Privacy

We know that you are trusting us with information that is important to you. Rodrigo Bejarano, Resurge, Rivyn, Rivyn Performance, and related entities (collectively, “we,” “us,” or “our”) operate the websites rodrigobejarano.io, rivyn.co, performance.rivyn.co, the white-label Sonar-powered application and related services (collectively, the “Services”). This Privacy Policy describes the privacy practices for our applications, software, websites, APIs, products, and services.

1. INFORMATION WE COLLECT

Information You Provide Us

Account Information: Name, email address, password, date of birth, sex/gender, profile photo, height, weight, phone number, and similar details required or optionally provided to create and manage an account.

Additional Information: Health, activity, sleep, nutrition, training, and biomarker logs; access to third-party devices and apps (Garmin, Apple Watch, Oura, Whoop, etc.); contact lists for invitations (we do not store the list after use).

Payment Information: Name, card details, billing address (processed by third-party processors such as Stripe; we do not store full card numbers).

Information submitted via contact forms, surveys, coaching sessions, or support.

Information We Receive from Your Use of the Services

Geolocation (if permitted; approximate from IP otherwise).

Usage data, device information, IP address, browser/OS, pages visited, cookies, SDKs, tracking pixels, and similar technologies.

Data synced from connected third-party devices/apps.

Information from Third Parties

Data from connected wearables, labs, or partners (with your consent).

Employer or partner program data when applicable.

2. HOW WE USE INFORMATION
We use the information to:

Provide, maintain, personalize, and improve the Services (including readiness scores, protocols, coaching insights, and community features).

Communicate with you (service notifications, support, marketing you can opt out of).

Promote safety, security, fraud prevention, and legal compliance.

Conduct analytics, research, and product development (using aggregated/de-identified data where possible).

3. HOW INFORMATION IS SHARED
We never sell personal information. We share only in limited cases:

When you direct us (e.g., third-party app access or coach sharing).

With service providers/processors under strict instructions (payments, hosting, analytics, customer support).

For legal reasons, to prevent harm, or in connection with a business transfer (with notice).

Aggregated or de-identified data that cannot reasonably identify you.

4. YOUR RIGHTS TO ACCESS AND CONTROL YOUR PERSONAL DATA
You can access, edit, or delete much of your data via account settings. Account deletion requests are processed promptly (most data within 30 days; backups up to 90 days). You may object to certain processing or withdraw consent for device connections. Contact us for assistance exercising rights under applicable law (including GDPR-style rights if in the EEA/UK/Switzerland, or Mexican LFPDPPP rights).

5. DATA RETENTION
Account data is kept while your account is active. Health/activity/biomarker data is retained to provide the Services until you delete it or your account. We retain data as needed for legitimate business, legal, or safety purposes.

6. ANALYTICS AND ADVERTISING
We use partners for analytics and (where applicable) advertising. These may use cookies and similar technologies. You can manage preferences via browser/device settings.

7. CHILDREN
Services are not directed to children under 18 (or higher age required by local law). We do not knowingly collect data from children without appropriate parental consent. Contact us to request deletion if we have inadvertently collected such data.

8. INFORMATION SECURITY
We use technical, administrative, and physical safeguards, including TLS encryption where appropriate. No method is 100% secure. Report concerns to the contact below.

9. INTERNATIONAL OPERATIONS AND DATA TRANSFERS
Data may be processed in the United States, Mexico, and other countries. We rely on consent, standard contractual clauses, and other lawful bases. You accept this risk by using the Services.

10. EUROPEAN / UK / SWISS DISCLOSURES (if applicable)
[EUROPEAN PRIVACY DISCLOSURES

If you live in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, please review these additional privacy disclosures under the European Union’s General Data Protection Regulation (“GDPR”) and equivalent UK and Swiss laws.

YOUR DATA CONTROLLER
Rodrigo Bejarano (operating the businesses Resurge, Rivyn, and Rivyn Performance) is your data controller and provides the Services if you live in the EEA, UK, or Switzerland.
For our contact information, please see the “Who We Are and How To Contact Us” section at the end of this Privacy Policy.
(If you later establish a formal Mexican legal entity, replace the above sentence with the exact registered name, address, and (if applicable) EU representative details.)

HEALTH AND OTHER SPECIAL CATEGORIES OF PERSONAL DATA
To the extent that information we collect is health data or another special category of personal data subject to the GDPR (for example, data from wearables, activity, sleep, recovery, nutrition logs, or biomarker results), we ask for your explicit consent to process that data.
We obtain this consent separately when you take actions that lead to our obtaining the data — for example, when you connect a third-party device or app (Garmin, Apple Watch, Oura, Whoop, etc.), upload biomarker results, or enable health-related features.
You can withdraw your consent at any time using your account settings and tools, including by disconnecting a third-party service, stopping use of a feature, deleting specific data, or deleting your entire account.

OUR LEGAL BASES FOR PROCESSING PERSONAL DATA
For personal data subject to the GDPR, we rely on the following legal bases:

Consent — when you have given your consent (which you may withdraw at any time using your account settings and other tools);

Contract — when the processing is necessary to perform a contract with you (our Terms of Service);

Legitimate interests — our legitimate business interests, such as improving, personalizing, and developing the Services, marketing new features or products that may be of interest to you, conducting analytics, and promoting the safety and security of the Services, as described in the “How We Use Information” section. We balance these interests against your rights and freedoms.

HOW TO EXERCISE YOUR LEGAL RIGHTS
Please review the “Your Rights To Access and Control Your Personal Data” section for how your account settings and tools allow you to exercise your rights under the GDPR, including the rights to:

Access your personal data

Rectify inaccurate data

Erase your data (“right to be forgotten”)

Restrict processing

Data portability

Object to processing based on legitimate interests

Object to direct marketing (you can always unsubscribe via the link in our emails or in your notification settings)

In addition to the controls we offer, in certain circumstances you may seek to restrict our processing or object to processing based on our legitimate interests. Under the GDPR you have a general right to object to the use of your information for direct marketing purposes.

If you need further assistance regarding your rights, please contact us at the email address listed in the “Who We Are and How To Contact Us” section. We will consider your request in accordance with applicable laws.
You also have the right to lodge a complaint with your local data protection authority (for example, the Information Commissioner’s Office in the UK, or the relevant supervisory authority in your EEA country).

11. CHANGES TO THIS POLICY
We may update this Policy. Continued use after posting constitutes acceptance. Material changes will be notified where required.

12. WHO WE ARE AND HOW TO CONTACT US
Rodrigo Bejarano / Resurge / Rivyn / Rivyn Performance

Email: [email protected]

Websites: rodrigobejarano.io | rivyn.co | performance.rivyn.co