Privacy Policy

1. Introduction

This Privacy Policy describes how Run Clubs App ("we", "us", "our") collects, uses, and protects information when you use our Platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, password (encrypted)
• Profile Information: First name, last name, role (founder/member)
• Run Club Information: Club name, city, schedule, contact details, social media links
• Event Information: Event details, dates, locations, routes
• User-Generated Content: Comments, reviews, photos, or other submissions

2.2 Automatically Collected Information

• Usage Data: Pages viewed, features used, time spent on Platform
• Device Information: Browser type, operating system, IP address
• Location Data: General location based on IP address or user-provided city information
• Cookies and Similar Technologies: We use cookies to enhance user experience and analytics

2.3 Information from Third-Party Sources

• Social Media: Publicly available information from Instagram, Facebook, and other social platforms
• Mapping Services: Location and route data from Google Maps, Mapbox, or similar services
• Authentication Services: Information from AWS Cognito for user authentication

2.4 Mobile App Data (Health and Location)

When you use our mobile app, we access the following additional categories of data with your explicit consent:

• Health and Fitness Data: With your permission, we access running workouts from Apple Health (iOS) or Health Connect (Android). Specifically, we read exercise sessions and distance data, and we write completed runs back to Apple Health or Health Connect. This data is used solely to sync your runs, display your run history, and let you import past workouts into the app. Health data is processed on your device and is only sent to our servers if you explicitly choose to import a run — in which case it is stored as a regular run record in your account. We do not sell, share, or use Health data for advertising or analytics.
• Precise Location Data (GPS): With your permission, we collect precise GPS coordinates during an active run, including when the app is in the background or the screen is locked. This is used solely to record your run route, calculate distance and pace, and display the route on a map. Background location is collected only while a run is in progress and stops automatically when the run ends. You can revoke this permission at any time in your device settings.
• Camera and Photo Library: With your permission, we access your camera or photo library only when you choose to upload a profile photo or club image. Photos are not collected automatically.
• Push Notification Tokens: Anonymous device tokens used to send you run reminders, club announcements, and event updates. You can disable notifications at any time in your device settings.

3. How We Use Your Information

We use collected information for:

• Platform Operation: Providing and maintaining the Service
• User Accounts: Creating and managing your account
• Communication: Sending notifications, updates, and responding to inquiries
• Verification: Displaying verification badges for registered founders
• Analytics: Understanding usage patterns and improving the Service
• Safety and Security: Detecting fraud, abuse, or violations of Terms
• Legal Compliance: Complying with legal obligations and protecting our rights

4. Data Sources and Aggregation

4.1 Public Data Collection

We collect publicly available information about run clubs from:

• Social media platforms (Instagram, Facebook, etc.)
• Run club websites and online presence
• Community forums and running event calendars
• User submissions and contributions

4.2 No Ownership of Third-Party Data

We do not claim ownership of information originally published by run clubs or third parties. We aggregate and display this information for convenience but do not guarantee its accuracy or currency.

5. Information Sharing and Disclosure

5.1 Public Information

The following information is publicly visible on Run Clubs App:

• Run club names, locations, and schedules
• Event details and routes
• Verification badge status
• User-submitted content (unless specifically marked private)

5.2 Third-Party Services

We may share information with:

• Cloud Services: AWS for hosting and data storage
• Analytics Providers: For understanding user behavior
• Mapping Services: Google Maps, Mapbox for location features
• Authentication Services: AWS Cognito for user authentication
• Communication Services: Email service providers for notifications

5.3 Legal Requirements

We may disclose information if required by law or in good faith belief that such action is necessary to:

• Comply with legal obligations or court orders
• Protect and defend our rights or property
• Prevent fraud or security issues
• Protect the personal safety of users or the public

6. Your Rights and Choices

6.2 Deletion

You may request deletion of:

• Your account
• Your personal information
• Run clubs you have registered (founders only)

Note: Some information may remain in backups or as required by law.

6.3 Opt-Out

You may opt out of:

• Marketing communications (while still receiving essential service updates)
• Certain cookie tracking (though this may affect functionality)

6.4 Data Portability

You may request a copy of your personal information in a structured, machine-readable format.

7. Data Security

We implement reasonable security measures to protect your information, including:

• Encryption of sensitive data (passwords, personal information)
• Secure authentication through AWS Cognito
• Regular security assessments
• Access controls and monitoring

8. Data Retention

We retain your information only for as long as necessary to provide the Service and for the purposes described in this Privacy Policy:

• Account Information: Retained for as long as your account is active. Deleted within 30 days of account deletion, except where retention is required by law (e.g., for tax, fraud prevention, or legal compliance, in which case it is kept for the minimum period required, typically up to 7 years).
• Profile Information: Retained while your account is active and deleted within 30 days of account deletion.
• Run History and Routes: Retained while your account is active. You may delete individual runs at any time from within the app; deleted runs are permanently removed within 30 days. All run data is deleted within 30 days of account deletion.
• Health and Fitness Data: We do not store health data on our servers unless you explicitly import a run from Apple Health or Health Connect. Imported runs are retained as part of your run history (see above). Health permissions can be revoked at any time in your device settings, after which we no longer access this data.
• Location Data: GPS coordinates collected during a run are stored as part of that run record and follow the same retention rules as Run History (above). Background location collection stops immediately when a run ends.
• Run Club and Event Information: Public club and event information is retained for as long as the club is active. Founders may delete their clubs at any time, and associated content is removed within 30 days.
• Push Notification Tokens: Retained while your account is active and the app is installed. Automatically invalidated when you uninstall the app or disable notifications.
• Usage Data and Analytics: Aggregated and anonymized usage data may be retained for up to 24 months for analytics purposes.
• Server Logs: Retained for up to 90 days for security, debugging, and abuse prevention.
• Backups: Backups of our databases may persist for up to 90 days after deletion before being permanently purged.

You may request deletion of your data at any time by deleting your account from within the app or contacting us at the address below. We will respond to deletion requests within 30 days.

9. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or shared
• Right to opt out of sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising privacy rights

10. Cookies and Tracking Technologies

Types of Cookies

• Essential Cookies: Required for Platform functionality
• Analytics Cookies: Help us understand usage patterns
• Preference Cookies: Remember your settings and preferences

Managing Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect Platform functionality.

11. Children's Privacy

Run Clubs App is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover we have collected such information, we will delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform, updating the "Last Updated" date, and sending email notifications to registered users. Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

For privacy-related questions or to exercise your rights, contact us at: