Menu Close

Cookie Policy

Privacy Policy

Last updated: 6 February 2026

1. Introduction
At RUN A LOTT B.V. (hereinafter: RUN A LOTT), we value the trust you place in us by sharing your personal data. We take your privacy seriously and are dedicated to handling your personal data in a fair and responsible manner that respects this trust. RUN A LOTT takes all reasonable measures to safeguard your information from misuse and ensure its security.

RUN A LOTT B.V., a company registered in the Netherlands, with its registered office at Gorterplaats 2, 6531HZ, Nijmegen, acts as the Data Controller for the Services within the meaning of the General Data Protection Regulation (“GDPR”). RUN A LOTT is the trade name of RUN A LOTT B.V. Throughout this Privacy Policy (‘Policy’), the terms “we”, “us”, “our” and “RUN A LOTT,” refer to Run a Lott B.V.

We believe it’s important to inform you about how we use your personal data, so we encourage you to read this Policy carefully. This Policy outlines the information we collect about you when you use our website www.runalott.com and the RUN A LOTT app (collectively referred to as the “Services”), how we use that information, the extent to which we share it with third parties, and your rights regarding that information. This Policy should be read in conjunction with our Terms and Conditions and Cookie Policy.

Some processing of personal data is necessary for the proper functioning of the Services, such as providing training plans, tracking progress, managing subscriptions, and securing user accounts. Other processing activities, such as analytics and marketing, are optional and only take place if you provide your consent. You can manage and change your privacy preferences at any time via the privacy settings within the app.

2. Personal Data Collection and Use 
RUN A LOTT collects personal data that is necessary to provide and operate the Services, as well as additional data that helps us improve the app and, where applicable, inform you about relevant updates and offers. Below we explain which types of personal data we process and for what purposes.

2.1 Account and Contact Information
When you create an account or contact us, we process certain personal data such as your name and email address. We use this information to:

  • create and manage your user account;
  • communicate with you about the Services;
  • respond to your questions, comments, or requests;
  • inform you about updates, events, or offers related to RUN A LOTT, where permitted.

2.2 Technical and Usage Data
When you use the Services, we automatically collect certain technical and usage-related data. This may include log files, device information, operating system details, IP address, and general usage data. We use this data to:

  • ensure the proper functioning and security of the app and website;
  • diagnose technical issues;
  • improve performance and stability;
  • gain insights into how the Services are used in order to improve them.

2.3 Training, Activity and Location Data
RUN A LOTT processes data related to your training activities when you use the app to track runs or when you import activities from connected partners such as Garmin, Apple, or Strava. This may include:

  • GPS location data during a run;
  • distance, duration, pace, and time;
  • calories burned and heart rate, where available.

We use this data to:

  • provide training plans and insights;
  • display your training history and progress;
  • personalize your experience within the app.

2.4 Subscription and Purchase Information
If you purchase a subscription, we process information related to your purchase and subscription status. Payments are handled by third-party platforms such as the Apple App Store and Google Play Store. In some cases, we receive limited payment-related information from these platforms, such as transaction identifiers and subscription status. We use this information to:

  • verify your subscription;
  • manage access to paid features;
  • ensure that you receive the Services you have paid for.

3. Purposes and Legal Bases
RUN A LOTT processes personal data only where this is permitted under the General Data Protection Regulation (GDPR). Depending on the purpose of the processing, we rely on one or more of the following legal bases.

3.1 Performance of a Contract
We process certain personal data where this is necessary to perform our agreement with you and to provide the Services. This includes, among others:

  • creating and managing user accounts;
  • providing training plans and tracking training activities;
  • displaying progress and performance insights;
  • managing subscriptions and providing access to paid features;
  • communicating with you about the Services.
  • ensuring the security, stability, and availability of the Services;
  • preventing misuse, fraud, and technical abuse of the app.

Without this processing, we would not be able to deliver the core functionality of the app.

3.2 Consent
For certain processing activities, we rely on your consent. This applies in particular to:

  • analytics and usage analysis that are not strictly necessary for the functioning of the Services;
  • marketing and advertising purposes, including measuring the effectiveness of campaigns and showing more relevant advertisements.

Where consent is required, we will ask for it explicitly. You can withdraw or change your consent at any time via the privacy settings in the app. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

3.3 Compliance with Legal Obligations
We may process personal data where this is necessary to comply with applicable legal obligations, such as accounting, tax, or regulatory requirements.

4. Advertising, Analytics and Conversion Measurement                                     
RUN A LOTT may process certain personal data to analyse how the Services are used and to measure the effectiveness of marketing campaigns. These processing activities are not strictly necessary for the functioning of the Services and are therefore only carried out where permitted and, where required, with your consent.

4.1 Analytics and App Stability (Firebase)
To gain insight into how the Services are used and to improve the performance, stability, and reliability of the app, RUN A LOTT uses Firebase services provided by Google LLC, including Firebase Analytics and Firebase Crashlytics.

Firebase Analytics is used to collect aggregated information about how users interact with the app, such as feature usage, in-app interactions, and general usage patterns. These insights help us improve the functionality, usability, and content of the Services. Processing via Firebase Analytics is carried out only if you have provided your consent through the privacy settings in the app.

Firebase Crashlytics is used to detect, analyse, and resolve app crashes and other technical issues. Crashlytics collects technical and diagnostic information, such as crash logs, device information, operating system versions, and the state of the app at the time of a crash. This data is used solely to improve the stability, security, and performance of the Services and is not used for advertising or marketing purposes.

The processing of data via Firebase services is carried out in accordance with Google’s applicable data protection terms. Where personal data is processed outside the European Economic Area (EEA), appropriate safeguards are applied, such as standard contractual clauses approved by the European Commission.

4.2 Advertising and Campaign Measurement (Meta and Google)
Where you have provided your consent, RUN A LOTT may use advertising and campaign measurement tools to understand how users find the Services and to measure the effectiveness of advertising campaigns.

For these purposes, RUN A LOTT works with advertising partners such as Meta Platforms, Inc. (Facebook and Instagram) and Google (including Google Ads). This may involve processing information such as:

  • whether you interacted with an advertisement;
  • whether you installed the app or performed certain actions after viewing an advertisement;
  • technical identifiers used to measure campaign performance, where permitted.

Advertising-related processing is only carried out where you have explicitly provided your consent via the privacy settings in the app and, where applicable, via your device or operating system settings.Depending on the specific service, Meta and Google may act as independent controllers or as processors acting on our behalf. Their processing of personal data is governed by their own privacy policies and applicable data protection terms.

5. Data Sharing and Processors
RUN A LOTT does not sell your personal data. We only share personal data where this is necessary to provide the Services, to comply with legal obligations, or where you have given your consent.

5.1 Service Providers and Processors
To operate and improve the Services, RUN A LOTT works with carefully selected third-party service providers. These providers process personal data on our behalf and only in accordance with our instructions. Such service providers may include:

  • hosting and infrastructure providers;
  • analytics and diagnostic service providers;
  • customer support and communication tools;
  • payment and subscription management platforms.

Where required by law, RUN A LOTT enters into data processing agreements with these parties to ensure that personal data is processed in accordance with applicable data protection laws.

5.1.1 Hosting and Infrastructure (Hetzner)
To host and operate the Services, RUN A LOTT uses external hosting and infrastructure services provided by Hetzner Online GmbH, a company established in Germany. Hetzner provides the cloud servers and technical infrastructure on which the RUN A LOTT app, website, and related backend services run. In this context, Hetzner may process certain personal data on our behalf, including:

  • user account data stored in databases;
  • training and activity data processed by the Services;
  • technical and log data necessary for the secure and reliable operation of the servers (such as IP addresses and system logs).

Hetzner acts as a data processor within the meaning of the GDPR and processes personal data solely in accordance with our instructions. Personal data hosted by Hetzner is stored on servers located within the European Economic Area (EEA). RUN A LOTT has entered into a data processing agreement with Hetzner, ensuring that appropriate technical and organisational measures are in place to protect personal data in accordance with the GDPR.

5.2 Advertising and Analytics Partners
Where you have provided your consent, RUN A LOTT may share certain data with advertising and analytics partners for the purposes described in this Privacy Policy. Depending on the nature of the service, such partners may act as:

  • processors acting on our behalf; or
  • independent controllers determining their own processing purposes.

Further information about advertising and analytics processing, including consent and App Tracking Transparency requirements, is described in Chapter 4 of this Privacy Policy.

5.3 Legal Obligations and Corporate Transactions
RUN A LOTT may disclose personal data where required to do so by law, regulation, or a binding request from a competent authority. In the event of a merger, acquisition, restructuring, or sale of assets, personal data may be transferred to a third party involved in such a transaction. In such cases, we will ensure that appropriate safeguards are in place and that users are informed where required by law.

5.4 International Data Transfers
Some of our service providers may be located outside the European Economic Area (“EEA”). Where personal data is transferred outside the EEA, RUN A LOTT ensures that such transfers are subject to appropriate safeguards, such as standard contractual clauses approved by the European Commission.

6. Data Retention
RUN A LOTT does not retain personal data longer than necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

6.1 Retention Principles
We apply the following principles when determining how long personal data is retained:

  • personal data is retained only for as long as it is necessary to provide the Services;
  • retention periods depend on the type of data and the purpose for which it is processed;
  • personal data is deleted or anonymised when it is no longer needed, unless retention is required to comply with legal obligations.

6.2 Account and Training Data
Personal data related to your user account, training plans, and training history is retained for as long as your account remains active. If you delete your account, or if your account is otherwise terminated, such data will be deleted or anonymised within a reasonable period, unless retention is required for legal, administrative, or security purposes.

6.3 Analytics and Marketing Data
Analytics and marketing-related data is retained only for as long as necessary to fulfil the purposes for which it was collected and in accordance with your consent preferences. Where consent is withdrawn, processing for analytics and marketing purposes will cease. Data may be deleted or aggregated in accordance with applicable retention settings and legal requirements.

6.4 Legal and Administrative Retention
Certain personal data may be retained for longer periods where required to comply with legal obligations, such as accounting, tax, or regulatory requirements, or to resolve disputes.

7. User Rights and Managing Preferences
Under the General Data Protection Regulation (GDPR), you have certain rights with regard to the personal data we process about you. Below we explain these rights and how you can exercise them.

7.1 Your Rights
You have the right to:

  • Access: request access to the personal data we process about you.
  • Rectification: request correction of inaccurate or incomplete personal data.
  • Erasure: request deletion of your personal data, for example when the data is no longer necessary for the purposes for which it was collected.
  • Restriction of processing: request that we temporarily limit the processing of your personal data in certain circumstances.
  • Data portability: receive a copy of your personal data in a structured, commonly used, and machine-readable format, where applicable.
  • Objection: object to certain types of processing, where applicable.

Where we process personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

7.2 Managing Your Privacy Preferences
You can manage your privacy preferences directly within the RUN A LOTT app via the privacy settings. This includes, where applicable:

  • enabling or disabling analytics processing;
  • enabling or disabling marketing and advertising-related processing.

Changes to your preferences take effect from the moment they are saved. Some processing activities that are necessary to provide the Services cannot be disabled.

7.3 Exercising Your Rights
You can exercise your rights by contacting us using the contact details provided in this Privacy Policy. We may ask you to verify your identity before responding to a request, in order to protect your personal data. We aim to respond to all requests within the time limits set by applicable data protection laws.

7.4 Children’s Privacy
RUN A LOTT does not knowingly offer its Services to individuals under the age of 16. RUN A LOTT does not knowingly collect personal data from children under the applicable age threshold. If we become aware that we have collected personal data from a child without valid parental consent, we will take appropriate steps to delete such data as soon as reasonably possible. If you believe that a child has provided us with personal data, please contact us using the contact details provided in this Privacy Policy.

7.5 Complaints
If you believe that we have not handled your personal data in accordance with applicable data protection laws, you have the right to lodge a complaint with the relevant supervisory authority. In the Netherlands, this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Security Measures
RUN A LOTT takes appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction.These measures are designed taking into account the nature of the personal data, the purposes of the processing, and the risks involved.

8.1 Technical and Organisational Safeguards
The security measures implemented by RUN A LOTT may include, among others:

  • secure hosting and infrastructure environments;
  • access controls and authentication mechanisms to limit access to personal data;
  • encryption of data where appropriate;
  • regular updates and maintenance of systems and software;
  • monitoring and logging to detect and address security incidents.

Access to personal data is restricted to authorised personnel who require such access to perform their duties.

8.2 Third-Party Security
Where RUN A LOTT works with third-party service providers that process personal data on our behalf, we take appropriate steps to ensure that these parties apply adequate security measures. This includes contractual arrangements and assessments of security practices where required by law.

8.3 Security Incidents
Despite our efforts to protect personal data, no system can be completely secure. In the event of a personal data breach, RUN A LOTT will take appropriate measures to mitigate the impact and, where required by applicable law, notify the relevant supervisory authority and affected users.

9. Contact and Updates
If you have any questions about this Privacy Policy or about the way RUN A LOTT processes personal data, you can contact us using the details below:

RUN A LOTT B.V.
Gorterplaats 2
6531 HZ Nijmegen
The Netherlands

Email: contact@runalott.com

Updates to this Privacy Policy
RUN A LOTT may update this Privacy Policy from time to time to reflect changes in our Services, data processing practices, or applicable laws and regulations.Where changes are material, we will inform you through the app or by other appropriate means. The most recent version of this Privacy Policy will always be available via the app and our website.