Privacy policy

Who we are

Allez Club is a women-first, sport-first app: you swipe athlete cards, build circles and meet up to train. Non-binary people are welcome too. Allez Club, the app and allezclub.com, is operated by Ubunzo Ltd., 246 Stewart Green SW, Unit #6090, Calgary, AB T3H 3C8, Canada (“we”, “us”).

We’re responsible for the personal information we handle. We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and the Personal Information Protection Acts of Alberta and British Columbia (PIPA). We’re launching in Calgary, Canmore and Banff, Alberta. If you live outside Canada, this same policy applies to you.

Our Privacy Officer is accountable for how we handle your information. You can reach her at support@allezclub.com.

The short version

• Your exact location never leaves your phone. We store a point snapped to about 1 km, and other members only see a distance range like “2–5 km”.
• Others see your face photo first. Your other photos show only once you’re connected: matched, confirmed for the same session, or in the same circle of up to 8 people. Bigger circles have their own rule, explained in Who can see what.
• Everyone you can match with is verified. Matching, circles and sessions all need an ID check. We keep the result, never your ID.
• Training data is your choice. We only get the summary you approve. Never routes, GPS traces or heart rate.
• We never store your ID or face scans. Our verification provider checks your ID; we keep only the result, the date and a reference number.
• We don’t sell your personal information, and the app has no advertising trackers.
• You can delete your account in the app. Your card disappears straight away, and the rest is removed after 30 days, apart from limited safety records.

What we collect

Account and sign-in

You sign in with Apple, Google or a one-time code sent to your email. We receive your email address (or Apple’s private relay address) and an account identifier from Apple or Google. We don’t copy your name or photo from them. There are no passwords.

Your athlete card

• Shown on your card: first name, age, pronouns (optional, if you choose Non-binary), your area (for example “Canmore, AB”), sports (up to 5) with your level and optional pace range, usual training days and times, sessions per week, what you’re looking for (training partner, circle or both), two prompt answers and an optional upcoming race or trip.
• Private: your birth date (we show your age, never the date) and whether you’re a woman or non-binary. We use these only to keep Allez Club 18+ and women-first. They’re never shown to other members.
• Settings: your search radius, filters (Premium), notification choices, quiet hours, time zone, language and appearance.

Photos

You add 2 to 6 photos and place a round face photo on one of them. Before you’re connected with someone, they see only your face photo; your other photos show once you’re connected (see Who can see what). Your phone resizes photos before upload, and our server removes hidden location and device data (EXIF/XMP) from every file.

Card photos are stored at web addresses on photos.allezclub.com that are long, random and not listed anywhere, so they can’t be browsed or guessed. But anyone who has an exact address can open that image. When you delete a photo we delete the file, though copies can stay in internet caches for a short time afterwards.

Location

• With your permission (while you use the app), your phone snaps your position to the centre of a square about 1 km wide before anything is sent. Your exact GPS position never leaves your phone.
• We store only that snapped point, update it at most every 10 minutes, and use it to find people within your radius.
• Other members never get coordinates – only a distance range: < 2 km, 2–5 km, 5–10 km, 10–25 km, 25–50 km or 50+ km. You can hide even that in Settings.
• Your area name (for example “Calgary, AB”) comes from your phone or you type it in. If you don’t allow location, you can pick your area by hand.
• When you ask to delete your account, we delete your snapped location straight away.

Training data (Apple Health and Health Connect)

Connecting your training is optional. If you do, the app reads only workout type, date, duration and distance from Apple Health (iPhone) or Health Connect (Android). It never reads routes, GPS traces, heart rate or location.

Your phone works out a summary – sessions per week, workouts in the last 30 days, typical distance and pace range per sport, personal bests and 12 weeks of weekly totals. You see a preview and choose what to add to your card; you can hide any stat. Only the summary you approve is sent to us. Skip, and nothing is sent. Disconnect at any time and we delete the summary right away, together with the “Verified active” badge.

We use training data only to show your stats and badges in Allez Club. We never use it for advertising, never sell it and never share it with advertisers. We don’t connect to Strava.

ID verification

You need to verify your ID before you can match with anyone, and before joining or hosting a session or circle. Until you’re verified, your card can still appear in other members’ decks, but nobody can match with you yet. Our verification provider, Stripe Identity, collects a photo of your ID and a live selfie and checks them. We never receive or store your ID images or face data. We keep only:

• the result (verified, failed or under review), the method and the date;
• Stripe’s reference number for your check.

Stripe also tells us the date of birth on your ID. We compare it with your card’s birth date to confirm you’re 18+ and then discard it – it’s never stored. If the dates don’t match, a member of our team reviews the result in Stripe’s system; nothing from your ID is copied to us, except a corrected birth date if the reviewer confirms one. If your ID shows you’re under 18, your account is closed automatically.

Messages, photos and videos in chats

• We store the messages, reactions, photos and short videos you send in one-to-one, circle and session chats, so the people in the chat can read them.
• Chat photos and videos are kept in private storage. Only members of that chat can open them, through links that expire after an hour. We remove location and device data from each file.
• A photo or video from someone you haven’t replied to yet arrives blurred until you tap to view it.
• In circle and session chats, new members see messages from the time they joined.
• Once sent, a message stays in the chat until it’s removed by a moderator or the sender’s account is deleted.
• We store when you last read a chat (for unread counts and “Seen”). Typing indicators aren’t stored.

Our team doesn’t browse chats. Moderators see chat content only when it’s reported: the reported message and up to 20 messages before it, kept with the report as evidence. Every time a staff member opens a case, it’s logged.

Swipes, matches and insights

We store your swipes and matches so we can connect people who both said yes and avoid showing you the same card twice. Matching needs a verified ID. Before you verify, your first 5 swipes are a preview of how the deck works: they aren’t sent to us or saved, and can’t lead to a match. We also record when you view someone’s card or check their stats. This powers insights for Premium+ members: who wanted to train with them, who viewed their card and who checked their stats. You can turn off “Appear in other members’ insights” in Settings, and we’ll stop recording your views and keep you out of other people’s insight lists.

Circles, sessions and Share my plan

• Circles and sessions: the circles you create or join, your role in each, invites, sessions you plan or join (sport, time, meeting point, level, capacity, notes), whether you attended, and your after-session check-in (“All good” or “Not okay”, plus an optional note). Choosing “Not okay” opens an urgent safety case for our team straight away.
• Community circles: with the Community plan, a circle can have up to 199 people. Each circle has one organizer, who runs it, and can have up to 10 co-hosts who help plan. Together we call them the organizers. In a Community circle, the organizers plan the sessions.
• Subgroups: organizers can put members into named subgroups, like “Sunday group” or “Early morning”, to invite part of the circle to a session. Subgroups are private labels: only the organizers see them, and members never do. When you leave a circle or are removed, you’re taken out of its subgroups.
• Invite-only sessions: organizers can invite chosen subgroups or people to a session instead of the whole circle. Only the host, the people invited and the organizers can see that session, and it isn’t announced in the circle chat.
• Joining with a QR code or a code: a Community circle can have a join code, shown as a QR code or typed in Circles, Join with a code. Anyone signed in to Allez Club who has the code can see a short preview of the circle (see Who can see what), and a verified member can join straight away. We record that you joined with a code. If an organizer removes you, we record that too, so the code can’t bring you back; only a new invite from the organizer can.
• Who can post in the chat: in a Community circle, the organizers can choose who posts in the circle chat: everyone, or only the organizers. Everyone can still read and react. Circles above 8 start with organizers only.
• Paused circles: if the organizer’s Community plan ends, a circle of 8 or fewer becomes a regular circle where everyone can post. A circle above 8 is paused as it is: everyone stays and the chat and planned sessions keep working, but nobody new can join and no new sessions can be planned until the organizer renews Community or brings the circle down to 8.
• Reliability: how many sessions you’ve attended. A no-show only counts if a moderator confirms it after a report – never automatically.
• Meeting points: sessions happen at public places. When you search for a place, what you type and your snapped ~1 km point are sent through our server to Google Places. Google doesn’t receive your exact location or your identity from this search.
• Share my plan: you can create a link to a web page for someone you trust. Anyone with the link can see the session’s time, sport, area, exact meeting point, who shared it, and the first names and main photo of the host and confirmed members (not people blocked by the sharer). The link stops working 24 hours after the session, and you can revoke it sooner. This page doesn’t use cookies or analytics. Other confirmed members of a session can share it in the same way, so your first name and main photo may appear on their plan page.
• Trusted contacts: you can save a contact’s name and phone number in the app to share your plan quickly. We never contact them ourselves.

Invites

When you invite a friend, your phone’s share sheet sends a link (and your first name in the message) the way you choose. We count sign-ups that came from your link. We don’t collect your contacts.

Purchases

Premium, Premium+ and Community are subscriptions, and Premium+ Lifetime is a one-time purchase. All of them are bought through the App Store or Google Play. RevenueCat helps us manage them. We receive your plan, the product you bought, its purchase date, start and end dates and status updates (for example a renewal, a refund or a billing problem), for one-time purchases as well as subscriptions. We never see or store your card number, billing address or payment amounts. Apple and Google handle payments under their own privacy policies.

A purchase belongs to the Allez Club account that bought it. If you tap Restore purchases while signed in to a different Allez Club account, it isn’t moved there.

If you receive the waitlist gift, we keep a record that you received it and when it starts and ends.

Safety reports and moderation

If you report someone, we store the reason, your details and up to 3 screenshots. For a reported message we keep a copy of it and the 20 messages before it, so the evidence isn’t lost if someone deletes their account. If you’re reported, we store the report and any action we take (warning, content removal, suspension or ban). We don’t tell the other person who reported them. If an account is banned, we keep a scrambled (keyed hash) version of its email address so it can’t be used to sign up again.

Device, notifications and diagnostics

• Notifications: your push notification token, phone type (iPhone or Android) and an install identifier, so we can send notifications to the right device. Lock-screen notifications show a first name at most – never message text, places or times. You choose which ones you get in Settings.
• Activity: when you were last active in the app (updated at most once an hour).
• Technical logs: our hosting providers record technical data such as IP address, request times and errors to keep the service running and secure.
• Crash reports and usage statistics: we may use Sentry (crash reports) and PostHog (usage statistics, such as “card completed” or “session joined”) in the app. We set them up so they never receive your name, message text or location.

Support

When you contact us, we keep your email address and our conversation so we can help you.

Website and waitlist

When you visit allezclub.com, Cloudflare (our host) processes your IP address and basic browser information to deliver the site and protect it from attacks. We may use Cloudflare Web Analytics, which counts page views without cookies and without fingerprinting.

If you join the waitlist, we collect:

• your email address;
• the city you’re interested in (Calgary, Canmore, Banff, Edmonton, Vancouver, Kelowna, Toronto, Halifax or Ottawa);
• a record of your consent (the time and the version of the wording you agreed to);
• whether you confirmed your email address.

The checkbox is never ticked for you – we ask for your express consent, as Canada’s Anti-Spam Legislation (CASL) requires. We then send a confirmation email (double opt-in). After you confirm, we send launch news for your city and occasional Allez Club updates. Every email has a one-click unsubscribe link, and unsubscribing deletes your waitlist entry. Unconfirmed sign-ups are deleted after 7 days; confirmed entries are deleted 24 months after sign-up. Waitlist data is stored in our database in the United States. Our emails are sent through Resend: for news to the whole waitlist, Resend keeps a copy of your email address, your city and whether you’re among the first 1,000 in its contact list (United States). The unsubscribe link in those emails is run by Resend, and unsubscribing there also deletes your entry with us. When your entry is deleted, so is your contact at Resend.

Your waitlist gift. The first 1,000 people in each city on the waitlist get their first year of Premium free, once they create an Allez Club account with the same email address and verify their ID. To do this, we use your city and the time you confirmed your email to work out your place in line, and when your ID check goes through (and once a day after that, in case your place in line comes up later) we look for a confirmed waitlist entry with your account’s email address. If there is one, it was confirmed before you created your account, you don’t hold Premium+ Lifetime, and it’s within the first 1,000 for its city, we add the gift to your account and record that it was given: the city, the dates, the reference of your ID check and a scrambled form of the waitlist email (a keyed hash, not the address itself), so it’s given only once per person and once per email, and each city’s 1,000 is counted correctly. Your waitlist entry and its copy at Resend are then deleted, because their job is done. Nothing else from the waitlist is added to your account. The full offer is in our terms.

• Signed up for the app with a different email, or with Sign in with Apple’s private relay address? The two can’t match on their own. Write to us from the email you used on the waitlist and we’ll add the gift by hand.
• Unconfirmed sign-ups don’t get the gift.
• Unsubscribing deletes your waitlist entry, and with it any gift you haven’t received yet. If your entry is gone by the time you verify, there’s nothing left to match. The same happens when a confirmed entry reaches 24 months. A gift you’ve already received stays with your account.

Cookies and similar tools on the website are explained in Cookies on our website.

How we use it

• Run the app: create your account, show your card, build your deck within your radius, connect verified members who both swipe yes, and run chats, circles and sessions, including the organizer tools in Community circles.
• Keep people safe: verify IDs before matching, sessions and circles, keep Allez Club 18+ and women-first, handle reports and check-ins, block people, enforce our community guidelines and stop banned members coming back.
• Plans: unlock Premium, Premium+ and Community features, including Premium+ Lifetime and the Community price for lifetime members.
• Waitlist gift: when you verify your ID (and daily after that, until your place in line comes up), check whether your account’s email matches a confirmed waitlist entry, and if it does, give you your first year of Premium (see Website and waitlist).
• Notifications: tell you about matches, messages, invites, session reminders and check-ins, your verification result, the weekly report (Premium+) and, at most once a week, a reminder if you haven’t opened the app for 7 days. Quiet hours (22:00–07:00 your time) apply, except for session reminders and check-ins.
• Email: send sign-in codes, answer support requests and, if you joined the waitlist, send the emails described in Website and waitlist.
• Improve the service: fix crashes and understand which features work, using statistics that don’t include your name, messages or location.
• Legal: meet our legal obligations, respond to lawful requests, and protect the rights and safety of members and others.

We ask for your consent when you sign up and when you turn on a feature that needs more – location, training data, ID verification, notifications. For sensitive information (location, training data, gender identity, verification) we ask for express consent. You can withdraw consent at any time (see Your choices and rights), though some features may then stop working.

One decision is automatic: if the date of birth on your ID shows you’re under 18, your account is closed without a person reviewing it first. Any other mismatch goes to a person. You can ask us to review a decision at support@allezclub.com.

We may share information if the law requires it, if it’s needed to protect someone’s safety in an emergency, or as part of a merger or sale of our business (in which case this policy would continue to apply to your information).

Who can see what

Never shown to other members: your birth date, whether you chose woman or non-binary, your exact or snapped location, your email address, your verification details, your plan, your trusted contacts and the reports you make. One exception: if you run a circle above 8 and your Community plan ends, its members can see that the circle is paused until you renew.

If you block someone, you disappear from each other’s decks, cards, chats, invites and sessions. Remember that anyone who can see your card or chat could take a screenshot, so share only what you’re comfortable with.

Service providers

We choose providers carefully and share only what each one needs. They’re bound by contract to protect your information and use it only for the service they provide to us. Apple and Google also handle sign-in, payments and app downloads under their own privacy policies.

Meta, TikTok and Google also act under their own privacy policies for the information their website tags collect. These tags load only if you accept marketing cookies, and they’re never part of the app.

Where your data is stored

Our main database is in Canada (Central): your account, athlete card details, matches, chats, sessions, circles and waitlist entry are stored there. Some of our service providers store or process personal information outside Canada, in the United States and, for some, other countries, as listed in Service providers – for example card photos, chat media and report screenshots are stored in the United States, and emails are sent from the United States. They do this to provide storage, verification, subscriptions, notifications, email, place search and diagnostics for us.

While your information is in another country, it’s protected by our contracts with these providers but is subject to that country’s laws, and courts, law enforcement or national security authorities there may be able to access it. This applies to everyone who uses Allez Club, including people outside Canada.

For questions about how our service providers outside Canada collect, use, disclose or store your information, contact our Privacy Officer at support@allezclub.com.

How long we keep it

Deleting your account

Delete your account in the app: You → Settings → Your data → Delete my account. Can’t get into the app? See how to delete your account or write to support@allezclub.com.

• Straight away: your card is hidden from everyone, your location is deleted, notifications stop, your upcoming hosted sessions are cancelled and you leave the ones you joined.
• 30 days to change your mind: tap “Keep my account” and everything comes back (you’ll just set your area again).
• After 30 days: we delete your photos, chat photos and videos, messages you sent, training summary, sports, prompts, rhythm, filters, swipes, blocks, notifications, push tokens, trusted contacts and invite records, and we delete your sign-in account. Your name, birth date, gender identity, area and other card details are erased. Circles you organize are closed for everyone in them, and you leave your other circles and all their subgroups.
• Plans end with your account: a Premium+ Lifetime purchase and the waitlist gift end when your account is erased, and can’t be moved to another account. We can’t refund store purchases ourselves; Apple and Google decide on refunds under their rules.

What stays, and why: to protect other members, we keep an anonymised account ID with reports, moderation actions and bans for their retention periods (see How long we keep it). Other members keep their side of shared chats and sessions, where you appear as “Former member”. If you’re the subject of an open safety report, deletion waits until it’s resolved. If your account was banned, we keep the scrambled email.

Deleting your account doesn’t cancel a subscription – cancel it in your App Store or Google Play settings. Copies of photos may stay in internet caches for a short time after deletion.

Your choices and rights

In the app, any time

• Edit or remove card details and photos, and hide any training stat.
• Turn location off in your phone settings and pick your area by hand; hide your distance range.
• Disconnect Apple Health or Health Connect – your summary is deleted.
• Turn off “Appear in other members’ insights”.
• Choose which notifications you get, or turn them off.
• Block people, revoke Share my plan links, and remove trusted contacts.
• Delete your account.

By asking us

• Access: ask for a copy of the personal information we hold about you and how we’ve used and shared it. This includes the names of any subgroups a circle’s organizers have put you in.
• Correction: ask us to fix anything that’s wrong or incomplete.
• Withdraw consent: to any use of your information, subject to legal or contractual limits. Some features may stop working.
• Deletion: ask us to delete your information, as described in Deleting your account.
• Emails: unsubscribe from waitlist emails with the link in any email. This deletes your waitlist entry, and with it any waitlist gift you haven’t received yet.

Write to our Privacy Officer at support@allezclub.com. It’s free. We’ll reply within 30 days, and we may ask you to confirm it’s really you – for example by writing from the email address on your account. If we can’t do something you ask, we’ll tell you why.

If you’re not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner of Alberta or, in British Columbia, the Office of the Information and Privacy Commissioner for British Columbia. We’d appreciate the chance to fix things first.

Cookies on our website

Cookies are small files a website stores in your browser; local storage works in a similar way. On allezclub.com we ask before using anything that isn’t necessary. Our cookie banner is open-source (CookieConsent) and hosted by us, so it doesn’t share your choice with anyone. You can change your choice any time with the “Cookie settings” link in the footer or the button below.

Change cookie settings

We may use these analytics and marketing tools; if a tool isn’t switched on, it never loads and its category isn’t shown in the banner. When marketing tools are on, Meta, TikTok and Google receive information about your visit (such as pages viewed, your browser and IP address) and may link it with what they already know about you, under their own privacy policies. Cloudflare Web Analytics, if on, uses no cookies at all.

The app doesn’t use cookies or advertising trackers.

18+ only

Allez Club and its waitlist are for adults 18 and older. We check your birth date when you sign up, and again against your ID when you verify. If we learn that someone under 18 has an account, we close it and delete their information, keeping only a scrambled email so it can’t be used to sign up again. If you think someone under 18 is using Allez Club, report their card in the app or email support@allezclub.com.

Security

We protect your information with safeguards suited to how sensitive it is. For example:

• Data is encrypted in transit, and our database and file storage providers encrypt it at rest.
• Every database table is locked by default. You can read your own records; other people’s cards come only through narrow, purpose-built views that never include coordinates, birth dates or gender identity.
• Chat media and report screenshots are in private storage, opened only through short-lived links.
• Your sign-in session is stored in your phone’s secure storage (Keychain on iPhone, Keystore on Android).
• Staff use separate accounts with two-step sign-in behind an extra access gate. Case access is logged, and permanent bans need a second person.

No system is perfectly secure. If a breach creates a real risk of significant harm to you, we’ll tell you and report it to the privacy commissioners as the law requires.

Changes to this policy

We’ll update this policy when Allez Club changes – for example when we launch in new cities or add a feature. The date at the top shows the latest version. If a change is significant, we’ll tell you in the app (or by email if you’re on the waitlist) before it takes effect, and ask for your consent again where the law requires it.

Contact us

Questions, requests or concerns about your privacy? Contact our Privacy Officer at support@allezclub.com, or by mail:

Privacy Officer
Ubunzo Ltd.
246 Stewart Green SW
Unit #6090
Calgary, AB T3H 3C8
Canada

You can also read our terms of use, our community guidelines or visit our support page.