Cookie Policy

1. About this Cookie Policy

This Cookie Policy explains how DynamIQ Fit B.V., trading as SummiQ (“SummiQ”, “we”, “us” or “our”) uses cookies and similar technologies when you use the SummiQ website, applications and services.

DynamIQ Fit B.V. is established in Diemen, the Netherlands, and registered with the Dutch Chamber of Commerce (KvK) under number 99233096.

For questions about this Cookie Policy or your privacy, you can contact us at:

support@summiq.eu

For more information about how we process personal data generally, please see our Privacy Policy.

2. What are cookies and similar technologies?

Cookies are small pieces of information that a website can store on your browser or device and access again later.

Similar technologies can perform comparable functions. These may include:

• browser local storage;
• session storage;
• application storage;
• software development kit (“SDK”) identifiers;
• pixels;
• scripts;
• device identifiers; and
• other technologies that store information on, or access information from, your device.

In this Cookie Policy, we generally refer to all of these as “cookies and similar technologies”.

Some of these technologies are necessary for SummiQ to work. Others may be used for analytics, preferences or, in the future, advertising.

3. Our approach

SummiQ is designed to minimise unnecessary tracking. At launch, our approach is:

• use only technologies necessary to operate and secure SummiQ;
• use privacy-friendly first-party analytics operated by SummiQ itself;
• avoid cross-site tracking for analytics;
• avoid Google Analytics;
• avoid Meta Pixel;
• avoid LinkedIn Insight Tag;
• not use third-party advertising trackers unless and until an advertising feature requiring them is introduced;
• not use health, workout or physiological information for advertising tracking; and
• obtain consent before using optional technologies where consent is legally required.

We do not consider the acceptance of cookies to constitute consent to processing health or fitness information.

Consent for processing health and fitness data is requested separately.

4. Essential technologies

SummiQ uses cookies and similar technologies that are necessary to provide the service requested by you.

These technologies may be used for purposes such as:

• signing you into your account;
• maintaining your authenticated session;
• keeping your account secure;
• preventing fraud, abuse and unauthorised access;
• balancing traffic and maintaining service availability;
• remembering essential privacy choices;
• maintaining security settings;
• processing requests between the SummiQ frontend and backend; and
• enabling features that cannot function without local device storage.

These technologies are necessary for the operation of SummiQ and cannot generally be disabled through our cookie settings.

Disabling them through your browser or device settings may cause SummiQ to stop functioning correctly.

Current essential technology categories

SummiQ / Protect accounts and Session or limited Security infrastructure systems against abuse No security period providers and unauthorised access

Session SummiQ / Maintain the operation of Session or limited No management Supabase the service during use period

Until the Privacy Remember privacy and preference SummiQ No preferences cookie choices expires or is changed

Provide functionality Session or as Technical SummiQ specifically requested by technically No functionality the user necessary

The exact technical identifier used may differ between the SummiQ website, web application and future mobile applications.

5. SummiQ first-party analytics

SummiQ operates its own first-party product analytics.

We do not use Google Analytics for this purpose.

Our analytics are intended to help us understand, for example:

• which SummiQ features are used;
• whether pages and features operate correctly;
• how users navigate within the application;
• where users encounter errors;
• general application performance;
• aggregate usage trends; and
• which parts of SummiQ could be improved.

We design our analytics to have as little impact on your privacy as reasonably possible.

Where technically possible, we prefer analytics that:

• are collected directly by SummiQ;
• are not used to follow you across unrelated websites or services;
• are not shared with advertising networks;
• do not create advertising profiles;
• do not use persistent cross-site identifiers;
• use aggregated information where possible; and
• retain identifiable analytics data only for as long as reasonably necessary.

Where our first-party analytics can operate without storing information on your device or accessing information already stored on your device, no analytics cookie or similar device identifier is used.

If SummiQ uses an analytics cookie or comparable technology that has only limited consequences for your privacy and qualifies for an exemption under applicable Dutch law, we may use it without prior consent.

We will still provide information about that use.

If an analytics implementation has more than a limited impact on privacy or otherwise requires consent, it will not be activated until you have given the required consent.

Current analytics configuration

Not required where configured as privacy- Aggregate SummiQ first- friendly analytics with product usage, party product SummiQ No No only limited privacy reliability and analytics impact; otherwise improvement consent will be requested

SummiQ does not currently use:

• Google Analytics;
• Meta Pixel;
• LinkedIn Insight Tag; or
• third-party behavioural analytics for advertising purposes.

6. Health and training information

SummiQ processes detailed sport, training, physiological and potentially health-related information as part of the SummiQ service.

This includes information such as workouts, heart rate, HRV, power, pace, training load, GPS routes, recovery data and other athlete information.

We do not use advertising cookies or advertising trackers to collect this information for advertising purposes. We do not make heart rate, HRV, medical information, injuries, detailed training information, AI coaching conversations, precise GPS routes or comparable sensitive information available to advertisers for behavioural advertising.

The legal basis and consent mechanism for processing health-related information are explained separately in our Privacy Policy.

Accepting cookies is not the same as giving health-data consent.

7. Advertising technologies

SummiQ may introduce advertising as part of its free service in the future.

At the effective date of this Cookie Policy, third-party personalised advertising tracking is not part of the initial SummiQ analytics setup.

Before we introduce advertising technologies that require consent, we will update our cookie information and provide an appropriate consent mechanism.

Advertising technologies requiring consent will be disabled by default until you choose to enable them.

Where applicable, you will be offered choices such as:

Reject optional technologies Manage choices Accept optional technologies

Refusing personalised advertising technologies will not prevent you from using the core SummiQ service.

You may still receive contextual or non-personalised advertising where this can lawfully be provided without tracking you for personalised advertising.

We will not use profiling-based personalised advertising for users whom we know to be under 18 years of age.

8. Advertising partners

If SummiQ introduces third-party advertising partners in the future, we will provide information before their technologies are activated, including as applicable:

• the identity of the advertising partner;
• the technology used;
• the purposes for which information is collected;
• the types of information collected;
• whether the information is combined with information from other services;
• how long the relevant technology operates;
• whether information is transferred outside the EEA; and
• how you can withdraw your consent.

We will not treat a general acceptance of this Cookie Policy as consent to future advertising trackers.

Where consent is required, you will be asked to make an active choice.

9. Your cookie choices

Technologies that are strictly necessary for SummiQ cannot generally be switched off through our privacy controls because they are required to provide the service you have requested.

Where optional technologies are introduced, you will be able to:

• accept them;
• reject them;
• choose individual categories; and
• change or withdraw your choices later.

Consent will not be inferred from:

• silence;
• inactivity;
• continuing to browse;
• scrolling;
• a pre-ticked checkbox; or
• merely accepting our Terms of Service or Privacy Policy.

Where we request consent, optional technologies will not be activated before you make an affirmative choice.

Withdrawing consent will be as easy as giving it.

10. Browser and device controls

Your browser or device may allow you to inspect, block or delete cookies and other stored website information.

You can generally configure your browser to:

• delete existing cookies;
• block future cookies;
• block third-party cookies;
• clear local storage; or
• notify you when websites attempt to store information. Blocking all cookies or clearing application storage can cause authentication, security and other essential SummiQ features to stop working correctly.

Browser controls operate independently of SummiQ's own privacy settings.

11. Cookie and privacy preference storage

If SummiQ displays a cookie or privacy preference tool, we may store your selected preferences so that we do not repeatedly ask you to make the same choice.

That preference itself may be stored using a cookie or comparable local technology.

Such storage is considered necessary to remember and respect your privacy choice.

We may also maintain a server-side record of consent where appropriate so that we can demonstrate and respect your choices.

12. Retention

We do not retain cookie-derived or analytics information for longer than reasonably necessary for the purpose for which it was collected.

Different technologies may have different retention periods.

Session technologies generally expire when a session ends or shortly afterwards.

Authentication information may remain for longer where necessary to provide persistent login functionality.

Privacy preferences may be retained for long enough to remember your choice and avoid unnecessarily asking you again.

First-party analytics data are retained only for the period reasonably necessary for statistical analysis, security, reliability and product improvement and are aggregated or anonymised where appropriate.

Where optional advertising technologies are introduced, their specific retention periods will be disclosed in our cookie information before they are activated.

13. International processing

Some technical service providers used to operate SummiQ may process information outside the European Economic Area.

Where information obtained through cookies or similar technologies constitutes personal data and is transferred outside the EEA, we apply the international-transfer safeguards described in our Privacy Policy.

14. Changes to this Cookie Policy

We may update this Cookie Policy when:

• our technology changes;
• new SummiQ functionality is introduced;
• we change our analytics implementation;
• advertising functionality is introduced;
• providers change; or
• legal requirements change.

The current version will always indicate its effective date.

If we introduce a new technology for which consent is required, updating this Cookie Policy will not by itself constitute consent.

We will request the required consent separately before activating that technology.

15. Contact

If you have questions about cookies, tracking technologies or privacy at SummiQ, please contact:

DynamIQ Fit B.V. trading as SummiQ KvK: 99233096 Diemen, the Netherlands

support@summiq.eu

For more information about how SummiQ processes personal data, please see our Privacy Policy.