Privacy Policy

At Humans.team, we value your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website https://humans.team and services. This policy forms an integral part of our Terms and Conditions.

2.1 Information You Provide to Us We collect information that you provide to us directly, such as: • Account information (name, email address, profile photo, language preference) • Payment information (processed securely through Stripe; we do not store credit card numbers) • Communications you have with us • Content you create (journal entries, blog articles, photos, videos, event/contest/listing descriptions) • Event, contest, and marketplace listing data (titles, descriptions, dates, locations, prices, rules, prize details) • Contest participation data (submissions, votes, scores) • Event registration data (registration status, attendance) 2.2 Information Collected Automatically We collect certain information automatically when you use our Site, including: • Device and browser information • IP address (anonymized for analytics) • Pages viewed and actions taken on our Site • Anonymized usage analytics (via Umami, a GDPR-compliant analytics service that does not use cookies or track personal data) 2.3 Push Notifications If you opt in to push notifications, we collect your device push notification token through OneSignal. You can withdraw your consent and disable notifications at any time through your browser or device settings. 2.4 Cookies We only use essential cookies for the basic functioning of the Site: • Session cookies (authentication) • Language preference cookie • Affiliate tracking cookie (30-day, used to attribute sales to referring members) We do not use third-party tracking cookies. We do not use cookies for advertising or behavioral profiling.

We use your personal information to: • Provide, maintain, and improve our services • Process your transactions and manage your account • Display your content on the platform (journal articles, event pages, contest entries, marketplace listings, seller sites) • Send you notifications about your account, events, contests, and community activity (via email and push notifications, with your consent) • Communicate with you about our services • Generate anonymized, aggregated analytics to improve the platform • Comply with our legal and regulatory obligations • Detect, prevent, and address fraud, abuse, or security issues • Monitor and enforce compliance with our Terms and Conditions

We do not sell your personal information. We may share your information in the following situations: • Public profile: Your name and avatar may be visible to other members in the community, on event participant lists (if you opt in), and on contest submission galleries • Seller sites: If you have a seller site, your public profile information and published content are visible to anyone visiting your site • Contest entries: Content you submit to contests may be visible to other participants and voters as part of the contest • With your consent • With our service providers (see Section 5) who help us provide our services • To comply with the law or protect our rights • In connection with a merger, sale, or transfer of business

We use the following service providers to operate our platform. Each processes only the data necessary for their specific function: • Supabase (United States) — Database hosting, user authentication, and file storage • Stripe (United States) — Payment processing and seller payouts. Stripe processes payment data under its own privacy policy • OneSignal (United States) — Email and push notification delivery. Receives your email and device token • Bunny CDN (Europe) — Content delivery and media file storage (photos, videos, e-books) • Vercel (United States) — Website hosting and server-side rendering • Umami (Self-hosted) — Privacy-first analytics. Collects only anonymized, aggregate data with no cookies and no personal identifiers • Sentry (United States) — Error monitoring and performance tracking. Personal information is stripped before transmission (no IP addresses, masked text) • OpenAI / Anthropic / Google (United States) — AI text generation and text-to-speech for the AI Journal feature. Your journal content is sent to the selected AI provider only when you use the AI features Each service provider is contractually required to protect your data and use it only for the purpose of providing their service to us.

We take the security of your data very seriously. We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, use, or disclosure, including: • Encrypted data transmission (HTTPS/TLS) • Secure authentication with JWT tokens • Rate limiting on all API endpoints • Input sanitization and validation • Role-based access control (Row Level Security on database) • Regular security audits of our codebase and infrastructure

You have certain rights regarding your personal information, including: • The right to access your information • The right to correct your information • The right to delete your information and account • The right to object to the processing of your information • The right to data portability • The right to withdraw consent for push notifications at any time • The right to withdraw consent for email communications at any time (one-click unsubscribe available in all emails) • The right to request that your contest entries be removed To exercise these rights, please contact us at support@mynewme.net or use the available features in your account settings.

We retain your personal information for as long as necessary to provide our services and comply with our legal obligations. When you delete your account, your data is anonymized immediately: • Personal information (name, email, profile data) is removed • Content you published (articles, event descriptions) may be retained in anonymized form • Financial transaction records may be retained as required by law • Contest entries and event participation data may be retained in anonymized form for the integrity of contest results

Your information may be transferred to and processed in countries other than your country of residence, primarily the United States where our servers and service providers are located. These countries may have different data protection laws. We take steps to ensure that your information receives an adequate level of protection in these countries, including standard contractual clauses where applicable.

Our services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately at support@mynewme.net and we will take steps to delete such information.

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or by a notice on our website. Your continued use of the Site after changes constitutes acceptance of the updated policy.

We comply with the General Data Protection Regulation (GDPR) for users located in the European Union. This includes: • Lawful basis for processing (consent, contract performance, legitimate interest) • Data minimization: we collect only what is necessary • Purpose limitation: data is used only for stated purposes • Right to erasure ("right to be forgotten") • Data portability upon request • Privacy by design in our platform development • Data Protection Impact Assessments where appropriate For GDPR-related inquiries, contact us at support@mynewme.net.

If you have any questions or concerns regarding this Privacy Policy, please contact us at: support@mynewme.net MyNewMe LLC 412 W 7th Street, Suite 214 Clovis 88101 New Mexico USA