RunPact — Privacy Policy

Last updated: 5 September 2026 Effective date: 2 May 2026

RunPact is a product of Done By Nine Limited (NZBN: 9429048445962, company number 8053123, registered office: 93 Devon Street West, New Plymouth 4310, New Zealand). In this policy, "RunPact", "we", "us" and "our" mean Done By Nine Limited operating the RunPact service.

We take your privacy seriously. This policy explains what personal information we collect when you use therunpact.com (the "Site"), how we use it, who we share it with, and the rights you have over it. It applies to all visitors and users of the Site, wherever you are.

This policy is governed by the New Zealand Privacy Act 2020. Where you are located in Australia, the Australian Privacy Principles under the Privacy Act 1988 (Cth) also apply to our handling of your information.

1. Who this policy applies to

You must be 18 or older to use RunPact. If you are under 18, please do not provide us with your information or use the Site.

2. What we collect

2.1 Information you give us

• Quiz answers. Your responses to our 9-question quiz, including your self-reported running experience, weekly kilometres, longest recent run, location, travel range, terrain preference, target distance, motivation, and target timeframe.
• Email address. When you ask to see your full match results, sign up for our newsletter, or buy a Race Pack.
• Payment information. If you buy a Race Pack, our payment processor (Stripe) collects your card details. Stripe handles this directly — we never see or store your full card number. We receive a transaction ID, the last four digits of your card, the amount, and the status.
• Communications. If you email us, we'll keep a record of your message and our reply.

2.2 Information collected automatically

• Device and usage data. IP address, browser type and version, operating system, device type, pages viewed, time spent on pages, referring URL, and approximate location derived from your IP. We use this to understand how the Site is used and to improve it.
• Cookies and similar technologies. See Section 6.

2.3 Information from third parties

• Stripe sends us payment confirmation data after a successful Race Pack purchase.
• Google Ads / Meta Ads may report aggregated conversion data about ads you've clicked.

3. How we use your information

We use your information to:

1. Deliver the matching service — score events against your quiz answers and show you your matches.
2. Send you transactional emails — your match results, your Race Pack, and purchase receipts (via Resend).
3. Generate your Race Pack — when you purchase one, your relevant quiz answers and the event details are sent to Anthropic's Claude API to generate your personalised guide. See Section 7.
4. Send marketing emails — when you submit your email to see your matches, we'll add you to The Pact, our newsletter. You can unsubscribe at any time using the link in every email. We may also send you offers for race events we've partnered with or resell entries to. See Section 5.
5. Improve our matching algorithm — we analyse aggregated and de-identified quiz data to refine our scoring weights and identify gaps in our event database.
6. Publish aggregate insights — for example, "most RunPact users are aiming for a half marathon." Always aggregated, never individual.
7. Train and improve AI features — we may use de-identified quiz data to fine-tune or evaluate AI models that power our matching and Race Pack generation. We do not include your email or any other identifier in this data.
8. Run our business — accounting, fraud prevention, security, and complying with our legal obligations.
9. Advertise responsibly — we run paid ads on Google and Meta to find new runners. Where you've consented to advertising cookies, conversion data may be shared with these platforms (see Section 6).

We do not sell your personal information to anyone.

4. Who we share it with

We share your information only with the following types of recipients, and only as needed for the purposes above:

We may also disclose your information:

• to professional advisers (lawyers, accountants, auditors) under duties of confidentiality;
• to a buyer or successor if Done By Nine Limited is sold or restructured;
• to comply with the law, a court order, or a regulator's request; and
• to protect our rights, your safety, or the safety of others.

We require each of our service providers to keep your information secure and to use it only for the purposes we've engaged them for. We do not sell, rent, or trade your personal information.

5. Marketing emails

When you submit your email to see your full quiz results, we'll add you to The Pact — our running newsletter — and we may send you offers for race events we've partnered with or resell entries to.

• Every marketing email has an unsubscribe link. Click it once and you're out.
• Unsubscribing from marketing emails will not stop transactional emails (e.g. your Race Pack delivery, purchase receipts).
• We comply with the NZ Unsolicited Electronic Messages Act 2007 and the Australian Spam Act 2003.

If you'd rather not receive any marketing email, email hello@therunpact.com and we'll remove you.

6. Cookies and tracking

We and our service providers use cookies, pixels, and similar technologies on the Site. They fall into four buckets:

1. Strictly necessary — required for the Site to function (e.g. remembering your quiz progress).
2. Analytics — Vercel Analytics and Google Analytics 4. These help us understand which pages and quiz steps work and which don't.
3. Advertising — Google Ads and Meta Pixel. These let us measure ad performance and show RunPact ads to relevant audiences. They may also be used by Google and Meta for their own advertising purposes, in line with their own privacy policies.
4. Functional — anything else that improves your experience (e.g. remembering your preferences).

When you first visit the Site, we'll show you a cookie banner where you can accept all, reject non-essential, or choose your preferences. You can change your choices at any time via the "Cookie preferences" link in our footer.

You can also block or delete cookies via your browser settings. If you do, parts of the Site may not work as expected.

7. AI processing

When you purchase a Race Pack, we send the following to Anthropic's Claude API to generate your guide:

• the relevant quiz answers (experience, weekly km, longest run, goal);
• the event details (name, date, distance, elevation, terrain, weather, mandatory gear); and
• your distance choice.

We do not send your email address, name, or payment details to Anthropic.

Anthropic processes this data on our behalf as a service provider. They do not use the contents of API requests to train their general-purpose models (per Anthropic's commercial terms in force at the time of writing). Their privacy policy is at anthropic.com/legal/privacy.

We may use de-identified, aggregated quiz data to improve our matching algorithm and to evaluate or fine-tune AI features within RunPact. This data does not contain your email, name, IP address, or any other identifier that could reasonably be used to identify you.

8. International data transfers

Your information will be transferred to and stored in countries outside New Zealand and Australia, including the United States (Vercel, Resend, Anthropic, Google, Meta) and other jurisdictions where our service providers operate.

Where we transfer your information outside New Zealand or Australia, we take reasonable steps to make sure it's protected to a comparable standard — including by entering into the relevant data-protection agreements with each provider and choosing providers with strong security and privacy practices.

If you're in the EU/UK and your data ends up with us, the legal basis for our processing is your consent (for marketing and non-essential cookies) and our legitimate interests (for delivering the service, security, and analytics). You have the rights set out in the GDPR / UK GDPR — including access, erasure, rectification, restriction, portability, objection, and complaint to a supervisory authority.

9. How long we keep your information

You can ask us to delete your information at any time (see Section 10). Some records (e.g. tax records of Race Pack purchases) we're required by law to keep, even if you ask us to delete them.

10. Your rights

Under the NZ Privacy Act 2020 and (where it applies to you) the Australian Privacy Principles and the GDPR, you have the right to:

• Access — request a copy of the personal information we hold about you.
• Correct — ask us to correct anything that's wrong or out of date.
• Delete — ask us to delete your personal information (subject to our legal retention obligations).
• Object — object to certain uses of your information, including direct marketing.
• Withdraw consent — for any processing that's based on your consent (e.g. analytics or advertising cookies).
• Complain — to us at hello@therunpact.com, and to the NZ Office of the Privacy Commissioner (privacy.org.nz) or the Office of the Australian Information Commissioner (oaic.gov.au) if you live there.

To exercise any of these rights, email hello@therunpact.com. We may need to verify your identity before we can act on your request. We'll respond within 20 working days in NZ (or 30 days under the GDPR / APPs).

11. Security

We use reasonable technical and organisational measures to protect your information — including encryption in transit (HTTPS), encryption at rest where supported by our providers, access controls, and regular review of our practices.

No system is 100% secure. If you believe your account or data has been compromised, email us immediately at hello@therunpact.com.

12. Children

RunPact is not intended for anyone under 18. We don't knowingly collect personal information from anyone under 18. If you believe a child under 18 has given us their information, email us at hello@therunpact.com and we'll delete it.

13. Changes to this policy

We may update this policy from time to time — for example, to reflect new features, new service providers, or changes in the law. When we do:

• we'll update the "Last updated" date at the top;
• for material changes, we'll email subscribers and post a notice on the Site at least 14 days before the changes take effect; and
• if you keep using the Site after the changes take effect, you accept the updated policy.

14. Contact us

For privacy questions, data-rights requests, or anything else:

Email: hello@therunpact.com Post: Done By Nine Limited, Done By Nine Limited, 93 Devon Street West, New Plymouth 4310, New Zealand, New Zealand

— The RunPact Team