Gym Recon Privacy Notice

Version: 1.1 Effective date: September 4, 2026 Operator: Enoch Books LLC, a Texas limited liability company, doing business publicly as Enoch Marketing and Gym Recon

This notice explains how Enoch Books LLC ("Enoch," "we," "us," or "our") handles information for Gym Recon.

1. Our role

For website visitors, prospective customers, account users, and billing contacts, Enoch generally decides how account, security, billing, support, and website information is used.

For member, lead, staff, attendance, membership, and invoice information a gym customer provides, the gym controls the data and Enoch processes it to provide the service. Individuals whose data came from a gym should normally contact that gym first. We will assist the gym with valid requests as required.

2. Information we collect

We may collect:

• names, work emails, business phone numbers, job roles, gym names, locations, and record-system information;
• account identity, permissions, sign-in, device, session, security, audit, support, and activity information;
• subscription, invoice, payment status, limited payment-method descriptors, tax, cancellation, refund, and dispute information from Stripe. Enoch does not receive or store full card numbers or card security codes;
• agreement acceptance, document version, timestamp, and request evidence;
• customer-provided member, lead, staff, membership, attendance, invoice, mission, action, outcome, and source-quality information within the approved service; and
• IP address, browser, device, referring page, page interactions, and essential technical logs.

Do not submit full card numbers, card security codes, passwords, Social Security numbers, government identification numbers, medical or injury records, biometric or genetic identifiers, precise geolocation, or information about a known child under 13.

3. How we use information

We use information to provide demonstrations and onboarding; create and secure accounts; import and organize approved records; provide dashboards, missions, drafts, support, exports, and results records; operate trials and subscriptions; send transactional, security, trial, billing, and support messages; prevent abuse; investigate incidents; maintain and improve the service; comply with law; and protect rights and safety.

Gym Recon may use rules, calculations, and automated tools to identify possible business conditions and draft recommendations. Customer personnel remain responsible for reviewing outputs and deciding what action to take. We do not use Gym Recon to make legal, employment, credit, insurance, healthcare, or similarly significant decisions about individuals.

We do not sell personal information for money. We do not use customer-controlled gym data for targeted advertising or unrelated cross-customer profiles. Gym Recon does not automatically send marketing or collection emails or texts to a gym's members in this MVP.

4. How we disclose information

We may disclose information to Customer's authorized users; providers supporting hosting, databases, authentication, storage, payment processing, email, security, monitoring, or support; professional advisers under confidentiality; government or legal authorities when required; a buyer or successor in a business transaction subject to appropriate protection; or another party at Customer's direction.

Stripe processes payment details in its hosted Checkout and Customer Portal. Our providers may process information only for their contracted services to us or as allowed by law.

5. Retention and deletion

We keep information only as long as reasonably needed for the service, security, billing, disputes, legal obligations, and the purposes described here. Our current schedule is:

• successful raw uploads and approved raw source payloads: no more than 30 days after successful import or fetch;
• rejected or quarantined uploads: no more than seven days, unless needed for a documented security investigation;
• active customer records: during the subscription, followed by a 30-day export window and deletion or deidentification of primary customer personal data within the next 30 days;
• encrypted backups: expire through a rolling window of no more than 35 days after primary deletion;
• product audit events: up to 24 months;
• security and infrastructure logs: up to 12 months;
• support communications: up to two years; and
• contract acceptance, billing, tax, dispute, privacy-request, and necessary financial evidence: up to seven years.

We may retain narrower records longer when required by law, a legal hold, fraud prevention, security, or an active dispute. Those records are restricted from ordinary product use. A minimal suppression record may be kept to honor an opt-out.

6. Security

We use reasonable safeguards designed for the nature of the service, including access controls, encryption through approved providers, tenant separation, secret management, logging, and incident response. No service can guarantee absolute security. Customers must use approved secure upload tools and must not send member or invoice files through ordinary email, text, or chat.

7. Your choices and rights

Depending on applicable law, you may have rights to access, correct, delete, or obtain a copy of personal information, to opt out of certain processing, and to appeal a denied request. Email info@enochmarketing.com. We may verify identity and authority before responding. If a gym controls the information, we may refer the request to that gym and assist it.

Marketing messages, if offered later, will include an unsubscribe method. Unsubscribing from marketing does not stop necessary account, security, trial, billing, or support communications.

8. Children and geographic scope

Gym Recon purchasing and accounts are for business representatives age 18 or older. The service is not directed to children under 13, and customers must not submit information about a known child under 13 in this MVP.

Gym Recon is offered to gym businesses with physical locations in any of the 50 United States or the District of Columbia. Enrollment does not require a pilot invitation. Billing is in U.S. dollars. Information is processed in the United States and may be handled in locations where our providers operate, subject to their contractual and legal protections.

9. Changes

We may update this notice as the service, providers, or law changes. We will post the new version and effective date, give appropriate notice of material changes, and obtain new acceptance when required.

10. Contact

Enoch Books LLC 10601 Clarence Dr, Suite 250 Frisco, TX 75033, United States Email: info@enochmarketing.com Phone: +1 (833) 783-2361

Privacy requests, appeals, and security reports may be sent to info@enochmarketing.com.