Legal
Privacy policy.
Runstra is an app for meeting people to run with. That makes where you are and who you are meeting the most sensitive things it touches, so the app is built to hold as little of them as it can.
What Runstra does not collect
Worth saying first, because it is most of the answer. Runstra does not track your runs. There is no GPS recording, no route history, no pace, and no connection to Apple Health or Health Connect. It does not read your contacts, and it never reads your location in the background.
What it does collect
Your account
- Your email address, name and username. If you sign in with Google or Apple, we receive the email and name that service passes us.
Your profile
- A profile photo, either one you upload or one of the avatars built into the app.
- Your bio, city, why you run, and your shoe shelf, all optional.
- Your gender, if you choose to give it. It is used for one thing: to decide whether you can join clubs and runs marked women only.
- A phone number and an Instagram handle, both optional.
Runs, clubs and races
- The runs you post or join: the title, meeting point, time, distance and who the run is for. A meeting point you pick on the map is stored with its coordinates.
- Runs you have been on, and the people who were on them with you.
- The clubs you belong to or run, including club covers, logos and the photos members add to a club.
- Races you have said you are going to, and the distance you picked.
- Who you follow, and who follows you. Mutual follows are what the app calls friends.
Events and payments
- When you sign up for an event: the name you want on the start list, a phone number, and anything you choose to tell the host. The note is optional. The organiser gets the start list; nobody else using the app can see these details.
- For a paid place: the amount, what it was for, whether it went through, your receipt, and any refund. Card, UPI and bank details you pay with are entered on our payment partner’s page and are not stored by Runstra. If a refund has to go to a UPI ID, we keep that ID until the refund is done.
- If you host paid events and get paid for them: whether you are paid as a person or a business, the name on your PAN, your PAN, a GSTIN if you have one, your bank account number and IFSC, and a bank statement or cancelled cheque if we need to confirm the account. We need these to pay you and to meet India’s tax rules. They are only visible to you and to the Runstra staff who check payouts.
Safety and settings
- Reports you make, and the people you block.
- Your notification and privacy settings, and a push token so we can send the notifications you turn on.
Sponsored cards
- Some screens show sponsored cards for brands, races and events. A card can be aimed at a city, so the city on your profile, or the city you are browsing, decides which ones you see.
- We count how many times you see and tap each card each day, so the same card is not shown to you too often. The advertiser only gets daily totals for its card, never who saw or tapped it.
When you visit this website
runstra.com uses Google Analytics to count visits: which pages are read, how people found them (a search, a shared link), roughly which city or country they came from, the kind of device and browser, and clicks through to the app stores. It sets a cookie to tell a return visit from a new one. It is not connected to your Runstra account, and the app itself does not use it. You can block it with your browser’s cookie or tracker settings, or Google’s opt-out add-on.
Location
When you look for runs near you, or open the map, the app reads your device location at that moment, and only if you have allowed it. The location is sent to our servers to find nearby runs and is not kept afterwards. You can skip the permission and search by city instead.
A run’s meeting point is different. You chose it, and it is shown to whoever the run is for. Pick a public landmark rather than your front door.
Photos
Photos are re-encoded on your device before they are uploaded, which removes the EXIF metadata. EXIF is where a camera writes the coordinates a photo was taken at, so posting a photo never publishes a location you did not mean to share.
Uploaded photos are served from a public content network, which means anyone holding the exact link can view the image. Removing a photo deletes it, so the link stops working.
Who can see what
- Your profile shows your name, username, photo, bio, city, Instagram handle if you added one, shoe shelf and the runs you have been on to other people using the app. Turn off Show my runs publicly in Settings and only the people on a run see that you went. Your email, phone number and gender are never shown on your profile.
- Public runs are visible to anyone using the app, and notify the people who follow you.
- Friends only runs are visible only to people you follow back.
- Members only runs are visible only to the club’s members.
- Event organisers get the name, phone number and note you gave when you signed up, so they can run the start list.
- Shared links. When you share a public run, race or club, the link opens a page on runstra.com that anyone can see, even without the app. It shows the title, time, general area, distance and cover photo. It never shows who is going. Runs that are not public have no such page.
- People you block cannot see your profile or join your runs.
Reports and moderation
You can report a person, a club, an event or a photo from its menu. Reports are stored with the account that made them so we can act on them, and are reviewed within 24 hours. Runstra staff also review every event before it is listed, and every payout account before it is paid. Content we remove is logged, so a removal can be explained later.
Who we share it with
We do not sell your personal data. We use these services to run the app, and they handle data only on our behalf:
- Supabase: database, file storage and sign-in.
- Firebase Cloud Messaging (Google): push notifications.
- Vercel: hosts this website and the shared link pages.
- Google Analytics: visit counts for this website only (see above).
- OpenStreetMap and CARTO: place search and map tiles. When you search for a place or move the map, they receive the search or the part of the map you are looking at, not your account.
- Our payment partner, once paid places open: payments, refunds and host payouts. It receives what it needs to move the money, and runs its own checks on the accounts it pays.
We will also share information when the law requires it, or when it is needed to protect someone’s safety.
Keeping and deleting your data
Your data is kept while your account exists. You can delete your account from inside the app at any time. That removes your profile, photos, shoe shelf, follows, club memberships and the runs you posted. See how to delete your account.
A few records stay after that, for as long as the law or safety needs them. Payment and payout records are kept for tax and accounting, with your name and phone number removed from them. The moderation log of removed content is kept separately. We also keep a scrambled copy of your email address, which cannot be turned back into the address, to record that the deletion happened.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Most of it you can edit or delete yourself in the app. For anything else, email us and we will reply within 30 days.
Children
Runstra is for people aged 18 and over. We do not knowingly hold data about anyone younger. If you think we do, tell us and we will delete it.
Changes
If this policy changes in a way that matters, we will tell you in the app rather than quietly editing this page.
Contact
Questions, or a request about your data? Email support@runstra.com.