Legal
Privacy Policy
In short: you can browse Velocity without an account. If you sign in, we store your name, email and your RSVPs so we can build your personal calendar and keep it in sync across your devices. We don't store your location, show ads, use analytics or sell your data. You can download or delete your data at any time.
1. Who we are
VelocityAE ("Velocity", "we", "us") is a run club discovery app for Dubai and the UAE. It is an independent community project based in Dubai, not a registered company. For anything about your data, contact velocityapp971@gmail.com.
2. What we collect
If you only browse (no account), nothing about you is stored in our database. A few things are kept only on your own device, in your browser's storage:
- the answers you give in onboarding (name, run type, surface, whether you want freebies), used for the "Match my prefs" filter;
- small settings, such as whether you've already seen the "pull up" hint.
If you create an account, we also collect:
- Account details. With Continue with Google: your name, email address, profile photo and Google account ID. With an email sign-in code: your email address. You can also set a display name.
- Your RSVPs. Which runs you mark Going or Not going, which you save as Interested, and when you made or changed each choice. We keep a history of these changes.
- Your preferences. Your onboarding answers are saved to your account so they follow you across devices.
- Your consent record. Which version of these policies you accepted, and when.
- Technical data. A sign-in session token is kept in your browser's storage so you stay signed in. Our service providers' servers automatically log IP addresses, browser type and request times for security.
Your location. If you allow it, Run Now uses your location to sort runs by distance. That happens entirely in your browser. Your location is never sent to us or stored.
We don't collect contacts, payment details or advertising IDs, and we don't use analytics, advertising or tracking cookies.
3. How we use it
- To sign you in and keep your account secure.
- To save your RSVPs and show them in your personal calendar (My runs) and your Interested list.
- To show anonymous totals on each run (for example "8 going"). We never show other users your name or your individual choices.
- To see which clubs and runs are popular, so we can improve Velocity.
- To send you sign-in codes by email. We don't send marketing emails.
We process this data to provide the service you asked for when you created an account, and with the consent you gave when you signed up. We never sell your data.
4. Who else handles your data
We use a small number of service providers to run Velocity:
- Supabase hosts our database and sign-in system. Your account, RSVPs and preferences are stored in one of its data centres outside the UAE.
- Google handles sign-in, only if you choose Continue with Google.
- Our email provider delivers sign-in codes.
- GitHub hosts the website and club photos, and logs visitor IP addresses.
Your browser also loads a few files directly from other services, which can see your IP address:
- OpenFreeMap for the map;
- unpkg for the map software;
- Google Fonts for the typefaces.
"Register here", Instagram and Google Maps links take you to those services, and their own privacy policies apply there.
5. Data stored outside the UAE
Our providers store and process data outside the UAE. We choose providers that encrypt data in transit and apply strong security controls. By creating an account, you consent to this transfer.
6. How long we keep it
We keep your account, RSVPs and preferences for as long as your account exists. When you delete your account, your profile, RSVPs and RSVP history are removed from our database straight away. Copies may remain in our providers' security logs or backups for a short period before they are overwritten.
7. Your rights
Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), you can:
- Access your data: use Account → Download my data.
- Correct it: edit your name and preferences in Account, or contact us.
- Delete it: use Account → Delete account.
- Withdraw consent at any time by deleting your account.
- Object or complain by contacting us. You can also contact the UAE Data Office.
8. Security
Access rules in our database mean only you can read your own RSVPs and preferences. All traffic uses HTTPS. No system is perfectly secure, so please tell us straight away if you notice anything wrong.
9. Age
Velocity accounts are for people aged 18 and over.
10. Changes to this policy
When we update this policy, we change the version and date above. If a change is significant, we will ask you to review and accept it the next time you sign in.
11. Contact
Questions or requests: velocityapp971@gmail.com.