Privacy Policy

Run With Me

Effective Date: March 3, 2026 | Last Updated: March 3, 2026

1. Introduction

Run With Me ("we," "us," or "our") operates the Run With Me platform, accessible at runwithme.net, app.runwithme.net, and related mobile applications (collectively, the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our Platform.

We are committed to protecting your privacy and complying with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong SAR ("PDPO").

By using the Platform, you agree to the collection and use of information as described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

Data Type	Examples	Purpose
Account Information	Name, email address, password	Account creation and authentication
Profile Information	Bio, location, avatar photo, running experience, certifications, social media links	User profile display and matching
Running Preferences	Preferred pace, distance, run types, areas, availability	Matching runners with pacers
Pacer Information	Rate per km, specialties, routes, available days and times	Marketplace listings and discovery
Booking Information	Run dates, times, meeting points, payment details	Facilitating and processing bookings
Reviews and Ratings	Star ratings, written comments	Trust and quality assurance
Trophy Chest	Race results, achievement photos, personal bests	Profile enrichment and social features
Communications	Messages, support inquiries	Customer support and in-app messaging

2.2 Information from Third-Party Services

If you choose to connect third-party services to your Run With Me account, we may collect information from those services:

Garmin Connect
When you connect your Garmin account via OAuth, we may receive: activity data (runs, GPS tracks, pace, heart rate, cadence), athlete profile information, and workout history. We use this data to verify your running history, display a "Garmin Verified" badge on your profile, and (with your consent) sync workout details to your Garmin device. Your Garmin access tokens are stored securely and never exposed to other users.

Strava
When you connect your Strava account via OAuth, we may receive: athlete profile data, running statistics, activity history, and best race times. We use this data to verify your running history and display a "Strava Verified" badge on your profile. Your Strava access tokens are stored securely and never exposed to other users.

Future: Google and Apple Sign-In
If you sign in with Google or Apple, we receive your name and email address from those services. We do not access your Google or Apple account data beyond authentication.

2.3 Information Collected Automatically

Data Type	Details
Device Information	Browser type, operating system, device type
Usage Data	Pages visited, features used, interactions with the Platform
Location Data	Approximate location (if you enable "Near Me" features via browser geolocation). We do not track your location in the background.
Log Data	IP address, access times, referring URLs

3. How We Use Your Information

We use your personal data for the following purposes:

Provide the Platform: Create and manage your account, facilitate bookings between runners and pacers, process payments, and enable social features.
Matching and Discovery: Match runners with suitable pacers based on preferences, location, pace, and availability.
Device Integration: Sync workout data from Garmin Connect or Strava to verify running credentials and enrich your profile. Push workout details to your Garmin device when you join a run (with your explicit consent).
Communication: Send transactional emails (booking confirmations, run reminders, review notifications). We will not send marketing emails without your consent.
Safety and Trust: Verify user identities, prevent fraud, enforce our Terms of Service, and maintain the integrity of the review and rating system.
Improvement: Analyze usage patterns to improve features, fix bugs, and develop new functionality.
Legal Compliance: Comply with applicable laws and regulations in Hong Kong SAR.

4. How We Share Your Information

4.1 With Other Users

Your profile information (name, avatar, bio, tier, ratings, running stats, trophies) is visible to other users of the Platform. Pacers can see runner profiles when they request to join a run, and runners can see pacer profiles when browsing. Reviews and ratings are publicly visible.

4.2 With Service Providers

We share data with third-party service providers who help us operate the Platform:

Provider	Purpose	Data Shared
Supabase	Database, authentication, file storage	All account and platform data
Stripe	Payment processing	Payment details, booking amounts, payout information
Resend	Transactional email delivery	Email address, email content
Vercel	Web application hosting	Usage and log data
Garmin Connect	Fitness device integration	OAuth tokens, activity data (user-initiated)
Strava	Fitness platform integration	OAuth tokens, activity data (user-initiated)

4.3 For Legal Reasons

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Run With Me, our users, or the public.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of any such change.

4.5 No Sale of Data

We do not sell your personal data to third parties.

5. Data Storage and Security

Your data is stored with the following security measures:

All data transmitted via HTTPS/TLS encryption
Database-level security policies restricting data access
OAuth tokens (Garmin, Strava) stored securely, never exposed to other users
Passwords hashed using industry-standard algorithms
File uploads stored in access-controlled storage buckets

While we implement reasonable security measures, no system is completely secure. We cannot guarantee absolute security of your data.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Platform services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required by law to retain it or where retention is necessary for legitimate business purposes (such as resolving disputes or enforcing our Terms).

Third-party service connections (Garmin, Strava) can be disconnected at any time, which will stop further data collection from those services. Previously imported data displayed on your profile will be removed upon disconnection.

7. Your Rights

Under the PDPO, you have the following rights:

Access: You may request access to the personal data we hold about you.
Correction: You may request correction of inaccurate or incomplete personal data.
Deletion: You may request deletion of your account and associated data.
Disconnect Services: You may disconnect Garmin Connect, Strava, or other linked services at any time through your profile settings.
Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise these rights, contact us at privacy@runwithme.net.

We will respond to data access or correction requests within 40 days, as required by the PDPO.

8. Cookies and Tracking

The Platform uses essential cookies and local storage for authentication and session management. We do not use third-party advertising cookies or tracking pixels. We do not serve ads on the Platform.

9. Children's Privacy

The Platform is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that data promptly.

10. International Data Transfers

Your data may be processed and stored in locations outside Hong Kong SAR, including where our service providers operate (such as the United States, European Union, and Asia-Pacific regions). By using the Platform, you consent to such transfers. We ensure that service providers maintain appropriate data protection standards.

11. Third-Party Attribution

When displaying data sourced from Garmin Connect, we include Garmin branding and attribution as required by Garmin's developer guidelines. When displaying data sourced from Strava, we include Strava branding as required by Strava's brand guidelines. These attributions indicate the source of the data and do not imply endorsement by those companies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform with a new "Last Updated" date. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Run With Me
Email: privacy@runwithme.net
Website: www.runwithme.net