PRIVACY POLICY

Controller: Upforit (upforit.club). Contact: hello@upforit.club.

• Account data — name, email, city, username, profile photo (from you or Strava).
• Strava data— when you connect Strava we receive your profile, activities, and clubs as authorised by you in Strava's OAuth consent. We use this to build your season, heatmap, stats, and recommendations. We do not sell Strava data.
• Season & saves— events you mark as I'm Upforit, goals, results, and race notes you add.
• Club claim data — name, email, and role when an organiser claims a listing. We may match your email domain to the club website for verification.
• Newsletter — email and optional city/name if you subscribe (Kit / ConvertKit).
• Usage & cookies — pages viewed, searches, and device/browser data via PostHog (with consent where required) and essential cookies for login.

• Contract — to provide your account, saves, claims, and core product features.
• Consent — newsletter, analytics cookies (PostHog), and Strava connection.
• Legitimate interests — securing the service, preventing abuse, improving the directory, and understanding aggregate demand for events.

Essential cookies keep you logged in. Analytics (PostHog) helps us see what works — we ask for consent via the cookie banner where required. You can refuse non-essential cookies. We do not use advertising trackers to sell your data.

If you opt in, we email you about events and community updates via Kit. Unsubscribe any time via the link in every email.

We use processors who help us run the product: Supabase (database & auth), Vercel (hosting), Resend (transactional email), Kit (newsletter), PostHog (analytics), Strava (when you connect), and Mapbox/OpenCage (maps & geocoding). We do not sell personal data.

Some processors store data outside the UK/EEA. Where that happens we rely on appropriate safeguards (e.g. standard contractual clauses).

We keep account data while your account is active. You can ask us to delete your account — contact hello@upforit.club. Newsletter contacts are removed on unsubscribe. Logs are kept only as long as needed for security and operations.

You can request access, correction, deletion, restriction, or portability of your personal data, and object to certain processing. You can withdraw consent at any time (e.g. disconnect Strava, unsubscribe, refuse analytics cookies). You also have the right to complain to the ICO (ico.org.uk).

Upforit is aimed at adults. We do not knowingly collect data from children under 16.