Kinerix

Kinerix Pilot Privacy Policy

Kinerix Pilot Privacy Policy<br>Effective Date: June 10, 2026

1. Introduction

Welcome to the Kinerix platform pilot release ("Kinerix"). This Privacy Policy explains how NextRep Athletics Technologies LLC collects, uses, and protects your information. This policy is specific to our pilot phase and accurately reflects our active engineering, compliance, and data practices.

2. Fitness, Not Medical Service

Kinerix collects fitness, wellness, readiness, assessment, and workout information. Kinerix does not collect medical records, diagnoses, medications, treatment information, injury-history records, or clinical-care data, and is not a medical service. Any legacy medical data schemas within the application architecture are structurally dormant and technically inaccessible.

3. Information We Collect

During this pilot, we collect the following account-keyed information (categorized as Health & Fitness -> Fitness by platform stores):

Identity & Onboarding Data: Account identity, Date of Birth/age band (utilized strictly for age-gating), and guardian relationship data.

Fitness & Activity Data: Movement assessments, anthropometrics, training and workout activity logs, user goals, volunteered fitness concerns, wellness/readiness inputs, and optional user-imported training files.

App Engagement Data: In-app messages/notes, optional avatars or coach videos, and general product-usage telemetry.

Device & System Data: Push notification tokens, optional device-calendar write access (if granted by the user), and optional sensor pairing IDs. IP addresses are captured exclusively as evidence of consent for our COPPA compliance mechanisms.

Payment Data: At this time, all payment and financial transaction capabilities are dormant and inactive. Kinerix does not collect payment information during the pilot.

4. Children's Privacy and COPPA Compliance

Kinerix requires verifiable parental consent (VPC) before collecting any personal information from children under the age of 13. We utilize Kids Web Services (KWS) to administer FTC-approved, high-threshold verification methods. If an account is created for a user under 13, their status is strictly enforced as PENDING, and the application technically prevents the collection, storage, or processing of any child data until the guardian successfully completes the KWS VPC gate. Guardians maintain full rights to withdraw consent and delete their child's data at any time via the in-app parental control settings.

5. Children's Communications and Media Limits

Kinerix limits how children and minor athletes communicate through the service. Minor athletes cannot send free-form messages, upload files or images, participate in peer-to-peer chat, or post public content through the app. Messages shown to minor athletes are limited to platform-authored templates or controlled product messages.

Parents, guardians, coaches, trainers, and other authorized adults may use certain communication features for family, training, supervisory, account, safety, or support purposes. Kinerix may process message content, message metadata, reports, account information, and related records to operate the service, support safety features, respond to user requests, enforce our terms, comply with law, and maintain audit or security records.

Kinerix does not currently allow minor athletes to upload profile photos or other media. Minor athlete avatars are limited to platform-provided options unless Kinerix updates this Policy and the product experience to support a different parent-controlled feature.

Kinerix retains report, safety, audit, account, and communication records as described in this Policy and our data-retention practices. Parent requests to access, export, correct, or delete personal information may be submitted through the privacy request process described in this Policy.

6. Data Retention

We retain your data only for as long as necessary to provide the Kinerix service and fulfill the purposes outlined in this policy.

General Retention: User data is retained for the active life of the account.

Practitioner Exception: If you interact with a coach or practitioner via Kinerix, an asymmetric retention framework applies. When a user closes their account, practitioner-facing records (such as shared notes and historical training logs) may be retained as legally or professionally required by the practitioner, subject to our explicit practitioner-closure disclosure presented in-app.

Compliance Exemption: We reserve the right to retain specific, limited data beyond standard deletion windows strictly when required to comply with statutory legal obligations, as disclosed during the account-closure flow.

7. Data Deletion and Subject Rights

You maintain the right to access, export, or delete your personal data.

Account Deletion: Users aged 18 and older may independently delete their accounts using the in-app deletion settings. Deletions for minor accounts must be mediated and authorized by the connected guardian. Account deletion instructions are also publicly available at our designated web resource.

Access & Export: Where available, users may access a self-service export of certain account data in the app. Requests for broader access, deletion, correction, or full archive review may be submitted through the privacy request process described in this Policy. As we continue to develop automated tooling during this pilot phase, users wishing to request an export of their data or exercise access rights must submit a request to our designated privacy inbox at kinerixathletics@gmail.com. We are committed to transparency regarding these pilot-stage manual processes and will honor all jurisdictional privacy rights accordingly.

## Parent and Guardian Safety Notices

For child accounts, Kinerix may use parent or guardian contact information to send safety, readiness, account, and required-adult-action notices related to the child's account and training activity. These notices may include limited information necessary to identify the child, describe the safety or readiness state, and state the action required. Kinerix uses this information only as needed to support the child's account, safety-related training restrictions, readiness checks, and required parent or guardian actions. Kinerix does not include broader child information in these notices than is reasonably necessary for that purpose.

## Notification Delivery

Certain safety and required-adult-action notices cannot be turned off inside Kinerix and will remain visible in the app. Push notifications and emails are additional delivery methods and may be affected by device settings, notification permissions, Focus or Do Not Disturb settings, network conditions, email-provider filtering, account settings, or other factors outside Kinerix's control. Kinerix does not guarantee delivery of push notifications or emails.

## Youth Movement-Method Authorizations

Kinerix records youth movement-method authorization and consent activity, including who enabled, consented to, or withdrew a feature; the applicable athlete and age band; the time of the action; the consent-language version presented or agreed to; and related feature, safety, eligibility, and withdrawal status. These features use the fitness, readiness, training, assessment, account, roster, and role-permission categories already described in Section 3, together with authorization, consent, withdrawal, copy-version, and audit metadata described here. They are not intended to collect medical diagnoses, treatment records, clinical notes, medical-history records, or protected health information, and users should not submit that information through these features. Status may be visible to the connected coach, trainer, organization, parent/guardian, and athlete according to role and roster relationship. Records are retained per Sections 6–7; withdrawal stops future feature availability, subject to reasonable processing time and retention of safety, compliance, security, dispute-resolution, or audit records.