Privacy Policy

Run Frens ("we", "our", or "us") is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

By using Run Frens, you consent to the data practices described in this policy. If you do not agree with the practices described in this policy, please do not use our services.

We use the collected information for the following purposes:

• To provide, maintain, and improve our services
• To create and manage your account
• To connect you with running clubs and events in your area
• To send you service-related notifications and updates
• To respond to your inquiries and provide customer support
• To analyze usage patterns and improve user experience
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations

Under GDPR, we process your personal data based on the following legal bases:

• Consent: When you provide explicit consent for specific processing activities (e.g., analytics cookies)
• Contract Performance: To fulfill our contractual obligations to provide services
• Legitimate Interests: To improve our services, ensure security, and prevent fraud
• Legal Obligations: To comply with applicable laws and regulations

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist in operating our website and services (e.g., hosting, analytics)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share your information

Third-Party Services: We use the following third-party services that may process your data:

• Supabase: Database and authentication services (data stored in secure, GDPR-compliant infrastructure)
• Vercel Analytics: Website analytics (only with your consent)
• Microsoft Clarity: User behavior analytics (only with your consent)

We use the following types of cookies:

You can manage your cookie preferences at any time using the cookie settings button in the bottom-right corner of the website.

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for processing that relies on consent
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise any of these rights, please contact us at [email protected]

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Secure hosting infrastructure (Supabase, Cloudflare)
• Regular backups and disaster recovery procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your data, we will securely delete or anonymize it.

Account data is retained while your account is active. You may delete your account at any time through your account settings, which will initiate the deletion of your personal data in accordance with our data retention policies.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We ensure that appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) for data transfers
• GDPR-compliant service providers (Supabase, Vercel, Microsoft)
• Adequacy decisions where applicable

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately, and we will take steps to delete such information.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

If you have any questions about this Privacy Policy or our data practices, please contact us: