Legal
Privacy Policy
Drift helps you find group runs and rides and meet people to do them with. This policy explains what we collect, why, who can see it, and how to delete it. The short version: we only collect what the app needs to work, we don't sell your data, and we don't use it for advertising or tracking.
Who we are
"Drift", "we" and "us" mean the team behind the Drift app and drift.fitness. You can reach us about anything in this policy at support@drift.fitness.
What we collect
Information you give us
- Account details: your email address and password. Passwords are handled by our authentication provider and stored only in hashed form; we never see them.
- Profile: your name, username, and anything you choose to add, such as a bio, a profile photo, your town or city, a home area (a point on the map you can set to see drifts near home), your sport (running, cycling or both) and fitness level, and whether your account is private.
- Drifts you create: the title, description, activity, start location and its map coordinates, date and time, distance, pace, difficulty, participant limit, who can see it and, if you add one, a route (including routes imported from GPX files).
- Activity in the app: drifts you join or request to join, check-ins, likes, comments, people you follow and who follow you, clubs you create or join, and club drifts you post.
- Safety tools: reports you send us (including any details you write) and people you block.
- Messages to us: anything you send to support@drift.fitness.
Information from your device
- Location (only with your permission, only while the app is open): used to show drifts near you and to help set a meeting point. Your live location is sent with your request so we can find nearby drifts. We do not store it or keep a history of where you've been. Drift never uses location in the background.
- Photos (only if you choose one): when you pick a profile photo, only that photo is uploaded. We don't access the rest of your library.
- Push notification token: a device identifier from Apple and Expo that lets us send you notifications. It's removed when you sign out.
- Crash reports: if the app crashes, technical details about the error and your account ID may be sent to our error-reporting service so we can fix it. They don't include your name, email or location.
We don't use advertising or analytics trackers, and we don't track you across other apps or websites.
How we use it
- To run your account and the app: showing drifts, letting people join them, check-ins, comments, follows, clubs and notifications.
- To send account emails, such as confirming your email address or resetting your password.
- To send notifications you'd expect: someone joined or commented on your drift, a join request was approved, a drift you're going to was changed or cancelled, or starts soon.
- To keep people safe: reviewing reports, removing content that breaks our Terms, and blocking or removing accounts.
- To fix bugs and keep the service secure, for example by limiting repeated requests.
Who can see what
| Information | Who can see it |
|---|---|
| Name, username, photo, bio, town or city, and your drift and distance totals | Signed-in Drift users, except people you've blocked or who have blocked you. |
| Your drifts, followers and following lists | Public drifts: signed-in users, including in Discover. Followers-only drifts: your approved followers and people taking part. If your account is private, only approved followers can see the drifts and lists on your profile (public drifts you post still appear in Discover). |
| Comments | Anyone who can see the drift they're on. |
| Club membership | Members of a public club are visible to signed-in users. Members of a private club are visible only to other members. |
| Email address, push token, home area, sport and fitness level, reports and blocks | Never shown to other users. |
A drift's start location is shown to anyone who can see that drift, because it's where everyone meets. Don't use your home address as a start point unless you're happy to share it.
Service providers
We use a small number of providers to run Drift. They process data only on our behalf and only to provide their service:
- Supabase: database, sign-in and photo storage.
- Railway: hosting for our servers.
- Expo and Apple: delivering push notifications.
- Google: place search when you type a location. Google receives the text you type.
- Resend: sending account emails.
- Sentry: crash and error reports.
These providers may store data in the United States, the European Union or other countries. Where the law requires it, we rely on appropriate safeguards for those transfers. We don't sell or rent your personal information, and we only share it beyond these providers if the law requires us to, or to protect someone's safety.
How long we keep it
We keep your information for as long as you have an account. When you delete your account, we delete your profile, photos, drifts, comments, likes, follows, club memberships, notifications and the reports you've made from our systems straight away. Our hosting providers may keep short-lived technical logs (which don't contain the contents of your requests) for a limited time.
Your choices and rights
- Edit your profile any time in the app.
- Make your account private in Settings.
- Turn off location or notifications in your phone's settings. The app still works, with fewer features.
- Delete your account in the app under Settings → Delete Account. This is permanent.
- Ask us for a copy of your information, or ask us to correct or delete it, by emailing support@drift.fitness.
Depending on where you live, you may have further rights, such as objecting to certain processing or complaining to your local data protection authority. We'll respond to requests within the time the law requires.
Children
Drift isn't for children. You must be at least 13 years old to use it, or older if the law where you live requires it (for example, 16 in some countries). If we learn that someone under that age has an account, we'll delete it.
Security
We use encrypted connections, store passwords only in hashed form, limit who and what can access your data, and only let the app read and write data through our own servers. No system is perfectly secure, so please use a strong, unique password.
Changes to this policy
If we make important changes, we'll update the date above and let you know in the app before they take effect.
Contact
Questions, requests or concerns: support@drift.fitness.