Privacy policy

The short version

We collect what Kaevor needs to work: your account, the runs you record, and, if you buy kit, your order. Your routes are never shown to anyone else. Other runners see your name, photo and running totals on the leaderboard, and nothing more. If you connect Strava, what comes from Strava is shown to you and nobody else. The free app shows adverts from Google, and in the UK and Europe you choose whether they can be personalised. You can download your data or delete your account from inside the app at any time. We never sell your data.

Who we are

Kaevor is a trading name of Kaevor Ltd, a company registered in Scotland with company number SC897056. Our registered office is 34 Borrowfield Road, Montrose, DD10 9BE. Kaevor Ltd is the controller of the personal data described here, for the Kaevor app on iPhone and Apple Watch, the website at kaevorclub.com and the Kaevor shop.

For anything about your data, email customer.service@kaevorclub.co.uk. We aim to reply within a few days and always within one month.

What the app collects, and why

Your account

Your name, your email address, and how you sign in: Sign in with Apple, Google, or an email address and password. If you use Apple, you can choose to hide your email, in which case we only ever see the relay address Apple gives us. Passwords are stored only as a one-way hash; nobody at Kaevor can read them. We use your account to run the app, back up your runs, and contact you about your account, such as a password reset.

Your runs

When you record a run, walk or wheelchair push, the app uses your phone's precise location (GPS) to measure distance, pace and route. It also uses motion data to tell running apart from driving or cycling, and the barometer to measure how much you climb. For each run we keep the route, distance, time, pace, top speed, climb, sport, and when it started and finished.

Runs are stored on your phone first. When you are signed in they are also backed up to our servers, which is how your history comes back on a new phone and how the leaderboard is built. We check runs for things that are not possible on foot, such as car speeds, so the leaderboard stays fair.

Location is used only while you are recording, including with the screen locked during a run. The app does not track you at any other time.

Your profile

The name you choose and, if you add one, a profile photo. Both are shown to other runners on the leaderboard.

Reports and blocks

If you report or block another runner, we keep who you reported or blocked, the reason you gave, and when. A report is read by a person at Kaevor so we can act on it. The runner you report or block is not told it was you.

Purchases in the app

"Remove ads" is bought through Apple's App Store. Apple handles the payment and tells the app that you have bought it; we never see your payment details.

Notifications

Milestone and reward notifications are created on your phone. We do not run a push notification service and hold no notification tokens.

Support and technical data

If you email us, we keep the conversation so we can help you. Our servers keep short-lived logs of requests, including IP addresses, to keep the service secure and to find faults. If you have agreed to share analytics with app developers in your iPhone settings, Apple gives us anonymous crash reports. The app has no analytics tools of its own.

What other runners can see

The leaderboard shows other Kaevor runners your name, your photo if you added one, your place, and this month's running miles. Tapping your name shows your lifetime miles, number of runs, average pace, longest run, streak, XP, and the day and distance of your recent runs.

Other runners never see your routes, where you start or finish, what time of day you run, your city, or your email address. Runs imported from Strava are not shown to other runners at all. You can change your name in the app, remove your photo at any time, and block anyone you would rather not see.

If you connect Strava

Connecting Strava is optional, and Kaevor works fully without it. If you connect, Strava asks your permission and then sends us the activities you allow us to read. We keep only what Kaevor uses: the sport, distance, moving time, climb and start time of each activity, and the keys Strava gives us to fetch them. We do not keep anything else Strava sends.

Activities from Strava count toward your own miles and rewards and are shown only to you, marked "Powered by Strava" with a link back to Strava. They are never shown to other runners or used for anything else.

If you disconnect Strava in the app, we tell Strava that Kaevor no longer has access and delete every activity that came from Strava. The same happens if you remove Kaevor's access from inside Strava, or delete your Kaevor account. If you delete an activity on Strava or make it private, we remove it from Kaevor when Strava tells us.

Strava's own privacy policy covers what Strava does with your data. Kaevor is not part of Strava, and Strava is a trademark of Strava, Inc.

Apple Watch and Apple Health

The Kaevor watch app records a run as a workout. With your permission it saves the workout and its route to Apple Health, and reads your heart rate, distance and calories during the workout so it can show them on your wrist.

Heart rate and calories stay in Apple Health on your devices and are never sent to Kaevor. When a watch run finishes, the watch sends your phone the run itself (distance, time, route, top speed, climb and sport), which is then treated like any other run. We never use Health data for advertising.

Adverts

The free app shows banner adverts from Google AdMob. Buying "Remove ads" switches them off for good.

To show adverts, Google collects information from your device, such as your IP address, a rough idea of where you are, which adverts you see and tap, and, only if you allow it, your device's advertising identifier. In the UK and Europe the app asks for your consent first, using Google's consent message, and you can change your choice at any time in Profile, under Ad privacy choices. On iPhone, the app also asks whether you allow tracking; if you say no, adverts are still shown but are not based on your activity in other apps.

We never give advertisers your name, email, runs, routes or anything from Strava or Apple Health. Google's use of this data is covered by Google's privacy policy.

The website and shop

Orders

Payments are handled by Stripe. When you buy, Stripe collects your name, email, delivery address and payment details. Your card details go to Stripe and never to us. We receive your name, email, delivery address, what you ordered and what you paid, so we can send your order, email you a confirmation, and keep the records the law requires. Confirmation emails are sent through Resend.

The waitlist

If you join the waitlist, your email address is passed to us through Web3Forms so we can tell you when the app launches.

Your browser

The site keeps your display settings, your basket and your chosen delivery country in your own browser's storage, so they are still there next time. The shop also counts how many people are looking at or have a product in their basket, using a random number that lasts only for your visit and is not linked to you. The website uses no advertising or tracking cookies.

Hosting

The website is served by Cloudflare, which processes your IP address to deliver pages and protect the site from attacks.

Our legal reasons for using your data

UK data protection law asks us to say which legal basis we rely on.

To provide what you asked for (contract): your account, recording and backing up your runs, the leaderboard, your rewards, Strava when you connect it, and your orders.

Our legitimate interests, balanced against yours: keeping Kaevor secure, checking runs so the leaderboard is fair, dealing with reports, and finding and fixing faults.

Your consent: personalised adverts, tracking on iPhone, location and motion permissions, notifications, Apple Health, and connecting Strava. You can withdraw consent at any time in the app or in your iPhone settings.

The law: keeping records of sales for tax and accounting.

Who we share it with

We do not sell your data, and we share it only with companies that help us run Kaevor, under contracts that limit what they can do with it:

• Supabase: our database, in Ireland.
• Railway: the servers that run the app and the shop, in the United States.
• Cloudflare: hosting for the website.
• Stripe: shop payments.
• Resend: sending order and account emails.
• Google: our email (Google Workspace), Google sign-in, and adverts (AdMob).
• Apple: Sign in with Apple, the App Store, TestFlight and Apple Health.
• Web3Forms: the waitlist form.
• Strava: only if you connect it, and only to fetch your own activities.

We may also share data if the law requires it, or to protect the safety of our users or the public.

Data stored outside the UK

Some of the companies above store or process data outside the UK, including in the European Union and the United States. When they do, the transfer is covered by UK adequacy regulations, such as the UK extension to the EU-US Data Privacy Framework where the company is certified, or by the contract clauses approved by the UK's Information Commissioner.

How long we keep it

Your account and runs: until you delete your account. Deleting it removes them from our servers straight away, and from our backups within seven days.

Strava activities: until you disconnect Strava, remove Kaevor's access in Strava, or delete your account.

Reports: for as long as we need them to deal with the report and keep the community safe, and no longer than two years. If the person who made a report deletes their account, the report is kept without their name.

Orders: six years, as tax law requires.

Waitlist: until the app launches or you ask us to remove you.

Server logs: a short time, normally no more than 30 days.

Your rights

You have the right to see the data we hold about you, to correct it, to have it deleted, to restrict or object to how we use it, to take it with you, and to withdraw any consent you gave.

Many of these are built into the app. In Profile you can export your data, change your name and photo, disconnect Strava, change your advert choices, and delete your account. For anything else, email customer.service@kaevorclub.co.uk. We may need to confirm it is you before we act.

If you are unhappy with how we have handled your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Children

Kaevor is for people aged 13 and over. If you are under 18, please make sure a parent or guardian is happy for you to use it. If we learn that someone under 13 has an account, we will delete it. If you think that has happened, email customer.service@kaevorclub.co.uk.

Keeping it safe

Everything between the app, the website and our servers is encrypted in transit. Passwords are stored only as a one-way hash, sign-in sessions can be ended from the server, and access to our systems is limited to the people who need it. No system is perfectly secure, and if something went wrong that put your data at risk, we would tell you and the Information Commissioner as the law requires.

Changes and contact

If we change this policy we will update the date at the top, and if the change is significant we will tell you in the app or by email before it takes effect.

Questions about your data: customer.service@kaevorclub.co.uk. Post: Kaevor Ltd, 34 Borrowfield Road, Montrose, DD10 9BE.

Kaevor is a trading name of Kaevor Ltd, registered in Scotland, company number SC897056.