Saints Run Club
Privacy Policy
Saints Run Club (“we,” “us,” “the club”) runs a community running club in Queens, New York, and a companion mobile app for members. This policy explains what the app collects, why, who we share it with, and the choices you have. We built the app to collect as little as possible.
The short version. We don’t use any advertising, analytics, or tracking tools. We don’t sell your data. We don’t track you across other apps or websites. The app works anonymously by default; an email is optional. Your GPS is used only in the moment you tap “Check in,” and we store only a timestamp — never your coordinates.
On this page
1. Information we collect
Account & sign-in
When you first open the app, it creates an anonymous account with a random identifier so you can use it right away — no name, email, or login required. If you choose to secure your account, you can add an email address during setup; we send a one-time verification code to confirm it. Your email is used to identify and recover your account and is visible only to you. (Note: an email you enter is treated as unverified until you enter the code we send.)
Profile information
You may optionally add profile details:
- Display name — shown on the club roster and event lists.
- Pace, Instagram handle, avatar — optional, shown on the public roster if you add them.
- Home area — a free-text neighborhood (e.g., “Astoria, Queens”). Private to you.
- Birthday — month and day only, never the year. Private to you; used so the club can celebrate members.
Location
Location is used for a single purpose: event check-in. When you tap “Check in” at a club run, the app reads your device’s GPS once, calculates on your device whether you’re within range of the event, and — if you are — records only a check-in timestamp. We do not store your GPS coordinates, and we do not track your location in the background or at any other time.
Activity & attendance
The app records which events you RSVP to, your check-ins (and how you checked in — on-site, self-reported, or via a linked Strava run), and, if you’re enrolled in a training plan, which workouts you’ve marked complete.
Strava (only if you connect it)
Connecting Strava is entirely optional. If you do, you authorize us — through Strava’s official sign-in — to read your Strava profile and running activities. We store your synced runs (distance, time, pace, elevation, and route) so you can view your stats and link a run to a club event. Your Strava access tokens are held securely on our server and are never accessible to the app on your device. We only read from Strava; we never post to it. You can disconnect Strava at any time from your profile.
Photos
The “run card” feature lets you build a shareable image. If you add a photo, it’s chosen through your device’s photo picker and stays on your device — the finished card is only shared or saved where you choose. We do not upload your photos to our servers.
Push notifications
If you allow notifications, the app registers a push token so the club can send announcements. The token is removed when you sign out or turn notifications off.
2. How we use your information
- Operate your membership: roster, events, RSVPs, and attendance.
- Verify and recover your account (email code).
- Confirm attendance at club runs (check-in timestamp).
- Show your running stats and connect runs to events (Strava, if connected).
- Send club announcements and event reminders (if you opt in).
- Provide training-plan tracking to enrolled members.
We do not use your data for advertising or to build a marketing profile.
3. How your information is shared
We do not sell your data. Information is shared only in these limited ways:
- With other members: your public profile fields (display name, pace, Instagram, avatar) and your RSVP/attendance for club events are visible to signed-in members — that’s how a roster works. Your private fields (email, home area, birthday) are never shown to other members.
- With service providers that run the app’s infrastructure (see below).
- When you choose to, e.g., sharing a run card through your device’s share sheet.
- For legal reasons, if required by law or to protect the club and its members.
4. Third-party services
The app relies on a small set of providers, each governed by its own privacy policy:
| Provider | Role | Data involved |
|---|---|---|
| Supabase | Backend, database, authentication, email verification codes | Account, profile, attendance, Strava cache, push tokens |
| Strava | Activity sync (only if you connect it) | Your Strava profile & activities, read-only |
| Expo | Push-notification delivery & app updates | Push token; standard app-update metadata |
We do not integrate any advertising networks, analytics SDKs, or crash/behavior-tracking tools.
5. Tracking & advertising
The app does not track you. We do not use third-party analytics, advertising identifiers (such as the device advertising ID), cross-app tracking, or device fingerprinting, and we do not link your activity to data from other companies for advertising. Consistent with this, our App Store privacy label declares that data is not used to track you.
6. Data retention
We keep your information for as long as your account exists so the app can function. Synced Strava data is removed when you disconnect Strava. Push tokens are removed when you sign out or disable notifications. When you delete your account (below), we remove your associated data.
7. Deleting your account & your data
You can request permanent deletion of your account and associated data at any time:
- Use the Delete account option in the app (Profile tab, below “Sign out”), or
- Email us at svintsrunclub@gmail.com from the address on your account (or with your display name) and ask us to delete your account.
Deletion removes your profile, RSVPs and attendance history, any Strava connection and synced activities, push tokens, and training records. Some records may persist briefly in encrypted backups before being overwritten on our provider’s normal cycle. See our Support page for step-by-step help.
8. Your rights
Depending on where you live (including under GDPR and the CCPA/CPRA), you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Because we do not sell personal information or use it for targeted advertising, there is nothing to opt out of on that front. To exercise any right, contact us using the details below; most profile data can also be viewed and edited directly in the app.
9. Children’s privacy
The app is intended for club members and is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it. Members under 18 should have a parent or guardian’s permission to participate in in-person club activities.
10. Security
Data is stored with our infrastructure provider using industry-standard protections. Access to your private data is restricted to your own account through database-level security rules, and sensitive credentials (such as Strava tokens) are held only on our server, never in the app on your device. No system is perfectly secure, but we work to protect your information.
11. Changes to this policy
We may update this policy as the app evolves. We’ll revise the “Last updated” date above and, for significant changes, provide notice in the app. Continued use after an update means you accept the revised policy.
12. Contact us
Questions about this policy or your data? Email svintsrunclub@gmail.com.