Privacy policy
Last updated: November 2026
Who we are
My Running Journal ("the app") is a diary for runners, run as a project of Sustainovate ("we", "us"). It is available at myrunningjournal.co.za. This policy explains what we collect, why, and the choices you have. Contact: support@myrunningjournal.co.za.
What we collect
- Account: your email address and a password (stored only as a secure hash by our sign-in provider).
- Profile you choose to fill in: display name, club, home town, favourite distance, gender, year of birth (used for the age on your runner card) and a profile photo.
- Races you add: race name, date, status, distance, finish time, positions, medal, notes, and the town and country with its map position.
- Photos you attach to races.
- Race bucket list entries and friends connections you make in the app.
- Subscription status if you subscribe (see Payments).
We do not track your live GPS location, we do not read your contacts, and the app has no advertising or advertising trackers.
How we use it
- To run the app: show your races on the map, build your charts, badges, album and runner card.
- To let friends you accept see your profile, races and profile photo.
- To send account emails (confirm email, reset password).
- To check your subscription and apply the free-plan limits.
Who can see your data
Your races, photos and profile are private to you. They are visible only to people you have accepted as friends. Photos are kept in private storage and are shown through short-lived links. We do not sell your data.
Services we use
- Supabase: sign-in, database and photo storage.
- MapTiler: map pictures and town search. The place text you type, and the map area you view, are sent to it.
- Sentry: crash reports. If the app crashes, it sends the error details, the app version and the phone model and Android version. It does not send your name, email, races, photos or screenshots.
- RevenueCat and Google Play: subscriptions. Google handles your payment details; we never see your card number.
These providers process data on our behalf under their own privacy policies.
Sharing your card or album page
If you tap share, the app makes a picture and hands it to the app you choose (for example WhatsApp or Instagram). What happens next is governed by that app.
How long we keep it
We keep your data until you delete your account. Deleting your account removes your profile, races, photos, bucket list, friends and sign-in record. See how to delete your account. Subscription and payment records held by Google and RevenueCat follow their own retention rules.
Your choices and rights
- Edit or remove any race, photo or profile detail in the app at any time.
- Delete your whole account inside the app (Profile > Edit profile > Delete my account) or by request from the page linked above.
- Ask us for a copy of your data or for corrections by email.
- Where the law gives you more rights (for example under South Africa's POPIA or the EU's GDPR), you may use them by contacting us.
Children
The app is not meant for children under 13, and we do not knowingly collect their data.
Security
Data is sent over encrypted connections and protected by per-user access rules in the database. No system is perfectly secure, but we limit access and fix problems promptly.
Changes
If we change this policy we will update the date above and, for big changes, tell you in the app.