Privacy Policy

1. Data Controller

Pace of Democracy (“we”, “us”, “our”) is the data controller responsible for your personal data. We are based in Copenhagen, Denmark, and comply with the EU General Data Protection Regulation (GDPR).

Contact: privacy@paceofdemocracy.com

2. Data We Collect

We collect the following personal data:

• Account data: Name, email address, encrypted password
• Profile data: Age, city, running pace, distance preferences, bio, occupation, hobbies, interests, LinkedIn URL
• Activity data: Runs created, runs joined, messages sent
• Technical data: IP address, browser type, device information, cookies (see Cookie Policy)

3. Legal Basis for Processing

Under GDPR Article 6, we process your data based on:

• Consent (Art. 6(1)(a)): You give explicit consent when registering
• Contractual necessity (Art. 6(1)(b)): Processing necessary to provide our service
• Legitimate interest (Art. 6(1)(f)): Security, fraud prevention, service improvement

4. How We Use Your Data

• Provide and maintain the Pace of Democracy platform
• Enable you to create, find, and join runs
• Facilitate communication between runners
• Send run reminders and important service notifications
• Ensure platform safety and enforce community rules
• Review messages when investigating reported violations or safety concerns (admin moderation)

5. Data Sharing

We do not sell your personal data. We share data only with:

• Supabase (database hosting): EU-hosted PostgreSQL database
• Vercel (hosting): Website hosting and CDN
• Resend (email): Transactional email delivery
• Law enforcement: When legally required or to protect safety

6. Data Retention

We retain your personal data for as long as your account is active. When you delete your account, all personal data is permanently deleted within 30 days, including:

• Profile information
• Run participation history
• Messages
• GDPR consent records (retained for 3 years for legal compliance)

7. Your Rights (GDPR Articles 15-22)

You have the right to:

• Access: Request a copy of your personal data (via Profile > Export Data)
• Rectification: Correct inaccurate personal data
• Erasure: Delete your account and all associated data
• Data portability: Receive your data in machine-readable format (JSON)
• Restriction: Restrict processing of your data
• Object: Object to processing based on legitimate interest
• Withdraw consent: Withdraw consent at any time

To exercise these rights, email privacy@paceofdemocracy.com or use the in-app tools.

8. Message Privacy

Messages sent through Pace of Democracy (both group chats and direct messages) are stored securely and protected by row-level security policies. Only the participants of a conversation can access its messages.

Pace of Democracy administrators may access message content solely for the purpose of investigating reported violations of our Community Rules (e.g., harassment, spam, safety threats). Admin access is logged and limited to what is necessary for the investigation. We do not perform bulk or routine surveillance of private messages.

9. International Transfers

Your data is stored on EU-hosted servers. If any data is transferred outside the EEA, we ensure adequate protection through Standard Contractual Clauses (SCCs) or adequacy decisions.

10. Data Protection Officer

For data protection inquiries, contact our DPO at: dpo@paceofdemocracy.com

11. Supervisory Authority

You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet):

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby, Denmark
dt@datatilsynet.dk

12. Children

Pace of Democracy is not intended for users under 16 years of age. We do not knowingly collect personal data from children under 16.

13. Changes to This Policy

We may update this policy from time to time. Significant changes will be notified via email or in-app notification.