Privacy Policy

1. Who We Are

Run Alley ("we", "our", or "us") is a fitness rewards platform that connects runners with local partners through activity-based challenges. Our website is located at www.runalley.com.

2. Information We Collect

• Account information: Name, email address, and profile picture provided when you sign in with Google.
• Strava activity data: With your permission, we access your run activities (distance, time, elevation) from Strava to validate quest completions and award energy points.
• Usage data: Pages visited, features used, and timestamps of activity — collected to improve the platform.
• Voucher redemption data: Records of rewards redeemed with partner businesses.

3. How We Use Your Information

• To operate and personalise your Run Alley experience.
• To verify quest completions based on your Strava run data.
• To award energy points and process partner voucher redemptions.
• To send in-app notifications about your progress, challenges, and rewards.
• To improve our platform through aggregate, anonymised analytics.

4. Strava Integration

Run Alley integrates with Strava via their official OAuth API. We request read-only access to your activity data. We do not post to Strava on your behalf. You can revoke our access at any time from your Strava connected apps settings.

5. Data Sharing

We do not sell your personal data. We share data only in these limited circumstances:

• Partner businesses: When you redeem a voucher, the partner receives only the information needed to process your reward (e.g. a redemption code).
• Service providers: We use Supabase for database hosting and authentication. These providers process data on our behalf under appropriate agreements.
• Legal requirements: We may disclose data if required by law or to protect the rights and safety of our users.

6. Data Retention

We retain your account and activity data for as long as your account is active. If you delete your account, your personal data is removed within 30 days, except where we are required to retain it for legal or accounting purposes.

7. Your Rights

You have the right to access, correct, or delete your personal data at any time. To exercise these rights, contact us at gigalleyph@gmail.com.

8. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS) and secure authentication. No system is completely secure, and we encourage you to use a strong, unique password for your Google account.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via in-app notification or email. Continued use of Run Alley after changes constitutes your acceptance of the updated policy.

10. Contact Us

Questions about this policy? Reach us at gigalleyph@gmail.com.