Data Processing Addendum

Last updated Aug 4, 2026

Data Processing Addendum Last updated: August 4, 2026 This Data Processing Addendum ("DPA") forms part of the Terms of Service between HyperCoach LLC ("HyperCoach," "Processor," "we," "us") and a Coach or coaching business ("Controller," "you") that uses the HyperCoach platform (the "Platform"). It applies to our processing of personal data about your Clients and team on your behalf. Where you are subject to data-protection laws such as the GDPR, UK GDPR, or U.S. state privacy laws, this DPA applies to that processing. 1. Roles For personal data you collect about your Clients and team through the Platform, you are the Controller and HyperCoach is the Processor acting on your documented instructions. For account, subscription, and platform-security data, HyperCoach is a controller as described in our Privacy Policy. 2. Scope and Purpose of Processing - Subject matter: providing the Platform's coaching, communication, scheduling, tracking, and billing features. - Duration: for the term of your subscription plus the retention periods described below. - Nature and purpose: hosting, storing, transmitting, and displaying data to operate the Platform for you. - Types of data: identifiers and contact details; profile and coaching information; health and fitness data (for example body metrics, progress photos, workout and nutrition logs, check-ins); messages; and payment-related metadata. - Data subjects: your Clients, your team members, and your own personnel. 3. Our Obligations We will: (a) process personal data only on your documented instructions, including the Platform's configuration and this DPA, unless required by law; (b) ensure personnel authorized to process data are bound by confidentiality; (c) implement appropriate technical and organizational security measures (Section 5); (d) assist you, taking into account the nature of processing, with data-subject requests and with your security, breach-notification, and impact-assessment obligations; and (e) make available information reasonably necessary to demonstrate compliance. 4. Subprocessors You authorize us to engage subprocessors to provide the Platform. Our current subprocessors are listed in our Subprocessor List. We impose data-protection obligations on subprocessors substantially similar to those in this DPA and remain responsible for their performance. We will give reasonable notice of new subprocessors via the Subprocessor List; if you reasonably object on data-protection grounds, you may cease using the affected feature or terminate. 5. Security We maintain measures including per-account access controls, tenant isolation so one business cannot access another's data, encryption of data in transit, access-limited storage, and monitoring. No method of transmission or storage is completely secure. 6. Personal Data Breach We will notify you without undue delay after becoming aware of a personal data breach affecting your data and provide information reasonably available to help you meet your notification obligations. 7. Data Subject Requests Because you control your Clients' coaching data, requests from data subjects should be directed to you. We will provide reasonable assistance and tools to help you respond, and will forward to you any request we receive that concerns your data. 8. International Transfers We and our subprocessors may process data in the United States and other countries. Where required, we rely on an appropriate transfer mechanism (such as Standard Contractual Clauses) for cross-border transfers. 9. Return and Deletion On termination, and subject to the export window in the Terms, we will delete or return your personal data, except where retention is required by law or for legitimate security, tax, or accounting purposes. 10. Liability and Governing Law Each party's liability under this DPA is subject to the limitations in the Terms of Service. This DPA is governed by the laws of the State of Georgia, consistent with the Terms. 11. Contact HyperCoach LLC Data-protection questions: support@hypercoachhq.com

HyperCoach