Privacy Policy

1. What We Collect

When you use RunKlub, we may collect the following information:

• Account information — your email address and display name when you sign up
• Profile data — optional avatar image and any profile details you choose to add
• Klub and run data — klub names, descriptions, meeting locations, run events, and related content you create
• Location data — city or address you provide when creating a klub or run, used to place pins on our map. We do not collect your device's live GPS location.
• Usage data — basic analytics such as pages visited, to help us improve the Service

2. How We Use Your Data

We use the information we collect to:

• Operate and provide the RunKlub platform
• Display your klub and run listings to other users
• Send transactional emails (e.g. email newsletters sent to klub members by klub managers, when opted in)
• Improve and debug the Service
• Respond to support requests

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

3. Third-Party Services

RunKlub relies on the following third-party services to operate:

• Supabase — our database and authentication provider. Your account and app data is stored on Supabase infrastructure. See supabase.com/privacy.
• Mapbox — used to render our interactive map and geocode addresses. Location queries you make may be processed by Mapbox. See mapbox.com/legal/privacy.
• Groq — powers the optional AI drafting tools described below (newsletter outlines, training schedule suggestions). See groq.com/privacy-policy.
• COROS — if you choose to connect your COROS account, described below. See r.coros.com/privacy.

4. AI-Assisted Features

Klub managers can use optional AI tools to speed up two tasks: drafting a rough outline for a klub newsletter, and suggesting adapted training schedules for a klub's other pace groups based on one group's existing schedule. These tools send relevant klub data to our AI provider (Groq) to generate a suggestion — for newsletters, this may include the klub's name, upcoming run details, and the content of newsletters sent in recent weeks (including the same period the previous year, for continuity); for training schedules, this includes the relevant pace groups' pace ranges and workout details.

AI-generated output is always a starting draft, never sent or applied automatically — a klub manager reviews and approves it before anything is sent to members or saved to a schedule. We do not use AI to make decisions about individual runners, and this data is not used to train any AI model.

5. COROS Integration (Optional)

You can optionally connect a COROS account from your profile page to sync training data between RunKlub and your COROS watch. This uses COROS's official integration with OAuth 2.0 — you authorize the connection directly through COROS, and RunKlub never sees your COROS password.

The authorization you grant lets RunKlub read your COROS training and health data (such as activities, heart rate, sleep, and recovery metrics) and add workouts to your COROS training calendar. Today, RunKlub only uses this to show your recent activities on your profile page and to let you send a klub workout to your COROS calendar when you choose to — we do not access or display your sleep, HRV, or other health metrics, even though the connection technically permits it.

We do not store copies of your COROS activity or health data — each time your profile page loads, your recent activities are fetched live from COROS and shown to you, not saved in our database. The only thing we store is the access credential needed to maintain the connection itself, kept secure and never exposed to your browser or to other users.

You can disconnect at any time from your profile page. Disconnecting stops RunKlub's access going forward; to fully revoke the authorization on COROS's side as well, do so from within the COROS app or account settings. Workouts you've sent to your COROS calendar stay there until you remove them yourself in the COROS app — COROS does not currently support removing them through this connection.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data from our systems within a reasonable period, except where retention is required by law or for legitimate business purposes.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate information
• Request deletion of your account and associated data
• Opt out of non-essential communications

To exercise any of these rights, contact us at runklubinfo@gmail.com

8. Cookies

RunKlub uses minimal cookies strictly necessary for authentication and session management. We do not use tracking or advertising cookies.

9. Children

RunKlub is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the date at the top of this page. Continued use of the Service after changes means you accept the updated policy.

11. Contact

Privacy questions or requests can be sent to runklubinfo@gmail.com