Privacy policy.

1. Introduction

MOJOE COMMUNITY LTD (Company No. 15763396) ("MOJOE", "we", "us", or "our"), a company incorporated and registered in England and Wales with its registered office at 1 Chapel Court, Holly Walk, Leamington Spa, Warwickshire, England, CV32 4YS, is committed to protecting the privacy and security of your personal information.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our digital career coaching platform for athletes ("Services"), including our mobile application and web-based dashboard. This Policy applies to all users of our Services, including athletes, sports clubs, organizations, and administrators.

By using our Services, creating an account, or otherwise interacting with MOJOE, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Policy, please do not use our Services.

2. Information We Collect

2.1 Personal Information You Provide

When you register for and use our Services, we collect the following personal information:

Account Information:

  • Full name

  • Email address

  • Date of birth

  • Password (encrypted)

  • Athletic status (current athlete, retired athlete, or not an athlete)

Profile Information:

  • Career goals and aspirations

  • Primary career goal selection

  • Profile preferences and settings

  • Location information (if provided)

CV/Resume Information:

  • Job title and professional summary

  • Work experience history

  • Education history

  • Skills and competencies

  • Extracurricular activities and achievements

  • Athletic career details

User-Generated Content:

  • Messages and conversations with our AI Career Coach

  • Learning goals you set and track

  • Job search preferences and saved jobs

  • Mentor connection requests and communications

  • Feedback, survey responses, and support communications

Payment Information:

  • Payment transaction data processed through Apple Pay and Google Pay

  • Subscription status and purchase history

  • We do not directly store payment card details; these are processed by Apple and Google

2.2 Information We Collect Automatically

Usage Data:

  • Pages and features accessed within the application

  • Content viewed, created, and interacted with

  • Clicks, scrolling behavior, and navigation patterns

  • Search queries and filters applied

  • Time spent on different sections of the platform

  • Frequency and duration of sessions

Device and Technical Information:

  • IP address and approximate geographic location

  • Device identifier and type (mobile device, operating system)

  • Browser type and version

  • Operating system version

  • Mobile network information

  • App version and configuration settings

  • Crash reports and performance diagnostics

Analytics and Performance Data:

  • Session metadata (login times, session length)

  • Feature usage patterns and engagement metrics

  • Error logs and debugging information

  • API response times and system performance metrics

2.3 Information from Third Parties

Service Providers: We receive information from our technology partners and service providers, including:

  • OpenAI (for AI-powered coaching and content generation)

  • Google Analytics and Amplitude (for analytics and usage insights)

  • Supabase (our database and authentication provider)

  • Vercel (our hosting platform)

  • Apple App Store Connect and Google Play (for subscription management)

Sports Clubs and Organizations: When your sports club or organization purchases a subscription on your behalf using a referral code, they may provide us with your basic information to facilitate account creation and access.

Publicly Available Sources: We may supplement our data with information from publicly available sources, such as professional sports databases and public profiles, to enhance our services and verify information.

3. How We Collect Your Information

3.1 Direct Collection

We collect information directly from you when you:

  • Register for an account and complete the onboarding process

  • Update your profile or account settings

  • Create or edit your CV/resume

  • Set learning goals and track achievements

  • Use our AI Career Coach chatbot

  • Search for jobs or mentors

  • Contact our support team

  • Complete surveys or provide feedback

  • Participate in promotions or contests

3.2 Automatic Collection

We automatically collect information through:

Cookies and Similar Technologies: We use cookies, web beacons, pixels, and local storage to collect information about your interactions with our Services. See Section 11 for detailed information about cookies.

Analytics Tools:

  • Google Analytics: Tracks website and app usage patterns, user flows, and engagement metrics

  • Amplitude: Provides detailed event tracking and behavioral analytics

  • Session replay tools to understand user experience and identify issues

API Logging: Our APIs log requests, responses, and errors for debugging, security monitoring, and service improvement purposes.

3.3 From Third-Party Services

We receive information from:

  • Authentication providers (email verification services)

  • Payment processors (Apple, Google)

  • Cloud infrastructure providers (Supabase, Vercel)

  • AI service providers (OpenAI, Meta Llama)

  • Analytics and monitoring services

4. How We Use Your Information

4.1 To Provide and Improve Our Services

Core Platform Functions:

  • Create and manage your account and authentication

  • Deliver personalized career coaching and guidance

  • Provide AI-powered features (career coach chatbot, CV assistance, goal suggestions, job matching, mentor matching)

  • Enable job discovery and application tracking

  • Facilitate mentor connections and networking

  • Generate and export your CV/resume

  • Track your learning goals and achievements

  • Process subscription payments and manage access tiers

Service Enhancement:

  • Analyze usage patterns to improve user experience

  • Develop new features and functionality

  • Optimize AI model performance and accuracy

  • Enhance search and recommendation algorithms

  • Conduct user research and testing

  • Troubleshoot technical issues and bugs

4.2 For AI Training and Development

IMPORTANT: Data Ownership and AI Training Rights

By using our Services, you acknowledge and agree that:

All data you provide or generate through our Services is owned by MOJOE. This includes, but is not limited to:

  • Your profile information and career goals

  • CV/resume content

  • Conversations with our AI Career Coach

  • Learning goals and achievements

  • Job search behavior and preferences

  • Usage patterns and interaction data

We have the right to use your data for AI training and model improvement purposes. Specifically:

  1. Anonymization Process: Before using your data for AI training, we will:

    • Strip all personally identifiable information (PII)

    • Remove names, email addresses, dates of birth, and contact details

    • Aggregate conversation patterns and behavioral data

    • Maintain the structure of conversations while removing identifying details

  2. Permitted AI Training Uses:

    • Training and improving our AI Career Coach responses

    • Enhancing job matching and recommendation algorithms

    • Improving mentor matching capabilities

    • Generating better learning content and goal suggestions

    • Optimizing CV transformation and enhancement features

    • Developing new AI-powered coaching features

  3. Data Sharing for AI Purposes:

    • Anonymized data may be shared with or sold to third-party organizations for research, model training, or commercial purposes

    • Such data will be aggregated and stripped of all PII before sharing

    • We will not sell or share identifiable personal information without your explicit consent

  4. Your Rights:

    • You retain the right to delete your account at any time (see Section 8)

    • Upon deletion, your data will be immediately anonymized and cannot be traced back to you

    • Anonymized data derived from your account may continue to be used indefinitely for AI training and other purposes

4.3 For Communication and Support

  • Send you transactional emails and notifications (account verification, password resets, subscription updates)

  • Provide customer support and respond to your inquiries

  • Send you marketing communications, product updates, and promotional offers (you may opt out by contacting info@joinmojoe.com)

  • Notify you of changes to our Services or policies

  • Conduct surveys and request feedback

4.4 For Security and Legal Compliance

  • Detect, prevent, and respond to fraud, abuse, or security threats

  • Enforce our Terms of Service and other agreements

  • Comply with legal obligations and respond to lawful requests from authorities

  • Protect the rights, property, and safety of MOJOE, our users, and the public

  • Conduct internal audits and maintain business records

4.5 For Business Operations

  • Analyze business performance and generate reports

  • Conduct research and statistical analysis

  • Process payments and manage subscriptions

  • Manage relationships with sports clubs and organizational partners

  • Support merger, acquisition, or asset sale activities

5. Legal Basis for Processing (EEA, UK, Switzerland)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal information based on the following legal grounds:

5.1 Contractual Necessity

We process your information to perform our contract with you under our Terms of Service, including:

  • Creating and managing your account

  • Providing access to platform features

  • Processing payments and subscriptions

  • Delivering AI coaching and career guidance services

5.2 Legitimate Interests

We process your information for our legitimate business interests, including:

  • Improving and optimizing our Services

  • Conducting analytics and research

  • Training AI models and developing new features

  • Marketing our Services

  • Detecting fraud and ensuring security

  • Managing business operations

We balance these interests against your rights and freedoms and only process data where our interests are not overridden by your data protection rights.

5.3 Legal Obligations

We process your information to comply with legal requirements, such as:

  • Responding to lawful requests from authorities

  • Complying with tax and accounting regulations

  • Meeting data protection and privacy law obligations

5.4 Consent

Where required by law, we obtain your explicit consent before processing your information for:

  • Marketing communications (you may withdraw consent by contacting info@joinmojoe.com)

  • Certain uses of cookies and tracking technologies

  • Any processing not covered by the legal bases above

You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

5.5 Vital Interests

In rare cases, we may process your information to protect your vital interests or those of another person (e.g., in medical emergencies or threats to safety).

6. Data Ownership and Your Rights

6.1 MOJOE's Data Ownership

By using our Services, you expressly acknowledge and agree that:

  1. Ownership: All data you provide or generate through the Services, including but not limited to your profile, CV content, AI conversations, goals, and usage data, becomes the property of MOJOE COMMUNITY LTD.

  2. Perpetual Rights: MOJOE retains perpetual, irrevocable, worldwide rights to use, process, analyze, and derive insights from your data, subject to the anonymization requirements described in this Policy.

  3. Anonymization and Continued Use: Upon account deletion, your data will be immediately anonymized and disassociated from your identity. However, MOJOE retains the right to continue using this anonymized data indefinitely for:

    • AI training and model development

    • Research and analytics

    • Service improvement

    • Commercial purposes, including potential sale or licensing to third parties

6.2 Your Rights Regarding Personal Data

Despite MOJOE's ownership of data, you retain certain rights regarding your personal information:

Right to Access: You may request a copy of the personal information we hold about you.

Right to Rectification: You may correct inaccurate or incomplete personal information.

Right to Deletion: You may request deletion of your account and personal information, subject to Section 8 below.

Right to Restriction: You may request that we restrict processing of your personal information in certain circumstances.

Right to Data Portability: You may request a copy of certain data in a machine-readable format (currently limited to CV export as PDF; clubs may request additional data exports).

Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent: Where we rely on consent, you may withdraw it at any time.

To exercise these rights, contact us at info@joinmojoe.com. We will respond within one month (or as required by applicable law).

7. How We Share Your Information

7.1 Within MOJOE

Your information may be accessed by:

  • MOJOE employees and contractors who need access to provide Services

  • Internal administrators managing the platform

  • Customer support representatives assisting with your inquiries

7.2 With Sports Clubs and Organizations

If your sports club or organization purchased your subscription:

By continuing to use the Services after your club has provided you with access, you expressly consent to your club viewing:

  • Your profile information and athletic status

  • Your engagement metrics (login frequency, features used, time spent)

  • Your career goals and progress toward achieving them

  • Your CV completion status

  • Your use of AI coach and learning modules

  • Achievement badges and completed goals

  • Aggregated usage statistics

Important: Your club administrators can see individual athlete data through the admin dashboard. This data sharing continues as long as your club maintains an active subscription for you.

Data Access Upon Leaving a Club: If you leave your club or your club cancels your subscription, both you and the club retain access to historical data generated during the subscription period, unless you delete your account.

7.3 With Service Providers and Partners

We share information with trusted third-party service providers who process data on our behalf:

Cloud Infrastructure and Hosting:

  • Supabase: Database hosting and authentication services

  • Vercel: Application hosting and deployment

  • Both providers are located in the United States and EU regions

AI and Machine Learning:

  • OpenAI: Powers our AI Career Coach, CV assistance, job matching, and content generation features

  • Meta (Llama): Additional AI model support for certain features

  • These providers process conversation data to generate responses but do not retain data for their own purposes (per their terms)

Analytics and Monitoring:

  • Google Analytics: Website and app usage analytics

  • Amplitude: Behavioral analytics and event tracking

  • These services collect and process usage data, device information, and interaction patterns

Payment Processing:

  • Apple (Apple Pay): Processes in-app purchases for iOS users

  • Google (Google Pay): Processes in-app purchases for Android users

  • We do not directly handle or store payment card details

Other Service Providers:

  • Email service providers for transactional and marketing communications

  • Customer support tools for managing inquiries

  • Security and fraud prevention services

  • PDF generation services for CV exports

All service providers are contractually obligated to protect your data and use it only for the purposes we specify.

7.4 For Legal and Safety Reasons

We may disclose your information if required to:

  • Comply with applicable laws, regulations, or legal processes

  • Respond to valid requests from public authorities (e.g., law enforcement, courts)

  • Enforce our Terms of Service or other agreements

  • Investigate and prevent fraud, security threats, or illegal activities

  • Protect the rights, property, or safety of MOJOE, our users, or the public

7.5 Business Transfers

If MOJOE is involved in a merger, acquisition, asset sale, bankruptcy, or similar business transaction, your information may be transferred to the successor entity. We will notify you via email and/or prominent notice on our Services before your information is transferred and becomes subject to a different privacy policy.

7.6 Anonymized and Aggregated Data

We may share anonymized, de-identified, or aggregated data that cannot reasonably be used to identify you with:

  • Business partners and collaborators

  • Research institutions and academic organizations

  • Third parties for commercial purposes

  • The public (e.g., in reports, publications, or presentations)

Such data may include usage statistics, industry trends, or research findings derived from our platform.

7.7 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

8. Data Retention and Deletion

8.1 Active Accounts

We retain your personal information for as long as your account remains active and for as long as necessary to provide you with our Services.

8.2 Account Deletion Process

You may delete your account at any time by:

  1. Logging into your MOJOE account

  2. Navigating to Settings

  3. Selecting "Delete Account"

  4. Confirming your deletion request

Alternatively, you may request account deletion by emailing info@joinmojoe.com.

8.3 What Happens When You Delete Your Account

Immediate Anonymization: Upon account deletion, we immediately perform a "soft delete" that:

  • Disassociates all your data from your personal identity

  • Removes personally identifiable information (name, email, date of birth, contact details)

  • Anonymizes your data such that it cannot be traced back to you

  • Terminates your access to the Services

Important: This process is irreversible. Once your account is deleted and data is anonymized, we cannot restore your account or recover your information.

8.4 Retention of Anonymized Data

10-Year Retention Period: After anonymization, we retain your anonymized data for 10 years from the date of account deletion for the following purposes:

  • AI model training and improvement

  • Platform analytics and research

  • Service optimization and development

  • Legal compliance and record-keeping

  • Potential commercial use or licensing

Indefinite Use Rights: Even after the 10-year retention period, anonymized data that has been incorporated into AI models, research outputs, or aggregated datasets may continue to exist and be used indefinitely.

8.5 Legal Retention Requirements

Notwithstanding the above, we may retain certain anonymized data beyond the stated periods if:

  • Required by applicable law or regulation

  • Necessary to comply with legal obligations

  • Needed for pending legal proceedings or investigations

  • Required for tax, accounting, or audit purposes

8.6 Backup Copies

Anonymized data may persist in backup systems for a limited period after deletion (typically 30-90 days) until backups are cycled out. These backups are not accessible or used for operational purposes.

8.7 Sports Club Access After Deletion

If your account was funded by a sports club, note that:

  • The club retains access to historical, anonymized metrics generated during your active subscription period

  • The club cannot access your personal information after your account is deleted

  • Aggregated statistics that include your anonymized data may remain visible to your former club

9. International Data Transfers

9.1 Global Operations

MOJOE is based in the United Kingdom and operates services globally, including in the United States and European Union. Your personal information may be transferred to, stored in, and processed in countries outside your country of residence, including countries that may not offer the same level of data protection as your home country.

9.2 Transfer Mechanisms

When we transfer personal data from the EEA, UK, or Switzerland to countries outside these regions, we use the following safeguards:

Standard Contractual Clauses (SCCs): We have implemented Standard Contractual Clauses approved by the European Commission with our service providers and partners to ensure adequate protection of your personal information during international transfers.

Adequacy Decisions: Where possible, we transfer data to countries that have been deemed to provide an adequate level of data protection by the European Commission, UK authorities, or Swiss authorities.

Other Safeguards: We implement additional technical and organizational measures to protect data during international transfers, including:

  • Encryption in transit and at rest

  • Access controls and authentication

  • Regular security audits and assessments

  • Contractual obligations on data recipients

9.3 Your Rights Regarding Transfers

You have the right to obtain information about the safeguards we use for international transfers. You may also object to transfers in certain circumstances. Contact us at info@joinmojoe.com for more information.

9.4 Key Transfer Routes

UK to United States:

  • Supabase (hosting): Uses SCCs and maintains SOC 2 Type II certification

  • Vercel (hosting): Uses SCCs and provides data residency options

  • OpenAI (AI services): Uses SCCs and complies with enterprise data processing requirements

  • Google Analytics & Amplitude (analytics): Use SCCs and EU-based data processing where available

Cross-Border AI Processing: Data processed by our AI services (OpenAI, Meta Llama) may be temporarily transferred to United States servers for inference and response generation. These transfers are governed by SCCs and enterprise data processing agreements.

10. Data Security

10.1 Our Security Commitment

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect against unauthorized access, alteration, disclosure, or destruction of your data.

10.2 Security Measures

Technical Safeguards:

  • Encryption: All data in transit is encrypted using TLS 1.2 or higher; data at rest is encrypted using industry-standard encryption (AES-256)

  • Authentication: JSON Web Token (JWT) based authentication with access and refresh tokens; passwords are hashed using bcrypt with salt

  • Access Controls: Role-based access control (RBAC) restricting data access to authorized personnel only

  • Secure APIs: All API endpoints use authentication and authorization checks; input validation using Zod schema validation

  • Network Security: Firewalls, intrusion detection systems, and DDoS protection

  • Regular Updates: Timely application of security patches and software updates

Organizational Safeguards:

  • Employee Training: Regular security awareness training for all employees and contractors

  • Access Policies: Strict need-to-know access policies; access logs and monitoring

  • Vendor Management: Due diligence and security assessments of third-party providers

  • Incident Response: Documented incident response plan and security breach procedures

  • Regular Audits: Periodic security audits, vulnerability assessments, and penetration testing

Infrastructure Security:

  • Supabase: SOC 2 Type II certified, PostgreSQL with row-level security capabilities

  • Vercel: Enterprise-grade hosting with DDoS protection and automatic SSL certificates

  • Cloud Backups: Automated, encrypted backups with geographic redundancy

10.3 Your Responsibilities

You are responsible for:

  • Maintaining the confidentiality of your account credentials

  • Using a strong, unique password for your MOJOE account

  • Not sharing your account with others

  • Logging out of your account when using shared devices

  • Notifying us immediately if you suspect unauthorized access to your account

10.4 Limitations

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data. You provide information at your own risk.

11. Cookies and Tracking Technologies

11.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website or use our mobile application. We use cookies and similar technologies (web beacons, pixels, local storage) to provide, secure, and improve our Services.

11.2 Types of Cookies We Use

Strictly Necessary Cookies: These cookies are essential for the Services to function and cannot be disabled in our systems. They include:

  • Authentication cookies to keep you logged in

  • Security cookies to protect against fraud and abuse

  • Session management cookies

Performance and Analytics Cookies: These cookies help us understand how users interact with our Services:

  • Google Analytics: Tracks page views, user flows, and engagement metrics

  • Amplitude: Provides detailed event tracking and behavioral analysis

  • Session replay tools to understand user experience

Functional Cookies: These cookies enable enhanced functionality:

  • Preferences and settings storage

  • Language and region preferences

  • Previously viewed content

Marketing Cookies: These cookies may be used to deliver relevant advertisements:

  • Tracking pixels for advertising effectiveness

  • Remarketing and retargeting cookies

  • Third-party advertising cookies

11.3 Third-Party Cookies

Our Services may include cookies from third parties:

  • Google Analytics: Analytics and reporting

  • Amplitude: Behavioral analytics

  • Social media platforms: If you interact with social sharing features

These third parties have their own privacy policies governing their use of your information.

11.4 Local Storage

We use browser local storage and session storage to store:

  • User preferences and settings

  • Cached data for performance optimization

  • Temporary authentication tokens

11.5 Managing Cookies

Browser Settings: Most web browsers allow you to control cookies through their settings. You can:

  • Block all cookies

  • Accept only certain cookies

  • Delete cookies after browsing

  • Set your browser to notify you when you receive a cookie

Mobile App Settings: You can manage tracking preferences through your device settings:

  • iOS: Settings > Privacy > Tracking

  • Android: Settings > Google > Ads

Opt-Out Tools:

  • Google Analytics Opt-Out: https://tools.google.com/dlpage/gaoptout

  • Network Advertising Initiative: http://www.networkadvertising.org/choices/

Important: Disabling cookies may affect your ability to use certain features of our Services. Strictly necessary cookies cannot be disabled without affecting core functionality.

11.6 Do Not Track

Some browsers have "Do Not Track" features. We do not currently respond to Do Not Track signals but may do so in the future as industry standards develop.

12. Third-Party Services and Integrations

12.1 Third-Party Links

Our Services may contain links to third-party websites, applications, or services that are not operated by MOJOE. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our platform.

12.2 Key Third-Party Services

OpenAI (AI Services)

  • Purpose: Powers AI Career Coach, CV assistance, job matching, content generation

  • Data Shared: Conversation messages, profile information, career goals

  • Privacy Policy: https://openai.com/policies/privacy-policy

  • Data Retention: OpenAI does not retain data for their own purposes under our enterprise agreement

Meta Llama (AI Services)

  • Purpose: Additional AI model support

  • Data Shared: Selected text inputs for processing

  • Privacy Policy: https://ai.meta.com/llama/privacy-policy

Supabase (Database & Auth)

  • Purpose: Data storage, authentication, database management

  • Data Shared: All user data stored in our database

  • Privacy Policy: https://supabase.com/privacy

  • Location: United States and EU regions

Vercel (Hosting)

  • Purpose: Application hosting and deployment

  • Data Shared: All application data passing through our servers

  • Privacy Policy: https://vercel.com/legal/privacy-policy

  • Location: Global CDN with edge locations worldwide

Google Analytics (Analytics)

  • Purpose: Website and app usage analytics

  • Data Shared: Usage patterns, device information, page views

  • Privacy Policy: https://policies.google.com/privacy

Amplitude (Analytics)

  • Purpose: Behavioral analytics and event tracking

  • Data Shared: User events, interaction patterns, session data

  • Privacy Policy: https://amplitude.com/privacy

Apple & Google (Payments)

  • Purpose: Process in-app subscription payments

  • Data Shared: Purchase transactions, subscription status

  • Privacy Policies:

    • Apple: https://www.apple.com/legal/privacy/

    • Google: https://policies.google.com/privacy

12.3 Social Media Features

Our Services may include social media features (e.g., share buttons). These features may collect your IP address, which page you are visiting, and may set cookies. These features are hosted by the respective social media platforms and governed by their privacy policies.

12.4 No Endorsement

The inclusion of links or integrations with third-party services does not imply endorsement by MOJOE. We are not responsible for the content, accuracy, or practices of these third parties.

13. Children's Privacy

13.1 Age Requirement

Our Services are intended for users aged 16 years and older. We do not knowingly collect personal information from individuals under 16 years of age.

13.2 Age Verification

We verify age through:

  • Date of birth entry during registration

  • Account creation requires users to confirm they are 16 or older

13.3 Parental Rights

If you are a parent or guardian and believe your child under 16 has provided personal information to MOJOE without your consent, please contact us immediately at info@joinmojoe.com. We will take prompt steps to delete such information from our systems.

13.4 Account Deletion for Underage Users

If we become aware that a user is under 16 years of age, we will:

  1. Immediately suspend the account

  2. Delete all personal information associated with the account

  3. Notify the email address on file

14. Your Privacy Rights

14.1 Rights for All Users

Regardless of your location, you have the following rights:

Right to Access: You may request confirmation of whether we process your personal information and obtain a copy of that information.

Right to Rectification: You may request correction of inaccurate or incomplete personal information.

Right to Deletion: You may request deletion of your personal information, subject to our data retention policies and legal obligations.

Right to Restrict Processing: You may request that we limit the processing of your personal information in certain circumstances.

Right to Opt-Out of Marketing: You may opt out of marketing communications by contacting info@joinmojoe.com.

14.2 How to Exercise Your Rights

To exercise any of these rights, contact us at:

  • Email: info@joinmojoe.com

  • Subject Line: "Privacy Rights Request"

  • Include: Your full name, email address, and description of your request

We will respond to your request within 30 days (or as required by applicable law). We may request additional information to verify your identity before processing your request.

14.3 Verification Process

To protect your privacy, we may require you to verify your identity by:

  • Confirming your email address

  • Providing account information

  • Answering security questions

  • Providing government-issued identification (in certain cases)

14.4 Limitations on Rights

Your rights may be limited by law or our legitimate business interests. For example:

  • We may not delete data if required to retain it by law

  • We may not provide access if it would reveal confidential business information

  • We may charge a reasonable fee for excessive or repetitive requests

14.5 No Discrimination

We will not discriminate against you for exercising your privacy rights. You will not receive different pricing, service levels, or quality based on exercising these rights.

15. California Privacy Rights (CCPA)

This section applies to California residents and supplements the rest of this Privacy Policy.

15.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information:

Identifiers:

  • Name, email address, date of birth, IP address, device identifiers

Personal Information (Cal. Civ. Code § 1798.80(e)):

  • Name, contact information, education, employment history

Commercial Information:

  • Subscription purchase history, payment transactions

Internet Activity:

  • Browsing history, search history, interaction with our application

Geolocation Data:

  • Approximate location based on IP address

Professional or Employment Information:

  • Career goals, work experience, athletic career history

Inferences:

  • Preferences, interests, career fit predictions derived from your usage

15.2 Sources of Information

We collect personal information from:

  • Directly from you

  • Automatically through cookies and tracking technologies

  • From sports clubs and organizations

  • From third-party service providers (OpenAI, Google, Amplitude, etc.)

  • From publicly available sources

15.3 Business Purposes for Collection

We collect and use personal information for the purposes described in Section 4 of this Privacy Policy, including:

  • Providing and improving our Services

  • AI training and model development

  • Marketing and communications

  • Security and fraud prevention

  • Legal compliance

15.4 Sale and Sharing of Personal Information

Sale of Information: We may "sell" or "share" anonymized, de-identified, or aggregated data for commercial purposes. We do not sell personal information that can identify you.

Right to Opt-Out: You have the right to opt out of the sale or sharing of your personal information. To exercise this right, contact us at info@joinmojoe.com with the subject line "Do Not Sell My Personal Information."

We do not sell personal information of minors under 16 years of age.

15.5 California Consumer Rights

As a California resident, you have the following rights under the CCPA:

Right to Know: You may request:

  • Categories of personal information we collect

  • Categories of sources from which we collect

  • Business purposes for collection

  • Categories of third parties with whom we share information

  • Specific pieces of personal information we have collected about you

Right to Delete: You may request deletion of your personal information, subject to certain exceptions.

Right to Correct: You may request correction of inaccurate personal information.

Right to Opt-Out: You may opt out of the sale or sharing of your personal information.

Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

15.6 Exercising Your Rights

To exercise your California privacy rights:

  • Email: info@joinmojoe.com

  • Subject Line: "California Privacy Rights Request"

We will verify your identity and respond within 45 days (may be extended by an additional 45 days with notice).

15.7 Authorized Agents

You may designate an authorized agent to make requests on your behalf. We may require:

  • Proof of the agent's authorization

  • Verification of your identity

  • Direct confirmation from you

15.8 Shine the Light

Under California Civil Code Section 1798.83, California residents may request information about personal information we have shared with third parties for their direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes without your consent.

16. Data Breach Notification

16.1 Our Commitment

We take data security seriously and have implemented robust security measures to protect your personal information. However, no system is completely secure.

16.2 Breach Response Process

In the event of a data breach that affects your personal information, we will:

Immediate Assessment (within 24-72 hours):

  • Identify the nature and scope of the breach

  • Determine which users are affected

  • Assess the risk to individuals

Containment and Remediation:

  • Take immediate steps to contain the breach

  • Implement measures to prevent further unauthorized access

  • Engage cybersecurity experts if necessary

Notification: We will notify affected users in accordance with applicable laws, including:

  • GDPR Requirements (EEA, UK, Switzerland):

    • Notification to supervisory authority within 72 hours of becoming aware of the breach (if risk to rights and freedoms)

    • Notification to affected individuals without undue delay if high risk to rights and freedoms

  • CCPA Requirements (California):

    • Notification to affected California residents without unreasonable delay

  • Other Jurisdictions:

    • Compliance with applicable state, federal, and international breach notification laws

16.3 What We Will Tell You

Our breach notification will include:

  • Description of the incident and what happened

  • Types of personal information affected

  • Steps we have taken to address the breach

  • Steps you can take to protect yourself

  • How to contact us for more information

16.4 Method of Notification

We will notify you via:

  • Email to the address on file

  • In-app notification or alert

  • Prominent notice on our website (if applicable)

16.5 Your Responsibilities

If you believe your account has been compromised:

  1. Change your password immediately

  2. Contact us at info@joinmojoe.com

  3. Monitor your account for unauthorized activity

  4. Enable additional security measures if available

17. Changes to This Privacy Policy

17.1 Right to Modify

We reserve the right to modify this Privacy Policy at any time to reflect changes in our practices, Services, legal requirements, or for other operational, legal, or regulatory reasons.

17.2 Notice of Changes

Material Changes: If we make material changes that significantly affect your rights or how we use your personal information, we will:

  • Notify you via email at least 30 days before the changes take effect

  • Display a prominent notice on our website and mobile application

  • Request your consent if required by law

Non-Material Changes: For minor changes (e.g., clarifications, formatting, contact information updates), we will update the "Last Updated" date at the top of this Policy.

17.3 Your Acceptance

Continued use of our Services after changes take effect constitutes your acceptance of the updated Privacy Policy.

If you do not agree to the changes:

  • You may delete your account as described in Section 8

  • You may stop using our Services

  • Contact us to discuss your concerns

17.4 Version History

We maintain previous versions of this Privacy Policy for reference. You may request access to prior versions by contacting info@joinmojoe.com.

18. Contact Us

18.1 General Inquiries

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

MOJOE COMMUNITY LTD

  • Email: info@joinmojoe.com

  • Registered Address: 1 Chapel Court, Holly Walk, Leamington Spa, Warwickshire, England, CV32 4YS

  • Company Number: 15763396

18.2 Data Protection Contact

For specific data protection inquiries, including:

  • Exercising your privacy rights

  • Data access or deletion requests

  • Data breach concerns

  • Complaints about our data practices

Please email: info@joinmojoe.com with the subject line "Data Protection Inquiry"

19. Acknowledgment and Consent

By creating a MOJOE account, accessing our Services, or continuing to use our platform after receiving notice of changes to this Privacy Policy, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy, including:

✓ MOJOE's ownership of all data you provide or generate

✓ Our right to use anonymized data for AI training and commercial purposes

✓ Your sports club's ability to view your individual usage data (if applicable)

✓ International data transfers to the United States and other countries

✓ Our data retention and deletion practices

✓ The use of cookies and tracking technologies

✓ Sharing of information with third-party service providers

If you do not agree to this Privacy Policy, please do not use our Services.