Privacy Policy.

1. Information we collect

We may collect the following types of information.

Information you provide directly

• Name
• Email address
• Phone number
• Account login credentials
• Fitness and wellness preferences
• Information submitted through forms, sign-ups, or waitlists

Information collected automatically

• Device information
• IP address
• Browser type
• Usage data
• Cookies and similar tracking technologies

SMS and authentication data

If you provide your phone number, we may send you:

• One-time verification codes (2FA)
• Account-related notifications

We do not collect the content of SMS messages beyond what is necessary to deliver authentication and account-related services.

Information from third-party integration partners

When you connect your Offseason account to a third-party booking or studio management platform, we may receive limited data necessary to facilitate that connection, including:

• Your membership or booking status at a connected studio
• Class attendance or session history relevant to your Offseason activity
• Studio-assigned member ID (used solely for account linking purposes)

We only access data associated with your Offseason-linked account. We do not access, collect, or store data belonging to other members of a connected studio, even if that studio uses the same third-party platform.

2. How we use your information

We use your information to:

• Create and manage your account
• Provide wellness services
• Send authentication codes and security alerts
• Respond to customer inquiries
• Improve our services
• Maintain platform security
• Comply with legal obligations
• Facilitate integrations with third-party studio and booking platforms on your behalf
• Sync relevant fitness or attendance data from connected studios to your Offseason profile

We do not use data obtained through studio integrations for advertising, profiling, or resale.

3. SMS communications

By providing your phone number, you consent to receive SMS messages from Offseason for authentication and account-related purposes.

Message frequency varies. Message and data rates may apply. You may opt out at any time by replying STOP.

For assistance, reply HELP or contact us at alyson@offseasonfitness.com.

We do not sell, rent, or share your phone number with third parties for marketing purposes.

4. Data sharing

We do not sell personal information.

We may share information with:

• Service providers that support our business operations, such as hosting providers, authentication providers, and SMS delivery platforms
• Legal authorities if required by law
• A successor entity in the event of a merger, acquisition, or sale of assets

All service providers are required to safeguard your information.

Studio and platform integrations

Offseason may integrate with third-party studio management platforms to provide a connected wellness experience. When such an integration is active:

• Data flows are limited to information you have authorized through your individual account connection.
• We act as a data recipient, not a data controller, for any data originating from the third-party platform.
• We do not collect, access, or process data belonging to members of a partner studio who are not Offseason members or who have not linked their accounts.
• Partner studios retain ownership of their member data; Offseason receives only a scoped, permission-based view.
• Any data received through integrations is governed by both this Privacy Policy and the relevant third-party platform's own privacy terms.

Wearable and cross-platform data

If you connect a wearable device or third-party fitness app to your Offseason account:

• We receive only the data categories you explicitly authorize during the connection flow.
• This data is associated solely with your account and is not shared with studio partners or other third parties without your consent.
• You may disconnect any integration at any time through your account settings, at which point we will cease collecting new data from that source.

5. Integration partner data practices

Offseason partners with third-party platforms to enhance your wellness experience. The following principles govern all such integrations:

• Data minimization: We request only the minimum data necessary to power the integration feature.
• Scoped access: Our access is limited to data associated with your linked account. We have no visibility into other users of a connected platform.
• No cross-contamination: Data sourced from a partner platform will not be merged with or disclosed to other studio partners without your explicit consent.
• Partner accountability: Third-party platforms we integrate with are required to maintain reasonable data security standards. However, their data practices are governed by their own privacy policies, which we encourage you to review.
• Revocable access: You may revoke any third-party integration at any time. Upon revocation, Offseason will cease pulling new data from that platform. Existing data may be retained per our standard retention policy unless you request deletion.

6. Google Calendar Integration

Offseason uses the Google Calendar API to help you find and book wellness classes that fit your schedule. When you choose to connect your Google Calendar to our app, we request your permission to do the following.

What we access

We request the https://www.googleapis.com/auth/calendar.events scope, which allows us to view and modify events on your Google calendars. Specifically, we access:

• The dates, times, and durations of events on your calendar, along with their titles and locations, in order to understand when you are available or busy.
• Events that our app has previously created on your behalf, so we can update or cancel them if your booking changes.

We do not access events on calendars you have not connected, and we do not access any other Google services (such as Gmail, Drive, or Contacts).

How we use this data

We use your Google Calendar data solely to:

• Identify times when you are available, so we can recommend wellness classes that fit your schedule.
• Add classes you book through our app to your Google Calendar, including the studio name, class name, class time, and class location.
• Update or remove those entries if you reschedule or cancel a booking through our app.

We do not use your calendar data for advertising, profiling, training machine learning models, or any purpose beyond the functionality described above.

How we store and protect this data

We access your calendar data through Google's API in real time wherever possible and minimize what we store. Any calendar information we retain is encrypted in transit and at rest, and is accessible only to authorized personnel for the purpose of operating and improving the booking features described above. We do not sell your calendar data, and we do not share it with third parties except as required to provide our service (for example, with our cloud infrastructure providers under contractual data protection obligations) or as required by law.

How you can control this data

You can disconnect Offseason from your Google Calendar at any time by:

• Revoking access from within the app's settings, or
• Visiting your Google Account at https://myaccount.google.com/permissions and removing Offseason from your list of connected apps.

Disconnecting will stop us from accessing your calendar going forward. You may also request deletion of any calendar data we have retained by contacting us at support@offseasonwellness.com.

Limited Use disclosure

Offseason's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Data security

We implement reasonable technical and organizational measures to protect your personal information, including encryption and access controls.

However, no method of transmission over the Internet or electronic storage is completely secure.

8. Data retention

We retain personal information only as long as necessary to:

• Provide our services
• Maintain account functionality
• Comply with legal obligations
• Resolve disputes and enforce agreements

9. Your rights

Depending on your location, including California, you may have rights to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your data
• Opt out of certain data uses

To exercise these rights, contact us at privacy@offseason.com.

10. Children's privacy

Offseason is not intended for individuals under 13 years of age. We do not knowingly collect personal information from children under 13.

11. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised Effective Date.

12. Contact information

Offseason, Inc.
Email: alyson@offseasonwellness.com
Website: www.offseasonwellness.com