What we keep, and why.
Last updated October 24, 2026 · Blueprint Consulting AI LLC
4th Place Run is made by Blueprint Consulting AI LLC ("we"). This policy covers the 4th Place Run iPhone and Apple Watch apps and the website 4thplacerunclub.com. The short version: your training lives on your phone and in your own iCloud. The run club is optional, and joining it is the only time anything about you reaches our server. We don't sell data, we don't run ads, and we don't use advertising or tracking SDKs.
1. On your phone, and in your iCloud
Your race plan, planned workouts, settings, badges, effort ratings, and the runs the app reads from Apple Health are stored on your iPhone. The plan and planned workouts also sync through your own iCloud account (Apple's private CloudKit database) so a second iPhone shows the same plan. We can't read your iCloud data. Runs never go to iCloud, because Apple's Health rules don't allow it; a new phone re-imports them from Health.
Apple Health
- On the iPhone the app reads running workouts (date, duration, distance, splits, and the app or device that recorded them) and never writes to Health.
- The Apple Watch app writes the workouts you record on the Watch (route-free distance, duration, heart rate, and energy) to Health, like Apple's Workout app does.
- Health data is used only to match runs to your plan, show your progress, award badges, and, if you've joined the club and left "Share my runs" on, post the runs described in section 2. It is never used for advertising, never sold, and never shared with data brokers, as Apple's Health guidelines require.
- You control access in the Health app under Sharing → Apps. Turning it off stops the import; the app keeps working with hand-logged runs.
2. The run club (optional)
Joining 4th Place Run Club creates an account on our server, hosted by Supabase in the United States. We store:
| What | Where it comes from | Why |
|---|---|---|
| A random account id, and the Apple user identifier from Sign in with Apple | Sign in with Apple | To sign you in. We never see your Apple password. |
| The name and color you pick, and an optional city | You | Shown on the board, the feed, and meetups. |
| Your email address | Apple (a real address or Apple's private relay), or typed by you | Club email: welcome, Sunday wrap, meetup reminders and changes, race-week and race-day notes, a quiet check-in after ten days off. Each kind has its own switch in Settings, and every email has a one-click unsubscribe. |
| The runs you share: end time, distance, duration, and the source name (for example "Apple Watch"). Never GPS routes, never heart rate. | Apple Health, via the app | The weekly board, the feed, badges, and meetup attendance. Hand-logged runs never leave the phone. |
| High fives, meetup RSVPs, who invited you, your role (member, host, admin) | You, the app | The club features themselves. |
| A push-notification token and your notification switches | iOS | To send the notifications you turned on. The token identifies the device to Apple, not to anyone else. |
| When you last opened the club | The app | "Runners out today", and to tidy accounts that were never finished. |
Who can see what. Members of your club see your name, color, city, your shared runs, your high fives, and your meetup answers. Nobody outside the club can. Your email address is never shown to other members. If you turn "Share my runs" off, your runs are removed from the board and nothing new is posted.
Deleting the club account. Settings → Run Club → Delete account removes your membership, shared runs, high fives, RSVPs, board history, and email address from our server, and sends one goodbye email to confirm. Nothing on your phone is touched. We keep a short technical log of sent emails (kind, time, and the sending service's message id) for up to a year to answer delivery problems.
3. Anonymous usage counts
To learn where people get stuck, the app sends daily counts of events such as "onboarding step 3 reached", "plan built", or "paywall shown", together with the app version and the day. No account id, device id, name, or run data is attached, and we don't store IP addresses with them. You can turn this off in Settings → Data → "Share usage counts". Counts older than 400 days are deleted.
4. Purchases
Race Pass and Coach are sold through Apple's App Store. Apple handles payment and keeps your payment details; we receive only an anonymous receipt that says what you bought. Manage or cancel a subscription in Settings → Apple Account → Subscriptions.
5. Race search
When you search for a race, the text you type (name, city, or ZIP) goes through our server to RunSignup, which runs the race catalog. Links to register include an affiliate token so RunSignup knows the registration came from the app; RunSignup may pay us a share of its processing fee. Registering happens on RunSignup's site under its own privacy policy. We don't see what you register for.
6. Crash and performance reports
iOS can send Apple's MetricKit diagnostics (crash logs, launch times, memory) to the app. These contain no personal data and no third-party SDK is involved. Whether Apple shares diagnostics with developers is your choice in iPhone Settings → Privacy & Security → Analytics.
7. The website
4thplacerunclub.com is hosted by Vercel and sets no tracking cookies. If you join the waitlist we keep the email you enter until the first group run is announced and you've been told, or until you ask us to remove it. Invite links (4thplacerunclub.com/join) carry a club code and the id of the member who shared the link, nothing else.
8. Who processes data for us
- Apple: Sign in with Apple, iCloud sync, push notifications, purchases, App Store.
- Supabase (United States): the club database and the small server functions that send notifications and email.
- Resend: delivers club email from club@4thplacerunclub.com.
- RunSignup: race search and registration.
- Vercel: hosts this website.
Each processes data only to provide its service to us. We don't sell personal data and we don't share it for advertising.
9. Children
The app isn't directed at children under 13, and the club requires an Apple Account, which Apple issues to people 13 and older. If you believe a child under 13 has joined the club, email us and we'll remove the account.
10. Your choices and rights
- Leave the club or delete the club account at any time in Settings. Deleting the app removes everything on the phone; iCloud data is removed from Settings → Apple Account → iCloud → Manage Storage.
- Turn individual notifications and emails off in Settings → Run Club, or use the unsubscribe link in any email.
- Ask us for a copy of the club data we hold about you, or to correct or delete it, at club@4thplacerunclub.com. We answer within 30 days. Residents of California, the EU, the UK, and other places with privacy laws have these rights by statute; we extend them to everyone.
11. Security
Club data travels over TLS and is stored with row-level access rules, so a member can read only what the club is meant to show. Server functions require either your signed-in session or a secret held only on the server. No system is perfectly secure; if we learn of a breach affecting you, we'll tell you by email.
12. Changes
When this policy changes in a way that matters, we'll update the date at the top and tell club members by email or in the app before it takes effect.
Blueprint Consulting AI LLC · club@4thplacerunclub.com