Privacy Policy

The data controller is Breadwinner. We process your personal data in accordance with the EU General Data Protection Regulation (GDPR).

• Account data: email, name, profile picture.
• Activity data: routes, runs, distance, time, places explored.
• Technical data: IP address, device type, browser, logs.
• Payment data is handled by Paddle — we do not store card details.

• Deliver the Service (legal basis: contract).
• Handle payments and invoicing (legal basis: contract / legal obligation).
• Improve and debug the product (legitimate interest).
• Send transactional emails (contract). Marketing only with consent.

You have the right to access, rectification, erasure, data portability, restriction, and objection. Contact us to exercise these rights. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

Data is stored with our processors (including Supabase/Lovable Cloud, Paddle, and Google Maps). Data is retained for as long as your account is active and thereafter only as required by law.

We use appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS/TLS), password hashing, access controls, the principle of least privilege, and logging and monitoring at our processors. No transmission or storage is 100% secure — contact us immediately if you suspect unauthorised access to your account.

We only use essential cookies for login and core functionality. We do not use marketing tracking cookies without separate consent.

For questions about privacy or to request data deletion:
Email: manassamauler@gmail.com