Big Mountain Hero Privacy Policy

Effective date: September 29, 2026

This Privacy Policy explains how Disaster Relief Professionals, LLC ("Disaster Relief Professionals," "we," "us," or "our") collects, uses, discloses, retains, and protects information in connection with the Big Mountain Hero mobile application, website, and referral program (collectively, the "Service").

The Service is intended only for people who are at least 18 years old.

1. Information We Collect

Account and profile information

When you register or maintain an account, we collect information such as your name, email address, telephone number, password, account role, communication preferences, and records showing your acceptance of applicable terms. Passwords are stored in hashed form rather than as readable passwords.

Referral information

When you submit or manage a referral, we may collect the referred person's or business's name, telephone number, service address, ZIP code, notes, information about the property loss or requested service, the participating business assigned to the referral, referral status, timestamps, communications, and related eligibility or payout information.

You should provide another person's information only when you have a lawful basis to do so and that person has authorized or reasonably expects to be contacted about the requested services.

Payout information

To provide referral payments, we collect the payout method and details you choose to provide. Depending on your selection, this may include:

• Recipient or payee name;
• Venmo username;
• PayPal email address;
• Cash App tag;
• Check or other manual payout instructions; and
• Payout notes, amounts, status, and payment history.

The App stores this information on our server so authorized personnel can issue payments manually. The App does not collect or transmit bank-account numbers, routing numbers, debit-card numbers, credit-card numbers, or other card-account credentials. It does not connect to Venmo, PayPal, Cash App, a bank, Stripe, Square, Braintree, Plaid, Apple Pay, or Google Pay as a payment processor.

Communications and content

We collect messages exchanged through the Service, support requests, referral-related communications, and content uploaded by authorized administrators. Please do not include unnecessary sensitive information in messages or notes.

Push-notification and device information

If you enable notifications, the App uses Firebase Cloud Messaging to generate and maintain an app-installation identifier and push-notification token. We also receive the device platform, notification preferences, and delivery records needed to deliver and troubleshoot notifications. On Apple devices, notifications may also be delivered through the Apple Push Notification service.

The App does not use Firebase Analytics, Crashlytics, Authentication, Firestore, Storage, Remote Config, App Check, or Firebase advertising products. Analytics and advertising are disabled in the Firebase configuration.

Security and operational records

We maintain records reasonably necessary to authenticate users, verify email addresses, reset passwords, prevent misuse, investigate errors, protect the Service, and document referral and payout activity. These may include timestamps, status changes, audit records, and notification-delivery records.

2. How We Use Information

We use information to:

• Create, authenticate, maintain, and secure accounts;
• Verify email addresses and assist with password resets;
• Receive, route, evaluate, manage, and track referrals;
• Contact users and referred customers about requested services;
• Communicate about referral status, account activity, and support;
• Determine referral eligibility and calculate, document, and issue payouts;
• Deliver in-app, email, and push notifications selected by the user;
• Detect duplicate referrals, fraud, misuse, and security incidents;
• Maintain business, payment, tax, accounting, audit, and legal records; and
• Comply with law and enforce our agreements.

We do not sell personal information. We do not use personal information for third-party behavioral advertising, and the App contains no advertising or tracking SDK.

3. How We Disclose Information

We may disclose information only as reasonably necessary for the purposes described in this Policy:

• Participating businesses and authorized personnel. Referral information is provided to the participating business and personnel responsible for contacting the referred customer, performing requested services, administering the referral, and issuing an eligible payout.
• Service providers. We use vendors that provide hosting, database infrastructure, email delivery, security, and technical support. These providers may process information only to provide services to us and are expected to protect it appropriately.
• Google Firebase. Firebase Cloud Messaging processes app-installation identifiers, push tokens, device-platform information, and notification-delivery information to provide push notifications. Firebase Messaging brings supporting Firebase Installations, Firebase Core, Google Utilities, and Google Data Transport components needed for this function.
• Apple. On Apple devices, Apple may process device and notification information to provide the App Store and Apple Push Notification service.
• Email delivery. We use Resend to deliver account verification, password-reset, referral, and other service-related email.
• Legal and safety purposes. We may disclose information when reasonably necessary to comply with law, legal process, or enforceable government requests; protect rights, safety, and security; investigate fraud or misuse; or establish, exercise, or defend legal claims.
• Business transfers. Information may be transferred as part of a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, subject to applicable law.

Authorized personnel may use the payout preference you select to complete an eligible payment outside the App.

4. Choices and Controls

You may update your profile and payout method in the App. You may control push notifications through the App, where available, and through your device settings. Disabling notifications does not prevent us from sending essential account, security, or legal communications by other available means.

You may request access to or correction of your personal information by contacting us. Depending on where you live, you may have additional rights regarding access, correction, deletion, portability, restriction, objection, or appeal. We will not discriminate against you for exercising an applicable privacy right.

Because we do not sell personal information or use it for cross-context behavioral advertising, there is no sale or targeted-advertising opt-out required for those activities.

5. Account Deletion

You can initiate deletion directly in the App by opening Profile, scrolling to the bottom of the screen, and selecting Delete Account. Password confirmation is required to protect the account.

When deletion is completed, the account is disabled, the user's name, email address, telephone number, password credentials, payout preference, and related identifying details are removed or replaced with non-identifying account values, and the push-notification token is deactivated.

Historical referral, payout, audit, and communication records may be retained in an account that no longer identifies the deleted user when reasonably necessary to complete an existing referral or payout, maintain business and tax records, investigate fraud, resolve disputes, enforce agreements, or comply with legal obligations. Information that is not required for these purposes will be deleted or anonymized when reasonably practicable.

To ask a question about deletion or request deletion of other personal information, contact us using the information below.

6. Data Retention

We retain active account information while the account remains active. Payout preferences and status information are retained until changed, removed, or the account is deleted. Push tokens are retained while needed to provide notifications and are deactivated when the account is deleted or the token is no longer valid.

Referral, payout, audit, and related communication records are retained for as long as reasonably necessary to administer the referral program and satisfy tax, accounting, fraud-prevention, contractual, dispute-resolution, and legal obligations. When information is no longer reasonably necessary, we delete or anonymize it according to our record-retention practices.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. Access is limited according to job responsibilities and account roles. Information is transmitted using encrypted network connections where supported. No system is completely secure, and we cannot guarantee absolute security.

If you believe your account or information has been compromised, contact us promptly.

8. Children's Privacy

The Service is intended only for adults age 18 and older. We do not knowingly permit children to create accounts or participate in the referral program. If we learn that we collected personal information from a child, we will take appropriate steps to delete it.

9. Processing in the United States

The Service is operated in the United States. Information may be stored and processed in the United States and other locations where our service providers operate, subject to appropriate safeguards and applicable law.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in the Service, our practices, or legal requirements. We will post the updated version with a revised effective date and provide additional notice when required by law.

11. Contact Us

For privacy questions or requests, contact:

Disaster Relief Professionals, LLC
45-564 Kamehameha Highway, Unit D
Kaneohe, Hawaii 96744-1966
Email: office@teammaras.com