Privacy Policy

Who we are

SweatDebt (“we”) is the data controller for personal data processed on this platform. For payment processing, Stripe acts as a separate controller/processor; for activity data, Strava is a separate controller you connect by choice.

What we collect

• Account data — name, email, and profile details you provide.
• Campaign data — your story, images, goal, deadline and disciplines.
• Activity data — distance, sport, time and route information from Strava or uploaded GPS files, used to verify repayments.
• Donation data — amounts, optional display name and message. Card details are handled by Stripe; we never see your full card number.
• Technical data — basic analytics and security/anti-fraud signals.

Lawful bases

• Contract — to provide the platform and process donations.
• Legitimate interests — to keep the platform safe, prevent fraud, and improve the product.
• Consent — for connecting Strava, optional marketing emails, and non-essential cookies. You can withdraw consent at any time.
• Legal obligation — to meet financial record-keeping and anti-money-laundering requirements.

Strava data

If you connect Strava, we use your activity data only to verify repayments on your own campaign, in line with Strava’s API terms. Strava-sourced data is shown to you privately; public proof uses Strava’s official embed. Disconnecting Strava deletes the access tokens and cached activity data we hold.

Retention

We keep account and campaign data while your account is active. Donation and financial records are retained as required by law. Uploaded GPS files are kept for a limited period for audit and then deleted.

Your rights

Under UK GDPR you can access, correct, delete or port your data, object to or restrict processing, and withdraw consent. To delete your account, use your settings or contact us — note that some financial records must be retained for legal reasons. You can also complain to the UK Information Commissioner’s Office (ICO).

Cookies

We use essential cookies to run the site and, with your consent, limited analytics. You can manage non-essential cookies via the banner and your browser.

Contact

For any privacy request, contact us via the channels listed on our site.