Privacy Policy

Effective date: 2026-07-17 (proposed — confirm with counsel)

Who we are: KOKO Industries LLC, a Hawaii limited liability company doing business as "KOKO" ("KOKO," "we," "us"). (If your launch-day purchase is processed by Uptake LLC as interim operating entity, your information transfers to KOKO Industries LLC under Section 3, subject to this Policy.) This Policy explains what we collect, how we use it, and your choices. It covers our website, the KOKO app, and the Founding Member purchase.

1. Information we collect

You give us:

• Account & profile: name, email, password, and — as you use the app — profile details such as disciplines, rank, gym affiliation, and role (player / coach / gym / organizer).
• Purchase info: your Founding Member purchase is processed by Square (through Uptake LLC as interim operating entity); future in-app transactions may be processed by Stripe. We receive confirmation and limited details (e.g., last 4 digits, billing info). We do not store your full card number.
• Coach / gym / host info: if you list as a coach, gym, or host — business details, scheduling, rates, and payout information (handled via Stripe).
• Communications: messages, support requests, and survey/feedback responses.

Collected automatically:

• Location: KOKO is a map-based discovery product. With your permission, we use your device location to show nearby gyms, coaches, and sessions. You control location access in your device settings (some features won't work without it).
• Device & usage: IP address, device/browser type, app interactions, and similar analytics.
• Cookies & similar technologies (see §6).

From third parties: payment confirmations from Square and Stripe; analytics providers; and, if you sign in via a third party, basic account info you authorize.

2. How we use your information

Provide, operate, and improve the platform and your membership · process payments and deliver Founding Member benefits · show location-relevant gyms, coaches, and sessions · communicate with you (service messages, plus marketing you can opt out of) · trust & safety (verify users, prevent fraud/abuse, support safe in-person interactions) · comply with law and enforce our Terms.

3. How we share information

• With other users, as part of the service: profile information you choose to make visible (e.g., coach profiles, event listings) is shown to other users. Turnout/attendance signals are shown only in aggregate (e.g., "14 going tonight") — we never publish that a specific named person will be at a specific place and time.
• Service providers: payment processing (Square for Founding Member purchases; Stripe for in-app transactions), hosting/database (e.g., Supabase), mapping (e.g., Mapbox), email/SMS, and analytics — only as needed to run the service.
• Legal & safety: when required by law, to enforce our Terms, or to protect the rights, property, or safety of users and the public.
• Business transfers: if KOKO's business or assets are assigned or transferred (including the assignment from Uptake LLC to KOKO Industries LLC), your information may transfer as part of that transaction, subject to this Policy.
• We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under California law.

4. Payments

Your Founding Member purchase is processed by Square (through Uptake LLC as interim operating entity), subject to Square's privacy policy; future in-app transactions may be processed by Stripe, subject to Stripe's privacy policy. KOKO does not store full card details. You authorize charges as described in the Founding Member Terms.

5. Location information

Location data powers the core discovery experience. We use it to surface nearby gyms, coaches, and sessions. You can disable location access at the device level; doing so limits map functionality. We do not share your precise real-time location with other users.

Business listings & the gym / coach directory

KOKO maintains a directory of martial-arts gyms, coaches, and sessions to power discovery. Some listings are created by the gym, coach, or host; others are compiled by KOKO from publicly available sources (public websites, public class schedules, business directories, and public social profiles) so the map is useful from day one. Directory listings hold business information — gym name, public address, phone, website, class schedule, disciplines — not private personal data. If you operate a listed gym or are a listed coach, you may claim, correct, or request removal of your listing at [email protected]; we honor reasonable claim, correction, and takedown requests.

6. Cookies & analytics

We use cookies and similar technologies to keep you signed in, remember preferences, and understand usage. Control them through your browser/device settings.

7. Communications consent (email & SMS)

If you opt in to marketing emails or text messages, you consent to receive them at the address/number you provide; message and data rates may apply. You can opt out anytime (unsubscribe link for email; reply STOP for SMS). We will still send essential service messages (e.g., receipts, security notices).

8. Data retention

We keep your information while your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion (see §10).

9. Security

We use reasonable administrative, technical, and physical safeguards (including processing payments through Square and Stripe). No method of transmission or storage is 100% secure.

10. Your choices & rights

• Marketing: opt out anytime; we'll still send essential service messages.
• Access / correct / delete: request a copy, correction, or deletion at [email protected].
• California residents (CCPA/CPRA): rights to know, delete, correct, and opt out of "sharing"/sale (we do neither); no discrimination for exercising them.
• [Other state-privacy (VA, CO, CT, etc.) or GDPR rights — counsel to add when you serve those users.]

11. Children

KOKO is intended for users 18 and older. It is not directed to children under 13, and we do not knowingly collect their information. Because the platform can surface in-person sessions, unaccompanied minors are not permitted; if we learn we collected a child's data without required consent, we will delete it.

12. Changes to this Policy

We may update this Policy; material changes will be communicated and the "Effective date" updated.

13. Contact

KOKO Industries LLC · [email protected]