Privacy Policy

1. About This Policy

Strive ("we", "us", or "our") is operated by Strive Endurance Technologies, accessible at strive-endurance.com and through our mobile application. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

By creating an account or using Strive, you consent to the practices described in this Policy.

2. Data We Collect

Account & Identity

• ●Full name and email address
• ●Password (stored as a hashed credential — we never store your plain-text password)
• ●Profile photo (optional)
• ●Date of birth and gender
• ●City and state of residence

Athletic Profile

• ●Sport interests (running, cycling, swimming, triathlon, ultra, fitness races)
• ●Fitness level, years in sport, and weekly training hours
• ●Race goals, motivations, and personal reflections (optional)
• ●Who you heard about Strive from

Strive is currently an event discovery platform. We do not process event registrations or collect medical information. We plan to introduce event registration capabilities in the near future.

Technical Data

• ●Firebase authentication token (UID)
• ●Device type and operating system (for app diagnostics)
• ●App usage patterns (anonymous, for improving the service)

3. How We Use Your Data

• ●To create and manage your Strive account
• ●To match you with relevant endurance events based on your sport interests and location
• ●To display your profile in the Strive community (coaches, forums)
• ●To improve our services and personalise your experience
• ●To comply with applicable laws and respond to lawful requests

Currently, Strive does not process event registrations or share your data with event organisers. When registration features are introduced in the future, we will update this Policy and seek your consent before sharing any data.

4. Data Sharing

We do not sell your personal data. We share it only in these limited circumstances:

Event Organisers

Currently, Strive does not share your data with event organisers as we are an event discovery platform only. When event registration features are introduced in the future, any data sharing with organisers will be done at your direction and with your explicit consent at the time of registration.

Service Providers

• ●Google Firebase (Firebase Authentication, Cloud Firestore, Cloud Functions) — our primary infrastructure provider. Data is stored in the asia-south1 (Mumbai) region.
• ●Vercel — hosts our web application. No personal data is stored by Vercel.

Legal Obligations

We may disclose your data if required by law, court order, or a competent government authority.

5. Data Storage & Security

Your data is stored in Google Cloud's asia-south1 region (Mumbai, India). We implement reasonable technical and organisational security measures including encrypted connections (HTTPS/TLS), Firebase security rules restricting data access to authorised users only, and hashed password storage.

No method of electronic storage or transmission is 100% secure. While we take your data security seriously, we cannot guarantee absolute security.

6. Data Retention

We retain your personal data for as long as your account is active. If you request account deletion, we will delete or anonymise your personal data within 30 days, except where we are required to retain it by law.

7. Your Rights

Under the DPDP Act, 2023 and applicable Indian law, you have the right to:

• ●Access — request a copy of the personal data we hold about you
• ●Correction — request correction of inaccurate or incomplete data
• ●Erasure — request deletion of your personal data (subject to legal obligations)
• ●Withdrawal of Consent — withdraw consent at any time; this will not affect processing done before withdrawal
• ●Grievance Redressal — lodge a complaint with our Grievance Officer (see below)
• ●Nominate — nominate another person to exercise your rights on your behalf

To exercise any of these rights, email us at privacy@strive-endurance.com or the Grievance Officer address below.

8. Grievance Officer

In accordance with the Information Technology Act, 2000 and IT Rules, 2011, a Grievance Officer is appointed to address complaints and concerns related to the processing of personal data:

9. Children's Privacy

Strive is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact our Grievance Officer and we will delete it promptly.

Users under 18 should have a parent or guardian review this Privacy Policy before using Strive.

10. Cookies & Tracking

Our web application uses essential cookies for authentication and session management. We do not use advertising cookies or sell your browsing data to third parties. Firebase may collect anonymous analytics data to help us improve the service.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Policy in the app and updating the "Last updated" date above. Continued use of Strive after changes constitutes acceptance of the updated Policy.

12. Contact Us

For any questions about this Privacy Policy or how we handle your data: