Last updated: April 2026
1. Information We Collect
We collect information you provide directly to us, as well as information automatically generated when you use our platform.
- Account Information: Email address, display name, profile picture, and authentication credentials
- Profile Information: Bio, location (city/region), experience level, optional username/display preferences you set in the app
- Vehicle Information: Year, make, model, modification details, vehicle photos
- Activity Data: Runs joined, clubs membership, messages, posts, likes, comments, and other interactions
- Technical Data: IP address, browser type, operating system, device identifiers, and access timestamps
- Location Data: GPS coordinates (only when you explicitly enable location sharing for runs)
2. How We Use Your Information
We use your information for the following purposes:
- Providing and maintaining our platform services
- Connecting you with clubs, runs, and other community members
- Communicating with you about events, updates, and administrative matters
- Analyzing usage patterns to improve user experience and platform functionality
- Enforcing our Terms of Service and Community Guidelines
- Complying with legal obligations and responding to lawful requests
- Detecting and preventing fraud, abuse, and security incidents
3. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to:
- Keep you logged in and remember your preferences
- Understand how you use our platform
- Monitor and analyze platform performance and traffic
- Keep the service functioning reliably (we do not run third‑party ad personalization in the app today)
You can control cookies through your browser settings. However, disabling cookies may limit certain platform features.
4. Third-Party Services
We share data with the following third-party service providers:
- Supabase: Cloud database, authentication, file storage, and (where enabled) server-side features such as image moderation pipelines
- Vercel: Platform hosting and deployment; may receive technical logs (IP, requests) as part of operating the site
- Google: If you choose "Sign in with Google," Google processes identity according to its policies; we receive profile basics you approve (e.g. email, name, avatar)
These providers are contractually obligated to protect your data and use it only for the services they provide to us.
5. Data Sharing
We do NOT sell your personal data to third parties. We share data only in the following circumstances:
- With Club Organizers: When you join a club or RSVP to a run, your basic profile information is visible to club organizers
- With Other Users: Profile information you choose to make public is visible to other platform users
- Legal Requirements: When required by law, court order, or governmental regulation
- Emergency Situations: To protect personal safety or property in emergency situations
- Business Transfers: In connection with a merger, acquisition, or sale of company assets (data would be transferred under same privacy protections)
6. Data Retention
- Account Data: Retained while your account is active; you may request deletion at any time
- Posts and Media: Retained until you delete them or your account is removed
- Log Data: Retained for up to 12 months for security and analytics purposes
- Backup Data: May remain in backups for up to 30 days after deletion
7. Your Rights (GDPR & CCPA)
Under the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), you have the following rights:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Correction: Request correction of inaccurate personal data
- Right to Deletion: Request deletion of your personal data ("right to be forgotten")
- Right to Restrict Processing: Request limitation of how we process your data
- Right to Data Portability: Request your data in a structured, commonly used format
- Right to Opt-Out: Opt out of the sale of personal data (we do not sell data)
- Right to Non-Discrimination: We will not discriminate against you for exercising these rights
To exercise these rights, contact us at socaloffroaders@socaloffroaders.com
Delete your account online: signed-in users can permanently delete their account and associated personal data from Account deletion (delete account & data). Use this URL in app-store consoles when a web link is required.
8. Data Security
We implement reasonable technical measures appropriate to our size and risk, including encryption in transit (HTTPS/TLS), authentication via our providers, and access controls on production systems. No method of electronic storage or transmission over the internet is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data.
In the event of a data breach that affects your personal data, we will notify you and relevant authorities as required by applicable law.
9. Children's Privacy
Our platform is not intended for individuals under 18 years of age. We do not knowingly collect, use, or share personal data from children. If we become aware that we have collected data from a child without parental consent, we will delete it promptly.
10. International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including standard contractual clauses or adequacy decisions, to protect your data during such transfers.
11. Changes to This Policy
We may update this privacy policy from time to time. We will post the updated policy with a revised "Last updated" date. For material changes, we will provide notice through the platform or via email.
12. Contact Information
For questions about this Privacy Policy or to exercise your rights, contact us at:
Email: socaloffroaders@socaloffroaders.com
For formal postal or regulatory correspondence, contact us at the email above; we will provide a mailing address if your situation requires it.