← BACK TO NOV27 PRIVACY NOTICE • DSGVO / GDPR

Privacy Policy

Last Updated: August 2026 • Compliant with EU GDPR (DSGVO) & California CCPA

Zero Bullshit, Zero Tracking: We do not sell, rent, monetize, or broker your personal data. We do not use third-party advertising SDKs, cross-site trackers, or behavioral profiling tools.

1. NOV27 RUN CLUB (MOBILE APP PRIVACY)

📍 A. Precise GPS & Location Data (Local-First)

When you record a run, the app accesses your device's precise location (GPS) in foreground and background exclusively to calculate your route distance, pace, elevation, and speed splits.

• Location and workout data are stored strictly locally in high-speed Hive NoSQL binary storage on your phone. It is never transmitted to any third-party advertising network or cloud tracking server.

❤️ B. Universal Bluetooth Smart HR & Google Health Connect

NOV27 Run Club connects via standard open Bluetooth LE HR protocol (0x180D) to broadcast heart rate monitors (Polar, Garmin, Wahoo, Scosche, Coros, smartwatches) and exports completed workouts to Android Health Connect:

  • Heart Rate (BPM) & Cadence during active workouts
  • Active calorie expenditure
  • Workout session write-back

Health data is processed on-device. NOV27 never shares Health Connect or HealthKit data with data brokers, ad networks, or machine learning datasets.

🗺️ C. Self-Hosted Cloudflare Vector Map Tiles

To render background map tiles, the app requests vector map slices anonymously from our self-hosted Cloudflare R2 CDN over encrypted HTTPS.

Requests do not include user IDs, advertising identifiers, or cookies. Cloudflare processes IP addresses strictly to securely deliver the map tiles and drops logs per their privacy policy.

2. NOV27.PARTY WEBSITE PRIVACY

Our website (nov27.party) is statically hosted on Cloudflare Pages.

  • No Cookies: We do not set marketing, tracking, or advertising cookies on your browser.
  • No External Trackers: We do not run Google Analytics, Meta Pixel, or telemetry trackers.
  • Server Logs: Cloudflare edge nodes process ephemeral server request headers (IP address, user agent) strictly for DDoS prevention and DNS routing.

3. YOUR RIGHTS UNDER GDPR (DSGVO)

Under the EU General Data Protection Regulation (Articles 15–21 GDPR), you have the right to request access to, rectification of, or complete deletion of any personal data.

Because NOV27 Run Club is local-first, deleting your data is as simple as clicking "Delete All Workouts" inside the app or uninstalling the application.

For any privacy inquiries, reach out directly at: [email protected]