WODBumP® Privacy Policy

This Policy applies to information we process about:

• Athletes — individuals who use the Service through the mobile app or related features, whether independently or in connection with a Merchant;
• Merchants — gyms, coaches, trainers, and other businesses that use WODBumP to operate their businesses; and
• Merchant Staff and other authorized users of a Merchant workspace.

You do not need to be a member of a gym or work with a coach to create an Athlete account or use Athlete features of the Service.

NOREP LLC is a Wyoming limited liability company based in the United States. Our obligations under applicable privacy laws may vary depending on where you are located and how you use the Service.

WODBumP may process information on behalf of Merchants to provide the Service, and may also process certain information independently for purposes such as operating your account, security, fraud prevention, service improvement, communications with you, and legal compliance.

When a Merchant enrolls customers, manages programs, or otherwise uses the Service for its business, that Merchant generally decides how its customer information is collected and used for its own purposes. Where we process that information on the Merchant's behalf, we act as the Merchant's service provider or processor, subject to our agreements with the Merchant (including any applicable Data Processing Agreement) and this Policy.

When you create or use an Athlete account directly with WODBumP, or when we process information for our own platform purposes (such as account administration, billing, security, or product improvement), we determine how that information is used for those purposes as described in this Policy.

Merchants may also have their own privacy policies. If you interact with a Merchant through WODBumP, review that Merchant's notices as well.

We use personal information to:

• Provide, operate, maintain, and improve the Service
• Create and manage accounts, authenticate users, and provide customer support
• Enable Athlete fitness, training, nutrition, messaging, and community features
• If you opt in, apply device health nutrition summaries to your nutrition day so you and (where applicable) your Merchant can see complete daily totals
• Enable Merchant business tools, websites, marketing, and customer management
• Process payments, subscriptions, and payouts through our payment partners
• Provide AI-assisted features and content-safety tools, as described in Section 6
• Publish content to connected social accounts when a Merchant directs us to do so
• Send transactional, account, security, and (where permitted) marketing communications
• Protect security, prevent fraud and abuse, and enforce our Terms
• Comply with law and respond to lawful requests
• Analyze usage to improve reliability and product experience

Where laws such as the GDPR or UK GDPR require a legal basis, we rely on one or more of the following, depending on the activity:

• Contract — to provide the Service you or your Merchant request;
• Consent — where required (for example, certain marketing or non-essential cookies);
• Legitimate interests — such as securing the Service, preventing fraud and abuse, and improving the product, balanced against your rights; and
• Legal obligation — to comply with applicable law.

Where special-category or sensitive information is involved, Merchants and NOREP will rely on an applicable condition under the relevant law for that processing. If you have questions about a Merchant's collection of sensitive information, contact that Merchant.

We use third-party AI service providers to support certain AI-assisted and content-safety features. Depending on the feature, information submitted to or generated through the Service may be processed by these providers to provide the requested functionality, maintain safety, and prevent abuse.

AI-assisted features may help Merchants with business and coaching workflows, and may support certain Athlete features (such as nutrition-related tools). Outputs can be incomplete, inaccurate, or inappropriate. Users remain responsible for reviewing information before relying on it.

We do not use Service content to train our own public AI models. Third-party providers may process data under their own terms and privacy policies.

Some community or messaging content may be screened automatically and may be restricted or flagged for review. Automated actions are not always perfect. You may contact team@wodbump.com if you believe content was handled in error.

We do not sell personal information. We may disclose personal information to service providers and partners that support hosting, payments, authentication, communications, analytics, customer support, AI-assisted features, security, and other functions necessary to operate the Service.

We may also share information:

• With a Merchant when you participate in that Merchant's program or workspace, including nutrition totals you log or authorize from your device's health platform;
• With payment processors to process transactions and Merchant payouts;
• With social platforms when a Merchant connects an account and asks us to publish content;
• With professional advisors, where appropriate;
• Where required by law or to protect rights, safety, and security;
• In connection with a merger, acquisition, financing, or sale of assets; and
• With other parties you direct or authorize.

A current list of material service providers can be requested at team@wodbump.com.

Third parties may have their own privacy policies. We are not responsible for their independent practices.

Payment card and similar payment details are processed by our payment partners. We do not store full payment card numbers or CVV codes. We may retain limited payment-related identifiers needed to operate billing, subscriptions, and Merchant payouts.

For purchases from a Merchant, refunds and ordinary payment disputes are generally handled by that Merchant through the applicable payment account.

We use cookies and similar technologies that are necessary to operate and secure the Service, as well as analytics and diagnostic technologies that help us understand usage and reliability where permitted. We do not operate third-party advertising or retargeting pixels on the Service.

You can manage certain preferences through our cookie banner where shown, and through your browser, device, or account settings. iOS users may receive an App Tracking Transparency prompt where applicable. Uninstalling the app removes locally stored identifiers from your device.

For more detail, see our Cookie Policy.

We retain personal information only as long as reasonably necessary to provide the applicable features, maintain security, comply with legal and accounting obligations, resolve disputes, enforce agreements, and support legitimate business needs such as backups and disaster recovery.

Retention periods vary by category of information and context. For example, account and transaction records may be retained longer than short-lived feature or diagnostic data. Where we process information on a Merchant's behalf, retention may also follow the Merchant's instructions and applicable law.

Deleting an account or disconnecting an integration does not always result in immediate deletion of every copy, including backups retained for a limited period.

We use administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure. You use the Service and transmit information at your own risk.

Merchants and Athletes remain responsible for safeguarding their own account credentials and for their own handling of information they control outside the Service.

If we become aware of a security incident affecting your personal information, we will investigate and, where required by law, notify affected individuals and/or regulators within required timeframes.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information; restrict or object to certain processing; withdraw consent; appeal a denied request; and lodge a complaint with a supervisory authority.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. If that changes, we will update this Policy and provide any required opt-out mechanisms before doing so.

To submit a request, email team@wodbump.com. We may need information reasonably necessary to verify your identity. Authorized agents may submit requests where permitted by law with appropriate documentation. We aim to respond within the timeframes required by applicable law.

If a Merchant controls certain information about you, we may direct you to that Merchant or work with the Merchant as needed to respond.

We are based in the United States and may process information in the United States and other countries where we or our service providers operate. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or elsewhere.

Where required, we use appropriate transfer mechanisms recognized under applicable law (such as Standard Contractual Clauses or a UK International Data Transfer Addendum).

The Service is not directed to children under 13.

Individuals under 13 may not independently create or maintain a WODBumP account. A Merchant may enroll or provide services involving a minor only where legally permitted and where the Merchant has obtained any required parental or guardian consent, waiver, authorization, or supervision. We do not operate a platform-level age-verification or guardian-account system.

If you believe we have collected personal information from a child under 13 outside an authorized Merchant relationship, contact team@wodbump.com and we will take appropriate action, including deletion where warranted.

We may update this Privacy Policy from time to time. We will revise the “Last Updated” date when we do. For material changes that affect how we process personal information, we will provide additional notice where required by law.

Email: team@wodbump.com

Address: NOREP LLC, 30 N Gould St. STE R, Sheridan, WY 82801 USA