LEGAL

This document sets out the Legal Notice, the Terms and Conditions of use and the Privacy Policy applicable to the Kibi website and application (the “App”, the “Service”), owned by KIBI APP SL. By accessing or using Kibi you fully accept this document. If you do not agree with any part of it, please do not use the App.

PART 1: LEGAL NOTICE & IDENTIFICATION

1.1 Owner of the website and the App

In compliance with Article 10 of Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), the following identifying details of the owner are provided:

• Company name: KIBI APP SL (hereinafter “Kibi”, “we” or “the Owner”).
• Tax ID (CIF): B27526078.
• Legal form: Limited liability company (Sociedad Limitada).
• Registered office: Partida Barranquet 38 A, 03590 Altea (Alicante), España.
• Commercial Registry: Company registered with the Commercial Registry of Alicante (Spain), Sheet 205271, Entry 1 (incorporation, registered on 27/04/2026).
• Contact email: hello@kibiapp.com.
• Activity: Design, development, programming and commercialization of software, applications and digital platforms (CNAE 6201).

1.2 Purpose and acceptance

This document governs access to and use of the Kibi website and App. Browsing, accessing or using Kibi grants the status of user and implies full and unreserved acceptance of every clause set out herein, as well as any future amendments. The Owner reserves the right to modify the presentation, configuration and content of the Service at any time.

PART 2: TERMS AND CONDITIONS

2.1 About Kibi

Kibi is a mobile and web platform designed to connect runners through activities, events, clubs and shared experiences. Kibi acts solely as a technological intermediary that puts users, clubs and organizers in contact; it does not organize, direct or supervise the sporting activities published on the platform.

2.2 Eligibility and minors

You must be at least 16 years old to use Kibi. By using the App you confirm that you meet this requirement and have the legal capacity to accept these terms. If you are between 16 and 18 years old, you declare that you have the consent of your parents or legal guardians. Kibi is not directed at children under 16 and does not knowingly collect data from anyone below that age.

2.3 Your Account

When you create an account, you agree to:

• Provide truthful, accurate and up-to-date information.
• Keep your login credentials confidential and secure.
• Be solely responsible for all activity that occurs under your account.

We reserve the right to suspend, limit or terminate, temporarily or permanently, any account that breaches these terms or applicable law, without this giving rise to any right to compensation.

2.4 Acceptable Use

As a user, you agree not to:

• Use Kibi for unlawful, fraudulent or unauthorized purposes.
• Harass, threaten, impersonate, abuse or harm other users.
• Post false, defamatory, misleading, offensive content or content that infringes third-party rights.
• Attempt to gain unauthorized access, hack, scrape data, introduce malware or disrupt the Service.

We may remove content, restrict features or terminate access when these rules are breached, without prior notice where the severity warrants it.

2.5 Medical disclaimer and assumption of risk

Kibi is not a medical or professional sports service. The App does not provide medical advice, diagnosis or treatment, and its content is purely recreational and informational. Running and physical activity involve inherent risks of injury, health issues and even death.

By using Kibi you acknowledge that: (a) you take part in any physical activity of your own free and exclusive will; (b) you are responsible for assessing your own physical condition and for consulting a medical professional before starting any exercise program; (c) you voluntarily, knowingly and fully assume all risks associated with the activities you discover, organize or attend through the App; and (d) you waive any claim against Kibi for personal injury, harm or damages arising from such activities, to the maximum extent permitted by law.

2.6 Events, clubs and organizers (intermediation)

Kibi is an intermediary platform and is not a party to the relationship established between users and the clubs, organizers or third parties who publish events, meetups or activities. Accordingly, Kibi:

• Does not organize, direct, supervise or control the events, clubs or meetups created by users or third parties.
• Does not guarantee the safety, quality, legality, accuracy or actual occurrence of such activities.
• Is not liable for the acts, omissions, negligence or breaches of organizers, clubs or other participants.
• Assumes no liability for accidents, injuries, damages or losses occurring during or in connection with such activities.

Users attend and take part in events at their sole responsibility. Any claim relating to an event must be addressed directly to its organizer, who is solely responsible for it.

2.7 Definitions

• User: a natural person who registers and uses the Platform.
• Organizer / Club: a natural or legal person who publishes clubs and/or events on the Platform.
• Event: an activity (sporting, social or mixed) published by an Organizer, which may be free, paid, or restricted to people subscribed to a club.
• Subscription: a recurring payment relationship between a User and a Club that grants the User membership status for the contracted period.
• Payment processor: the payment service provider through which transactions are executed (Stripe). See clause 2.10.

2.8 Participation models

The Platform supports the following participation models. In all of them, the underlying contractual relationship (event attendance, club membership) is established between the User and the Organizer; Kibi merely provides the technical means.

• Free club. The User joins the club at no cost. They can access the club's free events and, where applicable, register for one-off paid events.
• Club with subscription. The User pays a recurring fee to acquire and maintain club membership. The conditions of clause 2.11 (subscriptions) apply.
• Events. They may be: (i) free; (ii) one-off paid (single-payment ticket); or (iii) restricted to subscribers of a given club. The scope, conditions, capacity, requirements and, where applicable, risks of the event are defined and communicated by the Organizer.

2.9 Prices and pre-contractual information

The price of each event or subscription, taxes included, as well as any applicable fees and commissions, are clearly displayed before confirming the transaction, in accordance with Articles 60 and 97 of Royal Legislative Decree 1/2007 (the Spanish general consumer protection law, TRLGDCU).

Before completing payment, the User expressly confirms that they know the total amount to be paid by means of an unambiguous button (“Pay” / “Subscribe” or wording of similar meaning), in accordance with Article 98 TRLGDCU.

2.10 Payments and payment processor

Payments are processed through Stripe, an independent payment service provider, subject to its own terms and conditions, which the User accepts when making a payment. Kibi does not store the User's full card details.

Kibi does not hold, retain or manage the funds corresponding to tickets or subscriptions. Funds are processed by Stripe and paid out to the Organizer. Kibi only charges a fee for the use of the Platform, deducted through the payment processor itself.

Accordingly, the obligation to pay the price of the event or subscription is understood to be contracted with the Organizer, without prejudice to the fact that the payment is technically executed through the Platform and its processor. For paid events organized by third parties, the Organizer is the seller and sole party responsible to the User for the service, invoicing and refund policy.

2.11 Recurring paid subscriptions

Prior information. Before contracting, the User is informed of: the subscription price, frequency, date of the first charge, automatic renewal condition and cancellation method.

Automatic renewal. Unless cancelled, the subscription automatically renews for equal periods, charging the then-current fee at the start of each period.

Cancellation. The User may cancel the renewal at any time, easily and through the same digital channel, from their account. Cancellation takes effect at the end of the current period, unless otherwise indicated. No more burdensome requirements will be imposed to cancel than to subscribe.

Fee changes. Any price change will be communicated with sufficient notice, and the User may cancel before it takes effect.

2.12 Right of withdrawal

Tickets for events with a fixed date. In accordance with Article 103(l) TRLGDCU, the 14-day right of withdrawal does not apply to services related to leisure activities where the contract provides for a specific date or period of performance (the typical case of a ticket to a dated event). This exception is communicated to the User before purchase.

Club subscriptions. For distance contracts of subscriptions, the User does have a 14-calendar-day right of withdrawal from the date of contracting, under Articles 102 et seq. TRLGDCU, unless the service has been fully performed with the User's prior consent. Cancelling the renewal (clause 2.11) is independent of this right.

A withdrawal form and an address to exercise this right will be made available to the User.

2.13 Cancellations, refunds and returns

Cancellation or modification of an event by the Organizer. The refund policy for cancellation, postponement or substantial modification of an event is the responsibility of the Organizer, who defines and communicates it. Kibi technically facilitates the refund where applicable, without assuming the payment obligation from its own funds.

User requests. Refund requests for reasons attributable to the event must be directed to the Organizer through the Platform. Kibi may technically mediate, but does not guarantee or answer for the financial outcome where the cause is unrelated to Kibi.

Refunds and chargebacks. Amounts corresponding to refunds and chargebacks are charged to the Organizer, in accordance with the contract signed with it.

2.14 User-generated content (UGC)

By posting content on Kibi (photos, routes, comments, activity data), you grant us a worldwide, non-exclusive, royalty-free, sublicensable and transferable license to use, host, display, reproduce, adapt and distribute that content for the purpose of operating and promoting the Service. You represent and warrant that you own the content or hold the necessary rights to grant this license, and that the content does not infringe third-party rights. You are solely responsible for the content you post and will hold Kibi harmless against any claim arising from it.

2.15 GPS, maps and third-party services

Kibi uses third-party mapping and location services (e.g. GPS). We do not guarantee the accuracy, completeness or reliability of the routes, distances, maps or metrics displayed. Real-world conditions (traffic, weather, obstacles, private property or closed paths) may differ from the App's data. It is your responsibility to pay attention to your surroundings and to comply at all times with traffic, private property and access regulations.

2.16 Intellectual and industrial property

All content, trademarks, logos, trade names, designs and software related to Kibi are owned by KIBI APP SL or its licensors and are protected by intellectual and industrial property laws. You may not copy, reproduce, modify, distribute, decompile or exploit any part of the Service without the prior written authorization of the Owner.

2.17 Disclaimer of warranties

To the maximum extent permitted by law, the Service is provided “as is” and “as available”, without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, continuity or error-free operation. Kibi does not warrant that the Service will be uninterrupted or fault-free.

2.18 Limitation of liability

Liability for the event. Kibi is not liable for the content, development, safety or outcome of events, which are the exclusive responsibility of the Organizer. In particular, Kibi is not liable for accidents, personal injury or property damage suffered in connection with attending an event, the coverage and prevention of which are the Organizer's responsibility and, where applicable, its insurers'.

Liability as an intermediary. Within the limits permitted by law, Kibi is responsible for the proper technical operation of the Platform. It does not guarantee uninterrupted availability of the service or the absence of errors, and undertakes to act diligently to correct them.

Third-party content. As an intermediary service provider, Kibi has no general obligation to monitor the content published by Organizers. Kibi will act diligently to remove or block access to unlawful content when it becomes effectively aware of its unlawfulness (Art. 16 LSSI-CE).

Indirect damages and aggregate cap. To the extent permitted by law, Kibi is not liable for indirect damages, loss of profits or loss of opportunity. Kibi's total and aggregate liability to the User, on any basis, shall be limited to the amount actually paid by the User to Kibi in the twelve (12) months prior to the event giving rise to the claim. Nothing in these terms excludes or limits liability that cannot lawfully be excluded or limited (e.g. willful misconduct or harm to life and physical integrity), nor the mandatory rights granted to consumers by law.

Force majeure. Kibi is not liable for any failure caused by circumstances beyond its reasonable control (including disasters, pandemics, restrictions by authorities or failures of third-party providers).

2.19 Indemnification

You agree to defend, indemnify and hold harmless KIBI APP SL, its directors, employees, collaborators and affiliated entities from any claim, damage, penalty, liability, cost or expense (including reasonable attorneys' fees) arising from: (a) your use of the App; (b) your breach of these terms; (c) your violation of third-party rights; or (d) any content you post.

2.20 Changes to the terms

We may update these terms at any time. The version in force will always be the one published on this page, with its “Last updated” date. Continued use of the Service after a change implies acceptance of the new terms.

2.21 Governing law and jurisdiction

These terms are governed by Spanish and European Union law. For the resolution of any dispute, the parties submit to the Courts of the Owner's domicile, unless consumer regulations mandatorily establish another jurisdiction in favor of the consumer user, in which case the latter shall prevail. If you are a consumer, you may use the European Commission's online dispute resolution platform.

PART 3: PRIVACY POLICY

We respect your privacy and are committed to protecting your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

3.1 Data controller

The controller of your data is:

• Controller: KIBI APP SL (Tax ID B27526078).
• Address: Partida Barranquet 38 A, 03590 Altea (Alicante), España.
• Privacy contact: hello@kibiapp.com.

3.2 Data we process and legal basis

We process your data on the following legal bases:

• a) Account data (performance of the contract). Name, email address, profile picture and optional biography.
• b) Running activity and location (explicit consent). Distance, time, pace, route and performance metrics. With your permission, we collect location data to record routes, discover events and connect you with nearby runners. You can disable location access in your device settings at any time.
• c) Social interactions (legitimate interest). Events you join, clubs you participate in, comments and likes.
• d) Analytics and cookies (consent). We use measurement technologies to analyze usage and improve the Service. Specifically, we use PostHog for product analytics. You can manage your preferences in the App settings.
• e) Payment data (performance of the contract). Processed by Stripe. We do not store your full card details.

3.3 Data sharing and club activities

We do not sell your personal data. We only share it in the following cases:

• Clubs and event organizers: when you join a club or confirm attendance at an event, we share your name and email with the organizer solely and exclusively for the purpose of managing your attendance and the logistics of the activity. Note: clubs and organizers act as independent data controllers for this purpose. Kibi expressly prohibits them from using your personal data to send you commercial communications (e.g. their own newsletters) without first obtaining your express and independent consent. If an organizer contacts you for purposes other than the mere management of the event, they will do so under their exclusive responsibility and in accordance with their own privacy policy, over which Kibi has no control.
• Service providers (data processors): trusted platforms such as Stripe (payments), PostHog (analytics) and hosting providers, bound by the corresponding data processing agreements under Art. 28 GDPR.
• Legal obligations: public authorities, judges or courts when required by law.

3.4 International transfers

Some of our providers may process data outside the European Economic Area. In those cases, we ensure an adequate level of protection through mechanisms recognized by the GDPR, such as European Commission adequacy decisions or Standard Contractual Clauses (SCCs).

3.5 Data retention and deletion

We keep your data only for as long as necessary to provide the Service and meet our legal obligations. If you wish to delete your account and personal data, email us at hello@kibiapp.com. We will process your request and delete your data within a maximum of 30 days, except for data we are legally or fiscally required to retain (e.g. payment records).

3.6 Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (right to be forgotten).
• Restrict or object to certain processing.
• Port your data in a structured, commonly used format.
• Withdraw consent at any time (e.g. by disabling location or cookies), without affecting the lawfulness of prior processing.

To exercise your rights, email us at hello@kibiapp.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).

3.7 Security

We apply reasonable technical and organizational measures to protect your data. However, no system is completely secure and we cannot guarantee absolute security.

3.8 Cookies, analytics and PostHog

Kibi uses cookies and similar measurement technologies to remember your preferences, keep your session active and analyze use of the Service in order to improve it. Analytics cookies are only activated with your consent, which you can grant or withdraw at any time from the App settings.

For product analytics we use PostHog (PostHog, Inc.), a platform that helps us understand how users interact with Kibi. In this context, PostHog acts as a data processor on behalf of KIBI APP SL, bound by the corresponding data processing agreement (Art. 28 GDPR), and may collect:

• Usage and interaction events (screens visited, buttons tapped, features used).
• Technical device and session data (device type, operating system, browser, language and pseudonymized identifiers).
• IP address, which may be used for approximate geolocation and which, depending on our configuration, is truncated or discarded.

Purpose: measure product performance, detect errors and prioritize improvements. Legal basis: your consent. Retention: analytics data is kept only for as long as necessary for these purposes and is then deleted or anonymized.

We do not use PostHog to sell your data or for third-party advertising. You can withdraw your consent in the App settings at any time; when you do, we will stop collecting analytics data through PostHog. Where data is processed outside the EEA, the safeguards described in clause 3.4 apply. You can find more information in PostHog's privacy policy.

3.9 Payments and Stripe

Payments within Kibi are processed through Stripe (Stripe Payments Europe, Ltd. and its group entities), our payment service provider. When you make a payment, your card and transaction details are provided to and processed directly by Stripe on its secure systems, certified under the PCI-DSS standard. Kibi does not store or have access to your full card details.

In relation to payment data, Stripe may act as a data processor on behalf of KIBI APP SL and, for certain purposes of its own (fraud prevention and regulatory compliance), as an independent controller. Stripe may process, among others: name, card or payment method details, amount, currency, billing address and technical data needed to process and secure the transaction.

Purpose: process payments, issue refunds where applicable and prevent fraud. Legal basis: performance of the contract and compliance with legal obligations (e.g. accounting and tax). Where data is processed outside the EEA, the safeguards described in clause 3.4 apply. You can find more information in Stripe's privacy policy.

3.10 Changes to this policy

We may update this legal document. When we do, we will change the “Last updated” date at the top and, where appropriate, notify you by suitable means.