Privacy Policy

Last updated: October 4, 2026

Marina Run Club is a running club. This policy covers the Marina Run Club app, the member portal at members.marinarunclub.com and the club site at marinarunclub.com. It describes what those actually collect, why, and who else touches it. We do not sell member information, and we do not use it for advertising.

What we collect, and why

Your phone number, to sign you in

The app signs you in by texting a six-digit code to your mobile number. Twilio sends and checks that code for us. Your account itself lives in Firebase Authentication, which holds your phone number and a user id. On the portal you can sign in with an email address and password instead, or with Google.

Your member profile

Your name, email address, phone number, member id, membership status and plan, and whether you are a captain or an admin. If you fill them in, also your city, a short bio, an Instagram handle, a profile photo and an emergency contact. This is what makes you a member rather than an account: it tells us who is paid up, who can let people into a run and who to call if something happens on one.

Your location, only when you check yourself in

We are not tracking you. The app asks for your location at one moment and one moment only: when you tap to check yourself in at the start of a run. It reads your coordinates once, right then, and sends them with the check-in so the club can confirm you were actually at the start. Those coordinates are stored on that single check-in record and are kept with the club's run history. The app never asks for background location and never reads your location while it is closed or while you are running. If you decline the permission, you simply cannot self check in; a captain can still scan you in instead.

Camera, photo library and calendar

The app asks for your camera so captains can scan member cards at check-in, and for your camera or photo library when you choose to share a run photo with the club. Only the photos you pick are uploaded; we never read your library otherwise. Uploaded photos are held in our private storage bucket and shown to members in the community feed. The app also asks for calendar access if you tap to add a run to your calendar. That writes an event to your device's own calendar and sends nothing back to us.

What you do in the club

Posts, comments, likes, photos, challenge entries, RSVPs to runs, check-ins and your place on the leaderboard. Other members see this, which is the point of it. We also keep reports and blocks you make under the club rules, so a report can be acted on and a block survives reinstalling the app.

Messages

Member-to-member and group chat runs on Stream. Stream holds the message content, who sent it and when, and the device token your phone needs to receive a push notification about it. Club admins can see a message that has been reported to them.

Payments

Membership is bought on the website, through Stripe. The app does not take payment. Your card details go to Stripe and never reach us: what we hold is a Stripe customer and subscription id, your plan, your status and the dates on it.

Email

We send club email through Resend, which holds your email address and name so we can send to you and so you can unsubscribe. Anyone who signs up for running information and events on marinarunclub.com is on that list whether or not they are a paying member.

The AI trainer, and Strava if you connect it

The AI trainer at members.marinarunclub.com is opt-in. If you use it, what you type to it and the training goal and plan it builds are sent to Anthropic, which runs the model that answers, and the plan is stored on your account. If you connect Strava, we store the access token Strava gives us and read your recent activities to show your week; you can disconnect it at any time. We never post to Strava.

Website activity

On the member portal we record our own page views and taps: the page, how long you were on it, the button you pressed, your browser's user agent, and either your member id or an anonymous session id if you are signed out. It stays in our own database and is used to see which parts of the portal members actually use. There is no advertising network, no tracking pixel and no third-party analytics service in this. The app does not do any of this at all.

Who processes it for us

  • Google Firebase — accounts, the member database, photos and files
  • Supabase — the community database and photo storage
  • Twilio — sending and checking your sign-in code
  • Stream — chat messages and chat push notifications
  • Stripe — membership payments
  • Resend — club email
  • Anthropic — the model behind the opt-in AI trainer
  • Strava — only if you connect it
  • Vercel — hosting for the website and the portal

Each of them gets only what it needs to do its job, and none of them is allowed to use it for anything else.

Sharing

We do not sell your information and we do not share it with advertisers. Other members see your name, profile photo, city and bio if you added them, your posts, comments, photos, RSVPs, check-ins and leaderboard position, and your messages to them. Club admins and captains see member contact details, membership status and reports, because they run the club. Beyond that we share information only with the companies listed above, or where the law requires it.

How long we keep it, and deleting your account

You can close your account from Settings in the app, or from your settings page on the portal. Closing it signs you out and locks the account immediately, and starts a 60-day window. We hold it for those 60 days so you can tell us if it was a mistake.

After 60 days we erase it: your name, email, phone number, photo, city, bio, Instagram handle and emergency contact are removed from your member record, your posts and comments become “Former member”, your likes are unpicked, the photos you uploaded are deleted from storage, and your chat user is retired so you can no longer be messaged.

Two things deliberately stay. The club's own history — runs, check-ins, attendance counts and leaderboard totals — stays, no longer carrying your name. And closing your account does not cancel a paid membership or delete the billing record Stripe keeps: cancel your membership first if that is what you want.

Children

Marina Run Club membership is for adults, and the app is not meant for children under 13. We do not knowingly collect anything from a child under 13. If you believe a child has an account, email us and we will remove it.

Your choices

  • Location, camera, photos and calendar are all permissions you can refuse or turn off later in your phone's settings. Refusing one only turns off the feature that uses it.
  • Turn off event reminders in the app's Settings, and push notifications for the app in your phone's settings.
  • Unsubscribe from club email with the link at the bottom of any email.
  • Edit or clear your profile details, including the optional ones, from your profile.
  • Block a member, or report a post, comment or message, from the ⋯ on it.
  • Disconnect Strava from the AI trainer page at any time.
  • Ask us what we hold on you, or ask us to correct it, by email.
  • Close your account from Settings, as above.

Contact

Email info@marinarunclub.com with anything about this policy or about your information, including a request to see it, correct it or delete it. A person at the club reads it.

Last updated October 4, 2026.