Ready Hero Fit – Privacy Policy

Effective Date: October 4, 2025

1. Scope and Applicability

This Privacy Policy applies to all users of the Services globally, including in the United States, the European Economic Area (EEA), the United Kingdom (UK), and other jurisdictions.

If you are located in the United States, specific rights may apply under state laws (e.g., California, Colorado, Connecticut, Utah, Virginia, Texas). If you are located in the EEA or UK, the EU General Data Protection Regulation (“GDPR”) or UK GDPR applies.

If you are located in Canada, Brazil, or another jurisdiction with data localization or export controls, your personal data may be transferred to the United States or other jurisdictions where we operate. We implement contractual and organizational safeguards for cross-border transfers. By continuing to access or use the Services, you consent to our collection, use, monitoring, and sharing of your personal information and interactions (including gameplay telemetry, user-generated content, and device data) as described in this Privacy Policy, including through third-party service providers such as Meta and Steam. This consent applies to any data practices that may involve the processing of communications or electronic interactions, in compliance with applicable laws, including the California Invasion of Privacy Act (CIPA). If you do not consent, please discontinue use of the Services.

By using our services, you acknowledge that you have been provided this Privacy Policy at or before the point of collection of your personal data. Users in all jurisdictions are entitled to certain baseline rights regarding their personal data, as further detailed in Section 8.

2. Information We Collect

We collect the following categories of personal information, including through the Meta platform:

a. Information You Provide to Us:

·       Name, email address, and contact details

·       Account credentials

·       Support inquiries and communications

·       User-generated content (e.g., avatars, messages, screenshots)

b. Automatically Collected Information:

·       Device identifiers (e.g., Meta Quest ID, IP address)

·       VR hardware information (e.g., device type, version, motion sensor data)

·       Game telemetry (e.g., interactions, play time, errors, performance)

·       Analytics and usage logs (including crash data)

·       Location data (city, country-level only)

You may disable the collection and transmission of analytics and usage logs (including gameplay telemetry such as menu interactions, scene loads, progress markers, and associated properties like anonymized user ID, timestamp, app version, city/region/country-level location, hardware information, play mode, scene details, crystals/plants collected, strokes taken, and related metrics) via the in-game opt-out toggle for 'Allow Game Play Analytics,' which is enabled by default. Upon opting out, no further analytics events will be transmitted, except for a final event noting access to the opt-out menu.

c. Fitness and Health Data (if voluntarily provided):

We may process data related to your movement, gestures, or play behavior as part of fitness tracking features within the Game. Such processing occurs in real-time on your device and does not involve transmission to our servers or third parties, nor is it linked to your health diagnosis or medical records. While we do not collect medical records or biometric identifiers, this processing enables core gameplay functions, such as locomotion and steering based on headset movement, position, tilt, and velocity.

For any future features that may involve the collection, storage, or sharing of summaries or inferences derived from such data (e.g., session statistics like play duration, estimated distance, or collectible summaries), we will require your explicit opt-in consent prior to implementation.

These may be used to personalize your fitness experience but are not linked to any health diagnosis or medical record.

Under the GDPR, we will rely on your explicit consent for any processing movement data that may constitute special category data, including health-related inferences.

In accordance with Meta's Developer Data Use Policy, we collect and process Developer User Data and User Data solely for the purposes outlined in this Privacy Policy, including operation of the Game, personalization, analytics, and compliance. We do not use such data for unauthorized purposes and maintain appropriate safeguards to protect it.

3. How We Use Your Information

We use personal data for the following purposes:

·       To operate, maintain, and improve the Game

·       To personalize your experience and adapt gameplay

·       To detect bugs, monitor performance, and ensure stability

·       To respond to inquiries, feedback, and support requests

·       To comply with legal obligations and platform requirements

·       To enforce our Terms of Service

·       For internal analytics and development

·       To process and fulfill in-app purchases or preorders (e.g., unlocking content or sending delivery notifications)

·       For any processing of fitness or health-related data through planned features, such as workout summaries or histories, to personalize gameplay or provide performance insights.

·       To send you promotional communications, including newsletters and notifications regarding preorder opportunities or product updates, solely upon your affirmative consent, which may be obtained through mechanisms such as opt-in checkboxes during account registration, in-app prompts, or dedicated preference settings on our website or application

We do not make decisions that produce legal or similarly significant effects using solely automated processing. We may use limited automated analytics to personalize difficulty levels or game recommendations. You may opt out by adjusting your in-game settings.

4. Legal Basis for Processing (EEA/UK Users)

We rely on the following legal bases:

·       Consent (including for marketing communications as described in Section 3)

·       Explicit consent (for any processing of special categories of data, such as health-related inferences from fitness metrics)

·       Contract performance

·       Legitimate interest

·       Legal obligations

5. How We Share Information

We do not sell your personal information. We may share it as follows:

·       With VR platform providers (e.g., Meta, Steam)

·       With service providers under data processing agreements

·       If required by law

·       To enforce our rights

We do not share personal information with third parties for cross-context behavioral advertising. Sharing with platform providers, such as Meta, is limited to what is necessary for Game functionality, support, and compliance with platform requirements, and is governed by applicable data processing agreements.

6. International Transfers

If you are located outside the United States, your data may be transferred to and processed in the United States. We rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) where applicable.

7. Data Retention

We retain personal data as long as necessary for the purposes described in this Policy. When no longer needed, data is deleted or anonymized.

8. Your Rights and Choices

All Users (Global Rights):

• Right to know or access the personal data we hold about you.

• Right to request deletion of your personal data.

• Right to correct or update inaccurate personal data.

• Right to opt out of certain processing activities, such as analytics or personalized recommendations.

• Right to appeal any denial of your request.

• For planned features involving fitness or health data, you may be prompted to provide explicit opt-in consent, which you can withdraw at any time via your account settings.

To exercise these rights, contact us at hello@readyherofit.com. We will respond to verifiable requests within the timeframes required by applicable law, typically within 45 days, and will provide data in a structured, commonly used, and machine-readable format where technically feasible.

US Residents:

In addition to the global rights above, specific rights may apply under state laws (e.g., California, Colorado, Connecticut, Utah, Virginia, Texas), including enhanced rights to know/access, delete, correct, opt out of sales or sharing, and appeal. Texas residents are protected under Texas Business & Commerce Code Chapter 302, including rights to transparency regarding telephone solicitation and business practices.

EEA/UK Residents:

·       In addition to the global rights above, under the EU General Data Protection Regulation (“GDPR”) or UK GDPR, you have rights to access, rectify, erase, restrict processing, object to processing, withdraw consent, and lodge complaints with a supervisory authority.

Right to Appeal:

·       If we deny your request to access, correct, or delete your data, you may appeal the decision by contacting us at hello@readyherofit.com. We will respond to your appeal within 45 days as required by law.These modifications ensure that deletion is not geographically constrained, thereby addressing Meta's primary concern, while avoiding redundancy or conflict with existing regional provisions.at hello@readyherofit.com.

·       If you request access to your data, we will provide it in a structured, commonly used, and machine-readable format, where technically feasible and as required by law. We will respond to your appeal within 45 days as required by law.

9. State Specific Notices

a. California Notice of Collection

Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), we provide the following notice:

• Categories collected: Identifiers, usage data, geolocation, device info, inferences.

• Purposes: Providing services, analytics, security, support, legal compliance.

• Sold or shared: We do not sell or share your personal information for cross-context behavioral advertising.

• Sensitive Personal Information: We do not collect or use Sensitive Personal Information for purposes other than those permitted under the CPRA, such as providing the requested services or ensuring security and integrity.

b. Colorado (CPA), Connecticut (CTDPA), Virginia (VCDPA), Utah (UCPA)

We only collect personal data that is reasonably necessary for the purposes described in this Privacy Policy, and we do not use it for unrelated purposes without your consent.

c. Texas Residents

Under Chapter 302 of the Texas Business & Commerce Code, we comply with all applicable telemarketing and solicitation rules., you may request a copy of our registration or file a complaint with the Texas Secretary of State. We comply with all applicable telemarketing and solicitation rules.

d. Nevada (NRS §603A.340)

Nevada law allows residents to opt out of the sale of certain types of personal information. We do not sell your personal information. However, if you are a Nevada resident and wish to make an opt-out request, you may contact us at hello@readyherofit.com.

e. California Invasion of Privacy Act (CIPA) Notice

In accordance with the California Invasion of Privacy Act (Cal. Penal Code §§ 630 et seq.), we do not engage in the unauthorized interception, recording, or monitoring of confidential communications via the Services. To the extent that any user interactions, support inquiries, or gameplay features involve electronic communications that may fall within the scope of CIPA, we implement measures to obtain necessary consents or rely on applicable statutory exceptions. If you believe any aspect of the Services implicates CIPA, you may contact us at the address provided in Section 15 for further information.

10. Children’s Privacy

We do not knowingly collect personal information from children under 16. If we learn that we have inadvertently collected such data, we will delete it.

11. Cookies and Analytics

We may use cookies or similar technologies (e.g., Unity Analytics) to improve performance. You may control cookies via your browser or platform settings.

12. Data Security

We use technical and organizational measures to protect your data. However, no system is completely secure.

13. Third-Party Services and Links

The Game may link to third-party tools. These are governed by their own privacy policies. We are not responsible for their practices.

Our Services may include SDKs and APIs from third-party providers such as Meta (Oculus/Quest), Unity, and analytics tools. These services may collect device data, performance metrics, and gameplay analytics. Their use of your information is governed by their respective privacy policies.

14. Changes to this Policy

We may update this Privacy Policy. We will update the effective date and notify you as required. For material changes, we will notify you via the platform or email if we have your contact information. Previous versions of this Privacy Policy will be archived and available upon request.

15. Contact Us

Email: hello@readyherofit.com