Privacy Policy

Effective Date: May 15, 2026

Midseason Group Ltd. ("we," "our," or "us") is committed to protecting your privacy.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, www.midseason.app, or use our mobile application and any related services. By accessing or using our website and services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our website or app.

1. Information We Collect

1.1 Information You Provide

• Account Information: When you create an account, we collect your name, email address, phone number, and any other information you choose to provide.
• User ID: We assign and collect a unique User ID to identify your account within our platform. This identifier is used to link your account data, activity, and preferences across our services.
• Payment Information: If you subscribe to a paid plan or make a purchase, we collect billing details and payment information. This is processed securely by our payment partner, Stripe.
• Profile Data: If you create a profile, such as an athlete or organization profile, we collect any data you choose to include (e.g., team details, event participation).

1.2 Automatically Collected Information

• Usage Data: We collect information about your interactions with our website and app, such as pages visited, time spent, and features used.
• Device Information: We collect data such as your device type, browser type, operating system, and Device ID (a unique identifier assigned to your device).
• Crash Logs: We collect diagnostic data, including crash logs and error reports, to maintain app stability and performance.
• Precise Location Data: With your permission, we collect your precise GPS location to power map-based discovery features such as finding nearby leagues, courts, and events. You can disable location access at any time through your device settings.

1.3 Sensitive Information

Certain features of our app may involve the collection of sensitive personal information, such as health or fitness-related data you voluntarily provide (e.g., for athlete profiles or performance tracking). We only collect sensitive information where necessary for the features you use, and we handle it with heightened care as described in this policy.

1.4 Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, such as remembering your preferences or tracking analytics. You can manage your cookie preferences in your browser settings.

1.5 Third-Party SDKs and Services

Our app integrates third-party software development kits (SDKs) and services that may collect data on our behalf or independently, including analytics providers and crash reporting tools. We review all SDKs to ensure their data collection is intentional and disclosed. A list of key third-party services is available upon request. We regularly review our SDK integrations and update this policy to reflect any changes.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and improve our services.
• To personalize your experience.
• To process transactions and manage subscriptions.
• To communicate with you about updates, events, or promotions.
• To monitor and analyze usage and trends to improve functionality.
• To power location-based discovery features.
• To ensure security and prevent fraud.
• To maintain app stability through crash reporting and diagnostics.

2.1 Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

• Performance of a contract: Processing necessary to provide our services to you (e.g., account management, payment processing).
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving our platform, fraud prevention, and analytics, where those interests are not overridden by your rights.
• Consent: Where you have given us your explicit consent (e.g., location access, marketing communications). You may withdraw consent at any time.
• Legal obligation: Processing necessary to comply with applicable laws and regulations.

3. How We Share Your Information

We do not sell your personal information. However, we may share your data in the following ways:

• With Service Providers: We share data with trusted third parties that perform services on our behalf, such as payment processors (Stripe), analytics providers, crash reporting services, and email platforms. Where these providers are located outside Canada, we ensure appropriate contractual safeguards are in place.
• For Legal Compliance: We may disclose your information if required by law or to protect the rights, safety, or property of Midseason Group Ltd., its users, or others.
• In Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

We do not share precise location data, Device IDs, or sensitive personal information with third parties for advertising purposes.

4. Cross-Border Data Transfers

Midseason Group Ltd. is headquartered in British Columbia, Canada. However, some of the third-party service providers we use — including Stripe, cloud hosting providers, and analytics services — are based in or operate infrastructure in the United States or other countries.

By using our services, you acknowledge that your personal information may be transferred to, stored in, and processed in countries outside Canada, including the United States, where privacy laws may differ from those in your jurisdiction. In particular, data stored on US-based servers may be accessible to US authorities under applicable US law (including the US CLOUD Act).

We take steps to ensure that any cross-border transfers are protected through contractual or other appropriate safeguards, consistent with our obligations under the Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA).

5. Your Rights and Choices

5.1 Right to Access

You have the right to request access to the personal data we hold about you, including what categories of data we collect and how it is used.

5.2 Right to Correct

You have the right to request correction of inaccurate or incomplete personal data we hold about you. You can update basic account information directly in your profile settings.

5.3 Right to Delete

You have the right to request that we delete the personal data we have collected about you. You can delete your account at any time through the app. Note that some data may be retained for legal or compliance purposes.

5.4 Right to Know Whether Your Data Is Shared

You have the right to know whether your personal data is shared with third parties and, if so, with whom and for what purpose. See Section 3 above for details.

5.5 Right to Opt-Out of Data Sharing or Sale

We do not sell your personal data. If you wish to limit the sharing of your data with our service providers, you may contact us at support@midseason.app to submit an opt-out request.

5.6 Opt-Out of Marketing

You may opt out of receiving promotional communications at any time by following the unsubscribe instructions in our emails or contacting us directly.

5.7 Cookie Preferences

You can adjust your browser or device settings to manage or disable cookies and tracking.

To exercise any of these rights, contact us at support@midseason.app. We will respond to verified requests within the timeframes required by applicable law. Note that some exceptions may apply (for example, we may retain certain data to comply with legal obligations).

6. Regional Privacy Rights

6.1 California Residents — CCPA / CPRA

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information:

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, our purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information we hold about you.
• Right to Opt-Out: We do not sell your personal information. We do not share personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at support@midseason.app. We will respond to verifiable consumer requests within 45 days.

6.2 Virginia Residents — VCDPA

If you are a Virginia resident, the Virginia Consumer Data Protection Act (VCDPA) provides you with the following rights:

• Right to Access: You may confirm whether we are processing your personal data and access that data.
• Right to Correct: You may correct inaccuracies in your personal data.
• Right to Delete: You may request deletion of personal data you have provided to us or that we have collected about you.
• Right to Data Portability: You may obtain a copy of your personal data in a portable format.
• Right to Opt-Out: You may opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling. We do not sell personal data or use it for targeted advertising.
• Right to Appeal: If we decline to act on a rights request, you may appeal that decision by contacting us at support@midseason.app.

6.3 European Economic Area and United Kingdom — GDPR

If you are located in the EEA or UK, you have the following rights under the General Data Protection Regulation (GDPR) or UK GDPR:

• Right of Access (Article 15): Request access to your personal data and information about how we process it.
• Right to Rectification (Article 16): Request correction of inaccurate or incomplete personal data.
• Right to Erasure (Article 17): Request deletion of your personal data in certain circumstances ("right to be forgotten").
• Right to Restrict Processing (Article 18): Request that we limit how we use your personal data in certain circumstances.
• Right to Data Portability (Article 20): Receive your personal data in a structured, machine-readable format and transmit it to another controller.
• Right to Object (Article 21): Object to processing based on legitimate interests or for direct marketing purposes.
• Rights Related to Automated Decision-Making (Article 22): Rights relating to profiling and automated decisions that have a legal or significant effect on you.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement. A list of EU supervisory authorities is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en

6.4 Brazil — LGPD

If you are located in Brazil, the Lei Geral de Proteção de Dados (LGPD) provides you with the following rights:

• Confirmation and Access: Confirm whether we process your personal data and access it.
• Correction: Request correction of incomplete, inaccurate, or outdated data.
• Anonymization, Blocking, or Deletion: Request anonymization, blocking, or deletion of unnecessary or excessive data or data processed in non-compliance with the LGPD.
• Portability: Request portability of your personal data to another service or product provider.
• Deletion: Request deletion of personal data processed with your consent.
• Information on Sharing: Obtain information about public and private entities with which we share your data.
• Revocation of Consent: Revoke consent for processing at any time.
• Opposition: Object to processing carried out on grounds other than consent if it is not in compliance with the LGPD.

To exercise your rights under the LGPD, contact us at support@midseason.app.

7. Data Controller and Contact Information

The data controller responsible for your personal information is:

Midseason Group Ltd.Nanaimo, British Columbia, CanadaEmail: support@midseason.app

For questions related to data protection or to exercise your rights, please contact us at the address above. We aim to respond to all requests within 30 days.

Data Protection Officer (DPO):Midseason Group Ltd. has designated a point of contact for data protection matters. If you have concerns about how we handle your personal data, you may contact our data protection representative at:

Email: support@midseason.app Subject line: "Data Protection Officer"

Note: We will update this section with a named DPO as our organization scales to the thresholds required by applicable regulations.

8. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit and at rest. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Data Retention

We retain your personal data only for as long as necessary to provide our services or comply with legal obligations. When data is no longer required, we securely delete or anonymize it.

10. Children's Privacy

Midseason is not intended for individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware of such data, it will promptly be deleted.

11. Location Data

Our app requests permission to access your device's precise location. This data is used solely to provide location-based features (e.g., discovering nearby courts, leagues, and events). We do not share your precise location with third parties for advertising purposes. You can revoke location access at any time in your device settings.

12. Camera Access

Some features of the Midseason app require access to your device's camera, including uploading profile pictures, event photos, or capturing activity media.

We will always ask for your permission before accessing your camera. You can enable or disable camera access at any time in your device settings. Photos and videos captured using the app may be stored locally on your device or uploaded to our servers. We do not share your photos or videos with third parties without your permission, except as required by law or for essential service operations (e.g., cloud storage providers).

13. Third-Party Links

Our website and app may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. Please review their privacy policies before submitting any data.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the revised policy on our website and updating the effective date. We review and update this policy at least annually to reflect any changes to our data practices or applicable regulations.

15. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us at:

Email: support@midseason.app Company: Midseason Group Ltd., Nanaimo, British Columbia, Canada

‍