Last updated August 12, 2026
Last updated: August 12, 2026.
Information we collect
When you join or use CRC services, we may collect your name, email, profile and pace preferences, event RSVPs, account sessions, notification choices, device push tokens, and support messages. If you record or import runs, we may process activity time, duration, distance, pace, route/location points, source, and verification status.
Connected services
If you choose to connect Strava, Apple Health, or Health Connect, CRC processes only the activity information needed for history, progress, and rewards. Strava access tokens are encrypted on our server and removed when you disconnect. Apple Health access is read-only and limited to running workouts and workout distance; Health Connect access is read-only and limited to exercise sessions and distance. Those permissions are controlled on your device and requested only when you choose to sync. Provider services operate under their own privacy policies.
How information is used
We use information to authenticate accounts, publish and manage club runs, record RSVPs and activities, calculate progress and eligible rewards, prevent abuse, deliver requested notifications, support members, and operate and secure CRC services. Marketing email and juice-bar push offers are optional and off by default for app members. Website signups require confirmation by email before marketing consent is enabled.
Rewards and verification
Reward eligibility may require a verified activity source. Server-fetched Strava runs and plausible CRC-recorded GPS routes may qualify. Device-submitted health imports remain in activity history but do not qualify for monetary rewards until additional provenance validation is available.
Sharing and tracking
We use service providers for hosting, transactional email, push delivery, identity, and connected fitness services when configured. They receive information needed to perform those services. CRC does not sell personal information, share it for cross-context behavioral advertising, or include third-party advertising or tracking SDKs in the current app. We may disclose information when required by law, to protect safety and service integrity, or as part of a business transaction subject to appropriate safeguards.
Retention
Account and activity records are retained while your account is active and as needed to provide and secure the service. Expired one-time login tokens and sessions are removed by scheduled maintenance; encrypted integration credentials are removed when you disconnect or delete your account. Production database backups are retained for 14 days. Disconnecting a provider stops future synchronization but does not automatically delete previously imported runs. Account deletion removes personal account data and unused rewards; completed redemption records may remain only in anonymized form for financial, fraud-prevention, and audit purposes.
Your choices
The app lets you manage notification and marketing preferences, disconnect integrations, review and revoke sessions, delete individual activities, export account data in a machine-readable response, and permanently delete your account. You can also contact us to ask about access, correction, deletion, restriction, portability, or objection where applicable. We will verify requests as reasonably necessary and will not discriminate against you for exercising applicable privacy rights.
Contact
Privacy questions can be sent to hello@celisrunclub.com. This notice describes current product behavior and may be updated as features and providers change.