Privacy Policy 7/4/2025

1 Scope

This Policy explains how Strivoxx, Inc. (“Strivoxx,” “we,” “our,” “us”) collects, uses and shares personal data when you access the Strivoxx mobile apps (iOS / Android) or web dashboard (together, the “Service”).

2 Information We Collect

Identifiers

• First name, last name, email address and a hashed password you provide at sign-up.

Optional Contact Data

• Mobile phone number, used for two-factor authentication (2FA) and SMS reminders; standard carrier rates apply.

Challenge Data

• Challenge names, descriptions, parameters, activity logs, streaks, comments, reactions and any images you upload.

• These items are visible to other participants in the same Challenge.

Device & Usage Data

• IP address, device identifiers, app version, operating-system details, crash reports, cookies or similar technologies and push-notification tokens.

Payment Information (future feature)

• Billing name, the last four digits of your card and payment tokens, processed by our payment provider—never stored in full by Strivoxx.

Support Communications

• Emails, tickets or other messages you send to our support channels.

Sensitive information notice: Because Challenge Data may reveal fitness or health-related details, we process it only to deliver the Service and with your explicit consent where required (e.g., GDPR Art. 9 (2)(a)).

We do not knowingly collect data from children under 16.

3 How We Use Personal Data

1. To create and maintain your account and deliver core functionality (contractual necessity).
2. To send reminders, updates and motivational messages related to your Challenges (legitimate interest and/or consent).
3. To improve, debug and develop new features, using aggregated analytics (legitimate interest).
4. To detect and prevent fraud, abuse or security incidents (legitimate interest and legal obligation).
5. To process subscription payments when paid plans launch (contractual necessity).
6. To send marketing emails or push notifications only if you opt in (consent).
7. To comply with legal duties, enforce our Terms or protect rights (legal obligation).

4 How We Share Personal Data

• Service Providers – cloud hosting, analytics, email/SMS delivery and payment processors, each bound by confidentiality and data-processing agreements.

• Other Participants – your display name, activity logs and related Challenge Data are shared with members of the same Challenge.

• Legal Authorities – when required by law, court order or to protect rights, safety or property.

• Business Transferees – in connection with a merger, acquisition or sale of all or part of our business.

We never sell your personal information for monetary consideration and do not permit third-party advertising cookies.

5 International Data Transfers

When we transfer data to countries lacking an “adequacy” decision (e.g., data stored on U.S. servers), we rely on Standard Contractual Clauses or other lawful safeguards.

6 Data Retention

• Account-level data remains active for the life of your account.

• Upon account deletion we erase or anonymize personal data within 90 days, except:

– Challenge Data needed for teammates’ historical leaderboards, which we pseudonymize;

– Records we must keep for legal, tax or security reasons.

7 Security Measures

• TLS 1.2 + encryption in transit and AES-256 encryption at rest.

• Role-based access controls and mandatory 2FA for internal admin accounts.

• Regular penetration tests, backups and third-party security audits.

No method is 100 % secure; please report vulnerabilities to security@strivoxx.com.

8 Your Privacy Rights

European Economic Area & United Kingdom (GDPR)

• Access, correction, deletion, restriction, portability, objection and the right to lodge a complaint with a supervisory authority.

California (CPRA)

• Right to know, delete, correct, opt out of sale/share and limit use of sensitive data.

Other U.S. State Laws (VA, CO, CT, UT, TX, OR, IA, FL, DE, etc.)

• Rights comparable to access, deletion, portability and opt-out of targeted advertising or profiling.

To exercise any right, email privacy@strivoxx.com or use the in-app request form. We will verify your identity and respond within the statutory timeframe. We will not discriminate against you for exercising any privacy right.

9 Cookies and Tracking Technologies

Strivoxx uses first-party cookies or local storage for:

• Authentication (keeping you logged in).

• Internal analytics to improve performance and user experience.

You may disable non-essential cookies through the cookie-preferences banner. Where legally required, we honor Global Privacy Control (GPC) signals.

10 Automated Decision-Making & Profiling

Streak calculations and leaderboard rankings are automated, but they do not have significant legal or similarly significant effects. Contact support if you wish to contest a ranking.

11 Third-Party Links

The Service may link to external websites (e.g., instructional videos). We are not responsible for their privacy practices.

12 Changes to This Policy

We will post any material amendments at least 30 days before they take effect and indicate the “Last updated” date.

13 Contact Us

Strivoxx Inc.

Attn: Data Protection Officer

Email: privacy@strivoxx.com