Privacy Notice

Draft for the M0 foundation. The DPAs and final notice are required before the M1 internal alpha processes real user data (docs/07 §10.5).

What we collect

• Email address (authentication and transactional email).
• Display name, home city, short bio and athletic profile data you provide.
• Optional contact fields (email/WhatsApp) that stay private until you choose to share them after a mutual match.
• Race listings, connection requests, messages, reports and blocks you create.
• Payment transaction identifiers from Stripe — card data never reaches us.
• Security and audit records containing ids and counts, never message content.

What we do not collect

• Phone number, real full name, address, date of birth or training history.
• Card details (Stripe hosts checkout).
• Precise location or device sensors.

Why we process it

To create and secure your account, show your athletic profile to potential partners, deliver the matching and messaging features you request, take payments, prevent abuse, and meet legal obligations. Our lawful bases are contract, legitimate interests (safety and fraud prevention), consent where required, and legal obligation.

Retention

• Account data: until you delete your account, then erased/anonymized within 30 days.
• Messages: readable to event end + 7 days; archives retained 90 days, then purged.
• Payment records: 7 years (financial record-keeping).
• Audit log: 24 months.
• Verification lookups: raw cache 30 days; matched summary persists for badge stability.

Your rights

You can access, correct and export your data, and delete your account. Self-service export and deletion arrive in M5 (E15.4); until then contact privacy@paceduo.app. You can complain to the UK Information Commissioner’s Office.

Processors

Supabase (London eu-west-2), Vercel, Stripe, Resend, Upstash, Axiom, Sentry and PostHog. DPAs are tracked in the processor register and published before public launch.