Privacy Policy

Last updated: February 26, 2026

1. Information We Collect

When you use StartList, we collect:

Account information: email address, full name, and password (hashed).
Team data: team names, race details, attendance status, notes, and GPX files you upload.
Device information: language preference stored locally on your device.
Push notification tokens: device token used to deliver push notifications to your device.
Error reports: app crash data and diagnostic information, including your user ID, sent automatically to help us fix issues.

2. How We Use Your Information

To provide and maintain the App's functionality.
To display your name and attendance status to your team members.
To send transactional emails (account verification, password reset).
To send push notifications about races and team updates (based on your preferences).
To monitor and fix app errors and crashes.

3. Data Storage

Your data is stored securely using Supabase, hosted on infrastructure within the European Union. Passwords are hashed and never stored in plain text.

4. Data Sharing

We do not sell, rent, or share your personal information with third parties, except:

With your team members, as required for the App to function (e.g., your name and race status).
When required by law or to protect our rights.

5. Third-Party Services

The App uses the following third-party services:

Supabase: authentication and database hosting.
Google Sign-In: optional authentication method.
Photon (Komoot): location autocomplete for race locations.
Sentry: error monitoring and crash reporting (receives diagnostic data and user ID for debugging).
Expo Push Notifications: delivery of push notifications to your device.

6. Your Rights

Under GDPR, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and associated data.
Export your data in a portable format.

7. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

Contract performance: processing necessary to provide the App's core functionality (account management, team coordination, race scheduling).
Legitimate interest: error monitoring and crash reporting to maintain and improve the service.
Consent: push notifications, which you can opt in or out of via your device settings and in-app preferences.

8. Data Retention

We retain your data for as long as your account is active. When you delete your account, we will delete your personal data within 30 days.

9. Cookies

The App does not use cookies. The website (startlist.app) does not use tracking cookies or analytics.

10. Children's Privacy

The App is not intended for children under 16. We do not knowingly collect data from children under 16.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via the App or email.

12. Contact

StartList is operated by Tristan Coopman, Oostende, Belgium.

Questions about your privacy? Contact us at hello@startlist.app.