Who we are
Who's Chasing You? Run Club runs this site. We're a run club in Larnaka, Cyprus, with a chapter in Madrid, Spain, and we're responsible for your data (the "data controller").
For anything about your data, email business@vibros.ai. We reply within a month, usually much sooner.
What we collect
- Your account: your email address. If you sign in with Google, also the name and profile picture on your Google account.
- Your profile: the name you show on the Chase, your city, your usual pace group, your language, whether you appear on the Chase, whether you want club emails (and when you said yes), and when you confirmed you're old enough to join.
- Your runs: the runs you RSVP to, with the distance and pace group you pick, and your check-ins: which run, how you checked in (QR code, "I was there" or added by a host), when, and who confirmed it. Your Chase points come from your check-ins.
- Sign-in and security: the one-time codes we email you (stored scrambled, and valid for 10 minutes), and for each device you're signed in on, its IP address and browser type.
We don't ask for your phone number, birth date or gender, we don't track your location, and we don't take payments.
Why we use it
- To run the club with you (contract): your account, RSVPs, check-ins, the Chase, and the emails you need, such as sign-in codes, RSVP confirmations and notices when a run changes or is cancelled.
- Because you chose to (consent): showing you on the public Chase, and sending club news and event emails. You can change either at any time, and it doesn't affect anything else.
- To keep things safe and fair (legitimate interests): spotting misuse, keeping your sign-in secure, and keeping a record of what organisers change, such as confirming or removing a check-in.
These are the legal bases in the GDPR: contract, consent and legitimate interests.
Who can see it
- Everyone, only if "Show me on the Chase" is on: your Chase name, your points and rank on the leaderboard, and your name among the people going to a run. With it off, nothing about you is public.
- Club organisers and hosts: your name, email, RSVPs and check-ins for runs in their city, so they can run them: pacers, race entries and the check-in list.
- The services that run the site for us: Vercel (hosting, running the site in Frankfurt, Germany), Neon (our database, stored in Frankfurt), Resend (sends our emails) and Google, only if you sign in with Google. They process your data only on our instructions.
Some of these companies are based in the United States. Those transfers are protected by the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
We never sell your data, and we don't use it for advertising.
How long we keep it
- Your account, profile, RSVPs and check-ins: until you delete your account.
- Sign-in codes: 10 minutes. Signed-in sessions: up to 120 days.
- When you delete your account, we delete your profile and RSVPs. Your past check-ins stay in the totals with nothing that links them to you, so other runners' Chase results don't change.
- Records of organiser changes: as long as the run they belong to.
Your rights
You can ask us to:
- show you the data we have about you, or send you a copy you can take elsewhere;
- correct it;
- delete it, including your whole account;
- stop or limit using it.
You can also withdraw any consent you gave, at any time.
Email business@vibros.ai from the address on your account. Settings to do this yourself are coming to the site.
If you're unhappy with how we handle your data, you can complain to a data protection authority: in Cyprus, the Commissioner for Personal Data Protection; in Spain, the Agencia Española de Protección de Datos.
Age
You need to be 16 or older to make an account, and we ask you to confirm it when you join.
Changes
When we change this policy, we update this page and the date at the top. If a change affects you significantly, for example because we start collecting new kinds of data, we tell you first by email or on the site.