Privacy Policy

GeoRunners is operated by Daniel Trevor in the United Kingdom (referred to as “GeoRunners”, “we”, “us” or “our”). Daniel Trevor is the controller of personal information processed for GeoRunners.

For privacy questions, rights requests or complaints, email danieltrevor.dt@gmail.com.

• Account and profile information: email address, display name, profile image or avatar choices, account identifiers, and account dates. Password authentication is handled by Supabase; GeoRunners does not receive your password in readable form.
• Running and activity information: manual runs you enter and, if you connect Strava, your Strava athlete identifier, permitted profile details, connection permissions, and run details such as title, date and time, distance, duration, elevation, activity type, and source or verification status.
• Challenges and social information:challenges you create or join, teams, invitations, participant records, route progress, standings, results, notifications, and content such as challenge names, descriptions and run notes.
• Route information: start, end and waypoint searches, place identifiers, coordinates, route lines and directions used to create a challenge route. GeoRunners does not currently request your device's live location.
• Technical and support information: session identifiers, app or device details, request and security logs (which can include an IP address), notification preferences, and anything you include when contacting support. If push notifications are enabled later and you opt in, a device token may also be stored.
• Information stored on your device: login session data and limited preferences needed to keep you signed in, complete invitation flows and remember interface choices.

Running information may reveal or allow inferences about fitness or health. We use it only for the features described here and obtain consent where the law requires it.

• Directly from you when you register, edit your profile, plan a route or add a run.
• From Strava after you choose to connect it and authorise the permissions shown by Strava.
• From another user when they invite you to a challenge, which may include your email address.
• Automatically from the app and its hosting and security providers.

• To provide the service and perform our contract:create and secure accounts, sync or record runs, calculate progress and results, operate invitations and notifications, and show challenge routes.
• With your consent: connect to Strava and, when available, send optional push notifications. You can withdraw consent by disconnecting the feature or changing the relevant setting.
• For our legitimate interests: support users, keep GeoRunners secure and reliable, prevent abuse, maintain challenge integrity, diagnose faults and improve the service. We balance these interests against your rights.
• To comply with law: respond to valid legal requests and meet legal, regulatory and record-keeping obligations.

You are not legally required to provide personal information, but an email address and account information are needed to use account-based features. Strava is optional; manual runs remain available without it.

• Other GeoRunners users: according to a challenge's visibility and membership, they may see your display name, avatar, participation, activity contributions, progress, standings and results. Manual runs are identified as manual rather than Strava-sourced.
• Challenge organisers and team members: they may see the information needed to manage participation, teams, invitations and challenge integrity.
• Service providers: Supabase provides authentication, database and storage services; Cloudflare provides hosting, delivery and security; Google Maps Platform provides place search, map and route features; and Strava provides connected activity data at your direction.
• Legal and safety disclosures: we may disclose information where reasonably necessary to comply with law, protect users, investigate misuse, or establish or defend legal rights.
• A future owner: information may transfer as part of a merger, reorganisation or sale of GeoRunners, subject to applicable law and appropriate notice.

We do not sell or rent personal information, and GeoRunners contains no advertising.

Your use of connected services is also governed by their own terms and privacy notices:

• Strava Privacy Policy (opens in a new tab)
• Google Privacy Policy (opens in a new tab)
• Supabase Privacy Policy (opens in a new tab)
• Cloudflare Privacy Policy (opens in a new tab)

Disconnecting Strava stops future access and removes the stored connection credentials. Runs already imported into GeoRunners remain so existing challenge records continue to work; you can remove them by deleting your GeoRunners account or contacting support about a data request.

Some providers may process information outside the United Kingdom. Where required, we use providers that offer recognised transfer safeguards, such as approved contractual terms, adequacy regulations or another lawful transfer mechanism. You can contact us for more information about the safeguards relevant to your data.

We keep account, activity and challenge information while your account is active and for as long as it is needed to provide GeoRunners, preserve challenge integrity, resolve disputes, maintain security and meet legal obligations. Short-lived authorisation data expires when it is no longer needed. Provider security logs and backups follow the provider's normal retention cycle.

You can permanently delete your account in Profile → Delete my account. This removes your active GeoRunners account, profile, runs, Strava connection and associated challenge data; challenges you organised are also deleted, and affected results may be recalculated. Limited information may be retained where required for security, backups, legal compliance or legal claims, then deleted or anonymised when no longer needed.

Depending on where you live, you may have rights to access, correct, delete, restrict or receive a copy of personal information, and to withdraw consent. You can edit some profile information and delete your account inside the app. For another request, email danieltrevor.dt@gmail.com. We may need to verify your identity before acting.

If you are in the UK, please contact us first so we can investigate. You also have the right to complain to the Information Commissioner's Office (ICO) (opens in a new tab).

GeoRunners automatically applies challenge rules to eligible runs to calculate distance, progress, standings and winners. The main inputs are the activity's timing, distance, source and the challenge's dates and rules. These recreational calculations do not produce legal or similarly significant effects. If a result appears wrong, contact support or the challenge organiser.

We use reasonable technical and organisational safeguards, including access controls, server-side connection credentials and encrypted network connections. No online service can guarantee absolute security. Please use a unique password and contact us promptly if you believe your account has been compromised.

GeoRunners is not intended for children under 13, and we do not knowingly collect their personal information. A parent or guardian who believes a child under 13 has created an account should contact us so we can investigate and delete it. Older children must have any consent required by the laws where they live and must also satisfy Strava's rules if they connect Strava.

We may update this policy as GeoRunners or the law changes. The date at the top shows when it was last revised. We will give appropriate notice of material changes.

Privacy questions and requests can be sent through the Support page or by email to danieltrevor.dt@gmail.com.