Privacy Policy

Effective date: July 21, 2026

AthleteField ("AthleteField", "we", "us") operates athletefield.co and the AthleteField platform (the "Service"). This policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Accountability. AthleteField's privacy officer is responsible for our privacy compliance and can be reached at hello@athletefield.co.

What we collect

Account information. Your name, email address, and authentication credentials (managed by our authentication provider; we never see your password in plain text).

Profile information. What you choose to add: photo, city, gym affiliation, experience level, race format intent, pace, bio, and the races you plan to attend. We also assign you an AthleteField bib number, which is a platform identifier, not an official race number.

Race results (optional). If you choose to verify your results, you direct us to retrieve your own publicly available race results from the official results website. This includes event name, division, times, and placement. We match on your name and store only your own records.

Connections and messages. Connection requests ("fist bumps"), accepted connections, messages you exchange with connections, and any blocks or reports you make or that are made about you.

Usage and device information. Product analytics events (pages viewed, features used), device and browser type, and approximate location derived from your IP address.

Communications. Emails and support requests you send us.

How we use your information

• To operate the Service: creating your profile, suggesting relevant athletes (based on signals like gym, race, format, pace, and experience), and enabling connections and messaging
• To verify race results when you ask us to
• To keep the community safe: enforcing our terms, reviewing reports, and acting on blocks
• To communicate with you: service and transactional emails always; product updates and marketing only with your consent, and you can unsubscribe at any time
• To understand how the Service is used and improve it
• To comply with legal obligations

We do not sell your personal information, and we do not use it for third-party advertising.

What other athletes can see

Your profile (name, photo, and the details you add), your AthleteField bib number, and your verification status are visible to other athletes on the Service as part of how matching works. Your race results are shown on your profile if you verify them. Your messages are visible only to the connection you exchange them with. You can block or report any athlete, and you can delete your account at any time.

Consent

We collect, use, and disclose personal information with your consent, which you provide when you create an account, complete onboarding, or use optional features like results verification. You may withdraw consent at any time by adjusting your profile, declining optional features, or deleting your account, though withdrawing consent may limit what the Service can do for you.

Service providers

We use a small number of providers to run the Service. They may only process personal information to provide services to us and are bound by contractual obligations:

• Supabase: database and authentication, hosted in Canada (AWS ca-central-1)
• Vercel: application hosting and delivery (United States)
• Resend: transactional email delivery (United States)
• Cloudflare: DNS and email routing
• PostHog: product analytics
• Sentry: error monitoring (United States)
• Google: sign-in with Google (optional) and Google Analytics (United States)
• MapTiler: map display on gym pages (receives your IP address when maps load)

We may also disclose personal information if required by law, to protect the safety of users or the public, or in connection with a corporate transaction such as a merger or sale of assets (in which case this policy will continue to apply to your information).

Where your information is stored

Our primary database is hosted in Canada. Some of our service providers process information in the United States or other jurisdictions. While your information is outside Canada, it is subject to the laws of those jurisdictions, and courts or authorities there may be able to access it.

Retention and deletion

We keep your personal information while your account is active. If you delete your account, we delete or anonymize your personal information within 30 days, except that we may retain limited records where reasonably necessary for safety (such as records of reports and enforcement actions), to comply with legal obligations, or to resolve disputes. Residual copies may persist in encrypted backups for a limited period before being purged.

Your rights

You can:

• Access the personal information we hold about you and ask how it has been used and disclosed
• Correct inaccurate or incomplete information
• Withdraw consent, subject to legal or contractual restrictions
• Delete your account and personal information

To exercise any of these rights, email hello@athletefield.co. We will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca). Residents of Quebec may have additional rights under Quebec's private-sector privacy law.

Security

We use safeguards appropriate to the sensitivity of the information, including encryption in transit, access controls, and least-privilege access to production systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach creates a real risk of significant harm to you, we will notify you and the Privacy Commissioner as required by law.

Cookies and analytics

We use essential cookies to keep you signed in and to operate the Service, and product analytics (PostHog) to understand feature usage. We do not use cross-site advertising trackers.

Age

The Service is for adults 18 and older. We do not knowingly collect personal information from anyone under 18, and we delete such accounts when we become aware of them.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you through the Service or by email before they take effect.

Contact

AthleteField hello@athletefield.co