Privacy Policy

1. Who we are

Captr. is operated by ZELX PVT LTD, Malé City, Maldives (“ZELX”, “we”). We are responsible for the personal data described here. Contact: hello@captr.run.

2. What we collect

• Account details: email address, password (stored only as a secure hash), display name, home city and whether you live there.
• Identity: your full legal name, residency (Maldivian or foreigner) and national ID card number or passport number.
• Google sign-in (when available and if you choose it): your Google account ID, email address and the name on your Google profile. We don't get your Google password.
• Run data: the GPX/TCX files you upload, which contain GPS locations with timestamps, and what we calculate from them (distance, moving time, pace, zones passed through).
• Entries and orders: what you bought (entry, T-shirt and size), amounts, payment status and the payment reference used to match your QR or bank transfer. We do not collect or store card numbers.
• Delivery: the address you give us for T-shirts and medals.
• Team and game activity: team membership, zones held, medals claimed.
• Kids' profiles: a nickname and age group entered by the parent (see section 11).
• Technical data: basic server logs (such as IP address, browser and time of request) kept by our hosting provider for security and troubleshooting.

3. Why we use it

• To create and secure your account and keep you logged in.
• To make sure there is one account per person and results are fair (legal name and ID/passport).
• To verify uploaded runs and detect cheating (impossible pace, GPS anomalies, out-of-season dates, duplicates).
• To calculate zones, leaderboards, team and city results, and award medals.
• To confirm payments and activate entries.
• To deliver T-shirts and medals.
• To contact you about your account, entry, orders or important changes.

We use this data because it is needed to provide the service you signed up for, to keep the game fair, and to meet legal or accounting obligations.

4. What is public

Other runners and visitors can see your display name, home city, team, kilometres, zones held, medals and rankings. Your legal name, ID/passport number, email, address and payment details are never shown publicly; only authorised ZELX staff can see them. We don't publish your raw GPS routes.

5. Run and GPS data

Your run files show where and when you ran. We use them to compute distance, time and pace, to work out which map zones your route passed through, and to update zone ownership and leaderboards. Results shown publicly are totals per zone, not your route. Staff may look at a run's details when it is flagged for review. Tip: if you don't want your exact start point (for example your home) in the file, start recording a short way from it.

6. Who we share it with

We do not sell or rent your personal data and don't share it for advertising. We share it only with:

• Service providers who run the platform for us: website hosting (Vercel) and our hosted database (Neon). They process data on our behalf.
• Banks or payment providers, only as needed to confirm your payment (and the bank gateway, once it is live).
• Delivery partners, only the name and address needed to deliver your items.
• Google, if you choose Google sign-in.
• Authorities, if the law requires it.

7. Where it is stored

Your data is stored in a hosted cloud database and served from cloud hosting. These providers may store data on servers outside the Maldives (for example in the United States). Access is limited to authorised ZELX staff.

8. How long we keep it

We keep your account data while your account is open. Run data and results are kept for the season and for season history and records. Payment and order records are kept as long as needed for accounting and legal purposes. When you ask us to delete your account, we delete or anonymise your personal data unless we must keep some of it by law or to resolve a dispute.

9. Cookies

We use one essential cookie to keep you logged in (a signed session cookie), plus short-lived cookies during Google sign-in to protect the login. We don't use advertising or tracking cookies. If you block cookies, you won't be able to log in.

10. Your choices and rights

• Access and correction: you can view and edit your profile and ID details on your Profile page, or ask us for a copy of your data.
• Deletion: email hello@captr.run from your account email to ask us to delete your account and personal data.
• Questions or complaints: contact us and we will respond as soon as we reasonably can.

11. Kids

Children take part only through a profile managed by a parent or guardian. Kids' profiles use a nickname only: no photo, no messaging, and no ID number for the child. The parent can ask us to remove a kid's profile at any time.

12. Security

We use encrypted connections (HTTPS), hashed passwords, signed session cookies, and restrict access to identity and payment data to authorised staff. No system is perfectly secure; if we become aware of a breach affecting you, we will let you know.

13. Changes

This policy is provided as-is and ZELX may update it. We will change the “Last updated” date and tell you about important changes on the site or by email. See also our Terms of Service.

14. Contact

ZELX PVT LTD, Malé City, Maldives
Email: hello@captr.run
Phone: +960 779 5279