LEGAL

    Privacy & AI Rights Center

    How Super Athlete handles personal information, AI interactions, licensed voice and likeness, payments, and global privacy rights. Effective September 30, 2026.

    This notice describes our current practices across a global AI product. It does not reduce rights provided by your local law or a more specific written agreement.

    1. Scope and data controller

    Who operates Super Athlete and what this notice covers.

    NextGenTM, Inc., doing business as Super Athlete and LootMogul, is responsible for personal information covered by this notice. This notice applies to superathlete.ai, our applications, licensed AI identity experiences, AI Academies, AI Clubs, podcasts, commerce, inquiries, and related services.

    NextGenTM, Inc. is located at 831 N Tatnall Street, Suite M #275, Wilmington, DE 19801, United States. Product-specific notices or contracts may provide additional details and control where they apply.

    2. Information we collect

    Account, transaction, content, device, and service-use information.

    We collect information you provide, including contact and profile details, age or eligibility confirmations, account credentials, preferences, inquiries, support messages, club or athlete information, uploaded content, AI questions and responses, consent records, and transaction-related details. Payment card data is generally collected directly by our payment processor rather than stored by us.

    We also collect device and browser details, IP address, approximate location derived from IP, identifiers, referral and campaign data, cookie choices, security events, pages and features used, media playback, AI usage, purchases, entitlements, and diagnostic information. We may receive information from identity owners, authorized partners, clubs, payment and authentication providers, social platforms, analytics providers, and public or licensed sources.

    3. Why and how we use information

    Service delivery, contracts, consent, safety, and legitimate operations.

    We use information to provide and personalize requested Services; authenticate accounts; process and fulfill purchases; manage memberships, AI Tokens, and entitlements; generate requested text, voice, image, or video experiences; answer inquiries; provide support; measure performance; maintain security; prevent fraud and abuse; comply with law; and establish or defend legal claims.

    Where applicable, our legal bases include performing a contract, taking steps at your request, consent, compliance with legal obligations, and legitimate interests such as securing, operating, and improving the Services. You may withdraw consent for future processing where consent is the basis, without affecting prior lawful processing.

    4. AI inputs, outputs, and automated systems

    How questions, source material, and generated media are handled.

    When you use an AI feature, we process your input, relevant account or entitlement context, approved source material, safety instructions, and generated output to provide the feature. We may use contracted AI, voice, video, moderation, or infrastructure providers acting under their applicable terms and configured service settings. Provider processing, retention, and model-improvement restrictions depend on the selected service, contract, and feature; do not submit information you are not authorized to share.

    Super Athlete does not use AI alone to make legal or similarly significant decisions about employment, credit, housing, health care, or other protected opportunities. If we introduce a feature that makes or materially assists a significant decision, we will provide any required notice, explanation, human review, access, correction, or opt-out rights before it applies.

    5. Voice, likeness, and potentially biometric data

    Special handling for identity source material and derived models.

    Authorized identity experiences may process voice recordings, facial or likeness assets, performance footage, pronunciation data, and derived voice or visual models. Depending on the jurisdiction and processing, some information may be considered biometric, sensitive, or a digital replica.

    We process this material for documented and authorized purposes, apply feature and access controls, and do not treat permission for one use as permission for every use. Retention, review, disclosure, revocation, and deletion follow the applicable authorization, contract, safety needs, and law. Unauthorized upload or creation of another person’s voice or likeness is prohibited.

    6. Payments, memberships, and fraud prevention

    Checkout, entitlement, billing, and transaction records.

    Payment providers process payment credentials and send us transaction identifiers, customer references, product and price details, payment status, limited billing information, refunds, disputes, and subscription events. We use verified payment events—not a return-page visit—to grant or revoke access.

    We retain transaction, tax, refund, dispute, and entitlement records as needed to fulfill purchases, prevent fraud, maintain accounting records, resolve disputes, and meet legal obligations.

    7. Cookies, analytics, and communications

    Preferences, measurement, security, and consent controls.

    We use necessary storage and cookies for authentication, security, preferences, checkout continuity, and service operation. With consent where required, we may use analytics to understand visits, referrals, retention, and feature performance. You can reopen Cookie preferences from the footer; browser settings may also limit storage, though essential features may stop working.

    We send transactional communications about accounts, purchases, security, and requested services. Promotional communications are sent according to your choices and applicable law, and include a way to opt out. Opting out of marketing does not stop necessary service messages.

    8. Disclosures and no sale of personal information

    Service providers, authorized partners, law, and business changes.

    We disclose information to providers that support hosting, storage, authentication, payments, analytics, customer support, communications, security, and AI, voice, image, or video features; to identity owners or partners when needed for an authorized experience; and to advisers, authorities, or other parties when reasonably necessary to comply with law, protect rights and safety, investigate misuse, or complete a corporate transaction.

    We do not sell personal information or share it for cross-context behavioral advertising. We do not disclose voice or likeness source material for an unrelated party’s independent use without authorization. We may publish information you intentionally make public and may disclose aggregated or de-identified information that cannot reasonably identify you.

    9. International processing and transfers

    Global operation with regional safeguards.

    We and our providers may process information in the United States and other countries that may have different data-protection laws. Where required, we use recognized safeguards such as contractual protections, transfer mechanisms, adequacy decisions, or consent, and evaluate providers according to the service and risk involved.

    You may contact privacy@nextgentm.com for information about safeguards relevant to your jurisdiction. Service availability may be limited where lawful processing or required protections cannot be supported.

    10. Your privacy rights

    Access, correction, deletion, portability, objection, appeal, and consent rights.

    Depending on where you live, you may request access to or confirmation of processing; correction; deletion; restriction; portability; objection; withdrawal of consent; limitation of sensitive-data use; information about recipients; or an appeal of a denied request. You may also complain to your local data-protection authority. We do not discriminate against you for exercising a privacy right.

    U.S. residents may have state-specific rights, including use of an authorized agent. EEA, UK, and similar-law residents may object to processing based on legitimate interests and lodge a complaint with their supervisory authority. We verify requests in proportion to their sensitivity and may deny or limit requests where an exception applies, explaining available appeal rights.

    11. Adults only and minors’ information

    Self-service accounts and AI identity authorization are 18+.

    The Services are intended for adults 18 and older. We do not knowingly create self-service accounts for children or activate a minor’s AI identity through self-service tools. Any authorized project involving a minor is handled separately with documented authority and additional safeguards.

    If you believe a minor submitted personal information through the Services, contact privacy@nextgentm.com. We will investigate and delete or otherwise address the information as required by law.

    12. Security and retention

    Risk-based safeguards and purpose-specific retention.

    We use administrative, technical, and organizational safeguards designed for the sensitivity and risk of the information. No system is perfectly secure, and we cannot guarantee absolute security. Please use a unique password and notify support@nextgentm.com if you suspect unauthorized access.

    We retain information only as long as reasonably needed for the purposes described, including active accounts and services, contractual periods, consent and rights records, security, fraud prevention, taxes, accounting, disputes, and legal obligations. Retention differs by record type. Information may remain temporarily in protected backups or be retained where law permits or requires.

    13. Requests, deletion, and contact

    A verified process for privacy and AI identity requests.

    Submit requests to privacy@nextgentm.com with the account email, request type, and affected account, club, or AI identity. We will verify identity and, for representatives, authority to act. Do not email passwords or government identification unless we provide a secure method and specifically request it.

    We will respond within the period required by applicable law. We may retain information where necessary for legal obligations, transactions, fraud prevention, security, active agreements, free expression, or legal claims, and will explain material exceptions where required.

    Privacy contact

    NextGenTM, Inc.
    831 N Tatnall Street, Suite M #275
    Wilmington, DE 19801
    United States

    Email: privacy@nextgentm.com