Effective Date: 1 July 2026

Version 3.0

www.getgoer.com/privacy   ·   help@getgoer.com
—
Goer Inc.

4700 Capital of Texas Hwy #531, Austin, TX 78746

Texas Corporation

INTRODUCTION

Goer Inc. (“Goer,” “we,” “us,” or “our”) is a Texas corporation that operates a digital marketplace connecting individual consumers with independent third-party fitness, studio, and wellness venues through the Goer mobile application and website at www.getgoer.com (collectively, the “Platform”).

We take the privacy of our Users seriously. This Privacy Policy explains, in plain terms, what personal information we collect when you use the Platform, how we use it, who we share it with, how we protect it, and what rights you have in relation to it. Please read this Policy carefully before creating an account or making any purchase.

This Privacy Policy is incorporated into, and forms part of, our Terms of Use available at www.getgoer.com/terms-conditions-of-use. By using the Platform, you consent to the data practices described in this Policy. If you do not agree with this Policy, you must not use the Platform..

ARTICLE I — INFORMATION WE COLLECT

Section 1.01. Overview.

We collect personal information in three ways: information you provide to us directly; information we collect automatically when you use the Platform; and information we receive from third parties. Each category is described in detail below.

Section 1.02. The Goer Group.

Goer Inc. and any current or future parent companies, subsidiaries, and affiliated entities are referred to collectively in this Privacy Policy as the “Goer Group.” Personal information collected through the Platform may be shared within the Goer Group for operational and business purposes as described in this Policy. Each Goer Group entity that receives personal data will handle it in accordance with this Privacy Policy. As the Goer Group evolves — through investment, acquisition, or expansion — this Policy will be updated to reflect any material changes to how data is shared within the group.

Notwithstanding the foregoing, and as set out more fully in Section 3.02, your mobile telephone number and any SMS opt-in consent you provide will not be shared with any third party or any Goer Group affiliate for marketing purposes.

Section 1.03. Information You Provide Directly.

When you register an account, make a purchase, or interact with the Platform, you provide us with the following categories of personal information:

Identity Data. Your full legal name.

Contact Data. Your email address and mobile telephone number. Your telephone number is used to verify your account and, with your consent, to send you SMS communications. See Section 3.02 for important limits on how this data may be shared.

Payment Data. Payment card details, including card number, expiry date, and billing information, processed on our behalf by Stripe, Inc. We do not store your full card number on our systems; Stripe processes and stores payment data in accordance with its own privacy policy, available at stripe.com/privacy.

Profile Data. Any profile photograph you choose to upload to your account.

Communications Data. The content of any communications you send to us, including support enquiries, feedback, and dispute notices.

User-Generated Content. Any reviews, ratings, or other content you submit through the Platform.

Section 1.04. Information We Collect Automatically.

When you access or use the Platform, we automatically collect the following categories of information:

Location Data. We collect two categories of location data. First, we automatically collect approximate location information — at city or regional level — from your device’s IP address and network signals whenever you use the Platform, without requiring your explicit permission. Second, where you have granted permission through your device settings, we collect precise GPS location data from your device while the app is in use and, where you have granted background location permissions, when the app is running in the background. Precise GPS location is used to display nearby Partner Venues and improve booking relevance. You may withdraw GPS location permission at any time through your device settings, though this may impair certain Platform features.

Device Data. Information about the device you use to access the Platform, including device type and model, operating system and version, unique device identifiers, mobile network information, and Internet Protocol (IP) address.

Usage and Behavioural Data. Information about how you interact with the Platform, including the venues and Passes you view, the duration of your sessions, booking and browsing patterns, features you use, pages you visit on our website, and other in-app activity. This data is used to improve the Platform, personalise your experience, and inform business decisions.

Transaction Data. A complete history of all Passes you have purchased, venues you have booked, check-ins you have completed, and Account Credits you have earned or used.

Technical Log Data. Server logs, error reports, crash data, and other technical information generated by your use of the Platform.

Section 1.05. Cookies, Tracking Technologies, and Session Replay.

Our website at www.getgoer.com uses cookies and similar tracking technologies, including web beacons and pixel tags, to collect information about your browsing activity and improve your experience. Cookies are small data files stored on your device. We use the following categories of cookies:

Essential Cookies. Strictly necessary for the website to function. These cannot be disabled.

Analytics Cookies. Used to understand how visitors interact with the website, including pages visited, time spent, and referral sources. This information is collected in aggregate and used to improve the site.

Marketing Cookies. Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns.

We may use session replay technology on our website, which captures information about User interactions including mouse movements, page scrolling, and clicks, for the purpose of identifying usability issues and improving the Platform. Such tools are configured to exclude sensitive information such as payment card numbers and passwords. Any session replay tools in active use are named in our standalone Cookie Policy at www.getgoer.com/cookies.

You may control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the website. A full Cookie Policy is available at www.getgoer.com/cookies.

Section 1.06. Information We Receive from Third Parties.

In addition to information you provide directly and information we collect automatically, we receive personal information from the following third-party sources:

Partner Venues — User Conduct Feedback. Partner Venues may submit information to us about a User’s conduct at their facility, including reports of policy violations, safety incidents, or misconduct. This information is received for the purpose of platform safety and account management, and may be stored on the User’s account record. It will be used solely to enforce our Terms of Use and protect the safety of Partner Venues, their staff, and other Users.

Partner Venues — Staff and Instructor Data. Partner Venues may provide us with names and basic professional information about their staff, instructors, and practitioners for the purpose of displaying schedules, class listings, and related information within the Platform. Such individuals’ data is processed solely for that display purpose and is not used for marketing or any other purpose without further consent.

Referral Programme. When a User submits a referral through the Platform, we may receive the name or contact details of the referred individual. By submitting a referral, the referring User warrants that they have obtained the referred individual’s consent to share their information with Goer for the purpose of sending a referral communication. We will use the referred individual’s information solely to send the referral invitation and will not retain it for any other purpose or add the individual to any marketing list without their independent consent.

Payment Processor. We receive transaction confirmation and payment status information from Stripe, Inc. following the processing of your purchase.

Section 1.07. Third-Party SDKs in the Mobile Application.

The Goer mobile application integrates third-party Software Development Kits (“SDKs”) that enable certain features and services. These SDKs may collect information directly from your device — including device identifiers, IP address, operating system information, and usage data — independently of data collected by Goer itself. Each SDK operates under its own privacy policy and data practices. The SDK currently integrated into the Goer application is:

Payment SDK. Stripe SDK, for processing in-app payments. Stripe’s privacy policy is available at stripe.com/privacy.

A current, itemised list of all third-party SDKs integrated into the application is maintained at www.getgoer.com/subprocessors and is updated whenever an SDK is added or removed. Where any SDK is found to collect personal data in a manner inconsistent with this Privacy Policy, we will take steps to address that inconsistency promptly.

Section 1.08. Data Minimisation.

Goer is committed to collecting only the personal information that is necessary for the specific, legitimate purposes described in this Privacy Policy. We do not collect personal data speculatively or for purposes that have not been identified. Where a purpose for which data was originally collected no longer applies, we will cease using that data for that purpose and, where appropriate, delete or anonymise it. This commitment to data minimisation reflects our view that Users’ privacy interests are best served by limiting the scope of data collection to what is genuinely needed to deliver a safe, functional, and personalised Platform experience.

Section 1.09. Sensitive Personal Information — User Guidance.

Certain categories of personal information are treated as sensitive under applicable privacy law, including information about health conditions, medical history, disabilities, mental health, religious beliefs, racial or ethnic origin, and sexual orientation. The Platform is not designed to collect sensitive personal information of this kind, and we ask that Users do not include such information in any free-text field on the Platform, including reviews, booking notes, support messages, or profile descriptions.

Where a User inadvertently or voluntarily discloses sensitive personal information through any Platform feature, we will:

treat that information with the elevated level of care required under applicable law;

not use it for marketing, profiling, or advertising purposes;

restrict access to that information to personnel who require it solely to provide the relevant service or resolve the relevant issue; and

delete it promptly once the purpose for which it was received has been fulfilled.

If you have inadvertently shared sensitive information through the Platform and wish to have it removed, please contact help@getgoer.com and we will act on your request promptly.

Section 1.10. Information We Do Not Collect.

We do not collect biometric data of any kind. We do not collect financial account numbers, social security numbers, or government-issued identification documents. We do not knowingly collect any personal information from persons under the age of eighteen (18). We do not intentionally collect sensitive personal information as described in Section 1.09, though Users may inadvertently disclose such information as described therein.

ARTICLE II — HOW WE USE YOUR INFORMATION

Section 2.01. Purposes of Processing.

We use the personal information we collect for the following purposes:

Account Creation and Management. To create and maintain your Goer account, verify your identity, and manage your relationship with us.

Booking and Pass Fulfilment. To process your Pass purchases, facilitate your bookings at Partner Venues, and manage your Account Credit balance.

Payment Processing. To process transactions through our payment processor, Stripe, and maintain records of your transaction history.

Check-In and Access Management. To validate your access to Partner Venues through the QR Check-In system and enforce the single-session policy on your account.

Customer Support. To respond to your enquiries, resolve disputes, and provide assistance with your account.

Safety and Security. To detect, investigate, and prevent fraudulent activity, abuse of the Platform, multiple-account creation, and other prohibited conduct.

Platform Improvement. To analyse usage patterns, conduct research, test new features, and improve the functionality and performance of the Platform.

Personalisation. To personalise your experience on the Platform, including by making recommendations for Partner Venues and Passes based on your location, booking history, and browsing behaviour. This may involve automated decision-making as described in Section 2.02.

Marketing and Promotions. To send you marketing communications by email and push notification, and by SMS where you have separately opted in, subject to your consent and applicable law. You may withdraw your consent at any time as described in Article VI. Marketing use of your mobile number is subject to the limits described in Section 3.02.

Legal Compliance. To comply with applicable laws, regulations, and legal processes, and to respond to lawful requests from government authorities.

Business Operations. To enforce our Terms of Use, protect our legal rights, and manage any corporate transaction such as a merger or acquisition.

Sensitive Information Handling. Where we inadvertently receive sensitive personal information as described in Section 1.09, to manage and delete that information in accordance with our elevated handling obligations.

Section 2.02. Automated Decision-Making and Personalisation.

We use automated processes and algorithms to personalise the Platform experience for each User. This includes recommending Partner Venues and Passes based on your location, booking history, browsing behaviour, and usage patterns; ordering and presenting content within the Platform; and, in certain circumstances, making automated decisions about account activity that may be flagged as potentially fraudulent or abusive.

Where an automated process results in a significant decision affecting your account — such as a restriction or suspension — you have the right to request a human review of that decision by contacting help@getgoer.com. Automated personalisation does not involve decisions based on sensitive personal characteristics such as race, religion, health, sexual orientation, or any of the other categories of sensitive information described in Section 1.09.

Section 2.03. Data Minimisation.

In carrying out each of the purposes described in Section 2.01, we are committed to using only the personal information that is necessary and proportionate to that purpose. We will not use personal information collected for one purpose for a different, incompatible purpose without first providing you with notice and, where required, obtaining your consent. Where personal data is no longer required for the purpose for which it was collected, we will handle it in accordance with our retention practices set out in Article V.

Section 2.04. Legal Bases for Processing.

We process your personal information on the following legal bases:

Contract Performance. Processing necessary to perform our contract with you, including creating your account, processing bookings, and delivering Pass access.

Legitimate Interests. Processing necessary for our legitimate business interests, including fraud prevention, platform security, analytics, and service improvement, where those interests are not overridden by your privacy rights.

Consent. Processing based on your specific consent, including marketing communications by email, SMS, and push notification, and the collection of precise location data.

Legal Obligation. Processing necessary to comply with applicable law, including tax and financial record-keeping obligations.

ARTICLE III — HOW WE SHARE YOUR INFORMATION

Section 3.01. General Principle.

We do not sell, rent, or trade your personal information to third-party advertisers or data brokers. We share personal information only as described in this Article III and only to the extent necessary for the stated purpose.

Section 3.02. Goer Group Companies.

We may share personal information with other entities within the Goer Group for operational and administrative purposes, including to provide and improve the Platform and to conduct internal analytics and reporting. Where you have consented to receive marketing communications, we may also share your name and email address within the Goer Group for the purpose of sending you communications about Goer Group products and services. All Goer Group entities that receive personal information are required to handle it in accordance with this Privacy Policy.

Mobile Number and SMS Consent — Express Limit. Your mobile telephone number and any SMS opt-in consent you provide to Goer will not be shared with any third party or with any Goer Group affiliate for marketing purposes, under any circumstance. Your mobile number is used solely by Goer Inc. for account verification and, where you have separately opted in, to send you SMS communications directly from Goer, as described in Sections 1.03(b) and 2.01. This limit applies regardless of any other provision of this Policy and may not be varied by a future update to this Policy without your prior, separate, opt-in consent.

Section 3.03. Partner Venues.

When you book a Pass at a Partner Venue, we share relevant personal information with that venue to facilitate your access. The information shared typically includes your name, booking reference, Pass type, and contact details. Each Partner Venue is an independent data controller in respect of the information we share with it and is solely responsible for its own data handling practices. We are not responsible for how Partner Venues use the information we share with them.

Partner Venues may use their own third-party technology platforms — including scheduling software, customer relationship management systems, and access control systems — to manage bookings and process the data Goer shares with them. Such processing is governed by the Partner Venue’s own data processing arrangements with those platforms, and not by this Privacy Policy. We encourage you to review the privacy policy of any Partner Venue before booking.

Section 3.04. Payment Processor.

We share your payment information with Stripe, Inc. for the purpose of processing your transactions. Stripe processes payment data as an independent data controller in accordance with its own privacy policy. We do not receive or store your full card number. For more information about how Stripe handles your data, please visit stripe.com/privacy.

Section 3.05. Cloud Infrastructure.

We store and process your personal data on servers operated by Amazon Web Services, Inc. (“AWS”) within the United States. AWS may process data at facilities located in multiple regions; all such processing is subject to AWS’s security and confidentiality obligations. Further information about AWS’s data practices is available at aws.amazon.com/privacy.

Section 3.06. Analytics and Technology Service Providers.

We use third-party analytics and crash reporting tools to monitor Platform performance, understand User behaviour, and improve our services. These providers may collect device data, usage data, and technical log data on our behalf. They are contractually prohibited from using this data for their own purposes and from using it for marketing to Users on their own behalf. A current, named list of all analytics and technology service providers in active use is maintained at www.getgoer.com/subprocessors.

Section 3.07. Email Marketing Provider.

We use a third-party email marketing platform to manage and send marketing communications. This provider processes your name and email address on our behalf and is contractually prohibited from using this data for any other purpose. The current provider is named at www.getgoer.com/subprocessors.

Section 3.08. Push Notification and SMS Providers.

We use third-party services to deliver push notifications and, where you have opted in, SMS messages to your device. Our SMS messages are delivered by Twilio Inc., which processes your device identifier and, for SMS delivery only, your mobile telephone number, strictly as a data processor acting on Goer’s instructions and strictly for the purpose of transmitting the message Goer sends — never for Twilio’s own marketing purposes or for sharing with any other party. A current, named list of all push notification and SMS providers in active use is maintained at www.getgoer.com/subprocessors. This arrangement does not affect the express limit on marketing use of your mobile number set out in Section 3.02.

Section 3.09. Publicly Visible Profile Information.

Certain elements of your Goer profile are visible to other Users of the Platform and to members of the general public, including through search engines and third-party websites that index publicly accessible content. The following information is publicly visible on the Platform:

your display name;

your profile photograph, if you have uploaded one; and

any reviews or ratings you have submitted about Partner Venues.

You should exercise care in the information you choose to include in your public profile or reviews, as this information may be read, collected, and used by other persons and platforms beyond Goer’s control. If you wish to remove a review you have submitted, please contact help@getgoer.com.

Section 3.10. Legal and Regulatory Disclosures and Law Enforcement Transparency.

We may disclose personal information to law enforcement agencies, courts, regulatory bodies, or other government authorities in the following circumstances:

where we are required to do so by applicable law, court order, subpoena, or other valid legal process;

where we believe in good faith that disclosure is necessary to prevent imminent harm to any person or to protect the rights, property, or safety of Goer, our Users, Partner Venues, or the public; or

in connection with the investigation, detection, or prosecution of fraud, criminal activity, or other illegal conduct.

Where we receive a law enforcement request for personal data, we will:

Review the request. We will review all law enforcement requests to satisfy ourselves that they are lawful, properly authorised, and issued by a competent authority before complying.

Seek to narrow the scope. Where a request is broader than we consider necessary, we will seek to negotiate a narrower scope and will disclose only the minimum personal data required to comply with the legal obligation.

Notify affected Users where permitted. Where we are legally permitted to do so and it is practicable, we will notify the affected User before disclosing their personal data in response to a law enforcement request. We will not notify Users where doing so would be prohibited by law, would compromise an investigation, or would pose a risk to any person’s safety.

Maintain records. We will maintain a record of all law enforcement requests received and our responses to them, to the extent permitted by applicable law.

Section 3.11. Business Transfers.

In the event that Goer Inc. undergoes a merger, acquisition, reorganisation, sale of substantially all of its assets, or similar corporate transaction, your personal information may be transferred to the acquiring or successor entity as part of that transaction. We will notify you of any such transfer and any material changes to the way your personal information is handled by posting a notice on the Platform or sending you a direct communication, as required by applicable law. Any acquiring or successor entity remains bound by the express limit on marketing use of mobile numbers and SMS consent set out in Section 3.02.

Section 3.12. Aggregated and Anonymised Data.

We may share aggregated, anonymised, or de-identified data — which cannot reasonably be used to identify you — with third parties for research, analytics, marketing, or other purposes. Such data is not personal information and is not subject to this Privacy Policy.

ARTICLE IV — INTERNATIONAL DATA TRANSFERS

Section 4.01. Processing Outside the United States.

Although Goer is a United States company and primarily processes data within the United States through AWS, some of our third-party service providers may process personal data in other countries. Where personal data is transferred outside the United States, we take steps to ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable law.

Section 4.02. Your Acknowledgement.

By using the Platform, you acknowledge that your personal information may be transferred to, stored in, and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction. Where required by applicable law, we will obtain your consent to such transfers or implement appropriate legal mechanisms to facilitate them.

ARTICLE V — DATA RETENTION

Section 5.01. Retention Principles.

We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. The specific retention period for each category of data depends on the nature of the data and the purpose for which it is held.

Section 5.02. Active Accounts.

While your account remains active, we retain all personal information associated with your account, including your profile data, booking history, transaction records, and communications with us.

Section 5.03. Account Closure and Post-Closure Retention.

Upon closure or deletion of your account, we will take the following approach to your personal data:

Immediate Deletion. Profile photographs and non-essential preference data will be deleted within thirty (30) days of account closure.

Retained for Legal and Financial Compliance. Transaction records, payment data, and booking history will be retained for a period of seven (7) years following account closure to comply with applicable tax, financial reporting, and legal obligations. During this retention period, this data will not be used for marketing or personalisation purposes.

Retained for Dispute Resolution. Any data relevant to an ongoing or reasonably anticipated dispute, legal proceeding, or regulatory investigation will be retained until that matter is fully resolved.

Anonymisation. Where we are unable to delete data due to legal or technical constraints, we will anonymise it so that it can no longer be associated with you.

Section 5.04. Review and Update.

We review our data retention practices periodically and will update this Section if our retention periods change materially.

ARTICLE VI — YOUR RIGHTS AND CHOICES

Section 6.01. Access and Correction.

You may view and update certain personal information held in your account at any time through the Profile settings in the Goer app. This includes your name, email address, and telephone number. For information that cannot be updated through the app, please contact help@getgoer.com.

Section 6.02. Data Access Requests.

You may request a copy of the personal information we hold about you by contacting us at help@getgoer.com. We will respond to verified data access requests within a reasonable timeframe and in accordance with applicable law. We may ask you to verify your identity before processing such a request. We will provide the information in a commonly used electronic format.

Section 6.03. Account Deletion.

You may delete your Goer account at any time through the Platform settings or by contacting help@getgoer.com. Upon account deletion, we will handle your personal data in accordance with the retention practices described in Section 5.03. Note that deletion of your account results in the immediate forfeiture of all unused Passes and Account Credits, as set out in our Terms of Use.

Section 6.04. Marketing Opt-Out.

You may withdraw your consent to receive marketing communications at any time:

Email. Use the unsubscribe link in any marketing email we send you.

Push Notifications. Adjust your notification preferences in the Goer app settings or through your device’s notification settings.

SMS. Reply STOP to any SMS message you receive from us. You will receive one final confirmation message and no further promotional SMS messages will be sent.

Withdrawing consent to marketing communications does not affect our ability to send you transactional or operational messages, such as booking confirmations, Pass expiry alerts, or important account notices.

Section 6.05. Location Data.

You may withdraw your consent to the collection of precise location data at any time by adjusting your device’s location permissions for the Goer app. Please note that disabling location access will limit the Platform’s ability to display nearby Partner Venues and may impair certain features of the app.

Section 6.06. Automated Decision-Making Review.

Where an automated process results in a significant decision affecting your account, you have the right to request a human review of that decision. To exercise this right, contact help@getgoer.com with a description of the decision you wish to have reviewed. We will respond within a reasonable timeframe.

Section 6.07. Do Not Sell or Share.

We do not sell your personal information to third parties, and we do not share it with third parties for cross-context behavioural advertising. As such, there is no need for an opt-out mechanism for data selling. If this practice changes, we will update this Policy and provide you with appropriate opt-out rights before any such change takes effect.

Section 6.08. Exercising Your Rights.

To exercise any of the rights described in this Article VI, please contact us at help@getgoer.com. We may need to verify your identity before processing your request. We will not discriminate against you for exercising any privacy right, and we will not deny you services, charge you different prices, or provide a different level of service as a result of your exercising a privacy right.

ARTICLE VII — DATA SECURITY

Section 7.01. Security Measures.

We implement and maintain appropriate technical and organisational measures designed to protect your personal information against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, without limitation, encryption of data in transit using Transport Layer Security (TLS) protocols; access controls restricting access to personal data to authorised personnel only; secure hosting of data on AWS infrastructure with industry-standard physical and network security; and regular review of our security practices.

Section 7.02. Payment Security.

All payment transactions are processed by Stripe, Inc., which is certified to the Payment Card Industry Data Security Standard (PCI DSS). We do not transmit or store full payment card numbers on our systems.

Section 7.03. No Absolute Guarantee.

Whilst we take data security seriously and invest in appropriate safeguards, no method of transmission over the internet or method of electronic storage is one hundred percent secure. We cannot guarantee the absolute security of your personal information. In the event of a data security incident that affects your personal information, we will notify you in accordance with applicable law.

Section 7.04. Data Breach Notification.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected Users and relevant authorities in accordance with applicable federal and state law. Notification will be provided via in-app notification and, where we have a valid email address for you, by email. The notification will include a description of the nature of the breach, the categories of data affected, and the steps you can take to protect yourself.

ARTICLE VIII — CHILDREN’S PRIVACY

Section 8.01. Minimum Age.

The Platform is intended solely for use by persons who are at least eighteen (18) years of age. We do not knowingly collect, solicit, or retain personal information from any person under the age of 18.

Section 8.02. COPPA Compliance.

In accordance with the Children’s Online Privacy Protection Act, 15 U.S.C. §§ 6501 et seq. (“COPPA”), we do not knowingly collect personal information from children under the age of 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take prompt steps to delete that information from our systems.

Section 8.03. Reporting.

If you believe that a person under the age of 18 has provided personal information to us through the Platform, please contact us immediately at help@getgoer.com so that we can take appropriate action.

ARTICLE IX — THIRD-PARTY LINKS AND SOCIAL MEDIA

Section 9.01. Third-Party Links.

The Platform may contain links to third-party websites, including the websites of Partner Venues. We are not responsible for the privacy practices of any third-party website, and this Privacy Policy does not apply to any website that we do not operate. We encourage you to read the privacy policy of each website you visit.

Section 9.02. Goer Social Media Presence.

Goer operates social media accounts and may maintain a company blog. If you interact with Goer on social media platforms or comment on our blog, please be aware that those platforms have their own privacy policies governing the information you share. We are not responsible for the data practices of any social media platform. Any information you share publicly on social media or in public comment sections is visible to all users of that platform and is not governed by this Privacy Policy.

Section 9.03. No Social Login.

The Platform does not currently support login or registration through any social media account. If this changes in the future, we will update this Privacy Policy accordingly.

ARTICLE X — ADVERTISING AND TRACKING SIGNALS

Section 10.01. Current Position.

As at the effective date of this Privacy Policy, Goer does not serve targeted or interest-based advertising to Users through third-party ad networks, and does not share personal information with third-party advertisers for behavioural advertising purposes.

Section 10.02. Future Advertising — Advance Notice and Opt-Out.

If we decide in the future to introduce targeted or interest-based advertising, we will update this Privacy Policy and provide you with at least thirty (30) days’ advance notice before any such change takes effect. We will give you a meaningful and accessible opt-out mechanism before any such advertising commences. Any future introduction of interest-based advertising remains subject to, and may not override, the express limit on marketing use of mobile numbers and SMS consent set out in Section 3.02. When and if interest-based advertising is introduced, it may involve the following:

Behavioural Targeting. Using your browsing behaviour, booking history, and usage data to serve advertisements relevant to your inferred interests, on the Platform and on third-party websites and apps.

Third-Party Ad Networks. Sharing data with third-party advertising networks that may combine it with data collected from other sources to serve targeted advertisements across devices.

Hashed Data Matching. Associating a hashed (non-human-readable) version of your email address with interest-based or demographic data held by advertising partners.

Industry Opt-Out Mechanisms. Users will be able to opt out of interest-based advertising through industry-standard tools including the Network Advertising Initiative opt-out tool at optout.networkadvertising.org, the Digital Advertising Alliance opt-out tool at optout.aboutads.info, and the AppChoices mobile app available at youradchoices.com/appchoices. Opting out of interest-based advertising does not mean you will stop receiving advertisements; it means that advertisements shown to you will not be targeted based on your inferred interests.

Section 10.03. Do Not Track and Global Privacy Control.

Do Not Track (“DNT”) is a browser preference setting that signals to websites that the User does not wish to be tracked across websites. Because no uniform legal or technical standard for DNT has been adopted in the United States, the Platform does not currently respond to DNT browser signals.

Global Privacy Control (“GPC”) is a browser-based signal that communicates a User’s opt-out preference with respect to the sale or sharing of personal information. We will honour GPC signals to the extent required by applicable law in each jurisdiction in which the Platform operates. As Goer expands to states that require GPC recognition — including California and Colorado — our systems will be updated to process GPC signals accordingly.

ARTICLE XI — PRIVACY POLICY UPDATES

Section 11.01. Right to Amend.

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. The date of the most recent revision will always be displayed at the top of this page.

Section 11.02. Notification of Material Changes.

Where we make a material change to this Privacy Policy — meaning a change that significantly affects how we collect, use, or share your personal information — we will notify you by in-app push notification prior to the change taking effect. The notification will direct you to the updated Policy and invite you to review it. Your continued use of the Platform following the effective date of any change constitutes your acceptance of the updated Policy. For the avoidance of doubt, the express limit on marketing use of mobile numbers and SMS consent in Section 3.02 may only be varied with your prior, separate, opt-in consent, notwithstanding this Section.

Section 11.03. Prior Versions.

Prior versions of this Privacy Policy are available upon written request to help@getgoer.com.

ARTICLE XII — TEXAS AND US PRIVACY LAW

Section 12.01. Texas Data Privacy and Security Act.

The Texas Data Privacy and Security Act (TDPSA), Tex. Bus. & Com. Code §§ 541 et seq., grants Texas residents certain rights in relation to their personal data, including the right to access, correct, delete, and obtain a portable copy of their personal data, and the right to opt out of the processing of personal data for targeted advertising, the sale of personal data, or profiling in furtherance of solely automated decisions that produce legal or similarly significant effects. To the extent these rights apply to you, you may exercise them by contacting help@getgoer.com. We will respond to verified requests within forty-five (45) days, with the possibility of a single forty-five-day extension where reasonably necessary.

Section 12.02. California Residents.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CPRA). At the date of this Policy, the Platform is only available within the State of Texas. When the Platform becomes available in California, we will publish a California-specific privacy addendum providing full disclosure of your rights under California law, including the right to know, the right to delete, the right to correct, the right to opt out of the sale and sharing of personal information, and the right to limit the use of sensitive personal information.

Section 12.03. CAN-SPAM Act Compliance.

Our marketing emails comply with the requirements of the Controlling the Assault of Non-Solicited Pornography and Marketing Act (CAN-SPAM Act), 15 U.S.C. §§ 7701 et seq. Each marketing email we send identifies itself as a commercial communication, includes our physical postal address, and provides a clear and functioning opt-out mechanism. We will honour opt-out requests within ten (10) business days.

Section 12.04. TCPA Compliance.

Our SMS communications comply with the Telephone Consumer Protection Act, 47 U.S.C. § 227, and the regulations of the Federal Communications Commission thereunder. We send SMS messages only to Users who have provided their express written consent as part of the account registration process. Consistent with Section 3.02, mobile numbers and SMS opt-in consent collected for this purpose are used solely by Goer and are not shared with third parties or Goer Group affiliates for marketing purposes. Users may opt out of SMS messages at any time by replying STOP to any message received from us.

ARTICLE XIII — CONTACT AND COMPLAINTS

Section 13.01. Contact.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal information, please contact us at:

Email: help@getgoer.com

Post: 4700 Capital of Texas Hwy #531, Austin, TX 78746, United States

We will endeavour to respond to all privacy-related enquiries within thirty (30) days of receipt.

Section 13.02. Complaints.

If you are not satisfied with our response to a privacy concern, you may have the right to lodge a complaint with a relevant data protection authority or consumer protection agency. In the United States, consumer privacy complaints may be directed to the Federal Trade Commission at ftc.gov/complaint. Texas residents may contact the Texas Attorney General’s Consumer Protection Division at texasattorneygeneral.gov.

— END OF PRIVACY POLICY —

Version 3.0   ·   Effective 1 July 2026   ·   Goer Inc.   ·   www.getgoer.com/privacy

By using the Goer Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.