SplitRace Privacy Policy

Effective date: October 14, 2026

SplitRace ("SplitRace", "we", "us") provides a running app where you record runs with GPS, join tournaments, and compete on route segments. This policy explains what we collect, why, who we share it with, and the choices you have. It applies to the SplitRace mobile app and the website at splitrace.app.

1. Information we collect

Account information

Email address and password (passwords are stored only as a salted hash, never in plain text).
Profile details you provide: first/last name or club name, gender, country, city, preferred units, and language.
Optional avatar image.
If you sign in with Google or Apple, we receive a unique identifier and basic profile info (e.g. email, name) from that provider.

Location & activity data

Precise GPS coordinates, timestamps, accuracy, distance, and elapsed time recorded while you track a run.
This includes background location — the app keeps recording your route while the screen is off or the app is in the background, so a long run is captured fully.
Route segments you create and the segment results, leaderboard positions, and tournament progress derived from your runs.

Subscriptions & purchases

If you buy a paid plan, the purchase is processed entirely by the Apple App Store or Google Play. We never receive or store your card or bank details.
From the store we receive transaction identifiers, the product you bought, and the subscription's status and expiry, which we use to activate and maintain your plan.

Technical & usage data

IP address (used to approximate your region for content and to enforce rate limits/anti-abuse).
Device push notification token (so we can send you notifications).
Diagnostic data such as crash reports and error logs.

2. How we use your information

To create and operate your account and authenticate you.
To record runs and match them against route segments, compute leaderboards, and run tournaments.
To detect unrealistic or suspicious activity (anti-cheat analysis of GPS tracks).
To send transactional emails (e.g. a password-reset code) and push notifications about your tournaments.
To keep the service secure, reliable, and to fix bugs (crash/error reporting).

Background location. SplitRace collects location data to record your running route even when the app is closed or not in use. Location is collected only while you have an active run in progress, to map the route and award segment results. It is not used for advertising and is not shared with third parties for advertising. The precise GPS route is kept only temporarily — it is deleted automatically once your related tournaments have ended (and at least 7 days after the run; for a permanent city tournament, which never ends, at least one year after the run), while only your run results are retained. A route may be kept longer where it is needed for fair-play (anti-cheat) review and its audit, for security, or for another legitimate purpose — see section 5, “Data retention”.

3. Legal bases (EEA/UK users)

Where the GDPR applies, we process your data to perform our contract with you (providing the app), based on your consent (location permission, which you can revoke at any time in your device settings), and for our legitimate interests (security, anti-abuse, and improving the service).

4. How information is shared

We do not sell your personal data. We share data only with service providers ("processors") that help us run SplitRace:

Provider	Purpose
Render	Application hosting and database (stores your account, runs, and segments).
Resend	Sending transactional email (e.g. password-reset codes).
Expo (push service)	Delivering push notifications to your device.
Sentry	Crash and error diagnostics.
Google / Apple	Optional sign-in.
Apple App Store / Google Play	Subscription billing and purchase verification (they process the payment; we receive transaction and entitlement data only).
OpenStreetMap	Map tiles used to display routes.

We may also disclose information if required by law or to protect the rights, safety, and security of our users and service.

5. Data retention

We keep your account and activity data for as long as your account exists. When you delete your account, we remove your personal data from our active systems, and the precise GPS routes of your runs shortly after, except a route kept for fair-play review or its audit, for security, or to meet a legal obligation (see “Precise location” below). Your results in tournaments that took place (segment results, leaderboard positions, and the run records behind them, without the GPS route) stay in anonymized form, shown as “Deleted user”, so that other runners’ standings are not rewritten. Residual copies may persist in backups for a limited period before being overwritten.

Precise location (GPS routes). The raw GPS route of a run is kept only while it may still count toward an active tournament, and for at least 7 days. Once the related tournaments have ended and the run is older than that, we delete the GPS route (the map) automatically. A permanent city tournament has no end date, so for it the route is kept for at least one year from the run. Those are minimums. A route is kept longer while another tournament you take part in can still count the run, and while it is needed for fair-play (anti-cheat) review: while a cheating report or appeal involving the run is open, for a period after such a case is closed, and — for a run voided by a decision — for as long as that decision may need to be audited or reversed. We may also keep it where it is needed for security or to meet a legal obligation. Your run results — distance, time, segment results, and leaderboard positions — are kept and do not contain the raw track.

6. Your choices and rights

Delete your account at any time from the app (Profile → Delete account), which removes your data as described above — see how to delete your account.
Request account & data deletion by email if you cannot access the app — write to privacy@splitrace.app and we will delete your account as described in how to delete your account.
Revoke location access in your device settings; the app will no longer record runs.
Access, correct, or export your data, and other rights under applicable law (e.g. GDPR) — contact us using the details below.

7. Security

We use industry-standard measures including encrypted transport (HTTPS), hashed passwords, and access controls. No method of transmission or storage is 100% secure, but we work to protect your data.

8. Children

SplitRace is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

9. Changes to this policy

We may update this policy from time to time. We will revise the effective date above and, for material changes, provide notice in the app.

10. Contact

Questions or requests about your data: privacy@splitrace.app.