Privacy Policy

Effective Date: September 17, 2026

This Privacy Policy explains how RunMatch ("we," "us," or "our") collects, uses, and protects your personal information when you use the RunMatch application and website (collectively, the "Service").

1. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, and password when you create an account
• Financial Information: Payment details are processed and stored by Stripe, Inc. We do not directly store your credit card numbers
• Health and Fitness Data: Running distance, pace, heart rate, GPS routes, and workout data recorded by your Apple Watch and read through Apple HealthKit, used solely to verify competition results and track personal goals
• Device Information: Device type, operating system version, app version, and unique device identifiers for diagnostics and fraud prevention
• Usage Data: App interactions, feature usage, and session data to improve the Service

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process financial transactions (deposits, competition buy-ins, payouts, and subscription payments)
• Verify competition results and personal fitness objectives
• Detect and prevent fraud, cheating, and abuse
• Send important account notifications (competition results, payout confirmations)
• Comply with legal obligations

3. Apple HealthKit Data

RunMatch accesses Apple HealthKit data — including workouts, heart rate, and workout routes recorded by your Apple Watch — exclusively for the following purposes:

• Verifying running activity for competition scoring and personal goal tracking
• Anti-cheat validation (heart rate presence, GPS verification, pace analysis)

We do not sell, share, or use HealthKit data for advertising or marketing purposes. HealthKit data is transmitted to our servers only for activity verification and is not shared with any third parties except as required by law. This complies with Apple's HealthKit guidelines.

4. Legacy Strava Connections

RunMatch previously offered an optional Strava connection for activity verification. That integration is retired: new accounts verify runs through Apple Watch and Apple HealthKit only. If you connected Strava to your account in the past, we may still hold the activity data and access tokens from that connection. You can disconnect Strava at any time from your profile settings, and you can request deletion of any stored Strava data by emailing connect@runmatch.io.

5. Subscription Information

If you subscribe to RunMatch Pro:

• Subscription purchases are processed by Apple through the App Store
• We receive a transaction identifier to verify your subscription status
• We do not receive or store your Apple ID payment information
• Subscription management (cancellation, renewal) is handled through your Apple ID settings

6. Data Sharing

We do not sell your personal information. We may share limited information with:

• Stripe, Inc.: Payment processing
• Apple: Subscription and in-app purchase verification
• Strava: Activity verification for legacy connections only (see Section 4)
• Law Enforcement: When required by law, subpoena, or legal process

7. Data Security

We implement industry-standard security measures, including encrypted data transmission (TLS/SSL), secure authentication tokens, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your account data for as long as your account is active. Competition results and transaction records are retained for legal and financial compliance purposes. You may request deletion of your account and associated data by contacting us at connect@runmatch.io.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing of your data
• Data portability

To exercise these rights, contact us at connect@runmatch.io.

10. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a child under 18, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Effective Date" above. Your continued use of the Service after changes constitutes acceptance of the updated policy.