Privacy policy

The data controller is Mathieu Yernaux, founder of Challenges. For any question about your data: info@challengesbelgium.com

We only collect the data needed for the app to work:

• Account: email address, username, password (encrypted, never readable by us). You can sign in with email and password, with a Google account or with an Apple account. If you sign in with Google: your name, your email address and, where applicable, your Google profile picture. If you sign in with Apple, you can choose to hide your email address: Apple then gives us a relay address that forwards our emails to you.
• Profile: profile picture and bio (if you add them).
• Activity in the app: favourites, entries, challenges, friends, invitations, notifications and event suggestions.
• Location: if you allow it, the app uses your position only while it is open, never in the background, to show events near you. In the mobile app, this permission is requested by your phone and you can withdraw it at any time in your phone settings. Without this permission, the app uses the city you have chosen.
• Notifications: if you enable notifications, we store a technical identifier of your device, needed to send them to you. You can turn them off at any time in your phone or browser settings.

We collect no “sensitive” data within the meaning of the GDPR (health, political opinions, etc.).

• Providing the service (account, profile, favourites, entries, challenges, friends, invitations): these processes are necessary to use the app.
• Location and notifications: based on your consent, which you can withdraw at any time in the settings of the app or of your phone.
• Security and service emails (account confirmation, forgotten password): our legitimate interest in ensuring the proper working and security of the app.

None of your data is sold or shared for commercial or advertising purposes.

• All users: your username, your picture, your bio and your mutual friends.
• Your friends only: your entries.

Your email address and your location are never visible to other users.

The full list of your friends is only visible to you and to your friends.

Your data (database, accounts and pictures) is stored with Supabase, on servers located in the European Union.

Access to the data is protected by security rules that limit what each user can see.

The app relies on a few technical providers:

• Supabase: data hosting;
• Google: Google sign-in, fonts, and delivery of notifications on Android via Firebase Cloud Messaging;
• Apple: Sign in with Apple and delivery of notifications on iPhone (Apple Push Notification service);
• Resend: sending of the app’s emails (sign-up confirmation, password reset, account deletion confirmation, etc.);
• CARTO, OpenStreetMap and Nominatim: maps and location;
• Umami: anonymous audience measurement of the challengesbelgium.com website and of the app, hosted in the European Union, without cookies or personal data.

These providers only receive the data needed for their service (for example your IP address when a map is displayed). Some may process data outside the European Union, within the safeguards provided by the GDPR.

When you download the app, Apple (App Store) and Google (Google Play) process certain data under their own privacy policies. Links to external sites (organisers’ websites, social networks) open in your phone’s browser or in the relevant app: those sites have their own privacy rules.

Your data is kept for as long as your account is active.

You can delete your account at any time from the app, in Profile, then Settings, with the “Delete my account” button. Deletion is then immediate and permanent. If your account is linked to Apple, the link between your Apple account and Challenges is also deleted. You can also request it by email at info@challengesbelgium.com: we process it within 30 days.

Events you suggested may remain published, with no link to your account.

How to delete your account

Under the GDPR, you have a right of access, rectification, erasure, portability, restriction and objection regarding the processing of your data, as well as the right to withdraw your consent at any time.

To exercise these rights, write to us at info@challengesbelgium.com, stating the purpose of your request. We will reply within one month.

If you believe your rights are not respected, you may lodge a complaint with the Belgian Data Protection Authority (www.autoriteprotectiondonnees.be).

The app and the website use no advertising cookies and no advertising tracking tools (no Google Analytics, no Facebook pixel).

The website, the web app and the mobile apps use your device’s local storage for technical purposes: keeping your session open, remembering some display preferences (welcome tutorial, last page viewed) and receiving notifications. This storage is essential to how the app works and requires no consent.

The website and the app use Umami, a privacy-friendly audience measurement tool: it works without cookies, stores nothing on your device and cannot identify you or follow you from site to site. It only counts anonymous, aggregated statistics (pages viewed, where visits come from, use of the main features). No consent banner is therefore needed.

The app is intended for people aged 16 or over.

This policy may be changed to remain compliant with the law or with changes to the app. You will be informed of any significant change through the app.

For any other question about privacy, you can write to us at the address mentioned above.