MDTTC BOOKING APP PRIVACY POLICY Effective date: July 15, 2026 Last updated: July 15, 2026 Maryland Table Tennis Center, LLC ("MDTTC," "we," "us," or "our") operates the MDTTC Booking mobile application (the "App"). This Privacy Policy explains what information the App collects, how we use and share it, and the choices available to you. This policy applies to the App. It does not replace the privacy policies of third-party websites or services that you may access separately. 1. INFORMATION WE COLLECT We collect the following information when you use the App: Account and contact information - Name - Email address - Optional phone number - Account identifier - Authentication information required to sign in and secure your account Passwords are handled by our authentication provider, Supabase. MDTTC does not receive or store your password in readable form. Booking and service information - Selected coach - Session date, time, duration, and lesson type - Booking status, rescheduling, and cancellation information - Session price and whether payment has been marked as paid or pending - Session history The App does not collect or process credit card, bank account, or other payment-card details. Payments for coaching services are handled outside the App. Coach application and coach profile information If you apply to become a coach, we collect the information you submit, which may include your name, email address, phone number, qualifications, years of experience, and application status. Approved coach names, qualifications, availability, and related profile information may be displayed to App users. Communications and feedback We collect messages and information you choose to provide through the App's feedback form, cancellation notes, support requests, or email communications with MDTTC. Notification and device information If you allow push notifications, the App collects a push-notification token and your reminder preference so that it can send booking confirmations, changes, cancellations, and session reminders. Our service providers may also receive limited technical information needed to deliver and secure the service, such as IP address, device operating system, device identifiers, and basic diagnostic or request-log information. Push notifications are optional. You can decline them or change notification permission in your device settings. You can change session reminder timing or turn reminders off in the App's Account settings. Information stored only on your device The App stores your language preference on your device. This preference is used to display the App in your selected language. 2. HOW WE USE INFORMATION We use information to: - Create, authenticate, maintain, and secure your account. - Schedule, display, reschedule, and cancel coaching sessions. - Allow coaches to manage their availability and scheduled sessions. - Provide coaches with the information reasonably needed to deliver a booked session and contact the student when necessary. - Send booking confirmations, service messages, push notifications, and reminders. - Review coach applications and administer coach accounts. - Record session pricing and payment status for operational purposes. - Respond to support requests and feedback. - Detect, prevent, and investigate security incidents, fraud, misuse, or technical problems. - Comply with applicable law and protect the rights, safety, and property of MDTTC, App users, coaches, and others. We do not use App information for third-party behavioral advertising. 3. HOW WE SHARE INFORMATION With your selected coach and authorized MDTTC personnel The coach assigned to a session may receive the student's name, email address, phone number, booking details, and payment status when reasonably needed to manage and provide the coaching session. Authorized MDTTC administrators may access account, booking, coach-application, feedback, and related operational information to operate and support the App. With service providers We use service providers to operate the App. These providers process information on our behalf for the purposes described in this policy: - Supabase provides authentication, database hosting, server functions, and related infrastructure: https://supabase.com/privacy - Expo provides push-notification delivery and related mobile application services: https://expo.dev/privacy - Apple Push Notification Service delivers notifications to Apple devices: https://www.apple.com/legal/privacy/ - Resend sends transactional booking-confirmation emails: https://resend.com/legal/privacy-policy These providers may process information in the United States or other locations where they or their subprocessors operate. For legal and safety reasons We may disclose information if reasonably necessary to comply with law, legal process, or lawful government requests; enforce our agreements and policies; investigate fraud or security issues; or protect the rights, property, or safety of MDTTC, our users, coaches, or others. Business transfers If MDTTC is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law and appropriate protections. With your direction or consent We may share information in another way when you direct us to do so or give us consent. 4. NO SALE, ADVERTISING, OR CROSS-APP TRACKING MDTTC does not sell personal information. The App does not contain third-party advertising and does not use personal information to track users across apps or websites for targeted advertising. 5. DATA RETENTION We keep personal information only for as long as reasonably necessary to provide the App, fulfill the purposes described in this policy, resolve disputes, maintain security, and meet legal or recordkeeping obligations. When you delete your account through the App, the active account profile and associated App records, including bookings, coach applications, feedback, notification preferences, and linked coach records, are deleted. Limited information may remain temporarily in secure backups, system logs, email-delivery records, or records that we must retain to comply with law, prevent fraud, resolve disputes, or enforce agreements. Those records are retained only for as long as reasonably necessary for those purposes. 6. YOUR CHOICES AND RIGHTS Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of your personal information, or to object to or restrict certain processing. You can: - Update your name and phone number from the App's Account settings. - Change or disable session reminders from the App's notification settings. - Disable push notifications in your device settings. - Permanently delete your account from Account > Delete Account in the App. - Contact us using the information below for another privacy request. We may need to verify your identity before completing a request. We will not discriminate against you for exercising a privacy right available under applicable law. 7. SECURITY We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These safeguards include authenticated access and database access controls. However, no electronic transmission or storage method is completely secure, and we cannot guarantee absolute security. 8. CHILDREN'S PRIVACY MDTTC provides coaching services for players of many ages, including minors. The App is not directed to children under 13 and children under 13 may not create or manage their own App accounts. A parent or legal guardian must create and manage an account and any bookings for a child under 13. We do not knowingly collect personal information directly from a child under 13 without appropriate parental consent. If you believe a child under 13 has created an account or provided personal information directly through the App, contact us so that we can review and delete the information as appropriate. 9. INTERNATIONAL USERS The App is operated from the United States. If you use the App from another country, your information may be transferred to and processed in the United States or other countries where our service providers operate. Those countries may have data-protection laws different from those where you live. 10. CHANGES TO THIS POLICY We may update this Privacy Policy as the App, our practices, or legal requirements change. We will update the "Last updated" date and, when appropriate, provide additional notice in the App or by another reasonable method. 11. CONTACT US Maryland Table Tennis Center, LLC 18761-Q North Frederick Avenue Gaithersburg, MD 20879, USA Email: info@mdttc.com Phone: (301) 519-8580