COACHSMART – LIT
PRIVACY POLICY
Effective Date: 06/03/26

1. INTRODUCTION AND SCOPE
    a. GOLD Sports Training LLC, doing business as CoachSmart – LIT (“CoachSmartApp,” “Company,”
“we,” “us,” or “our”), is committed to protecting and respecting the privacy of all individuals who
interact with our website located at coachsmartapp.com (the “Website”), our mobile application
(the “App”), and (collectively, the “Platform”).
    b. CoachSmart – LIT is a sports performance, communication, and athlete development platform designed to empower coaches, athletes, teams, and families through tools and services that facilitate team communication, scheduling, goal setting, mental performance training, athlete progress tracking,
performance analytics, and access to the LIT Laser movement training system and related training
technologies.
    c. This Privacy Policy explains how CoachSmart – LIT collects, uses, stores, discloses, and protects
personal information obtained through the Platform. By accessing, registering for, downloading, or
otherwise using the Platform in any manner, you acknowledge that you have read, understood, and
agree to the collection, use, disclosure, and processing practices described in this Privacy Policy.
    d. If you do not agree with the terms of this Privacy Policy, you must immediately discontinue use of the Platform and refrain from accessing any services offered by CoachSmart – LIT.
    e. This Privacy Policy applies to all users and visitors of the Platform, including, without limitation,
coaches, athletes, trainers, parents or legal guardians of minor athletes, team administrators,
organisations, and any other individuals who access or interact with the Platform or our services.

2. INFORMATION WE COLLECT:
    a. Personal Information: We collect the following categories of personal information from you when you register for an account, use the Platform, or otherwise interact with us:
        i. Full name, display name, and profile information
        ii. Email address and telephone number
        iii. Date of birth and age (used to verify eligibility and apply minor-specific protections)                                  iv. Username, password (stored in hashed/encrypted form), and account credentials                                      v. User role (coach, athlete, or parent/guardian)
        vi. Team affiliation, sport type, position, and skill level
        vii. Performance goals, training notes, mental performance journal entries, and schedule data                        viii. User-generated content, including messages, images, videos, and comments uploaded to the Platform
    b. Payment Information: If you subscribe to a paid plan or make purchases through the Platform, payment processing is handled exclusively by third-party payment processors. We do not directly
collect, store, or process your full payment card number, CVV/CVC codes, or bank account details. The
following limited billing information may be retained by us for accounting and fraud prevention
purposes:
        i. Cardholder name and billing address
        ii. Last four digits of the payment card and card type
        iii. Transaction ID, subscription plan details, billing cycle, and payment status                                                    iv. Payment processor tokens and references — All payment transactions are encrypted and subject to the applicable payment processor’s privacy policy and PCI DSS compliance obligations. You are encouraged to review the privacy policy of our payment processor before submitting payment information.
     c. Device Information When you access the Platform through a web browser or mobile device, we automatically collect the following device-related information:
         i. IP address and approximate geolocation (city/region level)
         ii. Device type, model, manufacturer, and operating system version
         iii. Browser type, version, language settings, and time zone
         iv. Mobile device identifiers (e.g., IDFA, GAID) where applicable and permitted                                                 v. Screen resolution, installed fonts, and browser plug-ins (for analytics and security purposes)
         vi. Network information, including ISP and connection type
    d. Usage Data: We automatically collect information about how you interact with the Platform, including:
         i. Pages and screens accessed, features used, and actions taken within the Platform                                       ii. Session duration, frequency of visits, and navigation pathways
         iii. Click-through rates, search queries within the Platform, and feature engagement metrics                         iv. Error logs, crash reports, and diagnostic data
         v. Referral URLs and the source through which you arrived at the Platform                                                         vi. Communications within the Platform, including team messaging activity (metadata only)
    e. Cookies and Tracking Technologies — We use cookies, web beacons, pixel tags, local storage objects, and similar tracking technologies to collect information about your use of the Platform. By continuing to use the Platform without adjusting your browser settings, you consent to our use of cookies in accordance with this Policy. We use the following categories of cookies:
         i. Strictly Necessary Cookies: Essential for the Platform to function correctly (e.g., authentication,
session management, security). These cannot be disabled.
         ii. Performance and Analytics Cookies: Collect anonymised information about how visitors use the
Platform to help us improve its performance and functionality.
         iii. Functional Cookies: Allow the Platform to remember your preferences and personalise your
experience.
         iv. Targeting and Advertising Cookies: Used to deliver relevant advertisements and track marketing
campaign performance.

3. HOW INFORMATION IS COLLECTED
     a. Information You Provide Directly — We collect personal information that you voluntarily provide when you: create an account; complete your athlete or coach profile; subscribe to our newsletter or marketing communications; enter payment information for a subscription; submit support requests or contact forms; post messages, goals, performance logs, or other content to the Platform; respond to surveys or promotional communications; or download or register for the App.
    b. Information Collected Automatically — When you visit the Website or use the App, our servers and third-party service providers automatically collect Usage Data and Device Information through the use of log files, cookies, and tracking technologies. This data is collected regardless of whether you are logged in to an account.                                                                                                                                                                     c. Information from Third Parties — We may receive personal information about you from the following third-party sources:
          i. Social media platforms (e.g., Instagram, LinkedIn, X/Twitter, YouTube) if you connect your account or interact with our social media pages
          ii. Analytics and advertising partners who provide aggregate or pseudonymised insights about user
behaviour
          iii. Payment processors who return transaction confirmation data
          iv. Coaches or team administrators who add athletes or parents to a team within the Platform
          v. Parents or legal guardians who create accounts on behalf of minor athletes

4. HOW WE USE INFORMATION
We use your personal information to:
      a. Create and manage your account and provide Platform features, including communication tools,
performance tracking, schedules, resources, and the LIT Laser system
      b. Process payments, subscriptions, invoices, and receipts
      c. Facilitate communication between coaches, athletes, and families
      d. Send account, support, marketing, and promotional communications (where permitted by law) e.
Improve, analyse, and develop the Platform and its features
      f. Generate anonymised and aggregated analytics
      g. Detect fraud, maintain security, enforce our Terms, and comply with legal obligations
      h. Deliver personalised content, recommendations, and advertising (with consent where required)
            i. We will not use your personal information for materially different purposes without providing notice and obtaining consent where required.

5. Legal Basis for Processing (GDPR)
If you are located in the EEA or the United Kingdom, we process your personal data only where we have
a valid legal basis under applicable data protection laws, including the GDPR and UK GDPR. These legal
bases may include:
     a. Performance of a contract to provide and operate the Platform
     b. Your consent, including for marketing communications and certain cookies
     c. Our legitimate business interests, such as improving security, analytics, and Platform functionality
     d. Compliance with legal obligations
     e. Protection of vital interests in emergency or safeguarding situations

Where processing is based on consent, you may withdraw your consent at any time by contacting
us at info@coachsmartapp.com

6. WHO WE SHARE YOUR PERSONAL INFORMATION WITH
We do not sell or rent your personal information. We may share information only in the following
situations:
     a. Within Teams or Organisations: Information such as names, roles, performance data, and messages
may be visible to authorised coaches, athletes, parents, and team members.                                                           b. Service Providers: We share information with trusted third-party providers that help operate the Platform, including hosting, payment processing, analytics, communications, customer support, and security services, under strict confidentiality obligations.                                                                                             c. Business Transfers: Your information may be transferred during a merger, acquisition, restructuring, or sale of assets. We will notify you of any material changes affecting your data.                                                   d. Legal and Safety Reasons: We may disclose information where required by law or where necessary to protect our rights, users, or the public, or to prevent fraud or harm.                                                                       e. With Your Consent: We may share information with third parties where you have given explicit consent. You may withdraw consent at any time, subject to applicable law.

7. THIRD-PARTY SERVICES
CoachSmartApp may use trusted third-party services to support Platform functionality, analytics,
payments, marketing, and social media features. These providers operate under their own privacy policies, which we encourage you to review.
     a. Google Analytics: Used to analyse Platform usage and improve performance through anonymised
analytics data.
     b. Meta Pixel: Used to measure advertising performance and provide relevant marketing on Meta
platforms such as Facebook and Instagram.
     c. Stripe: Used for secure payment processing and subscription billing. Payment information is
processed directly by Stripe and is not stored by CoachSmartApp.
     d. Email Marketing Providers: Used to send newsletters, updates, and promotional communications.
You may unsubscribe from marketing emails at any time.
     e. Social Media Platforms: Our Platform may link to or integrate with services such as Instagram, X,
LinkedIn, and YouTube. Your interactions with these platforms are governed by their respective
privacy policies.

8. INTERNATIONAL DATA TRANSFERS
    a. CoachSmartApp is operated by GOLD Sports Training LLC in the United States. If you access the
Platform from the EEA, the UK, or any other jurisdiction, your personal data may be transferred
to, stored, and processed in countries where data protection laws may differ from those in your
country.
    b. We implement appropriate safeguards for international data transfers where required by applicable
law, including Standard Contractual Clauses (SCCs), the UK International Data Transfer
Agreement (IDTA), adequacy decisions, and other recognised legal mechanisms.
    c. By using the Platform, you acknowledge and consent to such transfers. You are responsible for
ensuring that your use of the Platform complies with the privacy and data protection laws
applicable in your country or jurisdiction.

9. DATA RETENTION
We retain personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy
or as required by applicable law.
    a. Account Information: Retained during the life of the account and up to 3 years after deletion
    b. Performance & Training Data: Retained while the account is active; deleted or anonymised within 30
days of a valid deletion request
    c. Payment & Billing Records: Retained for up to 7 years for tax and accounting purposes
    d. Support Communications: Retained for up to 3 years from the last interaction
    e. Marketing Consent Records: Retained while consent remains active and for up to 3 years afterwards
for compliance purposes
    f. Cookies & Analytics Data: Session cookies expire automatically; persistent cookies may remain for
up to 24 months
    g. Server & Access Logs: Retained for up to 90 days for security and fraud prevention
    h. Minor User Data: Deleted within 30 days of a verified parent or guardian request
          i. When retention is no longer required, personal data is securely deleted, anonymised, or destroyed in accordance with applicable law.

Upon expiry of the applicable retention period, we will securely delete or anonymise your personal data.
Where deletion is not immediately practicable due to technical constraints, we will isolate the data from
further processing until deletion is completed.

10. DATA SECURITY MEASURES
     a. We implement appropriate technical and organisational measures to protect personal data against
unauthorised access, loss, misuse, alteration, or disclosure. These measures include encryption of
data in transit and at rest, secure password hashing, access controls, multi-factor authentication,
security monitoring, staff training, and regular security testing.
    b. We also maintain Data Processing Agreements with third-party service providers and follow internal incident response and data breach notification procedures.
    c. While we take reasonable steps to safeguard personal data, no method of electronic transmission or
storage is completely secure. Accordingly, we cannot guarantee absolute security of information
transmitted through the internet or stored on our systems.
    d. If you believe your account or personal data has been compromised, please contact us immediately at info@coachsmartapp.com. To the extent permitted by law, CoachSmartApp is not liable for
unauthorised access or loss of data except where caused directly by our gross negligence or wilful misconduct.

11. USER RIGHTS
Depending on your location and applicable law, you may have certain rights regarding your personal data.
To exercise any of these rights, please contact us at info@coachsmartapp.com. We will respond to verified requests within the timeframes required by applicable law.
     a. GDPR & UK GDPR Rights (EEA and UK Residents) If you are located in the EEA or the United Kingdom, you may have the right to: Access the personal data we hold about you
           i. Correct inaccurate or incomplete personal data
           ii. Request deletion of your personal data in certain circumstances
           iii. Restrict or object to certain processing activities
           iv. Receive your personal data in a portable, machine-readable format
           v. Withdraw consent where processing is based on consent
           vi. Object to direct marketing at any time
           vii. Not be subject to decisions based solely on automated processing that significantly affect
you
           viii. You also have the right to lodge a complaint with your local data protection authority or the
UK Information Commissioner’s Office (ICO).
     b. California Privacy Rights (CCPA/CPRA) California residents may have the right to:
           i. Know what personal information we collect, use, and share
           ii. Request deletion or correction of personal information
           iii. Opt out of the sharing of personal information for targeted advertising purposes
           iv. Limit the use of sensitive personal information where applicable
           v. Receive equal service and pricing without discrimination for exercising privacy rights

We do not sell personal information. California residents may also request information
regarding disclosures made for direct marketing purposes under California’s “Shine the Light”
law.

    c. Other Jurisdictions

We respect privacy rights provided under applicable laws in other jurisdictions, including Australia,
Canada, India, Brazil, and similar regions. Where local law grants you rights regarding your
personal data, we will honour those rights in accordance with applicable legal requirements.
To exercise any privacy rights, please contact us at info@coachsmartapp.com.

12. CHILDREN’S PRIVACY AND PARENTAL CONSENT
     a. CoachSmartApp may be used by athletes under the age of 18 under the supervision of a parent, legal guardian, coach, school, academy, or authorised sports organisation. Because the Platform involves
communication between coaches, athletes, and parents, certain personal information relating to
minor users may be collected and processed, including account details, training information,
schedules, performance data, messages, and activity within the Platform.
     b. Where required by applicable law, we obtain verifiable consent from a parent or legal guardian before
collecting or processing personal information belonging to children. Parents and guardians may
review, request correction of, or request deletion of their child’s personal information by contacting
us at info@coachsmartapp.com.
      c. Minor user information is accessible only to authorised users within the athlete’s team or organisation, such as coaches, parents, guardians, and approved administrators, based on role permissions and Platform settings.
     d. We do not knowingly sell personal information of minors or use children’s data for unlawful targeted
advertising purposes. If we become aware that personal information has been collected from a child
without the required consent, we will take reasonable steps to delete such information promptly.
      e. Parents, guardians, coaches, and organisations using the Platform are responsible for ensuring that their use of CoachSmartApp complies with all applicable child privacy, safeguarding, and consent laws
in their jurisdiction.

13. AUTOMATED DECISION-MAKING AND PROFILING
CoachSmartApp may use automated tools to help improve the Platform and user experience. These tools
may analyse activity and usage data to:
    a. Provide performance insights, training suggestions, and goal recommendations
    b. Personalise content and Platform features
    c. Detect suspicious activity and help prevent fraud or security issues
    d. Moderate user-generated content and enforce our Terms and Conditions 

These automated processes are designed to support Platform functionality and do not make
decisions that have legal or similarly significant effects on users without human involvement. b. Where
required by applicable law, users may request information about automated processing, ask for human
review of a decision, or object to certain automated activities by contacting us at
info@coachsmartapp.com.

14. DATA BREACH NOTIFICATION
    a. If a personal data breach occurs that may affect the rights or freedoms of users, CoachSmart – LIT will take appropriate steps in accordance with applicable law. This may include notifying relevant
regulatory authorities within legally required timeframes and informing affected users where
necessary.
    b. We maintain internal records of data breaches and review our security measures to help prevent future incidents.
    c. If you believe your account or personal data has been compromised, please contact us immediately at info@coachsmartapp.com.

15. EXTERNAL LINKS DISCLAIMER
    a. The Platform may contain links to third-party websites, services, and social media platforms that are not owned or controlled by CoachSmartApp. These links are provided for convenience and
informational purposes only and do not constitute an endorsement or approval of any third-party
content or services.
    b. CoachSmartApp is not responsible for the privacy practices, content, or policies of third-party websites or applications. We encourage users to review the privacy policies of any external sites they visit. This Privacy Policy applies only to information collected through the CoachSmartApp Platform.

16. Changes to This Privacy Policy
    a. We may update this Privacy Policy from time to time to reflect changes in our services, legal
requirements, or how we handle your information. If we make important changes, we will:
    b. We encourage you to review this Privacy Policy regularly. By continuing to use the Platform after
updates are posted, you acknowledge and accept the revised Privacy Policy. If you do not agree with the
changes, you should stop using the Platform and may request the deletion of your account.

17. Contact US
If you have any questions, concerns, requests, or complaints regarding this Privacy Policy or our data
practices, you may contact us using the information below:

GOLD Sports Training LLC d/b/a CoachSmartApp
Website: CoachSmartApp

Email:info@coachsmartapp.com

We will make reasonable efforts to respond to all privacy-related inquiries within the timeframes required
under applicable law.