Privacy Policy

Last updated: 24 May 2026

Faces Events (Pty) Ltd ("Faces", "we", "us", or "our") operates the Faces Events mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the App, in accordance with the Protection of Personal Information Act, 2013 (POPIA) of South Africa and applicable international privacy laws.

By downloading or using the App, you consent to the collection and use of your information as described in this policy.

1. Information We Collect

1.1 Information you provide

• Account information: Full name, email address, South African ID number or passport number, and password when you register or sign in.
• Event registration data: Your event entries, bib numbers, distances, and registration status, retrieved from the Faces/Salesforce system.
• Contact form submissions: Any information you submit through the App's support or contact features.

1.2 Information collected automatically

• Location data: When you enable Live Tracking during an event, the App collects your precise GPS location (latitude, longitude, altitude, speed, and heading) in the background — including when the App is minimised or your screen is off. This data is collected continuously during an active tracking session and is transmitted to our servers in real time.
• Device information: Device type, operating system version, and a unique device identifier for crash reporting and diagnostics.
• Motion and activity data: Activity type detection (cycling, running, stationary) to optimise GPS accuracy during events.
• App usage data: Crash logs, performance metrics, and error reports collected via Sentry (our error-monitoring service).

1.3 Third-party services

• Strava: If you choose to connect your Strava account, we access your Strava activity data (activity:read scope only). We receive your Strava athlete profile and activity summaries. You can disconnect Strava at any time from the App.

2. How We Use Your Information

We use your personal information to:

• Authenticate your identity and manage your account.
• Display your event registrations, results, and participation history.
• Provide real-time Live Tracking during events, allowing spectators (friends, family, and event organisers) to follow your position on a map.
• Show your position on the event route map during active tracking.
• Display event leaderboards and historical results.
• Integrate with Strava to show your linked activity data.
• Diagnose technical issues and improve the App via crash and error reporting.
• Communicate with you regarding your event participation and support requests.

3. Live Tracking and Location Data

Live Tracking is an opt-in feature. When you enable it:

• Your GPS position is shared in real time with anyone who has access to the spectator view URL for your event.
• Tracking continues in the background when the App is minimised or your screen is locked — this is essential to provide uninterrupted spectator updates during events.
• Location data is associated with your name, bib number, and event so that spectators can identify you.
• You can stop Live Tracking at any time from the App. When stopped, no further location data is collected or shared.
• Location data from tracking sessions is retained on our servers for the duration of the event and a reasonable period thereafter for results and operational purposes.

4. Data Sharing and Disclosure

We do not sell your personal information.

We may share your information with:

• Event organisers: Your registration details, tracking data, and results are shared with the organisers of events you participate in.
• Spectators: When Live Tracking is active, your name, position, and event details are publicly accessible via the spectator view.
• Service providers: We use the following third-party services to operate the App:
  • Sentry (Functional Software, Inc.) — crash reporting and error monitoring. Sentry receives device information, error logs, and limited app state data. Sentry's privacy policy
  • Strava (Strava, Inc.) — activity data integration, only when you connect your account. Strava's privacy policy
  • Transistorsoft — background location collection technology. Location data is processed on-device and transmitted directly to Faces servers; Transistorsoft does not receive your data.
  • Expo / EAS (Expo, Inc.) — app build and update delivery infrastructure.
• Legal requirements: We may disclose your information if required by law, court order, or regulatory authority.

5. Data Storage and Security

• Your data is stored on servers hosted by Heroku (Salesforce) in the United States and is protected using industry-standard encryption (HTTPS/TLS) in transit.
• Authentication tokens are stored securely on your device.
• We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, or misuse.

6. Your Rights Under POPIA

As a data subject in South Africa, you have the right to:

• Access your personal information held by us.
• Correct any inaccurate or incomplete personal information.
• Delete your personal information (subject to legal and contractual obligations).
• Object to the processing of your personal information.
• Withdraw consent for optional features such as Live Tracking and Strava integration at any time.

To exercise any of these rights, please contact us at the details below.

7. Data Retention

• Account data is retained for as long as your account is active.
• Event and results data is retained indefinitely as part of the historical event record.
• Location tracking data is retained for the duration of the event season and may be aggregated or anonymised thereafter.
• Crash and diagnostic data is retained by Sentry for 90 days.

8. Children's Privacy

The App is not intended for children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top. We encourage you to review this page periodically. Continued use of the App after changes constitutes acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights under POPIA, please contact:

Faces Events (Pty) Ltd
Email: info@faces.africa
Website: www.faces-events.com

Information Regulator (South Africa)
Website: inforegulator.org.za