Privacy Policy

1. Introduction

Supwell ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and mobile application.

2. Information We Collect

We collect information that you provide directly to us and information automatically collected when you use the Service.

• Account Information: Name, username, email address, password, date of birth, and profile biography.
• Physical & Health Data: Height, weight, shoe size, and running-related data (cadence, foot strike, experience level).
• Workout Data: Activity logs, running routes, times, distances, and heart rate data synced from third-party services (e.g., Apple Health, Garmin, Coros).
• Marketplace Data: Listings, photos of items, and communication with other users regarding transactions.
• Communications: Messages sent to other users and comments on posts.

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Supwell platform.
• Analyze your running data to provide insights and track progress.
• Facilitate the Marketplace features, including displaying your listings to other users.
• Personalize your experience and content.
• Communicate with you about updates, security alerts, and support.
• Monitor and prevent fraud, abuse, and security issues.

4. Sharing Your Information

Public Profile: Your username, profile photo, bio, and shared workout summaries may be visible to other users of the platform based on your privacy settings.

Marketplace Transactions: If you list items or engage with a seller, necessary information to facilitate the transaction (such as username and messaging capability) will be shared with the other party. We are not involved in the actual exchange of goods or payments.

Third-Party Integrations: If you choose to connect your account with third-party services (e.g., Strava, Garmin), you authorize us to exchange data with those services.

Legal Requirements: We may disclose your information if required to do so by law or in the good-faith belief that such action is necessary to comply with legal obligations or protect the safety of users.

5. Data Security

We use administrative, technical, and physical security measures to help protect your personal information. While we strive to protect your personal information, no method of transmission over the Internet is 100% secure, and we cannot guarantee its absolute security.

6. Children's Privacy

Our Service is strictly for users aged 18 and older. We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us so that we may delete it.

7. Your Rights

Depending on your location, you may have rights regarding your personal data, including the right to access, correct, or delete the personal information we hold about you. You can manage most of your data directly within your account settings.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. Specifically:

• Account Information (name, username, email, profile data, physical/health data): retained for the lifetime of your account.
• Workout Data and Activity Logs: retained for the lifetime of your account so you can view your historical progress.
• Marketplace Listings and Messages: retained for the lifetime of your account, or until you delete the listing or conversation.
• Posts, Comments, and Other User-Generated Content: retained for the lifetime of your account, or until you delete the individual content.
• After Account Deletion: personal data is permanently deleted from our active production systems within 30 days. Encrypted backup copies are purged on a rolling basis within 90 days.
• Legal Holds: we may retain a limited subset of information for longer when required to comply with legal obligations, resolve disputes, prevent fraud, or enforce our agreements.

9. Data Deletion

You can request deletion of your account and associated personal data at any time using either of the following methods:

• In-App: open the Supwell app, go to Settings, and select Delete Account. Your account and personal data will be removed according to the retention schedule in Section 8.
• By Email: send a deletion request from your account email address to support@supwell.com with the subject line "Account Deletion Request." We will verify your identity and process the deletion within 30 days.

You may also delete individual content (posts, comments, listings, messages) directly within the app at any time without deleting your full account.

Some information may persist after deletion as described in Section 8 (encrypted backups and legal-hold data), but it will not be used for any purpose other than those required by law.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.