Privacy Policy — Hereday

Hereday ("we", "us", "our") operates hereday.io. This policy explains what data we collect, why we collect it, and how we protect it. We keep this short and honest because we believe privacy policies should be readable.

What we collect

Account information

When you sign in with Google, we receive your name, email address, and profile photo from Google. We use this to create your account and display your name in the app. We do not access your Google contacts, calendar, or any other data.

Event data

Routes, points of interest, event names, dates, cities, and branding assets you upload are stored so you can create and publish event maps. Published event data is publicly accessible via your event's share link.

Email subscriptions

When a visitor subscribes to event updates, we store their email address and associate it with that event. We only use this email to send information about that specific event. We do not sell, rent, or share subscriber emails with third parties.

GPS location (live tracking)

If a runner chooses to share their location during a Pro event, their GPS coordinates are broadcast in real time to spectators viewing the event map. Location data is transmitted only while the runner actively opts in, and only during the organizer-configured tracking window. We store the last known position temporarily so late-joining spectators can see current runner locations. We do not retain historical GPS tracks after the tracking session ends.

Location sharing is always voluntary. The browser asks for permission before accessing GPS, and runners can stop sharing at any time.

Payment information

Payments are processed by Stripe. We never see or store your full card number. We store your Stripe customer ID so we can associate payments with your account.

Analytics and usage

We log basic product events (page views, feature usage) to understand how people use Hereday and improve the product. These events are tied to your account when you're signed in, or anonymous when you're not.

How we use your data

To provide and maintain the Hereday service
To send event-related emails you opted into
To process payments for Pro upgrades
To improve the product based on aggregate usage patterns

We do not sell your data. We do not run advertising. We do not use your data to train AI models.

Third-party services

We use the following services to operate Hereday:

Supabase — database, authentication, and real-time infrastructure (hosted in AWS US)
Stripe — payment processing
Mapbox — map rendering and geocoding
Vercel — hosting and deployment
Google — OAuth sign-in

Each of these services has their own privacy policy. We only share the minimum data required for each service to function.

Cookies and local storage

We use browser localStorage to keep you signed in, remember your view preferences (runner vs. spectator), and store active tracking session IDs. We do not use third-party tracking cookies or advertising pixels.

Data retention

Account data — kept until you delete your account
Event data — kept until you delete the event
Subscriber emails — kept until the subscriber unsubscribes or the event is deleted
GPS tracking data — temporary; last known position is cleared when the tracking session ends
Analytics events — retained for up to 12 months

Your rights

You can:

Access your data by signing in to your dashboard
Delete your events and account at any time
Export your data by contacting us
Opt out of email subscriptions via the unsubscribe link in any email

If you're in the EU, UK, or California, you have additional rights under GDPR, UK GDPR, or CCPA respectively. Contact us and we'll honor them.

Children

Hereday is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We'll post the new version here with an updated date. For significant changes, we'll notify you by email if you have an account.

Contact

Questions about this policy? Email us at hello@hereday.io