Privacy Policy

Last updated: May 8, 2026

This Privacy Policy describes how FindMyRunClub ("we", "us", "our") handles personal information when you use our website, sign in, or otherwise interact with our service.

1. Information we collect

Information you provide directly:

Feedback or messages you submit through forms on the site (e.g. club submissions, corrections, contact requests).

Information from Google when you sign in with Google: When you choose "Sign in with Google", Google shares the following with us through standard OAuth scopes (openid, email, profile):

Your email address and whether it is verified
Your full name (and given/family name)
Your Google profile picture URL
Your locale (e.g. en)
A stable Google account identifier (the OAuth sub)

We do not request access to your Gmail, Drive, Calendar, Contacts, or any other Google services.

Information collected automatically:

Basic device and browser information (user-agent, screen size, language) and approximate region inferred from IP — used for analytics and abuse prevention.
Anonymous usage events (page views, clicks) collected via Vercel Analytics. No cross-site tracking cookies.

2. How we use your information

To create and maintain your account
To personalize the experience (e.g. show you relevant clubs, save preferences)
To respond to feedback or support requests you send us
To understand aggregate usage patterns and improve the product
To detect, prevent, and respond to abuse, fraud, or technical issues
To comply with legal obligations

We do not sell your personal information. We do not use your information for cross-context behavioral advertising.

3. Service providers

We share data with the following processors strictly to operate the service:

Google — for authentication when you choose "Sign in with Google".
Supabase — our backend and database provider, which stores your account record and any data you save on the platform.
Vercel — hosts the website and provides anonymous traffic analytics.

These providers process data on our behalf under their own privacy and security policies.

4. Data retention

We retain your personal data only for as long as needed to provide the service, or as required by law. When data is no longer needed, we delete or anonymize it.

5. Your rights

Depending on where you live, you may have the right to:

Access the personal information we hold about you
Correct or update inaccurate information
Request deletion of your account and associated personal data (we do not offer self-service deletion — see below)
Object to or restrict certain processing
Receive a copy of your data in a portable format
Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, email us at privacy@velolabs.in. We respond within 30 days.

6. Security

We use industry-standard measures (TLS in transit, access controls, encrypted storage) to protect your information. No system is perfectly secure — if we become aware of a breach affecting your data, we will notify you as required by applicable law.

7. Children

FindMyRunClub is not directed to children under 13 (or 16 in regions where that is the applicable age of digital consent). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

8. International transfers

Your information may be processed in countries other than the one you live in, including the United States and India. We rely on appropriate safeguards (such as Standard Contractual Clauses) where required by law.

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated through the website or by email where appropriate.

10. Contact

For privacy questions or to exercise your rights, contact us at privacy@velolabs.in.