Privacy Policy

This Privacy Policy explains how Korlow Inc., operating as Korlow (“Korlow,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects personal information when you use the Korlow mobile application, website, and related services (collectively, the “Service”).

Korlow is a sports-focused platform designed to help Athletes and other members of the sports ecosystem build their sports identities, document their careers, connect with relevant people and organizations, communicate, recruit, discover opportunities, and develop professional relationships.

This Privacy Policy applies to users of the Service and visitors to Korlow-operated websites that link to this Privacy Policy.

By using Korlow, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

The information we collect depends on how you use Korlow, your account type, age, settings, relationships with other users, and the features you choose to use.

1.1 Account and Identity Information

We may collect information such as:

name;

username;

email address;

telephone number;

authentication information;

account identifiers;

account role;

profile photograph;

country or region;

account status;

verification information; and

information necessary to administer or secure your account.

Different account types may provide different information based on their role within the sports ecosystem.

1.2 Age and Youth-Safety Information

Korlow may collect your date of birth and related information necessary to determine age eligibility and apply age-appropriate protections.

Korlow is currently available only to users age 13 and older. Users ages 13 through 17 may receive additional youth privacy, communication, visibility, and safety protections.

An exact date of birth may be treated differently from publicly displayed age information.

Where applicable, Korlow may also process:

age-verification state;

age tier;

policy acknowledgments;

consent status;

guardian-related information;

records associated with parental or guardian consent;

age-tier transitions;

date-of-birth correction requests; and

records reasonably necessary to demonstrate compliance with youth-safety and legal requirements.

Korlow does not intend to publicly display an exact date of birth merely because an Athlete maintains a public profile.

Where Korlow displays an Athlete's age, that age may be derived from trusted date-of-birth information without revealing the exact underlying date of birth.

1.3 Athletic and Professional Information

Depending on your account type and the features you use, we may collect information such as:

sport;

position or event;

jersey number;

team, club, school, league, conference, or organization;

athletic level;

seasons and career history;

athletic affiliations;

statistics and performance information;

height and weight;

dominant side or other sport-specific attributes;

personal bests;

highlights and athletic media;

recruiting status and preferences;

coach or professional contact information;

career history;

professional credentials;

organizational affiliations;

representation information;

sponsorship or business information;

media or creator information; and

other sports, career, recruiting, or professional information you choose to provide.

Some of this information may be intended for public or recruiting visibility depending on your account type and settings.

1.4 Content and Communications

We may process content that you create, upload, publish, receive, or send through Korlow, including:

posts;

photographs;

videos;

captions;

comments;

engagement activity;

direct messages;

voice messages;

private media;

View Once or other limited-view media;

Connect requests;

professional inquiries;

inquiry responses;

recruiting communications;

relationship or partnership information; and

reports submitted to Korlow.

Private communications are processed as necessary to deliver, secure, moderate, and enforce the Service.

The fact that content is sent through a private feature does not prevent Korlow from processing that content when reasonably necessary for safety, security, abuse prevention, legal compliance, user reports, or enforcement of our Terms or Community Guidelines.

1.5 Contact Information

Users may choose to provide contact information for professional, recruiting, organizational, business, or other legitimate purposes.

Depending on the feature, this may include:

email address;

telephone number;

professional contact information;

coach contact information;

organization contact information; or

other contact details you choose to provide.

Access to certain contact information may depend on account type, age, authorization, relationship status, accepted inquiries, permissions, or other safeguards.

1.6 Recruiting, Connection, and Relationship Information

Korlow may process information related to professional interactions, including:

Connect requests;

professional inquiries;

inquiry type;

inquiry status;

accepted, rejected, pending, or closed inquiries;

recruiting interest;

partnerships;

affiliations;

team or organization relationships; and

other relationship state necessary to operate Korlow's professional networking features.

1.7 Universal Event Information

When you create, manage, discover, register for, apply to, withdraw from, communicate about, or participate in an Event, Korlow may process information such as:

Event identity, category, description, and status;

organizer identity and authority;

registration, application, eligibility, and participation status;

participant or attendee information;

Event date, time, and stated location;

capacity, availability, and waitlist information where applicable;

Event-related communications;

cancellation, withdrawal, completion, and historical participation records; and

reports, safety information, and enforcement records associated with an Event.

An Event's stated location is information associated with the Event. It does not mean that Korlow collects your device's precise geolocation unless a separate feature clearly requests and discloses that collection.

1.8 Subscription and Transaction Information

If you purchase a Korlow subscription through an app marketplace or other authorized payment provider, Korlow may receive information relating to the transaction, such as:

product or subscription purchased;

subscription status;

entitlement status;

purchase date;

renewal or expiration information;

transaction identifiers;

original transaction identifiers;

refund information;

revocation information; and

information necessary to restore or validate your purchase.

Payment processing may be performed by Apple, Google, or another authorized provider.

Korlow generally does not receive your complete payment-card number when payment is processed by an app marketplace or external payment provider.

The payment provider's own privacy policy applies to information it processes independently.

1.9 Referral and Invitation Information

If Korlow provides referral, invitation, waitlist, launch-access, or reward programs, we may process information such as:

referral or invitation codes;

referring account identifiers;

referred account identifiers;

invitation status;

eligibility status;

qualifying subscription status;

referral attribution;

reward or credit status; and

information necessary to prevent referral fraud or abuse.

1.10 Reports, Blocks, and Trust & Safety Information

When users use Korlow's safety features, we may collect and process information such as:

reports;

report categories or reasons;

reported content or account references;

block relationships;

unblock activity;

moderation records;

safety investigations;

enforcement records;

abuse-prevention information;

rate-limit information; and

information necessary to protect users or maintain platform integrity.

We may preserve relevant content or account information when reasonably necessary to investigate a report, enforce our policies, comply with law, or protect the safety of users or others.

1.11 Device, Technical, and Usage Information

We may collect technical and operational information necessary to provide, secure, troubleshoot, and improve Korlow, such as:

device type;

operating system;

application version;

browser type where applicable;

device or installation identifiers;

IP address;

timestamps;

crash information;

diagnostic information;

security events;

authentication events;

network or service errors; and

interactions with Service features.

We may use service providers to help process diagnostic, infrastructure, security, or operational information.

1.12 Information From Other Users

Other Korlow users may provide information relating to you.

For example:

a team or organization may identify an affiliation with you;

another user may tag or reference you;

a professional may send you an inquiry;

a user may report content or conduct involving you;

a partner may request a relationship or affiliation; or

a user may invite you to Korlow.

We process this information as necessary to operate the relevant feature and maintain platform safety and integrity.

1.13 Information From Service Providers and Platforms

We may receive information from service providers or platforms that support Korlow, such as:

authentication providers;

cloud infrastructure providers;

app marketplaces;

payment or subscription platforms;

notification providers;

security providers;

analytics or diagnostic providers where implemented; and

verification or consent providers where implemented.

The information received depends on the service and your interaction with it.

2. How We Use Personal Information

We may use personal information to:

create and maintain accounts;

authenticate users;

verify account eligibility;

operate user profiles;

provide Feed and Discover;

display sports and professional identities;

provide recruiting and career features;

manage seasons, statistics, highlights, and career history;

facilitate Connect requests and professional inquiries;

provide authorized messaging and media;

enforce communication permissions;

provide contact-sharing features where authorized;

enforce age-appropriate access and communication rules;

determine account and feature eligibility;

operate waitlists or launch-access systems;

provide subscriptions and manage entitlements;

restore purchases;

operate referral and invitation programs;

create, publish, administer, discover, register for, participate in, communicate about, and maintain the lifecycle and history of Events;

send service notifications;

prevent fraud, spam, abuse, and platform manipulation;

investigate reports;

enforce blocks;

protect users and the Service;

enforce our Terms of Service and Community Guidelines;

provide customer support;

diagnose technical problems;

maintain Service reliability;

develop and improve Korlow;

comply with legal and regulatory obligations;

respond to lawful requests;

protect our legal rights and the rights of others; and

establish, exercise, or defend legal claims.

We will not use personal information for materially incompatible purposes without an appropriate legal basis, notice, or consent where required.

3. Public Information

Korlow is designed in part to help users establish sports and professional identities.

Information you intentionally make public may be visible to other Korlow users and, depending on the feature and Service configuration, potentially to people outside Korlow.

For an eligible Athlete, public information may include information such as:

name;

profile image;

sport;

team or program;

position or event;

athletic level;

derived age;

height or weight where provided for athletic purposes;

jersey number;

athletic affiliations;

statistics;

seasons;

career history;

highlights;

posts;

recruiting information intended for public visibility; and

other information the Athlete chooses or is permitted to make public.

For other account types, public information may include:

name;

profile photograph;

professional role;

organization;

sport;

professional affiliations;

biography;

public posts;

business or sponsorship information; and

other professional information intended for public display.

Korlow may limit public visibility based on age, account status, verification, safety requirements, user settings, or applicable law.

Certain information, including exact date of birth and protected private contact information, is not intended to become public merely because a user has a public profile.

4. How We Disclose Personal Information

Korlow does not disclose personal information indiscriminately.

We may disclose information in the following circumstances.

4.1 With Other Users

Information may be disclosed to other users when necessary to provide features you use.

For example:

public profile information may be visible to other users;

posts may be visible according to their visibility settings;

an inquiry recipient may see information about the sender;

participants in an authorized conversation may receive messages or media;

contact information may be disclosed when the applicable permissions allow it; and

relationship or affiliation information may be visible where the Service is designed to display it.

Event organizers and eligible participants may see Event details, organizer identity, registration or participation status, and participant information where the Event and Korlow's permissions are designed to make that information available.

4.2 With Service Providers

We may use third-party service providers to help operate Korlow.

These may include providers of:

cloud hosting;

databases;

authentication;

file and media storage;

application infrastructure;

push notifications;

email delivery;

subscription processing;

payment infrastructure;

security;

diagnostics;

customer support;

age or consent verification, if implemented; and

other operational services.

These providers may process information on our behalf subject to contractual, technical, or legal safeguards appropriate to their role.

4.3 App Marketplaces and Payment Providers

When you purchase or manage a subscription, information may be exchanged with the applicable marketplace or payment provider to:

validate purchases;

provide entitlements;

process renewals;

restore purchases;

address refunds or revocations; and

prevent transaction fraud.

4.4 Legal and Safety Reasons

We may preserve or disclose information where we reasonably believe doing so is necessary to:

comply with applicable law;

comply with a court order, subpoena, warrant, or other lawful process;

respond to lawful requests from public authorities;

protect the rights, property, or safety of Korlow, our users, or others;

investigate fraud, exploitation, abuse, or security incidents;

address credible threats;

protect young people;

prevent serious harm; or

establish, exercise, or defend legal claims.

Where appropriate and legally permitted, we may evaluate requests for information for validity and scope.

4.5 Business Transactions

If Korlow is involved in a merger, financing, acquisition, reorganization, sale of assets, insolvency process, or similar corporate transaction, information may be disclosed as reasonably necessary for that transaction and subject to applicable law.

Any successor that receives personal information will be expected to handle it consistently with applicable privacy obligations.

4.6 With Your Direction or Consent

We may disclose information when you direct us to do so or provide consent, including when you intentionally use features designed to share information with another person or organization.

5. We Do Not Sell Personal Information as a Data-Broker Business

Korlow does not operate as a data broker.

We do not intend to sell users' personal information to third parties in exchange for money.

If Korlow's practices materially change in the future, we will update this Privacy Policy and provide any notices, choices, or rights required by applicable law.

6. Youth and Children's Privacy

Korlow takes youth privacy and safety seriously.

Korlow is currently available only to users age 13 and older. Age eligibility and available features may differ based on a user's age and jurisdiction.

Users Under 18

Users under 18 may receive additional privacy, communication, visibility, or safety protections.

These protections may include restrictions involving:

public visibility;

professional communications;

direct messaging;

contact information;

media access;

professional inquiries;

account relationships; and

other features that create elevated safety or privacy risks.

Eligible teenage Athletes may still be able to maintain sports profiles, document athletic careers, participate in recruiting, and use legitimate professional features subject to Korlow's age-appropriate safeguards.

Users Under 13 or Other Applicable Consent Thresholds

Korlow does not currently admit users under 13 or operate a parental or guardian consent process that unlocks an under-13 account.

Korlow may introduce access for users under 13 in a future release only after implementing appropriate parental or guardian consent, privacy, age-assurance, communication, and safety safeguards and providing any additional notices and rights required by applicable law.

7. Communication and Contact Privacy

Korlow uses account roles, relationships, inquiry status, age information, blocks, and other permissions to determine whether particular communications or contact information should be available.

Professional users may be required to use a Connect or inquiry process before communicating directly with certain users.

Acceptance of an inquiry may create permission for communication but does not authorize unrestricted access to unrelated private information.

Users must not attempt to circumvent Korlow's communication, block, age, or contact-access controls.

8. Private Messages and Media

Korlow may provide direct messages, photographs, videos, voice messages, and limited-view or View Once media.

We use technical controls designed to restrict access to authorized participants.

However, no digital communication system can guarantee that a recipient will not record, photograph, copy, reproduce, or otherwise retain information using methods outside Korlow's technical control.

Users should therefore exercise appropriate judgment when sharing sensitive information.

Korlow may process private communications when reasonably necessary to:

deliver the communication;

authorize access;

maintain Service functionality;

investigate a report;

enforce blocks or safety rules;

detect abuse;

comply with law; or

protect users.

Before a new voice message is delivered, Korlow may use a service provider to transcribe the recording temporarily for automated safety analysis. Korlow uses the resulting text to apply the same safety controls used for written messages. The full transcript is not retained as a message or shown to reviewers by default; Korlow may retain limited safety metadata, hashes, classifications, and audit evidence needed to enforce its rules and protect users.

9. Reports and Blocking

When you block another user, Korlow may create and maintain records necessary to enforce that block across relevant Service features.

Blocking may affect:

messaging;

media;

Connect requests;

professional inquiries;

contact access;

profile access;

Feed visibility;

Discover visibility; and

other interactions.

When you submit a report, Korlow may process the reported content, related account information, relevant communications, and technical information reasonably necessary to review the report.

The person you report may not receive information identifying you as the reporter except where required by law or necessary for a legal or safety process.

10. Data Retention

Korlow retains personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

provide the Service;

maintain an active account;

preserve legitimate sports and career records;

process subscriptions;

maintain security;

investigate abuse;

enforce blocks;

resolve disputes;

prevent fraud;

comply with legal obligations; and

establish, exercise, or defend legal claims.

Different categories of information may have different retention periods.

Event lifecycle, registration, participation, cancellation, withdrawal, completion, communication, and safety records may be retained where reasonably necessary to operate the Event, preserve appropriate participation history, address reports or disputes, protect users, or comply with legal obligations.

For example, Korlow may retain certain:

transaction records;

consent records;

policy acknowledgments;

moderation records;

safety records;

deletion records; or

security records

after other account information has been deleted where retention is reasonably necessary or legally required.

We may also retain information in backups for a limited period before it is overwritten or deleted through normal backup processes.

Where information is no longer reasonably necessary, we may delete, anonymize, or de-identify it, subject to applicable law.

11. Account Deletion

Korlow may provide users with a mechanism to request or initiate account deletion.

Deleting an account may result in deletion, anonymization, or de-identification of personal information associated with the account, subject to:

legal retention requirements;

fraud prevention;

transaction records;

consent records;

safety and moderation records;

legitimate dispute resolution;

protection of other users; and

technical backup limitations.

Some content involving other users may not disappear immediately or completely.

For example, another user's legitimate records may retain limited references necessary to preserve conversation integrity, transactions, reports, or organizational history, subject to applicable law.

12. Your Privacy Rights

Depending on where you live, you may have legal rights concerning your personal information.

These may include rights to:

request access to personal information;

request correction of inaccurate information;

request deletion;

withdraw consent where processing depends on consent;

object to or restrict certain processing;

request information about how personal information has been used or disclosed;

request portability of certain information where applicable;

lodge a complaint with an applicable privacy or data-protection authority; and

exercise other rights provided by applicable law.

These rights are not absolute and may be subject to legal exceptions.

Korlow may need to verify your identity before fulfilling a privacy request. We may request information reasonably necessary to confirm that the request relates to you and to protect accounts and personal information from unauthorized access.

If an authorized representative is permitted to make a request on your behalf under applicable law, we may require appropriate verification of that authority.

Korlow will not discriminate against a user for exercising a privacy right protected by applicable law.

13. Canadian Privacy Rights

Korlow is based in Canada and may be subject to Canadian federal and provincial privacy requirements, depending on the circumstances.

Where applicable, Korlow will process personal information in accordance with applicable Canadian privacy law.

Korlow seeks to collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances and to obtain consent where consent is legally required.

Depending on applicable law and the nature of the information, consent may be express or implied.

You may be entitled to request access to personal information Korlow holds about you and request correction of information that is inaccurate or incomplete, subject to applicable exceptions.

Where processing depends on consent, you may withdraw consent subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may affect Korlow's ability to provide features that require the relevant information.

Canadian users may also have the right to submit a complaint to the appropriate privacy regulator.

14. United States Privacy Rights

Users in certain U.S. states may have additional privacy rights under applicable state law.

Depending on your jurisdiction and Korlow's legal obligations, these may include rights to:

know or access categories or specific pieces of personal information collected;

request correction;

request deletion;

obtain information regarding categories of personal information disclosed to third parties;

opt out of certain uses or disclosures where applicable;

limit certain uses of sensitive personal information where applicable; and

appeal certain privacy-request decisions where required.

Korlow does not intend to sell personal information for money or operate as a data broker.

If Korlow later engages in advertising, analytics, or data practices that constitute “sale,” “sharing,” or targeted advertising under an applicable privacy law, Korlow will provide any notices and choices required by that law before relying on those practices.

15. International and Cross-Border Processing

Korlow may use service providers or infrastructure located in Canada, the United States, or other jurisdictions.

As a result, personal information may be processed or stored outside your province, state, territory, or country.

Information processed in another jurisdiction may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement agencies, regulators, or other authorities where legally permitted.

Where required, Korlow will use appropriate contractual, organizational, or technical measures relating to cross-border processing.

16. Security

Korlow uses administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, misuse, loss, or destruction.

These safeguards may include measures involving:

authentication;

authorization;

role-based access;

backend-controlled data;

database and storage security rules;

communication permissions;

age-aware access controls;

blocking;

private-media authorization;

account-status checks;

logging and monitoring;

infrastructure security; and

restricted administrative access.

No system is completely secure.

Korlow cannot guarantee that unauthorized parties will never defeat security measures or that information transmitted through the Service will always remain secure.

Users are responsible for maintaining the confidentiality of their credentials and for notifying Korlow if they believe their account has been compromised.

17. Automated Decisions and Eligibility Systems

Korlow may use automated rules to determine whether an account or interaction is eligible for particular features.

For example, automated systems may consider:

account status;

account role;

age tier;

consent status;

subscription entitlement;

accepted inquiry status;

block status;

relationship status;

profile eligibility; or

other platform permissions.

These systems are primarily intended to enforce product access, privacy, security, safety, and platform rules.

Where applicable law grants rights relating to certain automated decisions with significant legal or similarly significant effects, Korlow will provide those rights as required.

18. Notifications and Service Communications

Korlow may send communications necessary to operate the Service, including:

account communications;

security notices;

verification messages;

recruiting or inquiry notifications;

messaging notifications;

subscription notices;

policy updates;

safety notices; and

administrative communications.

Users may be able to control certain push notifications or optional communications through device or application settings.

Some operational, legal, security, or account-related communications may not be optional while an account remains active.

If Korlow sends promotional electronic communications, Korlow will provide any consent and unsubscribe mechanisms required by applicable law.

19. Cookies and Web Technologies

Korlow's websites may use cookies, local storage, or similar technologies where necessary to:

operate website functionality;

maintain sessions;

provide security;

remember preferences;

diagnose technical problems; or

understand Service performance.

If Korlow introduces non-essential analytics, advertising, or tracking technologies that require notice or consent under applicable law, appropriate controls will be implemented before those technologies are used where legally required.

20. Third-Party Services and Links

Korlow may contain links to websites, applications, organizations, or services operated by third parties.

For example, users may link to:

team or organization websites;

social media profiles;

external recruiting resources;

businesses;

app marketplaces; or

other third-party destinations.

Korlow does not control the privacy practices of independent third parties.

Information you provide directly to a third party is governed by that third party's privacy practices, not this Privacy Policy.

Users should review the privacy policies of third-party services before providing them with personal information.

21. App Marketplaces

If you download Korlow or purchase a subscription through an app marketplace, the marketplace may independently collect and process information relating to your account, device, downloads, purchases, and payments.

Apple, Google, and other marketplace operators process information under their own terms and privacy policies.

Korlow receives only the information made available to it that is necessary to operate relevant application or subscription functionality.

22. Changes to This Privacy Policy

Korlow may update this Privacy Policy as the Service, our practices, or applicable laws change.

When we make changes, we may update the effective date and version number.

Where appropriate or legally required, Korlow may:

provide notice of material changes;

display an in-app notice;

request acknowledgment of an updated policy; or

obtain consent where required.

Continued use of Korlow following an update will be handled in accordance with applicable law and Korlow's policy-acknowledgment requirements.

23. Contact and Privacy Requests

Questions, concerns, or requests regarding this Privacy Policy or Korlow's handling of personal information may be submitted through Korlow's designated privacy or support contact channel.

Korlow Inc.

British Columbia, Canada

Privacy contact: privacy@korlow.com

24. Complaints

If you have concerns about Korlow's handling of personal information, we encourage you to contact Korlow first so that we can review the concern.

Depending on your jurisdiction, you may also have the right to contact the applicable privacy or data-protection regulator.

Korlow will not retaliate against a user for making a good-faith privacy complaint or exercising a legally protected privacy right.

25. Entire Privacy Notice

This Privacy Policy describes Korlow's general privacy practices for the Service.

Certain features, jurisdictions, programs, or consent processes may include additional privacy notices. Where an additional notice applies, it should be read together with this Privacy Policy.