Effective September 1, 2026

EquiWorld Inc. ("EquiWorld," "we," "us," or "our") provides the EquiWorld mobile application, website, software, and related services (the "Service"). This Privacy Policy explains how we handle personal information when you use the Service. Questions, access, correction, deletion, or account-closure requests may be sent to privacy@equiworld.app.

We collect information you provide or direct us to process, including:

• account and contact information, such as name, email address, phone number, date of birth where provided, role, service preferences, and profile photo;
• barn, business, service, and public-profile information, including addresses and coordinates;
• horse, ownership, care, health, veterinary, farrier, feed, treatment, scheduling, cost, and operational records;
• child/rider, parent/guardian, emergency-contact, allergy, medical-condition, health-insurance, waiver, medical-release, signature, and billing information that a parent, guardian, barn, or other authorized user enters;
• lessons, appointments, programs, events, attendance, transport, calendar, booking, and communication information;
• invoices, balances, expenses, refunds, receipts, payment status, and payment processor identifiers. EquiWorld does not receive or store raw card numbers or CVCs when payments are collected through Stripe;
• files and content you deliberately select, capture, upload, record, create, or send, including photos, documents, PDFs, receipts, signatures, messages, and ride-journal audio, transcripts, and notes;
• precise location when you grant foreground permission and use a location-based feature, including nearby-barn search, address or barn setup, trail sessions, and SOS/safety features; and
• authentication, security, and service-operation information, such as sessions, verification codes, hashed account/IP identifiers, rate-limit state, request correlation IDs, and limited allowlisted route/outcome/error categories.

We also maintain first-party aggregate template-library counters (template, event type, date, and count). They are not linked to an account, device, IP address, cookie, or person. On your device, the app may keep login and preference data locally. Accelerometer readings used for local fall detection are not sent to or stored by EquiWorld unless you separately use a feature that submits information.

We use information to provide, secure, maintain, and improve the Service; set up and administer accounts; manage barns and authorized relationships; deliver care, scheduling, safety, communication, payment, booking, and export features; respond to requests; prevent fraud and abuse; comply with law; and enforce our agreements. Access within the Service follows the applicable account, barn, horse, rider, guardian, provider, or financial relationship. Some barn profiles, listings, and booking fields are intentionally public when the user or barn makes them public.

We do not sell personal information. We do not use personal information for third-party advertising, behavioral advertising, attribution, or cross-app/cross-company tracking. We do not use an IDFA or request App Tracking Transparency permission. We do not operate a user-level analytics or crash SDK.

We disclose information to providers only as needed to operate the selected feature, process a transaction, protect the Service, or comply with law:

• Replit provides hosting, deployment logging, PostgreSQL, and private application storage. It processes the applicable stored records, uploads, exports, and limited operational data.
• Stripe processes card or bank information in its own payment interfaces. It may receive payment-related name, email, internal user-ID metadata, amounts, currency, transaction identifiers, and return URLs. We retain Stripe identifiers and transaction/audit records, not raw card numbers/CVCs.
• Resend receives sender/recipient email addresses, subject, message content, verification codes, and any attachment sent through email features.
• OpenAI is used only for optional AI features that you initiate. When enabled, it can receive submitted document text (up to 12,000 characters), a selected image, up to five rasterized PDF pages, recorded ride-journal audio, and resulting transcript/prompt content for extraction, transcription, or structuring. That content can include horse, care, veterinary, financial, or journal information. Do not submit content to these features unless you want that processing.
• OpenStreetMap Overpass and Nominatim receive the search address text, precise coordinates, radius, or reverse-geocoding coordinates you use for nearby search, address autocomplete, or geocoding.
• weather.gov and Open-Meteo receive barn coordinates for enabled weather/safety features.
• what3words, if enabled, receives precise trail or SOS coordinates to return a location reference.
• Twilio, if enabled, receives sender/recipient phone numbers, the full SMS body, verification codes, delivery status/SID, and inbound opt-out content.
• Apple and Expo provide app distribution and device permission/media frameworks. Apple photo, camera, microphone, and location permissions are controlled by your device settings; EquiWorld receives media only when you choose to submit it.
• A calendar provider you select (for example Apple Calendar, Google Calendar, Outlook, or another iCal client) can receive the child-lesson title, date/time, status, barn name/address, trainer, arena, notes, and the secret iCal feed URL. Disconnecting calendar sync deletes our connection and invalidates that URL; the provider's copy is governed by its own practices.

Providers may process data under their own terms and privacy policies. Their retention and deletion controls can differ from ours. We may also disclose information to authorized users in the applicable barn or relationship, to professional advisers, in a merger or similar transaction, or when reasonably necessary to comply with law, protect rights and safety, or investigate fraud or security incidents.

Foreground location is optional. You can decline or revoke permission in device settings, although location-based features will not work without it. A one-time nearby search is not intentionally stored by EquiWorld; trail-session and barn coordinates are stored with the relevant session or barn and can be visible to authorized safety/barn participants or the public where a barn profile makes them public. We do not use background location in the Service.

Files, photos, documents, signatures, and audio are collected only when you choose to provide them. Their visibility follows the resource or audience to which they are attached, which may include a barn, horse, guardian, provider, chat, community, or public surface. Temporary ride-journal audio is deleted after transcription; the transcript and structured journal fields may remain.

The Service permits parents, guardians, and authorized barn users to manage information about children/riders, including health and emergency information. Do not submit information about a child unless you are authorized to do so. A parent or guardian may contact us at privacy@equiworld.app to request access, correction, deletion, or account closure relating to their child, subject to verification and the shared-record and legal exceptions below.

We retain information for as long as needed for the purposes above, to operate the records and relationships you use, and to meet legal, accounting, dispute, security, and audit obligations. Specific operational periods include:

• verification codes and sessions expire; logout revokes sessions;
• pending or failed durable uploads are swept after one hour;
• an export download link expires after 24 hours; its private archive is retained for up to seven days so it can be renewed, then is deleted; deleting export history deletes the retained private object;
• operational logs are searchable for 30 days and kept in encrypted archives for no more than 90 days; development logs are retained for seven days; and
• aggregate template counters are pruned after 365 days.

Ready files remain while referenced by an owning record and are retired when a supported owning record is replaced or deleted and no live reference remains. Financial transaction, webhook, signed-document, security, and audit records can require longer retention. Backups and provider systems may retain data for their documented recovery or retention windows.

The in-app account-closure flow requires your current password and typing DELETE exactly. Once completed, it revokes active sessions, deletes verification codes, and anonymizes the account and directly linked rider profile (including contact information and the login credential). Barn owners must first transfer every barn they own. Account closure does not itself mark, delete, or retire uploaded files: an uploaded file may be connected to an authoritative resource beyond barn or horse bindings. Uploads remain governed by the applicable resource-specific deletion flow and verified privacy requests. This automatic closure flow also does not erase records that another authorized person or barn controls, records needed to preserve another person's access or the integrity of a shared operational record, or information we must retain for financial, tax, accounting, signed-document, audit, security, fraud-prevention, dispute, legal-hold, or legal-compliance purposes. A stable anonymized account tombstone and payment identifiers may therefore remain. We will explain the applicable outcome and any retained or referred records in response to a verified request.

You may update available profile and record information in the Service. Depending on your role, an authorized barn owner or other record controller may need to correct or delete barn-controlled or shared records. You may request access to, correction of, deletion of, or export of personal information, or initiate account closure, by emailing privacy@equiworld.app. We verify requests before acting and may ask for information needed to confirm authority. You can also disconnect a calendar subscription, manage notification/SMS preferences, and change device permissions through your device settings.

Authenticated users can generate a copy of records available to them; barn owners can generate owner-authorized barn exports. Exports follow the same visibility rules as the Service and therefore do not include records the requester is not authorized to access.

We use reasonable administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure. Please protect your credentials and notify us promptly of suspected unauthorized use.

We may update this Privacy Policy. We will post the updated policy with a new effective date and, where required, provide additional notice or obtain consent.

EquiWorld Inc.
Privacy: privacy@equiworld.app