Privacy Policy

1. Information We Collect

When you create an account, register for a virtual run, or connect your fitness applications, we collect the following categories of data:

• Account & Identity Data: Full name, email address, phone number, city, state, profile avatar, and emergency contact details (optional).
• Shipping & Fulfillment Data: Delivery address, landmark, and pin code required for the courier dispatch of physical finisher medals and race kits.
• Athletic & GPS Data: Activity distance, elapsed time, moving pace, elevation gain, GPS route coordinates, split times, and proof screenshots synchronized via Strava API or manual submission.
• Transaction Records: Razorpay order ID, payment transaction ID, timestamp, and registered category. We do not store raw credit/debit card numbers or UPI MPINs on our servers.

2. How We Use Your Information

Your information is used strictly to operate and enhance our athletic platform:

• Assigning unique official race bibs (e.g., BR-2026-XXXXX) and verifying event compliance.
• Processing GPS activity submissions through automated anti-cheat pacing validation.
• Generating verifiable digital finisher certificates and live leaderboard standings.
• Dispatching physical medals through authorized logistics partners (Delhivery, Shiprocket, BlueDart, India Post).
• Sending essential transactional updates regarding registration status, GPS proof approval, and parcel tracking.

3. Strava API & Third-Party Fitness Integration

Beyond Run provides optional OAuth integration with Strava. When you connect your Strava account, we request read-only access (`activity:read`) to fetch designated running activities completed during the active event window.

We do not alter, delete, or write data to your Strava profile. You may disconnect your Strava integration at any time through your Athlete Dashboard or via your Strava application settings.

4. Public vs. Private Athlete Data

Your official race finisher stats (Name, Category, Bib Number, Finish Time, Average Pace, and Certificate ID) are published on public event leaderboards and your optional athlete passport URL (`beyondrun.in/r/[username]`).

Your home address, phone number, email, and billing details are strictly confidential and are never exposed publicly or sold to third-party advertisers.

5. Data Security & Contact

We employ industry-standard 256-bit SSL encryption, restricted role-based database access, and secure authentication tokens via Clerk.

For data deletion requests, corrections, or privacy queries, contact our Data Protection Officer at:
beyondrunofficial@gmail.com