Privacy Notice — Build With HeyCo.

This notice covers data processed when you visit Challenge pages, apply, submit a TikTok entry link, appear in public founder profiles, take part in later stages (e.g. shortlist, votes), or contact us about the Challenge.

Website hosting, cookies and general site use may also be described in the general privacy policy at heyco.ch/datenschutz.

Depending on how you participate, we may process:

• Identity & contact: name, email, phone (if provided), country/region, age confirmation (18+). • Startup & pitch: startup name, category, tagline, bio, “why me”, photos, logos, links. • Entry media: TikTok video URL, hashtag use, publicly available video metadata and content you publish under #buildwithheyco. • Application & process: application timestamp, status (e.g. applied / Top 20 / Top 10 / Top 3 / winner), notes we create for selection, interview/call records if we speak with you. • Technical: IP address, device/browser data, logs, cookies needed to run the site securely. • Communications: messages you send us and our replies.

The Challenge is a public format. Information you submit for display (e.g. name, photo, startup, pitch text, TikTok link, status) may be published on Challenge pages, heyco.ch, TikTok, social media, press, newsletters and related channels.

Once published on TikTok or shared by third parties (comments, duets, stitches, screenshots, press), we cannot fully control further distribution. Please only submit content you are comfortable making public.

We process data to: run and promote the Challenge; receive and review applications; contact applicants; display public profiles and Season progress; shortlist and select stages (Top 20 → Top 10 → Top 3 → winner); enable community-facing features (e.g. votes) where offered; document decisions; protect against abuse/fraud; improve the experience; and meet legal obligations.

Under Swiss law we process data in accordance with the Federal Act on Data Protection (FADP/DSG). Where the GDPR applies, we typically rely on: performance of a contract / pre-contractual steps (your application and participation) (Art. 6(1)(b)); our legitimate interests in running a public founder challenge, selection, security and documentation (Art. 6(1)(f)); consent where we expressly ask for it (Art. 6(1)(a)); and legal obligations (Art. 6(1)(c)).

You can withdraw consent for the future where processing is based on consent. Withdrawal does not affect prior lawful processing. Public posts you made on TikTok remain subject to TikTok’s rules.

TikTok is an independent controller of data on its platform. When you post a video, use #buildwithheyco, or open TikTok links, TikTok’s terms and privacy policy apply. We may access publicly available entry videos and metadata to run the Challenge.

We are not responsible for TikTok’s moderation, algorithms, outages, bans or how third users interact with your content.

Data may be processed by our team at Snatch Co. AG / HeyCo and by service providers we use to host the site, send email, store files, analyse usage (where enabled), or provide support — under appropriate contracts. Public Challenge content is visible to anyone who visits those channels.

We do not sell your application data. We share data only where needed to run the Challenge, where required by law, or with your direction/consent.

Some providers (e.g. hosting, email, TikTok) may process data outside Switzerland / the EEA. Where required, we use appropriate safeguards (such as standard contractual clauses) or rely on applicable legal mechanisms.

We keep application and selection records for as long as needed to run Season 1, handle follow-up, document decisions, and meet legal/accounting duties — then delete or anonymise where feasible.

Public profile content related to the Challenge may remain online after the Season for archive, press and storytelling purposes, unless we agree otherwise or a successful erasure request requires removal from systems we control. Content on TikTok or third sites may remain according to those platforms’ rules.

Depending on applicable law (Swiss DSG and/or GDPR), you may have rights to access, rectification, erasure, restriction, data portability, objection, and to withdraw consent for the future. You may also lodge a complaint with a competent supervisory authority.

To exercise rights regarding Challenge data we control, email team@heyco.ch with enough detail to identify your application. We may need to verify your identity. Erasure may be limited where we must keep data for legal reasons, dispute handling, or where content is already public on third platforms.

We apply appropriate technical and organisational measures to protect personal data. No method of transmission or storage is 100% secure; please use a strong unique password if accounts are offered later.

The Challenge is for people 18+. We do not knowingly collect application data from children. If you believe a minor applied, contact team@heyco.ch.

We may update this notice for legal, technical or operational reasons. The version published on this page applies. Material changes will be posted on the Challenge site.

Privacy requests: team@heyco.ch · Postal: Snatch Co. AG / HeyCo., Bahnhofstraße 34, 2502 Biel/Bienne, Switzerland · Imprint: heyco.ch/impressum · General privacy: heyco.ch/datenschutz · Participation Terms: buildwith.heyco.ch/terms