NxtREP Privacy Policy

Effective Date: September 4, 2026

Version: 1.0

Last Updated: September 4, 2026

Blue Gorilla Ventures LLC, a Florida limited liability company, doing business as NxtREP (“NxtREP,” “Company,” “we,” “us,” or “our”), respects your privacy.

Blue Gorilla Ventures LLC is the sole operator of the Platform and the sole legal entity responsible for the practices described in this Privacy Policy. Individual members, managers, officers, employees, contractors, and other people associated with NxtREP are not, in their personal capacity, parties to this Privacy Policy or controllers of your personal information.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use the NxtREP mobile application, website, booking platform, and related services collectively referred to as the “Platform.”

This Privacy Policy applies to Athletes, parents and guardians, Coaches, prospective Coaches, visitors, and other users of NxtREP.

By using NxtREP, you acknowledge the practices described in this Privacy Policy.

If you do not agree with this Privacy Policy, do not use the Platform.

1. About NxtREP

NxtREP operates a technology marketplace that connects Athletes and their parents or guardians with independent sports Coaches.

The Platform may provide services including:

Coach discovery;
Coach profiles;
sports and position searches;
location-based search;
scheduling;
availability;
bookings;
payments;
Coach payouts;
communications;
Coach identity verification;
background screening;
reviews;
account management; and
customer support.

NxtREP is operated by:

Blue Gorilla Ventures LLC doing business as NxtREP

Website: nxtrep.io

Privacy inquiries: privacy@nxtrep.io

Legal inquiries: legal@nxtrep.io

Support: support@nxtrep.io

2. Personal Information We Collect

The information we collect depends on how you use NxtREP.

A. Account and Contact Information

When you create or manage an account, we may collect:

first and last name;
email address;
telephone number;
account identifier;
username or profile handle;
password or authentication credentials in protected form;
account type;
communication preferences; and
other information necessary to create and maintain your account.

We may also receive authentication information from third-party sign-in providers if you choose to use one.

3. Athlete Information

For an Athlete, we may collect information such as:

Athlete name;
profile photo;
additional profile or gallery photos;
sport;
position;
training interests;
skill or experience information;
age or age-related information when needed;
general location or service area;
favorite Coaches;
booking history;
upcoming and completed sessions;
reviews or ratings;
information provided to a Coach for a session; and
other profile information voluntarily provided through the Platform.

For minor Athletes, this information is intended to be provided or managed by a parent, natural guardian, or other legally authorized adult.

NxtREP does not intend minor Athlete information to function as a public directory of children.

Information about a minor Athlete may be provided to a Coach as reasonably necessary to evaluate, accept, prepare for, or provide a booked training session.

4. Parent and Guardian Information

When an adult uses NxtREP for a minor Athlete, we may collect:

parent or guardian name;
account information;
email address;
telephone number;
relationship to the Athlete;
booking information;
emergency or safety information voluntarily provided;
payment-related information;
acceptance of Terms and legal documents; and
communications with Coaches or NxtREP.

We may also maintain records establishing that the adult represented that they had authority to act for the minor Athlete.

5. Coach Profile Information

When you create or apply for a Coach account, we may collect:

legal name;
public Coach display name;
email address;
telephone number;
date of birth or age information when required;
profile photograph;
gallery photographs;
biography;
sports coached;
positions coached;
experience;
certifications;
qualifications;
coaching history;
service areas;
pricing;
availability;
ratings and reviews;
booking history;
payout status; and
other information you provide about your coaching services.

Certain Coach profile information is intended to be displayed to Athletes, parents, guardians, and other Platform users.

This may include:

Coach name;
profile photograph;
gallery photographs;
biography;
sport;
position;
qualifications;
experience;
general service area;
pricing;
availability;
verification status;
ratings; and
reviews.

Do not place information in your public Coach profile that you do not want other Platform users to see.

6. Coach Identity Verification

NxtREP may require Coaches to complete identity verification.

Identity-verification providers may collect information such as:

legal name;
date of birth;
government-issued identification;
photographs of identification documents;
selfie or facial images;
identity-verification results;
fraud indicators; and
related verification information.

Depending on the provider and integration, some identity-verification information may be collected directly by the verification provider rather than stored by NxtREP.

NxtREP may receive:

verification status;
verification result;
verification identifiers;
limited identifying information;
risk indicators; or
other information necessary to determine whether verification requirements have been satisfied.

Identity-verification providers may process information according to their own privacy notices in addition to acting as service providers to NxtREP.

7. Coach Background Screening

NxtREP may use third-party background-screening providers to evaluate Coaches where permitted by law.

Information associated with screening may include:

name;
date of birth;
address information;
identifying information;
screening authorization;
criminal-record information;
sex-offender registry information where applicable;
sanctions or watchlist information;
screening status; and
screening results.

The screening provider may collect certain sensitive identifying information directly from the Coach.

NxtREP may receive the screening result, eligibility status, report information, or other information permitted by law.

Background screening may also be subject to separate disclosures, authorizations, notices, and legal requirements.

8. Payment Information

NxtREP uses third-party payment providers to process payments and Coach payouts.

Payment providers may collect:

credit or debit card information;
billing information;
bank-account information;
payout information;
tax-related information;
transaction information;
identity information; and
payment authentication information.

Full payment-card or bank-account credentials may be collected directly by the payment provider rather than stored by NxtREP.

NxtREP may receive information such as:

payment method identifier;
limited payment method details;
card brand;
last digits of a payment method;
transaction amount;
authorization status;
payment status;
refund status;
dispute or chargeback information;
payout status; and
payment-provider account identifiers.

9. Location Information

NxtREP uses location information to help users find Coaches, display relevant training opportunities, and support booking-related functionality.

We may collect:

city;
state;
ZIP or postal code;
general geographic area;
search location;
training location; and
location information that you manually provide.

If you grant the NxtREP mobile application permission to access your device location, we may also receive device location information.

Depending on the feature and permission you provide, this may include approximate or precise location.

You can control device-location permissions through your device settings.

Disabling location permission may limit certain location-based Platform functionality.

10. Booking and Transaction Information

When you use NxtREP to arrange training, we may collect:

Athlete;
parent or guardian;
Coach;
sport;
requested date and time;
scheduled date and time;
location;
session duration;
price;
Platform fees;
booking status;
cancellation information;
payment status;
refund information;
session completion status;
booking communications; and
related transaction records.

We use this information to create, manage, support, document, and enforce bookings.

11. Communications

If the Platform allows you to communicate with NxtREP, Coaches, Athletes, or parents, we may process the contents and metadata of those communications.

This can include:

messages;
support requests;
emails;
reports;
complaints;
safety reports;
attachments; and
related communications.

Information voluntarily included in messages may contain sensitive information.

Users should avoid sending unnecessary sensitive personal information through messaging features.

12. Photos and Other User Content

You may choose to upload:

profile photos;
Coach gallery photos;
Athlete photos;
videos if supported;
reviews;
ratings;
comments; or
other content.

We process this information to provide the feature for which it was submitted and for other purposes described in this Privacy Policy.

Users should only upload photos or other content when they have authority to do so.

Parents and guardians are responsible for determining what photographs or information concerning a minor Athlete they choose to provide.

13. Device, Technical, and Usage Information

When you use NxtREP, we may automatically collect certain technical information, including:

IP address;
device type;
device identifiers;
operating system;
application version;
browser information;
date and time of access;
pages or screens viewed;
actions taken within the Platform;
referring information;
crash information;
performance information;
authentication logs;
security logs; and
diagnostic information.

We may use cookies, SDKs, local storage, log files, and similar technologies where applicable.

14. Push Notifications

If you enable push notifications, we may process:

device push token;
account identifier; and
notification preferences.

We may send notifications relating to:

bookings;
Coach confirmations;
cancellations;
session reminders;
payments;
account security;
verification;
legal updates; and
other Platform activity.

You can control push notifications through your device settings.

15. Information We Receive From Other Sources

We may receive information from:

other NxtREP users;
payment processors;
identity-verification providers;
background-screening providers;
authentication providers;
fraud-prevention providers;
app stores;
customer-support providers;
analytics and diagnostic providers;
public sources when permitted by law; and
other service providers involved in operating NxtREP.

16. How We Use Personal Information

We may use personal information to:

Provide NxtREP

Including to:

create accounts;
maintain profiles;
display Coaches;
enable Coach searches;
match users with relevant Coaches;
manage availability;
facilitate bookings;
process payments;
facilitate payouts;
manage cancellations and refunds;
provide customer support; and
operate Platform features.

Verify Coaches

Including to:

verify identity;
conduct or facilitate background screening;
confirm account eligibility;
prevent impersonation; and
protect Athletes and Platform users.

Protect Safety and Security

Including to:

prevent fraud;
detect suspicious activity;
secure accounts;
investigate misconduct;
investigate safety reports;
enforce Platform rules;
prevent abuse;
protect minors;
resolve disputes; and
protect NxtREP and its users.

Communicate With You

Including to send:

booking notices;
session reminders;
payment notices;
support communications;
security alerts;
verification notices;
policy updates; and
other service-related communications.

Improve NxtREP

Including to:

analyze Platform performance;
understand feature usage;
diagnose technical problems;
improve user experience;
improve search and matching;
test features; and
develop new services.

Comply With Legal Obligations

Including to:

maintain required business records;
respond to lawful legal process;
comply with tax or financial requirements;
enforce agreements;
establish or defend legal claims; and
satisfy other legal or regulatory obligations.

17. How We Disclose Personal Information

We may disclose personal information as described below.

Athletes, Parents, and Coaches

Information necessary to facilitate a booking may be disclosed between the Athlete or parent/guardian and the Coach.

For example, a Coach may receive information necessary to:

identify the Athlete;
understand the requested training;
communicate about the booking;
determine where and when training will occur; and
provide the session.

Athletes and parents may see information included in a Coach’s public profile.

Service Providers

We may disclose information to companies that help us operate NxtREP, including providers of:

cloud hosting;
database services;
payment processing;
payouts;
identity verification;
background screening;
authentication;
fraud prevention;
communications;
push notifications;
customer support;
mapping and location services;
analytics;
crash reporting;
security; and
professional services.

Where a third party processes user data on NxtREP’s behalf, we require that provider to protect the information in accordance with its contractual obligations, applicable law, and privacy and security protections that are the same as or equivalent to the protections described in this Privacy Policy and required by applicable platform rules.

Some third parties may process information for their own independent purposes where disclosed in this Privacy Policy or in a notice presented at the time of collection. In those circumstances, their own privacy notices may also apply.

Legal and Safety Disclosures

We may disclose information when we reasonably believe disclosure is necessary to:

comply with applicable law;
comply with legal process;
respond to lawful government requests;
investigate fraud;
address a safety issue;
protect a child;
enforce our agreements;
protect NxtREP’s rights or property;
protect another person’s rights or safety; or
establish, exercise, or defend legal claims.

Business Transactions

If NxtREP or Blue Gorilla Ventures LLC is involved in a:

merger;
acquisition;
financing;
reorganization;
bankruptcy;
sale of assets; or
similar business transaction,

personal information may be disclosed or transferred in connection with that transaction, subject to applicable law.

18. Sale of Personal Information and Targeted Advertising

NxtREP does not sell personal information for money.

NxtREP does not use personal information for cross-context behavioral advertising or sell or share personal information for such advertising purposes as of the Effective Date of this Privacy Policy.

NxtREP does not knowingly sell personal information relating to minor Athletes.

If our practices materially change in the future, we will update this Privacy Policy and provide any notices and choices required by applicable law before engaging in those practices.

19. Sensitive Personal Information

Certain information processed through NxtREP may be considered sensitive under applicable privacy laws.

Depending on how you use NxtREP, this may include:

account login credentials;
precise geolocation;
financial information;
government-issued identification information;
identity-verification information;
background-screening information;
information concerning minors; and
information voluntarily included in support or booking communications.

We use sensitive information only for legitimate purposes associated with:

providing the Platform;
processing transactions;
identity verification;
Coach screening;
safety;
security;
fraud prevention;
legal compliance; and
other purposes permitted by applicable law.

20. Children’s and Minor Athlete Privacy

NxtREP is intended to be used and controlled by adults.

A person must be at least 18 years old to independently create and control a NxtREP account and enter into agreements with NxtREP.

Minor Athletes may participate through a parent, natural guardian, or other legally authorized adult.

Children under 13 are not permitted to create, control, or independently use an NxtREP account or account-based Platform features. Any NxtREP activity concerning a child under 13, including creation or management of an Athlete profile, bookings, communications with Coaches, photographs, and other personal information, must be submitted and managed by the child’s parent, natural guardian, or other legally authorized adult.

NxtREP is a general-audience platform that is not directed primarily to children under 13. NxtREP requires account holders to be at least 18 years old. NxtREP does not use age information or technical means to determine whether an account user is a child beyond requiring the account holder to represent that they are 18 or older.

NxtREP does not knowingly collect personal information directly from a child under 13. All information concerning a minor Athlete is submitted and managed through a parent, guardian, or legally authorized adult account.

Parents or guardians may provide information about minor Athletes, such as:

name;
photo;
sport;
position;
training interests;
age-related information;
bookings; and
information reasonably necessary for training.

NxtREP does not intend to request or collect personal information directly from a child under 13 through an independently controlled child account.

If we learn that we collected personal information directly from a child under 13, we will take appropriate steps consistent with applicable law, which may include restricting the account or feature, notifying the parent or guardian, or deleting the information.

Parents or guardians may contact us at privacy@nxtrep.io to request access to, correction of, or deletion of personal information associated with a minor Athlete under their authority.

We may take reasonable steps to verify the requesting person’s identity and authority before acting on the request.

21. Legal Document and Consent Records

NxtREP maintains records showing acceptance of legal agreements and privacy notices.

These records may include:

user identifier;
legal-document type;
document version;
date and time accepted;
IP address;
device or user-agent information; and
an immutable copy or identifier of the document accepted.

We use these records to:

administer user accounts;
establish the terms applicable to a user;
document consent or acknowledgment;
resolve disputes; and
comply with legal obligations.

These records may be retained after account deletion when reasonably necessary to establish or defend legal rights or satisfy applicable legal obligations.

22. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

maintain your account;
provide bookings and Platform services;
process payments and payouts;
maintain transaction records;
meet tax and accounting obligations;
prevent fraud;
protect Platform safety;
maintain Coach eligibility and screening records;
resolve disputes;
enforce agreements;
comply with legal requirements; and
establish or defend legal claims.

Retention periods vary depending on the type of information and why it is processed.

For example:

active account and profile information is generally maintained while the account remains active;
information that is no longer needed may be deleted, anonymized, or deidentified;
transaction, payment, tax, and accounting information may be retained for legally required or commercially reasonable recordkeeping periods;
safety, fraud, dispute, and incident records may be retained as reasonably necessary to protect users and establish or defend claims;
legal-document acceptance records may be retained as necessary to document the agreements applicable to an account;
information maintained in backups may remain until those backups are overwritten or expire through normal retention processes; and
third-party providers may maintain information according to their own legal obligations and retention policies.

We do not intend to retain personal information indefinitely when there is no legitimate reason to continue retaining it.

23. Account Deletion

You may request deletion of your NxtREP account and associated personal information through available account-management features or by contacting:

privacy@nxtrep.io

When an account is deleted, we will delete or deidentify personal information that we are not required or permitted to retain.

Certain information may be retained where reasonably necessary for:

legal compliance;
tax or accounting obligations;
completed transactions;
payment disputes;
fraud prevention;
safety investigations;
enforcement of agreements;
protection of users;
legal-document acceptance records; or
establishment or defense of legal claims.

Deleting an account may not immediately remove information from backup systems.

Information retained in backups will be handled according to our normal backup retention processes and will not ordinarily be restored except as necessary for legitimate operational or disaster-recovery purposes.

24. Correction of Information

You may update certain profile information directly through your account.

You may also contact privacy@nxtrep.io to request correction of inaccurate personal information.

We may require reasonable verification before making changes.

25. Privacy Rights

Depending on where you live and applicable law, you may have rights regarding personal information.

These may include the right to:

confirm whether we process your personal information;
access personal information;
receive a copy of personal information;
correct inaccurate personal information;
request deletion;
obtain portable data where applicable;
withdraw consent where processing is based on consent;
opt out of the sale of personal information;
opt out of certain sharing or targeted advertising;
opt out of certain profiling with significant legal or similar effects;
limit certain uses of sensitive personal information; and
appeal a decision we make concerning a privacy request.

These rights are subject to applicable exceptions.

State-Specific Privacy Rights

As of 2026, comprehensive consumer privacy laws are in effect in at least 20 U.S. states, including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. Depending on the state in which you reside, you may have additional rights, including:

the right to opt out of the sale or sharing of personal information;
the right to limit the use of sensitive personal information;
the right to correct inaccurate personal information;
the right to access and obtain a copy of your personal information;
the right to request deletion of your personal information; and
the right to appeal a denial of a privacy request.

NxtREP will respond to verified privacy requests within 45 days of receipt, consistent with applicable state law. If more time is needed, NxtREP will inform you of the reason for the extension and the estimated response time.

California Residents: Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to limit the use of sensitive personal information, opt out of the sale or sharing of personal information, and receive notifications at collection about the categories of personal information collected. NxtREP does not sell personal information as of the Effective Date.

26. Exercising Privacy Rights

To submit a privacy request, contact:

privacy@nxtrep.io

Please include enough information for us to understand and process the request.

We may need to verify:

your identity;
your NxtREP account;
your authority to act for another person; or
your authority as the parent or guardian of a minor Athlete.

We will use information provided for verification only as reasonably necessary to process the request.

Where permitted by applicable law, an authorized agent may submit a request for you.

We may require evidence that the agent is authorized to act on your behalf.

27. Appeals

If applicable law gives you the right to appeal a decision regarding a privacy request, you may submit an appeal by contacting:

privacy@nxtrep.io

Use the subject:

Privacy Request Appeal

Include the original request and explain why you believe the decision should be reconsidered.

We will review the appeal and respond as required by applicable law.

28. Non-Discrimination

NxtREP will not unlawfully discriminate against you because you exercised an applicable privacy right.

Exercising certain rights may affect our ability to provide a feature when the personal information involved is necessary to provide that feature.

29. Universal Privacy Signals and Online Tracking

NxtREP does not currently sell personal information or use personal information for cross-context behavioral advertising.

NxtREP does not currently collect personal information about a user’s online activities over time and across unaffiliated third-party websites or online services for cross-context behavioral advertising purposes.

Because NxtREP does not currently engage in that form of online tracking, a traditional browser “Do Not Track” signal does not change NxtREP’s current data practices.

Where applicable law requires recognition of a browser- or device-based universal opt-out preference signal for a processing activity in which NxtREP participates, NxtREP will process the signal as required by applicable law.

Third-party service providers may collect or receive technical, device, and usage information when providing services to NxtREP as described in this Privacy Policy. Their processing is governed by their agreements with NxtREP, applicable law, and, where they act for their own independent purposes, their own privacy notices.

If NxtREP begins selling personal information, using personal information for cross-context behavioral advertising, or materially changing its online-tracking practices, we will update this Privacy Policy and provide any notices or choices required by applicable law before beginning those practices.

30. Security

NxtREP uses administrative, technical, and organizational safeguards designed to protect personal information.

These measures may include:

access controls;
authentication controls;
encryption where appropriate;
secure communications;
restricted access to production systems;
logging and monitoring;
security reviews;
protected cloud infrastructure; and
third-party security controls.

No electronic system, network, application, or storage method can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of your account credentials and should notify NxtREP if you believe your account has been compromised.

31. Third-Party Websites and Services

The Platform may link to or interact with third-party services.

Those services may have their own privacy policies and practices.

This Privacy Policy does not govern independent processing performed by a third party acting for its own purposes.

We encourage you to review the privacy notices of services you choose to use.

32. App Stores and Device Providers

If you download NxtREP through an app store or use NxtREP on a third-party device platform, the app-store or device provider may independently process information regarding:

downloads;
purchases;
device usage;
account activity; and
other interactions with its services.

Their processing is governed by their own terms and privacy policies.

33. International Processing

NxtREP is operated from the United States.

Personal information may be processed in the United States or other locations where NxtREP’s service providers operate.

Where required by applicable law, we will use appropriate measures for the transfer and processing of personal information.

34. Automated Systems

NxtREP may use automated systems to support functions such as:

Coach search;
ranking;
fraud prevention;
security;
Platform integrity; and
identifying suspicious activity.

NxtREP does not intend to use solely automated decision-making to make decisions producing legal or similarly significant effects about users unless the practice is appropriately disclosed and permitted by applicable law.

35. Changes to This Privacy Policy

We may update this Privacy Policy as NxtREP changes.

Each published Privacy Policy will include a version and effective date.

If we make material changes, we may:

provide notice through the Platform;
send an electronic notice;
require you to review the updated Privacy Policy; and
require affirmative acceptance before you continue using certain Platform functionality.

NxtREP may maintain records of the Privacy Policy version associated with your account.

36. Disputes; No Personal Liability

This Privacy Policy is a notice of privacy practices. It does not create a separate cause of action against any individual associated with NxtREP.

Any dispute, claim, or controversy arising from or relating to this Privacy Policy, our handling of personal information, or NxtREP’s privacy practices is subject to the NxtREP Terms of Service, including:

exclusive recourse against Blue Gorilla Ventures LLC only;
covenant not to sue members, managers, officers, employees, or other Protected Parties in a personal capacity;
limitation of liability;
indemnification;
binding individual arbitration;
class-action waiver; and
jury-trial waiver.

Nothing in this Privacy Policy limits a privacy right that applicable law makes non-waivable. Where the law requires a complaint to a government authority (for example, a state attorney general or data-protection authority), you may use that process. Individual Protected Parties still are not personally liable for the Company’s practices except to the extent applicable law independently imposes that liability.

37. Contact Us

Questions, concerns, or requests concerning this Privacy Policy or NxtREP’s privacy practices may be directed only to the Company:

Blue Gorilla Ventures LLC doing business as NxtREP

Website: nxtrep.io

Privacy: privacy@nxtrep.io

Legal: legal@nxtrep.io

Support: support@nxtrep.io

Do not send legal process intended for an individual member, manager, officer, or employee in a personal capacity to these addresses. Service of process on the Company must follow applicable law.