Privacy notice

Draft template. To be reviewed before MMF Hikers opens to members.

Who we are

MMF Hikers is a community hiking group run by Meet My Fitness (MMF) in Aylesbury, Buckinghamshire. The organiser is the data controller for this app. Contact: [organiser contact email].

What we collect

Adults: name, email address, optional phone number and optional profile photo.
Children: a display name and, only if you choose, a birth year or age band. We do not ask for a child's date of birth, email, phone or photo.
Hiking records: registrations, check-ins, attendance, completion requests and verified results.
Family links and the permissions you choose to share with other adults.
Audit records of important changes, so results can be checked and corrected fairly.

Why we use it

To organise hikes, know who is coming, record who took part, keep each person's hiking history and award achievements. Our lawful basis is legitimate interests in running the community group, and your consent where you choose to share family information. [Organiser to confirm.]

Who can see it

Your records are private to you.
Other adults in your family see only what you allow (registering you, viewing your history, managing children).
Children's profiles are visible only to their guardians.
Hike leaders see the participants of the hikes they lead, to run the register.
The organiser (Super Admin) can see all records to run the group.

We don't publish participant lists, children's details or family attendance. There is no public leaderboard for children. We don't track anyone's location, and check-in records are not an emergency location system.

Where it is stored

Data is stored with Supabase (database and sign-in) and the app is hosted by Vercel. Sign-in emails are sent through Resend. [Organiser to confirm data regions and processor terms.]

How long we keep it

Hiking history is kept while you are a member so your achievements stay accurate. If you ask us to delete your account, we remove your personal details and the profiles of children only you manage. [Organiser to confirm retention periods.]

Your rights

You can download your data and request deletion from Account. You can also ask the organiser to correct, restrict or explain how your data is used, and you can complain to the Information Commissioner's Office (ico.org.uk).

Last updated: [date]