Privacy Policy

1. Data We Collect

• Account/Profile: Full name, email, phone number, date of birth, gender, city/country, profile photo, club/organization affiliation, emergency contact.
• Event Data: Registrations, bib numbers, race results, rankings, leaderboards, e-certificates, uploaded photos, forum posts/comments.
• Activity Data: Limited data from third-party integrations (e.g., Strava) only if you explicitly connect them—for verification and results only.
• Automatic Data: Device information, IP address, usage logs (via tools like Firebase/Google Analytics).

We do not directly collect or track GPS, real-time location, or fitness metrics.

2. Purposes & Lawful Bases (under NDPA 2023)

We process data lawfully for:

• Account creation, event registration, bibs, results, certificates: Performance of contract.
• Public leaderboards and historical race records: Legitimate interests.
• Essential notifications: Performance of contract / legitimate interests.
• Marketing/promotions: Consent (opt-in required; unsubscribe anytime).
• Platform improvements, analytics, security: Legitimate interests (often anonymized/aggregated).

3. Data Sharing

We share only what's necessary:

• Event organizers (registrations/results).
• Payment processors (e.g., Paystack—card details never stored by us).
• Analytics/email providers (Firebase, Google Analytics—limited/anonymized).

We do not sell personal data.

4. International Transfers

Data may be transferred outside Nigeria (e.g., to US/EU servers via Render, MongoDB Atlas, Cloudinary). We use appropriate safeguards (such as standard contractual clauses) in line with NDPA requirements.

5. Retention & Security

• Account/profile data: Kept while your account is active; deleted within 90 days of closure or your deletion request.
• Race results/leaderboards: Retained indefinitely for historical and sporting purposes.
• Forum posts/other temporary data: Kept only as long as necessary, then deleted/anonymized.

We use encryption (HTTPS in transit, at-rest where available), restricted access, and secure third-party services to protect data.

6. Your Rights (under NDPA Sections 32–40)

You have the right to:

• Access your data
• Rectify inaccurate data
• Erase your data
• Restrict processing
• Object to processing
• Portability of data
• Withdraw consent

Email supports@myracetime.app with your request—we aim to respond within 30 days. If unsatisfied, you may complain to the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

7. Children's Data

We do not knowingly process personal data of children under 18 without verifiable parental or guardian consent. If we become aware of such data, we will delete it.

8. Cookies & Tracking

We use essential cookies for core functionality (e.g., login sessions) and analytics cookies (e.g., Google Analytics). You can manage preferences in your browser settings or contact us.

9. No Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on you.

10. Changes to This Policy

We may update this policy from time to time. Significant changes may be notified via email or in-app. Continued use means you accept the updates.

11. Contact Us

For questions, rights requests, or concerns: supports@myracetime.app

We are committed to protecting your privacy in line with the Nigeria Data Protection Act 2023 (NDPA). Thank you for trusting MyRaceTime!