reviewing trainer background checks • Verifying trainer credentials and eligibility • Detecting and preventing fraud, abuse, and security incidents • Enforcing our Terms of Service and community standards • Complying with COPPA requirements for users under 13 LEGAL COMPLIANCE • Verifying user age and identity • Obtaining and recording parental consent for minor users • Maintaining records of Terms of Service and Privacy Policy acceptance • Complying with applicable laws, regulations, and legal processes • Responding to subpoenas, court orders, and government requests COMMUNICATIONS • Sending booking confirmations and reminders • Notifying users of account activity and platform updates • Sending service announcements and administrative messages • Responding to inquiries and support requests IMPROVEMENT AND ANALYTICS • Analyzing usage patterns to improve our Platform • Testing new features and functionality • Conducting research and analytics (in aggregated, de-identified form) LEGAL BASIS (FOR USERS IN JURISDICTIONS REQUIRING IT) Our legal bases for processing include: • Performance of a contract (to provide our services) • Legitimate interests (platform safety, fraud prevention, improvement) • Legal obligation (compliance with applicable laws) • Consent (where you have provided it, e.g., marketing communications)

We do not sell your personal information to third parties. We share information only in the following circumstances: WITH OTHER USERS • Trainer profiles (name, bio, sports, location, ratings) are visible to athletes and visitors • Athlete booking details are shared with the booked Trainer • Messages are shared between the sender and recipient(s) WITH SERVICE PROVIDERS We share information with trusted third-party vendors who help us operate the Platform: • Stripe: Payment processing and financial services • Background check providers: Trainer screening (with Trainer consent) • Cloud hosting providers: Data storage and infrastructure • Analytics providers: Platform usage analysis • Email service providers: Transactional and operational communications All service providers are contractually required to use your information only for the purposes we specify and to maintain appropriate security measures. FOR LEGAL REASONS We may disclose information when we believe in good faith that disclosure is necessary to: • Comply with applicable law, regulation, or legal process • Protect the rights, property, or safety of Athlete House, our users, or the public • Prevent or investigate possible wrongdoing in connection with the Platform • Enforce our Terms of Service BUSINESS TRANSFERS If Athlete House is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Platform of any change in ownership or uses of your personal information. WITH YOUR CONSENT We may share your information for other purposes with your explicit consent.

Athlete House uses Stripe, Inc. as our third-party payment processor. When you make or receive payments through the Platform: • Your payment card information is collected directly by Stripe and is not stored on Athlete House servers. • Stripe processes payments on our behalf in accordance with their Privacy Policy (stripe.com/privacy). • Stripe is certified as a PCI-DSS Level 1 Service Provider. For Trainers using Stripe Connect: • Stripe collects additional identity and banking information required by financial regulations (KYC/AML). • This information is subject to Stripe's own privacy practices. • Athlete House receives limited information about your Stripe account status (e.g., whether payouts are enabled). By using our payment features, you agree to Stripe's Terms of Service and Privacy Policy.

Athlete House may facilitate background checks on Trainers through third-party consumer reporting agencies in compliance with the Fair Credit Reporting Act (FCRA). REQUIRED DISCLOSURES AND CONSENT Before conducting a background check, we will: • Provide a clear and conspicuous written disclosure that a background check may be obtained • Obtain the Trainer's written authorization to conduct the check • Provide a copy of "A Summary of Your Rights Under the Fair Credit Reporting Act" ADVERSE ACTION PROCEDURES If we take adverse action (e.g., denying platform access) based in whole or in part on a background check: • We will provide the Trainer with a pre-adverse action notice • Include a copy of the background report • Include a copy of FCRA rights summary • Allow a reasonable time for the Trainer to dispute inaccurate information • Provide a final adverse action notice if we proceed DATA RETENTION Background check results are retained only as long as necessary for the purpose for which they were collected and as required by applicable law. LIMITATIONS Background checks are based on publicly available records and have inherent limitations. A passed background check is not an endorsement or guarantee of a Trainer's suitability or safety.

Athlete House is committed to protecting the privacy of children and complies with the Children's Online Privacy Protection Act (COPPA) and its implementing regulations (16 C.F.R. Part 312). CHILDREN UNDER 13 We do not knowingly collect personal information from children under 13 without verifiable parental consent. For users under 13, we require: • A parent or legal guardian to create the account • Verifiable parental consent before collecting personal information • The parent/guardian to agree to our Terms of Service and this Privacy Policy on behalf of the child VERIFIABLE PARENTAL CONSENT We obtain verifiable parental consent through methods that may include: • A signed electronic consent form • Verification via credit/debit card transaction (not charged) • Email consent confirmation with follow-up verification PARENTAL RIGHTS REGARDING CHILDREN'S DATA Parents and legal guardians may: • Review the personal information we have collected about their child • Request deletion of their child's personal information • Refuse further collection or use of their child's information • Revoke consent at any time (subject to our data retention requirements) To exercise these rights, contact us at AthletehouseTX@gmail.com. USERS AGES 13-17 Minors between 13 and 17 may use the Platform only with parental consent. We require acknowledgment from a parent or guardian that they have reviewed and agreed to these terms on the minor's behalf. DATA MINIMIZATION FOR MINORS We collect only the information necessary to provide the Platform to minor users and implement additional protections for minor accounts.

Depending on your location, you may have certain rights regarding your personal information: RIGHT TO ACCESS You may request a copy of the personal information we hold about you. RIGHT TO CORRECTION You may request that we correct inaccurate or incomplete personal information. RIGHT TO DELETION You may request that we delete your personal information, subject to certain exceptions (e.g., legal obligations, fraud prevention). RIGHT TO PORTABILITY You may request your personal information in a structured, machine-readable format. RIGHT TO OBJECT / OPT OUT You may opt out of certain uses of your information, such as marketing communications. CALIFORNIA RESIDENTS (CCPA/CPRA) If you are a California resident, you have additional rights under the California Consumer Privacy Act: • Right to know about personal information collected, disclosed, or sold • Right to delete personal information • Right to opt-out of the sale or sharing of personal information • Right to non-discrimination for exercising your privacy rights • Right to correct inaccurate personal information • Right to limit use and disclosure of sensitive personal information We do not sell or share personal information for cross-context behavioral advertising. To exercise any of these rights, please contact us at AthletehouseTX@gmail.com. We will respond to verified requests within 45 days.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include: • Encryption of data in transit using TLS/SSL • Encryption of sensitive data at rest • Access controls limiting employee access to personal information • Regular security assessments and monitoring • Incident response procedures However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. If you believe your account has been compromised, please contact us immediately at AthletehouseTX@gmail.com. DATA BREACH NOTIFICATION In the event of a data breach that affects your personal information, we will notify you as required by applicable law, which may include notification via email and/or prominent notice on the Platform.

We retain personal information for as long as necessary to: • Provide the Platform and our services • Fulfill the purposes described in this Privacy Policy • Comply with legal obligations (including tax, accounting, and financial record requirements) • Resolve disputes and enforce our agreements • Protect against fraud and abuse SPECIFIC RETENTION PERIODS • Account information: Retained for the duration of your account and for a reasonable period afterward • Transaction records: Retained for at least 7 years for tax and legal compliance • Background check authorizations: Retained as required by FCRA • Parental consent records: Retained for the duration of the minor's use of the Platform • Legal agreement acceptance records (Terms of Service, Privacy Policy): Retained indefinitely for compliance purposes • Communications and messages: Retained for 3 years after last activity When personal information is no longer needed, we securely delete or anonymize it.

We use cookies and similar tracking technologies to collect and store information about your use of the Platform. TYPES OF COOKIES WE USE Essential Cookies: Necessary for the Platform to function (e.g., session management, authentication). Functional Cookies: Remember your preferences and settings. Analytics Cookies: Help us understand how users interact with our Platform (e.g., Google Analytics). YOUR CHOICES Most web browsers allow you to control cookies through their settings. You can: • Set your browser to refuse all or some browser cookies • Alert you when cookies are being sent Note that disabling cookies may affect the functionality of our Platform. DO NOT TRACK Our Platform does not currently respond to "Do Not Track" signals from browsers.

Our Platform may contain links to third-party websites or services that are not operated by us, including trainer social media profiles and external resources. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services. We strongly advise you to review the Privacy Policy of every site you visit. We are not responsible for the privacy practices of such sites.

Athlete House is based in the United States. If you access our Platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated. By using the Platform, you consent to the transfer of your information to the United States, which may have different data protection rules than those of your country.

We may update this Privacy Policy from time to time. We will notify you of any changes by: • Posting the new Privacy Policy on this page with an updated effective date • Sending an email notification to the address associated with your account • Displaying a prominent notice on the Platform Material changes to this Policy will require you to re-accept the updated Policy before continuing to use the Platform. Your continued use of the Platform after such notification constitutes your acceptance of the revised Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you have any questions about this Privacy Policy or our privacy practices, please contact us: Athlete House LLC Email: AthletehouseTX@gmail.com Website: athlete-house.com For privacy-specific requests (access, deletion, correction), please email us with "PRIVACY REQUEST" in the subject line. For California residents exercising CCPA rights, please email with "CCPA REQUEST" in the subject line.