Privacy Policy

Open Runs USA ("Open Runs", "we", "our", or "us") operates a basketball pickup game coordination platform that allows users to create, discover, and participate in basketball games.

Information We Collect

We collect the following information when you use Open Runs USA:

• Account information: name or username, email address, phone number, date of birth (used for age verification only — we display only your age, never your date of birth), and an optional profile photo.
• Profile details: skill level, grade level (if you are under 18), city or area, and any clubs you create or join.
• Game activity: the runs you create, join, leave, or comment on; players you follow, block, or invite; your roster confirmations and waitlist actions.
• Notification preferences: your SMS opt-in status, email preferences, and any notification you have marked as read.
• Device and technical information: browser type, operating system, IP address (for security and abuse prevention), and aggregated session metrics.
• Communications: messages you send to support via email or in-app chat.

How We Use Your Information

We use information to:

• Create and manage accounts
• Allow users to create and join games
• Send notifications and reminders
• Improve safety and performance of the platform

SMS Messaging

By providing your mobile phone number and opting in, you consent to receive SMS messages from Open Runs USA at the phone number provided related to game confirmations, game invitations, game reminders, and account notifications.

Message frequency may vary. Message and data rates may apply.

You can opt out at any time by replying STOP. For help, reply HELP or contact openrunshelp@gmail.com.

Open Runs USA does not sell, rent, or share your mobile phone number or SMS consent information with third parties for marketing purposes.

Third-Party Service Providers

We use a small set of trusted third-party providers to operate Open Runs USA. These providers process information only on our behalf and only to the extent necessary to deliver the service:

• MongoDB Atlas (United States) — primary database hosting. Stores all account, run, club, and notification data.
• Twilio (United States) — SMS delivery and phone-number verification. Receives your phone number and the contents of SMS messages we send to you.
• Resend (United States) — transactional email delivery. Receives your email address and the contents of emails we send to you.
• Google Maps Places API (Google LLC, United States) — location autocomplete for clubs and runs. Receives the location text you type into our location search.
• Crisp Chat (Crisp IM, France) — in-app and web-based customer support widget. Receives messages you send to support, your username, and your session identifier.

We do not sell or rent personal information to third parties for marketing purposes. We do not use third-party advertising networks or tracking pixels.

Data Security

We protect your information using industry-standard practices including:

• Encryption in transit: All data exchanged between the app and our servers is encrypted using TLS 1.2 or higher.
• Encryption at rest: Stored data is encrypted by our hosting provider (MongoDB Atlas).
• Authentication: Passwords are stored as one-way bcrypt hashes; we never see your raw password. Phone-number login uses time-limited, single-use one-time codes (OTP).
• Access controls: Internal access to production data is restricted to the smallest set of administrators required to operate the service.

No system is 100% secure. If we discover a breach affecting your information, we will notify you as soon as reasonably practical and in accordance with applicable law.

Data Retention

We retain your personal information for as long as your account is active. When you delete your account, we permanently remove your profile, contact information, follows, comments, hosted run records, in-app messages, and account preferences within 30 days. Aggregated, non-identifying audit logs (e.g., counts of runs created, anonymous platform usage statistics) may be retained indefinitely for service-improvement purposes.

Communication records required to demonstrate SMS opt-in consent (per CTIA / TCPA compliance) may be retained for up to 4 years after account deletion, in a form that does not associate the record with an active user.

Your Rights and Account Deletion

You can delete your account at any time directly inside the app:
Profile → Account Settings → Delete Account.

Account deletion is permanent and immediate. It cannot be undone. Deletion removes your profile, follows, comments, notifications, and hosted runs. Roster entries on other users' games are removed, but the games themselves remain intact for the other participants.

You may also request data deletion or correction by contacting us at openrunshelp@gmail.com. We respond within 30 days.

California, Colorado, Connecticut, Utah, and Virginia residents have additional rights under their respective state privacy laws (CCPA/CPRA, CPA, CTDPA, UCPA, VCDPA), including the right to know what personal information we hold and the right to request deletion. To exercise these rights, contact us at the address above.

Children's Privacy (Under 13)

Open Runs USA is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. Our signup flow requires a date of birth, and accounts attempting to register with an age under 13 are blocked.

If you believe we have inadvertently collected information from a child under 13, please contact us at openrunshelp@gmail.com and we will delete the account and all associated information promptly.

Users Aged 13–17 (Minors)

Users aged 13 to 17 may use Open Runs USA with parental awareness. We apply additional safety protections to minor accounts, including:

• Minor users cannot see or join runs designated as adult-only (ages 18+ or any range that excludes their age).
• The rosters and comments on adult-only runs are hidden from minor users.
• Recommendation engines do not cross-suggest minors and adults to one another.

A parent or legal guardian may request access to a minor's account information or request deletion of a minor's account by contacting openrunshelp@gmail.com.

Contact

openrunshelp@gmail.com