← BACK TO NOV27 PRIVACY NOTICE • DSGVO / GDPR

Privacy Policy

Last Updated: August 2026 • Compliant with EU GDPR (DSGVO) & California CCPA

Zero Bullshit, Zero Tracking: We do not sell, rent, monetize, or broker your personal data. We do not use third-party advertising SDKs, cross-site trackers, or behavioral profiling tools.

1. NOV27 RUN CLUB (MOBILE APP PRIVACY)

📍 A. Precise GPS & Location Data (Local-First)

When you record a run, the app accesses your device's precise location (GPS) in foreground and background exclusively to calculate your route distance, pace, elevation, and speed splits.

• Location data is stored locally in an encrypted SQLite database on your phone. It is never transmitted to any third-party advertising network.

❤️ B. Google Health Connect, Apple HealthKit & Fitbit Data

NOV27 Run Club can optionally sync with Google Health Connect (Android) and Apple HealthKit (iOS) to import workout telemetry from hardware devices such as Fitbit trackers and Pixel Watches:

  • Heart Rate (BPM) & Cadence during active workouts
  • Active calorie expenditure
  • Workout session write-back

Health data is processed on-device. NOV27 never shares Health Connect or HealthKit data with data brokers, ad networks, or machine learning datasets.

🗺️ C. Self-Hosted Cloudflare Vector Map Tiles

To render background map tiles, the app requests vector map slices anonymously from our self-hosted Cloudflare R2 CDN over encrypted HTTPS.

Requests do not include user IDs, advertising identifiers, or cookies. Cloudflare processes IP addresses strictly to securely deliver the map tiles and drops logs per their privacy policy.

2. NOV27.PARTY WEBSITE PRIVACY

Our website (nov27.party) is statically hosted on Cloudflare Pages.

  • No Cookies: We do not set marketing, tracking, or advertising cookies on your browser.
  • No External Trackers: We do not run Google Analytics, Meta Pixel, or telemetry trackers.
  • Server Logs: Cloudflare edge nodes process ephemeral server request headers (IP address, user agent) strictly for DDoS prevention and DNS routing.

3. YOUR RIGHTS UNDER GDPR (DSGVO)

Under the EU General Data Protection Regulation (Articles 15–21 GDPR), you have the right to request access to, rectification of, or complete deletion of any personal data.

Because NOV27 Run Club is local-first, deleting your data is as simple as clicking "Delete All Workouts" inside the app or uninstalling the application.

For any privacy inquiries, reach out directly at: privacy@nov27.party