Privacy Policy

Who we are

This privacy policy explains how That Run Club (“the app”) handles your personal data. The app is made and published by North Creative, a trade name of NN Videografie, registered with the Netherlands Chamber of Commerce (KvK) under number 64005666, the Netherlands (“North Creative”, “we”, “us”). We are the controller of your personal data under the EU General Data Protection Regulation (GDPR).

Questions about privacy? Email info@northcreative.app. We reply within two working days.

Summary

We collect what is needed to run your account, find run clubs and run with others.
Location is only used with your permission, to show clubs and runs near you.
We do not show ads, do not track you across other apps or websites and never sell your data.
You can delete your account and data in the app at any time.

What data we collect and how

Data you give us

Account data: your name, email address and password (stored encrypted). If you sign up with a phone number, we also process your phone number to send you a verification code.
Profile data: your profile photo (optional), age or age range, and running preferences such as distance and pace. These are used to match you with clubs.
Club data: the clubs you create or join, runs you sign up for, and messages or posts you share within a club.
Support messages: what you send us when you contact support.

Data collected automatically

Location: only if you allow it in iOS. We use your location while you use the app to show clubs and runs near you. We do not track your location in the background.
Points and rewards: the points you earn and the discounts you redeem.
Technical data: device model, iOS version, app version, IP address and error logs, needed to keep the app secure and working.
Crash reports: if you have chosen in iOS to share analytics with app developers, Apple shares anonymous crash and performance data with us.

How we use your data

To provide the app (performance of a contract): create and manage your account, show and filter clubs, let you join runs and talk to other members, and keep track of your points and discounts.
To show what is near you (your consent): use your location to find clubs and runs nearby.
To keep the app safe and working (our legitimate interest): prevent misuse and fraud, fix bugs and improve the app.
To help you (our legitimate interest): answer your support questions and send important service messages, such as changes to this policy.

We do not use your data for advertising and we do not make automated decisions that have legal or similarly significant effects on you.

Other members: your name, profile photo and club activity are visible to members of the clubs you join. Your email address and phone number are never shown to other members.
Hosting and database: Heroku (Salesforce) and Supabase store and run our servers and database.
Text messages: Twilio sends verification codes when you sign up with a phone number.
Apple: Apple distributes the app and provides crash reports if you opted in.
Authorities: only when the law requires us to.

How partners protect your data

We only share personal data with the service providers named in this policy, and only the data they need to do their job for us. Each of them is bound by a written agreement (such as a data processing agreement) and their own privacy policy to protect your data with at least the same level of protection as described in this policy and as required by the App Store Review Guidelines. They may not use your data for their own purposes beyond what is described here.

Some providers are based outside the European Economic Area, for example in the United States. In that case your data is protected by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

We never sell your personal data.

How long we keep your data

Account, profile and club data: as long as your account exists.
After you delete your account: we delete your personal data within 30 days. Encrypted backups are overwritten within a further 90 days.
Messages in clubs: deleted together with your account.
Technical logs: kept for up to 90 days.
Support messages: kept for up to 12 months after your question is closed.

We only keep data longer if the law requires it, for example for tax records.

How to delete your account and data

You can delete your account at any time in the app: open your profile, go to Settings and choose Delete account. This permanently deletes your account and the personal data linked to it, as described above.

You can also email info@northcreative.app from the email address linked to your account and ask us to delete it.

You can withdraw location access at any time in iOS: Settings › Privacy & Security › Location Services › That Run Club.

Your rights and choices

Under the GDPR you have the right to:

Access the personal data we hold about you and receive a copy.
Correct data that is wrong or incomplete.
Delete your data. Delete your account in the app, or email us.
Withdraw consent at any time, for anything we do based on your consent. This does not affect processing before you withdrew it.
Object to processing based on our legitimate interests, and restrict processing.
Data portability: receive your data in a machine-readable format.

To use any of these rights, email info@northcreative.app. We may ask you to confirm your identity and will respond within one month. If you are not happy with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in your own country.

Children

The app is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has given us personal data, email info@northcreative.app and we will delete it.

Security

We protect your data with encrypted connections (HTTPS/TLS), access controls and secure hosting. Only the people who need access to run the app have it. No method of storage or transmission is 100% secure, but we take reasonable steps to keep your data safe and will inform you and the Dutch Data Protection Authority if a data breach affects you, where the law requires it.

Changes to this policy

We may update this policy when the app or the law changes. The date at the top of this page shows the latest version. If a change is significant, we will tell you in the app before it takes effect.

Contact

North Creative, a trade name of NN Videografie, registered with the Netherlands Chamber of Commerce (KvK) under number 64005666, the Netherlands.
Email: info@northcreative.app