Zamster is operated by Luc Van Remoortel, an individual based in Belgium. This policy explains what personal data we collect, why, and what your rights are under the General Data Protection Regulation (GDPR).
1. Who We Are
Zamster ("the app", "we", "us") is a mobile application that helps runners and cyclists find training partners nearby. The data controller is:
Luc Van Remoortel
Belgium
luc.vanremoortel@gmail.com
2. Data We Collect
We collect the following personal data when you use Zamster:
- Account information: your email address, and optionally your Apple or Google account identifier used to sign in.
- Profile information: first name, last name, age, gender, profile photo, country, and city.
- Training data: sport (running, cycling, or both), pace, weekly distance, preferred training times, and cycling gear details (brand, type, groupset).
- Location data: your GPS coordinates, collected while the app is in use, to find training partners near you. Your precise location is never shared with other users — only an approximate distance is shown.
- Session data: GPS routes, session duration, and distance recorded during live training sessions.
- Ratings and reviews: anonymous ratings and optional written comments submitted by or about you after a session.
- Emergency contacts: names and phone numbers of people to be notified in case of an emergency, stored only on your device and in your secure account.
- Strava data (optional): if you connect your Strava account, we access your Strava profile to display a verification badge. We do not store your Strava activity data.
- Push notification token: to send you alerts about nearby training partners and session invites.
- Technical data: crash reports and app diagnostics (anonymised where possible) to improve stability.
3. Why We Process Your Data
- To provide the service: matching you with nearby training partners, enabling live sessions, and displaying your profile to potential buddies (legal basis: contract performance).
- To build trust: computing your Trust Score from mutual ratings so the community stays safe (legal basis: legitimate interest).
- To keep you safe: sharing a guardian link with your emergency contacts during a live session, at your explicit request (legal basis: consent).
- To send notifications: notifying you of nearby buddies, session invites, and messages (legal basis: consent, which you can withdraw at any time in your device settings).
- To improve the app: using anonymised crash reports to fix bugs and improve stability (legal basis: legitimate interest).
4. Data Sharing
We do not sell your personal data. We share data only with the following processors, under data processing agreements:
- Supabase Inc. — our backend database and authentication provider. Data is stored in EU-based servers.
- Sentry — crash reporting and diagnostics. Only technical data and anonymised user identifiers are shared.
- Resend — used to send one-time sign-in codes to your email address.
- Apple / Google — if you choose to sign in with Apple or Google, their authentication systems are used. We receive only a unique identifier and, optionally, your name and email.
- Strava — if you choose to connect your Strava account. Subject to Strava's own privacy policy.
Your profile information (name, sport, pace, distance) is visible to other Zamster users in your area. Your precise GPS coordinates are never shared — only an approximate distance is shown.
5. Data Retention
We keep your data for as long as your account is active. If you delete your account, all personal data is permanently deleted within 30 days, except where we are legally required to retain it (e.g. for tax or fraud prevention purposes).
Session GPS routes are retained for 12 months and then automatically deleted.
6. Your Rights (GDPR)
As a resident of the European Economic Area, you have the following rights:
- Access: request a copy of the personal data we hold about you.
- Rectification: correct inaccurate data directly in the app under Settings → Edit Profile, or by contacting us.
- Erasure: delete your account and all associated data from Settings → Delete Account.
- Portability: request your data in a machine-readable format.
- Object: object to processing based on legitimate interest.
- Withdraw consent: withdraw consent for notifications at any time in your device settings.
- Lodge a complaint: you have the right to lodge a complaint with the Belgian Data Protection Authority (GBA/APD) at dataprotectionauthority.be.
To exercise any of these rights, contact us at luc.vanremoortel@gmail.com. We will respond within 30 days.
7. Cookies and Tracking
The Zamster mobile app does not use cookies. Crash reporting via Sentry may use a session identifier to group related error events; this is not used for advertising or tracking across other services.
8. Children
Zamster is not intended for users under the age of 16. We do not knowingly collect personal data from children. If you believe a child has created an account, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via a notification in the app. The "last updated" date at the top of this page will always reflect the most recent version.
10. Contact
For any questions about this privacy policy or your personal data, contact:
Luc Van Remoortel
luc.vanremoortel@gmail.com