Privacy Policy – More Than Conquerors

Effective date: June 18, 2026

This Privacy Policy (“Policy”) explains how Double Wing Bison Inc., a Kentucky for-profit corporation (“Double Wing Bison,” “we,” “us,” or “our”), the operator of the More Than Conquerors mobile and web application (the “App”), collects, uses, shares, retains, and protects personal information about you. More Than Conquerors is a daily scripture and mindset/mental-training app for coaches and athletes, available on iOS, Android, and the web.

This Policy applies to the App and to our related websites, fundraising pages, and support channels (together, the “Service”). It does not apply to third-party services we do not control, even when we link to them or integrate with them. Please read this Policy together with our Terms of Service and the other notices linked throughout.

By creating an account or using the App, you acknowledge the practices described in this Policy. If you do not agree with this Policy, please do not use the App.

Special note for children. More Than Conquerors is a mixed-audience service used by adults (such as coaches) and by minors (such as athletes). Users who are 13 or older hold their own accounts. A child under 13 may use the App only through an account created and approved by a parent or guardian, who provides verifiable parental consent. Our practices for children under 13 — including how we obtain and manage parental consent and the limits we place on children’s data — are described in our Children’s Privacy Notice and summarized in Section 14 below. If you are a parent or guardian, please review that notice.

1. Who we are

Double Wing Bison Inc. is the company that operates More Than Conquerors. For most personal information described in this Policy, we act as the controller (the party that decides why and how the information is processed). For some processing we act on behalf of an organization that uses the App, as described in Section 7.

Company: Double Wing Bison Inc. (a Kentucky for-profit corporation)
Mailing address: 1318 Jackson Pike, Harrodsburg, KY 40330, United States
Privacy contact: support@doublewingbison.com

If you have any question about this Policy or how we handle your information, contact us at the email or address above. See also our Support & Contact page.

2. Information we collect

We collect the categories of information described below. The specific information we hold about you depends on how you use the App, the type of account you have (adult or child), and whether you participate in an organization or fundraising.

2.1 Information you (or a parent/guardian) provide

Account and identity information

Name and username
Email address (for adult accounts) or a parent/guardian’s email address (for child accounts), plus an optional backup parent/guardian email used for child-account recovery
A password, stored only in salted, hashed form by our authentication system; we never store passwords in plain text
Authentication and OAuth identifiers, including identifiers we receive when you sign in with Google or Apple

Profile information

Avatar image (adult accounts only; we do not collect an avatar for child accounts)
Role within the App (for example, coach or athlete)
Date of birth, and whether the account is a minor account

Organization information

The organization(s) you belong to and your role within them (owner or member)
Organization-related details you provide, such as your participation status

Fundraising information (where fundraising features are live)

Your participation in an organization’s fundraising, any referral code assigned to you, and organization-internal leaderboard statistics
For supporters who make a payment to an organization: payment records such as amount, status, payment-processor identifiers, and the supporter’s name and email. Card numbers and other full payment-method details are handled by the payment processor (Stripe), not by us — see Section 7.

Content and communications

Inputs you provide to the AI chat assistant and any voice/speech you submit for voice-to-text (see Section 6). These features are disabled or restricted for accounts belonging to children under 13.
Messages and support communications you send to us

2.2 Information we collect automatically

When you use the App, we and our service providers automatically collect:

Usage and activity data — daily drill and scripture completion, streaks, progress, engagement, and similar usage information used to operate and improve the App
Notification data — your notification preferences and push notification tokens (delivered through Apple’s APNs and Google’s FCM)
Device, app, log, and diagnostic data — basic device and operating-system information, app version, identifiers needed to run the service, and log and diagnostic information used to provide the App, secure it, and troubleshoot problems

For information about cookies, local storage, and similar technologies on the web version of the App, see Section 5.

2.3 Information from app stores and sign-in providers

Apple App Store and Google Play — when you subscribe, the store processes your payment. We do not receive your full payment-card details. We receive subscription and entitlement status through our subscription-management provider (RevenueCat) so we can unlock or restrict premium access.
Google and Apple sign-in (OAuth) — if you sign in with Google or Apple, we receive limited identifiers and basic account information (such as an email address and a stable identifier) needed to create and authenticate your account, consistent with the permissions you grant.

2.4 Information from organizations

If a coach or organization owner adds you to an organization or assigns you a role, we receive information about your membership and role within that organization. Organization owners and administrators may see certain information about members within their organization, as described in Section 7.

2.5 Sensitive information

We do not intentionally collect special categories of sensitive personal information (such as government identifiers, precise geolocation, health diagnoses, or biometric identifiers used to uniquely identify you). A user’s date of birth and minor status are used only to apply age-appropriate protections and parental-consent requirements. We do not use any information to infer characteristics about you for advertising, and we do not collect government ID for any purpose, including parental consent.

3. How we use information

We use personal information for the following purposes:

Provide and operate the App — create and maintain your account, authenticate you, deliver daily scripture and drills, track streaks and progress, and provide organization and (where live) fundraising features
Manage subscriptions and access — recognize your subscription/entitlement status from RevenueCat and unlock or restrict premium access, including the free trial
Enable organizations — support organization membership, roles, owner/member functions, and organization-internal leaderboards
Enable fundraising (when live) — operate organization fundraising pages and QR links, process supporter payments through the payment processor, and maintain payment, payout, and dispute records
Provide AI features — operate the AI chat assistant and voice-to-text for eligible accounts (see Section 6)
Communicate with you — send service messages, parental-consent and account notices, push notifications you have enabled, and respond to support requests
Personalize and improve — understand how the App is used, fix bugs, develop features, and improve performance and reliability
Secure the Service — authenticate users, detect and prevent fraud, abuse, and security incidents, and enforce our Terms and policies
Comply with law — meet legal, tax, accounting, and regulatory obligations, and respond to lawful requests
Obtain and manage parental consent — for child accounts, contact the parent/guardian, record consent, and honor parental rights (see Section 14 and the Children’s Privacy Notice)

We do not use personal information for cross-context behavioral advertising, and we do not use children’s information for behavioral advertising. See Section 7.

4. Legal bases for processing (EEA/UK)

If you are in the European Economic Area (“EEA”) or the United Kingdom (“UK”), we process your personal information only where we have a legal basis to do so. Depending on the activity, our legal basis is one or more of the following:

Performance of a contract — to create and operate your account, deliver the App’s core features, manage your subscription and entitlement, and provide support. Examples: authenticating you; tracking your drills and streaks; recognizing your subscription status.
Consent — where we ask for it, such as enabling push notifications, using optional AI/voice features, and (for child accounts) verifiable parental consent. You may withdraw consent at any time; withdrawal does not affect processing already carried out. Examples: sending push notifications you opted into; processing voice input you submit.
Legitimate interests — to operate, secure, and improve the App in ways you would reasonably expect and that do not override your rights. Examples: preventing fraud and abuse; diagnosing problems with diagnostic data; understanding aggregate usage to improve features; maintaining organization-internal leaderboards.
Legal obligation — to comply with laws that apply to us, including tax, accounting, and recordkeeping requirements, and to respond to lawful requests. Examples: retaining payment and payout records related to fundraising; responding to valid legal process.

Where we rely on legitimate interests, you may object as described in Section 11. If you have questions about the legal basis for a particular activity, contact us at support@doublewingbison.com.

5. Cookies, local storage, and similar technologies

The web version of the App uses cookies, local storage, and similar technologies. We use these primarily for essential purposes:

Keeping you signed in and maintaining your session and authentication state
Remembering basic preferences and settings
Keeping the Service secure and functioning correctly

Essential technologies are necessary for the App to work and cannot be turned off through an in-app control without breaking core functionality. Where we use any non-essential analytics technologies to understand aggregate usage and improve the App, we do so in a privacy-protective way and, where required by law, request your consent first. We do not use cookies or similar technologies for cross-context behavioral advertising, and we do not allow third parties to use them on our Service for their own advertising.

You can control cookies through your browser settings, including deleting or blocking them, but blocking essential cookies may prevent parts of the web App from working. For how we respond to browser privacy signals, see Section 13.

6. AI features

The App offers an AI chat assistant and voice-to-text (voice/speech input) powered by a third-party AI provider. When you use these features:

Your inputs (the text you type, or audio you submit for transcription) are sent to the third-party AI provider to generate a response or transcription, and may be processed on that provider’s infrastructure under our agreement with it.
We instruct our AI provider to act as a service provider and to process this information only to provide the feature, not for its own independent purposes, and we do not use your AI inputs to serve advertising.

Children under 13. The AI chat assistant and voice/speech input are disabled, or restricted to non-personal processing, for accounts belonging to children under 13. We do this so that children’s information is not sent to the AI provider for non-essential purposes.

Please do not submit sensitive personal information through the AI features. As with any general-purpose AI, outputs may be inaccurate or incomplete and should not be relied on as professional, medical, legal, or spiritual advice.

7. How we share information

We do not sell your personal information. We share personal information only as described below.

7.1 Service providers and processors

We share information with vendors that process it on our behalf, under contracts that limit them to providing services to us. Categories of service providers and the purpose for sharing include:

Cloud hosting and database infrastructure — to host and run the App and store data
RevenueCat — to manage subscriptions and tell us your subscription/entitlement status
Stripe / Stripe Connect (when fundraising is live) — to process supporter payments and pay out to organizations; Stripe handles full payment-card details directly
Apple and Google — to process in-app subscription purchases (App Store / Google Play), to provide Google and Apple sign-in (OAuth), and to deliver push notifications (APNs / FCM)
A third-party AI provider — to provide the AI chat assistant and voice-to-text features (see Section 6)
Email / SMTP delivery provider — to send service emails, parental-consent and confirmation emails, and other notices

These providers are authorized to use personal information only to perform services for us, not for their own independent purposes.

7.2 App stores

When you purchase a subscription, the relevant app store (Apple or Google) processes your payment under its own terms and privacy policy. The store, not Double Wing Bison, handles and stores your payment method.

7.3 Within your organization

If you join or participate in an organization, the organization’s owner and administrators (and, where applicable, other members) may see information appropriate to your role and participation — for example, your name or username, your role, and organization-internal activity such as leaderboard statistics and fundraising participation. Information about a minor in an organization’s leaderboard or fundraising statistics is visible only inside that organization; we do not expose minor participants publicly. Organizations are responsible for their own handling of member information.

7.4 Fundraising pages (when live)

An organization’s fundraising page is publicly accessible on the web and may be reached by scanning a QR code. The public page is intended to display organization-level fundraising information, not the personal information of minor participants. Supporters who make a payment provide their information to the payment processor and to the organization for the purpose of the payment, as described in the Fundraising Terms. Fundraising payments are processed outside of in-app purchase, are not charitable or tax-deductible, and do not unlock any in-app benefit for the payer.

7.5 Legal and safety

We may disclose information if we believe in good faith that doing so is necessary to: comply with applicable law, regulation, legal process, or a lawful government request; enforce our Terms of Service and other agreements; detect, prevent, or address fraud, security, or technical issues; or protect the rights, property, or safety of Double Wing Bison, our users (including children), or the public.

7.6 Business transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our assets, personal information may be transferred as part of that transaction. We will require the recipient to honor this Policy or notify you of any material change as required by law.

7.7 We do not sell or share for behavioral advertising

We do not sell personal information for money or other valuable consideration, and we do not share it for cross-context behavioral advertising. We do not serve third-party behavioral advertising in the App. We do not use children’s data for behavioral advertising, disclose children’s data to third parties for their own purposes, or make a child’s personal information public.

8. International data transfers

We are based in the United States, and we and our service providers process and store personal information in the United States and potentially in other countries where our providers operate. Data-protection laws in these countries may differ from those where you live.

If you are in the EEA or UK and we transfer your personal information to a country that has not been deemed to provide an adequate level of protection, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with supplementary measures where needed. You may contact us at support@doublewingbison.com to request more information about the safeguards we use.

9. Data retention

We keep personal information only as long as necessary for the purposes described in this Policy, after which we delete or de-identify it. To decide how long to keep information, we consider:

How long we need it to provide the App and your account
Whether you have an active account, subscription, or organization membership
Legal, tax, accounting, and regulatory recordkeeping requirements
The need to resolve disputes, enforce our agreements, and maintain security

When you delete your account (see Section 12 and Data & Account Deletion), we delete your account and ordinary profile and activity data, except limited records we retain for legal, financial, or security reasons, including:

Payment, payout, refund, and dispute records related to organization fundraising
Organization financial history
Fraud, abuse, and security logs
Records we are required by law to keep

We keep these records only as long as needed for those purposes, and then delete or de-identify them. For child accounts, retention follows the limits described in the Children’s Privacy Notice.

10. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, use, disclosure, alteration, and loss. These include storing passwords only in salted, hashed form, encrypting data in transit, restricting access to personal information on a need-to-know basis, and relying on reputable infrastructure and payment providers that maintain their own security programs.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You play an important role too: keep your credentials confidential, use a strong and unique password, and notify us promptly at support@doublewingbison.com if you believe your account has been compromised.

11. Your privacy rights and choices

Depending on where you live, you may have rights over your personal information. We honor the rights described below. To exercise any right, see Section 12. We will not discriminate against you for exercising your privacy rights.

You can also exercise everyday choices directly in the App at any time: update your profile information, manage notification preferences (and adjust device-level notification permissions), manage Google/Apple sign-in connections with those providers, and delete your account.

California (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), gives you specific rights.

Categories of personal information we collect (CCPA categories). In the past 12 months we have collected the following CCPA-defined categories:

Identifiers — name, username, email (or parent/guardian email), account and OAuth identifiers, push tokens, device identifiers
Customer records information — name and contact information, hashed password, avatar (adult accounts)
Protected classification characteristics — date of birth / age (used only to apply age-appropriate protections and parental consent)
Commercial information — subscription/entitlement status; for fundraising (when live), payment records such as amount, status, and processor identifiers, and supporter name and email
Internet or other electronic network activity — usage and engagement data, drill/scripture completion, streaks, log and diagnostic data
Audio and electronic information — voice/speech you submit to voice-to-text (not collected from children under 13)
Inferences — limited operational signals such as streaks and engagement used to run the App; we do not create profiles for advertising

Sources of this information are described in Section 2 (you or a parent/guardian, automatic collection, app stores and OAuth providers, and organizations).

Business and commercial purposes for which we use each category are described in Section 3 (providing and securing the App, managing subscriptions and organizations, enabling fundraising and AI features, communicating with you, improving the App, and complying with law).

Categories disclosed for a business purpose. In the past 12 months we have disclosed the categories above to our service providers and contractors (Section 7) solely to provide services to us, and to app stores and the payment processor as needed to complete transactions you initiate.

No sale or sharing; no sensitive-PI inferences. We do not sell personal information and do not share it for cross-context behavioral advertising, and we have not done so in the past 12 months. We do not use any sensitive personal information for the purpose of inferring characteristics about you.

Your California rights:

Right to know / access — request the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients
Right to delete — request deletion of personal information we collected from you, subject to legal exceptions
Right to correct — request correction of inaccurate personal information
Right to opt out of sale/sharing — although we do not sell or share personal information, you retain this right
Right to limit use of sensitive personal information — although we do not use sensitive PI to infer characteristics, you retain this right
Right to non-discrimination — we will not discriminate against you for exercising any right

How to exercise, verification, and agents. Submit a request as described in Section 12. We will verify your request by matching information you provide against information in our records (for example, the email associated with your account). You may use an authorized agent to submit a request on your behalf; we may require the agent to provide proof of authorization and may ask you to verify your identity directly.

Right to appeal / contact. If we deny your request, you may contact us at support@doublewingbison.com to ask us to reconsider, and you may also contact the California Privacy Protection Agency or the California Attorney General.

Other U.S. State Privacy Laws

If you are a resident of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), or another state with a comparable consumer privacy law, you may have the following rights, subject to that state’s law and exceptions:

Access / confirm — confirm whether we process your personal information and access it
Correct — correct inaccuracies in your personal information
Delete — delete personal information we hold about you
Portability — obtain a copy of your personal information in a portable, usable format where applicable
Opt out — opt out of any targeted advertising, sale of personal information, or profiling that produces legal or similarly significant effects. We do not engage in these activities, but you retain the right.

If we deny your request, you may appeal by replying to our decision or contacting us at support@doublewingbison.com; we will respond within the time your state’s law requires. If your appeal is denied, you may contact your state Attorney General. Because we do not process personal information for targeted advertising, sale, or such profiling, no separate opt-out is required to honor your choices, though we honor recognized opt-out preference signals as described in Section 13.

Europe & UK (GDPR / UK GDPR)

If you are in the EEA or UK, you have the following rights under the General Data Protection Regulation (“GDPR”) and UK GDPR, subject to conditions and exceptions:

Access — obtain confirmation of whether we process your personal data and a copy of it
Rectification — have inaccurate or incomplete personal data corrected
Erasure — have your personal data deleted in certain circumstances (“right to be forgotten”)
Restriction — restrict our processing in certain circumstances
Portability — receive certain personal data in a structured, commonly used, machine-readable format and have it transmitted to another controller where technically feasible
Objection — object to processing based on our legitimate interests, and to direct marketing at any time
Withdraw consent — where we rely on consent, withdraw it at any time without affecting prior processing
Lodge a complaint — complain to your local data-protection supervisory authority or, in the UK, the Information Commissioner’s Office (ICO)

To exercise any of these rights, see Section 12.

12. How to exercise your rights

You can exercise many choices directly in the App — update your profile, manage notification preferences, and delete your account (see Data & Account Deletion).

For other requests, email support@doublewingbison.com from the email associated with your account (or, for a child’s account, the parent/guardian email on file) and tell us what you would like to do. Include enough information for us to locate your account, such as your username.

Verification. To protect your information, we verify requests before acting, typically by confirming control of the account email or matching information against our records. We may ask for additional information if we cannot verify you with what we have.
Authorized agents. Where the law allows, an authorized agent may submit a request on your behalf; we may require proof of authorization and may verify your identity directly.
Response timelines. We respond within the timeframe required by applicable law (for U.S. state laws, generally within 45 days, with an extension where permitted; for the EEA/UK, generally within one month). If we cannot honor a request, we will explain why, subject to legal limits.
No fee. We do not charge a fee to process most requests, unless the law permits a fee for excessive or repetitive requests.

For requests concerning a child’s account, see the Children’s Privacy Notice, which describes parental review, revocation of consent, deletion, and changing the contact email.

13. Do Not Track and Global Privacy Control

Some browsers offer a “Do Not Track” (“DNT”) signal. Because there is no common industry standard for DNT, the web App does not respond to DNT signals. We do not track you across third-party websites or services for advertising in any event.

Where required by law, we honor recognized opt-out preference signals, such as the Global Privacy Control (GPC), as a valid request to opt out of any sale or sharing of personal information for the browser or device that sends the signal. Because we do not sell or share personal information for cross-context behavioral advertising, there is no such activity for the signal to stop, but we treat a recognized signal as an effective expression of your choice.

14. Children’s privacy

More Than Conquerors is a mixed-audience service. We ask every new user for a date of birth at sign-up. If a user is under 13, we do not allow a standalone account; instead, we route the user into a parent/guardian consent flow and collect only the limited information needed for the internal operation of the App.

We obtain verifiable parental consent using a COPPA “email plus” method: an email to the parent/guardian to confirm control of the inbox, an in-app affirmation by the parent/guardian, and a post-consent confirmation email so the parent/guardian can revoke consent if they did not authorize it. We do not require government ID. For child accounts, the AI chat assistant and voice/speech input are disabled or restricted, child profiles are limited (for example, first name only, no public avatar), and a minor’s leaderboard and fundraising statistics are visible only inside their organization. We do not use children’s information for behavioral advertising, disclose it to third parties for their own purposes, or make it public.

Parents and guardians can review, delete, and stop the collection of their child’s information, and revoke consent, as described in the Children’s Privacy Notice. That notice governs our handling of children’s information and controls in case of any conflict with this Policy.

15. Third-party links and services

The App integrates with and links to third-party services, including app stores, sign-in providers, the payment processor, and the AI provider, and may link to other websites or resources. We are not responsible for the privacy practices or content of third parties. When you leave the App or interact with a third-party service (for example, completing a payment with Stripe or managing a subscription in the App Store or Google Play), that third party’s own privacy policy and terms apply. We encourage you to review them.

16. Changes to this Policy

We may update this Policy from time to time. When we make changes, we will revise the “Effective date” above and post the updated Policy. If the changes are material, we will provide additional notice as required by law (for example, in the App or by email). Where the law requires, and for material changes affecting children’s information, we will obtain any necessary new consent. Your continued use of the App after an update takes effect means you acknowledge the revised Policy.

17. Contact us

If you have questions, requests, or concerns about this Policy or your personal information, contact us:

Email: support@doublewingbison.com
Mail: Double Wing Bison Inc., 1318 Jackson Pike, Harrodsburg, KY 40330, United States

This Policy is governed by the laws of the Commonwealth of Kentucky, without regard to its conflict-of-laws rules, except where a mandatory privacy law of your jurisdiction provides you rights that apply regardless of governing law.