Privacy Policy

1 Information We Collect

Information you provide directly

• Account information — when you create an account, we collect your email address and password (stored encrypted).
• Profile information — name, sport preferences, race history, and personal records you choose to add.
• Payment information — if you subscribe to Trehko Elite, payment is processed by Stripe. We do not store your full credit card number. We retain only a transaction reference and subscription status.
• Reviews and feedback — any race reviews, ratings, or feedback you submit through the app.

Information collected automatically

• Usage data — pages and features you interact with, races you view, searches you perform, and time spent in the app.
• Device information — browser type, operating system, and device type.
• Location data — approximate location inferred from your IP address for proximity-based race search. We do not access your precise GPS location without explicit permission.
• Push notification tokens — if you enable push notifications, we store a device token provided by OneSignal to deliver alerts.

Information we do not collect

• We do not collect your precise GPS coordinates unless you explicitly grant location permission for proximity search.
• We do not access your contacts, camera, microphone, or health data.
• We do not sell your personal information to third parties.

2 How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Trehko service
• Personalize your race discovery and training experience
• Send push notifications about registration deadlines, lottery closings, and race updates you have opted into
• Process Elite subscription payments and manage your account
• Respond to your support requests and feedback
• Analyze usage patterns to improve features and fix bugs
• Comply with legal obligations

We do not use your information for automated decision-making that produces legal or similarly significant effects.

3 How We Share Your Information

We do not sell your personal information. We share your information only in these circumstances:

Service providers

• Stripe — payment processing for Elite subscriptions
• Supabase — secure database and authentication infrastructure
• OneSignal — push notification delivery
• Vercel — hosting and content delivery

Each service provider is contractually required to use your data only to provide services to Trehko and not for their own purposes.

Legal requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Trehko, our users, or the public.

Business transfers

If Trehko is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

4 Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Specifically:

• Account data — retained until you delete your account
• Usage data — retained for up to 24 months for analytics purposes
• Payment records — retained for 7 years as required by financial regulations
• Push notification tokens — retained until you disable notifications or delete your account

You may request deletion of your account and associated data at any time by contacting us at legal@trehko.com. We will process deletion requests within 30 days.

5 Security

We implement reasonable technical and organizational measures to protect your information, including:

• Encrypted data transmission via HTTPS/TLS
• Passwords stored using industry-standard hashing
• Access controls limiting who can access personal data internally
• Regular security reviews of our infrastructure

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at legal@trehko.com.

6 Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you
• Correction — request that we correct inaccurate or incomplete information
• Deletion — request that we delete your personal information
• Portability — request your data in a machine-readable format
• Opt-out of notifications — disable push notifications at any time in app Settings
• Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at legal@trehko.com. We will respond within 30 days. We will not discriminate against you for exercising your privacy rights.

7 Cookies & Tracking

Trehko uses the following types of cookies and local storage:

• Essential cookies — required for authentication and keeping you logged in
• Preference storage — local browser storage to remember your sport filters, wishlist, and app settings
• Analytics — anonymous usage data via Vercel Analytics to understand how features are used

We do not use advertising cookies or cross-site tracking. You can clear cookies and local storage at any time through your browser settings, though this will log you out and reset your preferences.

8 Children's Privacy

Trehko is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at legal@trehko.com and we will delete that information promptly.

If we discover that we have collected personal information from a child under 13 without parental consent, we will take steps to remove that information immediately.

9 Third-Party Services

Trehko integrates with the following third-party services, each governed by their own privacy policies:

• Stripe — stripe.com/privacy
• Supabase — supabase.com/privacy
• OneSignal — onesignal.com/privacy_policy
• OpenStreetMap / Nominatim — used for race proximity search geocoding

We are not responsible for the privacy practices of these third parties. We encourage you to review their policies.

10 Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, sending a notification through the app.

Your continued use of Trehko after changes become effective constitutes acceptance of the updated policy. If you do not agree to the updated policy, you must stop using the service and may request deletion of your account.

11 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: