Last Updated: 2 February 2026

This Privacy Policy explains how Run The Date ("we", "our", or "us") collects, uses, and protects your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Run The Date is the data controller responsible for your personal data. If you have any questions about this privacy policy or our data practices, please contact us through the application.

When you log in using Strava, we collect the following information:

• Name: Your display name from your Strava account
• Profile Image: Your profile picture from Strava (if available)
• Running Data: Your running activities including:
  • Distance run (in miles)
  • Date and time of runs
  • Total distance statistics
  • Success rate (days passed vs. total days)
• Account Identifier: A unique identifier from your Strava account to associate your data with your profile

We access this data through Strava's API with your explicit consent when you connect your account.

We use your personal data for the following purposes:

• Public Leaderboard: Your name, profile image, and running statistics (total distance, days passed, success rate) are displayed on a publicly accessible leaderboard page. This is the primary purpose of data collection and is clearly disclosed before you log in.
• Personal Dashboard: To display your personal running statistics and progress on your dashboard
• Service Operation: To provide and maintain the Run The Date service

Legal Basis: We process your data based on your explicit consent, which you provide when you log in and agree to join the public leaderboard.

Your data is stored securely using PostgreSQL database with Prisma ORM. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

However, please note that data displayed on the public leaderboard is accessible to anyone who visits the leaderboard page, as this is an essential feature of the service.

Your name, profile image, and running statistics are shared publicly on the leaderboard page, which is accessible to all users and visitors of the website.

We do not sell your personal data to third parties. We only share data as necessary to provide the service (e.g., with Vercel for hosting and storage).

We retain your leaderboard data for the current calendar year. Data from previous years may be archived or removed. You can request deletion of your data at any time (see Your Rights below).

Under UK GDPR, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: You can request that we limit how we use your data
• Right to Data Portability: You can request your data in a structured, commonly used format
• Right to Object: You can object to processing of your data
• Right to Withdraw Consent: You can withdraw your consent at any time by signing out and requesting data deletion

To exercise any of these rights, please contact us through the application. We will respond to your request within one month.

This service integrates with Strava for authentication and data access. Your use of Strava is subject to Strava's own privacy policy and terms of service. We encourage you to review Strava's privacy policy to understand how they handle your data.

Our service is not intended for children under the age of 13. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us to request deletion.

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last Updated" date at the top of this page. Your continued use of the service after such changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or wish to exercise your rights under UK GDPR, please contact us through the application or by signing out and disconnecting your Strava account.

Data Protection Authority: If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority. You can find more information at ico.org.uk.