Effective Date: September 26, 2025

This Privacy Policy applies to SpeedRun developed by Covalent Research & Development and any affiliates or subsidiaries (collectively, “SpeedRun”, “we”, “our” or “us”), and applies to all websites, including speedrunapp.com and speedrunapp.xyz , (the “Website”) and any other product or service related to SpeedRun to which we choose to apply this Privacy Policy (collectively the “Service”), and details how we collect, use, and disclose your data.

• At the core of SpeedRun’s offering is our data model. All blockchain data we import is public data at this time and not considered “Personal Information”. Although the company is mainly dealing with public data, through the Service, we may collect and process personal data, which is information about you or that identifies you. If you have any questions or concerns about our disclosure of personal data, please contact us at your earliest convenience using the contact information found below.
• Subject to legal, contractual, and technical requirements, you may choose not to provide SpeedRun with certain data or request the deletion of certain data, which may impact the quality of the Service provided.

The following is a description of the personal data that we may collect, use, and process in connection with the Service:

• full name, email address, phone number, Ethereum or other wallet address, and mailing address, when someone requests information about our Services, signs up for a free or paid Service, signs up on a forum through the Service, participates in a contest or survey run by us or when attending conferences, trade shows, hackathons, and other events;
• when applying for a job through the Service, we may collect personal information related to your job application, including job history, CVs, information contained in cover letters, as well as basic personal information about yourself that you choose to share with us;
• behavioural information about how you access the Website and details about how you browse through our Website;
• technical information about how you access the Service and details about how the Service is operating on your systems; and
• information about your computer, phone, web-connected devices or other devices used to connect with the Service, including but not limited to operating system information, geolocation information, operations performed on the device and unique identifiers that may identify you over time and across different websites including your IP address or other device identifiers.

We process your personal data primarily for our business purposes. These uses include but are not limited to:

• providing the Service to you, including understanding your needs, improving the quality of the Service, providing customer support and feedback, analyzing functionality and technical issues, tracking the use of the Service and generating reports and data models;
• supporting the security and integrity of the Service, including controlling access to the Service, detecting and protecting the Service and third parties against privacy breaches, error, fraud, theft, suspicious activity, violations of any service agreement you have entered into with SpeedRun and other illegal activity or for contractual, legal, regulatory or audit obligations; and
• contacting you for various reasons, including feedback requests or marketing purposes, if you previously consented to such contact, analyzing functionality and technical issues, tracking the use of the Service and generating reports and data models that we use to improve the Service.

We may disclose your personal data to our parent companies, affiliates, subsidiaries, employees and contractors for the same purposes described above. We may also disclose your personal data to our service providers and other third parties, which may be located in a foreign jurisdiction and subject to foreign laws. We do not sell your personal data. The situations where we may disclose your personal data to third parties include, but are not limited to:

• processing your data as described above;
• providing customer support and feedback, analyzing functionality and technical issues, tracking the use of the Service and generating reports and data models that we use to improve the service;
• responding to requests from law enforcement or a government agency asserting lawful authority to obtain the data or where SpeedRun has reasonable grounds to believe the data could be useful in the investigation of unlawful activity, to comply with a subpoena or warrant or an order made by a court, person or body with jurisdiction to compel the production of data, to comply with court rules regarding the production of records and data, or to our legal counsel; and
• defending SpeedRun in a legal, regulatory or administrative proceeding or in a contractual dispute.

This Privacy Policy only applies to personal data that the Service collects, processes, and discloses and does not apply to the collection, processing and disclosure of data by third parties through third-party services, which may be broader than set forth in this Privacy Policy, and that may be embedded into the Service. To provide the Service, we may rely on third-party service providers who may collect personal data about your online activities over time and across different websites and services. For example, we use Google Cloud Platform, Stripe and PostHog. We strongly recommend that you read all third-party privacy policies carefully before using them. Please contact us directly using the information found below if you would like to learn more about our third-party data practices.

The Service may use tracking technologies, such as cookies, web beacons, JavaScript tags and clear GIFs, to collect data about you, such as your IP address and device information. Based on this data, third parties may be able to resolve your identity across multiple devices. This data is collected, used and disclosed in accordance with the terms of this Privacy Policy and the applicable third-party privacy policies. Certain Service features may rely on tracking technologies; by declining to accept cookies, disabling JavaScript or changing certain settings on your device, you may not have access to these features (which may include a loss of access to any forums provided on the Service).

You may contact SpeedRun to obtain a copy of any personal data we collect about you, the production of which may be subject to a fee as permitted by applicable law. In addition, you may contact SpeedRun to correct inaccurate personal data or to complete incomplete personal data.

You may be able to opt out of some or all of the ways in which your personal data is processed or request the deletion of certain personal data, except where the personal data is necessary or vital for:

• performance of contractual or legal obligations, such as due to a service agreement you have entered into with SpeedRun;
• protecting your interests or those of another person; and
• our legitimate interests or the legitimate interests of a third party,

and may request deletion by contacting us using the contact information found below.

While most of the personal data we collect is stored securely within Canada, the data you provide to us through the Service may be stored and processed by third parties in countries around the world, including in the United States. You authorize SpeedRun and third parties acting on our behalf to process your data in any country of their choosing, which may cause your data, including personal data, to be subject to privacy protections and legal rights that may not be equivalent to those in your country.

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, to meet our legal or business obligations, and to enforce our agreements. Your personal data is retained for the shorter of: (a) until you request its deletion; (b) until the Service no longer requires such data for the purpose for which it was collected; (c) 1 year after account deactivation for server logs which contain IP addresses; or (d) 5 years for forums posts linked to IP addresses by registered users on forums provided by the Service.

Do Not Track (“DNT”) is a web or device setting that allows users to request that receivers of personal data stop their tracking activities. When you choose to turn on the DNT setting in your browser or device or use alternative consumer choice mechanisms, your browser or device sends a special signal to websites, analytics companies, advertising networks, plug-in providers and other web services you encounter to stop tracking your activity. Currently, there are no DNT technology standards, and it is possible that there may never be any DNT technology standards. As a result, we do not respond to DNT requests.

SpeedRun does not knowingly collect any personal information from individuals under the age of 13, or the equivalent minimum age in the relevant jurisdiction. If we learn that we inadvertently collected personal data from a child under this age beyond allowable legal exceptions, we will delete that data as quickly as possible. If you are a parent or guardian of a child under the age of majority or age of consent in your jurisdiction, who you believe provided SpeedRun with personal data without your consent, please contact us at operations@covalenthq.com.

If you are a California resident, California Civil Code 1798.83 grants you the right to request disclosure of the categories of personal data we provided to third parties, and the names and addresses of these third parties, for direct marketing purposes during the preceding calendar year. If you are a California resident and would like to make this request, please contact us using the contact information set forth below.

Please note that you may only make this request once per year.

If you are a California resident, California Civil Code Section 1798.120 permits you to opt out of the sale of your personal information to third parties. Currently, SpeedRun does not sell your personal information to third parties and as such, no opt-out of the sale of such personal information is necessary. Although SpeedRun does not sell your personal information, SpeedRun does provide a general opt-out right to all of our users as described in our Privacy Policy. Furthermore, as SpeedRun already complies with Canadian and EEA privacy laws, the rights provided by law to Californian residents are already provided for elsewhere in our Privacy Policy. If you have any other questions about our privacy practices, please email us at operations@covalenthq.com.

When we collect your email and any other account information, such as your name, and when you desire to access forums provided on the Service, the processing of your personal data is necessary for our provision of the Services to you, as described in Article 6(1)(b) of the European Union’s General Data Protection Regulation (the “GDPR” ). In other cases, such as when you provide consent to contact you using your contact information, SpeedRun may collect such personal data pursuant to Article 6(1)(a) of the GDPR. For all other personal data collected as mentioned in this Privacy Policy, such as the collection of certain device information and IP addresses, SpeedRun has a legitimate interest, as described in Article 6(1)(f) of the GDPR, in collecting such personal data for the purposes described in this Privacy Policy.

If the GDPR or similar laws, such as the UK GDPR, apply to you, you have certain rights in regard to your personal data. These rights include:

• A Right of Access. You have the right to access your personal data that we hold about you free of charge in most circumstances.
• A Right to Rectification. If your personal data is inaccurate or incomplete, you can change the information you provided by contacting SpeedRun using the email listed below.
• A Right to Erasure. You have the right to obtain deletion of your personal data under most circumstances. In most cases, you may simply request the deletion by using the contact information found below. Please be careful, as deletion of data in this manner is permanent, and the data cannot be recovered.
• A Right to Object. If the processing of your personal data is based on legitimate interests according to Article 6(1)(f) of the GDPR or if your personal data was collected based on your consent according to Article 6(1)(a) of the GDPR, you have the right to object to this processing. If you object, we will no longer process your personal data unless there are compelling and prevailing legitimate grounds for the processing as described in Article 21 of the GDPR; in particular, if the personal data is necessary for the establishment, exercise or defense of legal claims or if personal data is required for the provision of the Service and you still wish to use the Service.
• A Right to File a Complaint. You have the right to file a complaint with the appropriate supervisory authority in your jurisdiction.
• A Right to Restriction of Processing of Your Personal Data. You have the right to obtain restrictions on the processing of your personal data as described in Article 18 of the GDPR.
• A Right to Personal Data Portability. You have the right to receive your personal data in a structured, commonly used and machine-readable format and have the right to transmit such data to another controller under the conditions described in Article 20 of the GDPR.
• A Right to Post-Mortem Control of Your Personal Data. Certain jurisdictions grant post-mortem controls of your personal data, and if such rights are applicable in your jurisdiction, you may have the right to establish guidelines for the preservation, deletion and transmission of your personal data after your death through a will or through your estate.
• A Right to Opt-out of Marketing Communications. You have the right to opt out of marketing communications we send you at any time. If you receive any marketing emails from us, you can exercise your right to stop such communications by clicking on the “unsubscribe” or “opt-out” link on any marketing emails SpeedRun sends you. To opt out of other forms of marketing, please contact us using the contact details provided below.

In the event of, or in preparation for, a change of ownership or control of SpeedRun or a business transition, such as the sale of some or all of SpeedRun’s assets, we may disclose and/or transfer your personal data to third parties who will have the right to continue to collect and use such data in the manner set forth in this Privacy Policy.

We are committed to ensuring that your data is secure. To prevent unauthorized access, disclosure, or breach, we have put in place suitable physical, electronic, and administrative procedures to safeguard and secure the data we collect and process.

We communicate with you primarily through the Service itself, but we may sometimes collect your email address in order to respond to support requests or comments. If you have provided us with your email address and would like to change the email preferences we associate with you (for example, unsubscribing from receiving certain types of email), you may do so by clicking a link within certain types of emails that we send to you or, if no link is available, by replying with “unsubscribe” in the email title or body or by modifying your email settings within the Service.

On rare occasions, some types of email are necessary for the Service and cannot be unsubscribed from if you continue to use the Service.

SpeedRun reserves the right, in its sole discretion, to modify the Privacy Policy at any time (each an“Update”) and shall make each Update available on the Website. You are deemed to accept any Update by continuing to use the Service after the Update is posted. Unless SpeedRun states otherwise, an Update is effective immediately upon posting on the Website. It is your responsibility to check this Privacy Policy periodically for changes.

If you have requests, questions or comments about the Privacy Policy or our data collection in general, please contact our Data Privacy Officer at the Website or at: