Privacy Policy
RunTheDay Race Assistant ("this app") is a ChatGPT App, built on the Model Context Protocol (MCP), that helps you find running races, view registration details, complete registration, and pay via Stripe — all from within a ChatGPT conversation. This policy describes exactly what data this app collects, why, who it's shared with, how long it's kept, and the controls available to you. It reflects the app's actual current tools and data flows, not a generic template.
This app is a bridge between ChatGPT and RunTheDay's race registration platform (runtheday.com, operated by AVIMBU). Registration and payment data you submit is sent directly to RunTheDay and Stripe to complete your registration — see "Third Parties" below. This policy covers only what this app itself does with your data; ChatGPT's own handling of your conversation is governed by OpenAI's Privacy Policy.
1. Data This App Collects
1.1 Information you provide, via what you type in ChatGPT
| Data | When | Why |
|---|---|---|
| Search filters: city, state/country, ZIP code, search radius, latitude/longitude | Browsing or searching for races | To find races matching your request |
| Race name or slug | Looking up a specific race | To fetch that race's details, events, and pricing |
| First and last name | Completing registration | Required by RunTheDay to identify you as the race participant on your registration |
| Email address | Completing registration | Required by RunTheDay to create your registration and send you confirmation |
| Phone number | Completing registration | Required by RunTheDay on every registration submission |
| Event / distance choice and registration type (e.g. "5K", "Runner") | Completing registration | To register you for the correct event and pricing tier |
| Age or date of birth, gender, expected pace, street address/city/state/ZIP code, emergency contact name and phone, shirt size/style, disclaimer agreement | Completing registration, only for races whose director has enabled the specific field | Collected only when the race director has configured that specific race to require it — never requested for a race that doesn't ask for it. Age and date of birth are mutually exclusive: a race asks for at most one of the two, never both. |
| Add-on product selections, donation amount, employer name (for employer-matched donations), coupon code, team choice (join or create) and team name | Completing registration, only if you choose to use these optional features and only for a race that offers them | To apply your chosen add-ons/donation/coupon/team to your registration. All optional — never required to complete a registration. |
1.2 Technical and operational data, collected automatically
| Data | Why |
|---|---|
| ChatGPT conversation session identifier | Used only as a temporary in-memory cache key (e.g. to remember which races you were just shown) for the duration of the conversation. It is never written to disk, never sent to RunTheDay or Stripe, and is discarded automatically after 5–10 minutes of inactivity (see Retention below). |
| Guest authentication token | Issued by RunTheDay's backend to authorize your specific registration session. Stored temporarily (see Retention) so payment status can be checked later in the conversation. |
| Registration ID and payment session ID | Reference identifiers returned by RunTheDay/Stripe, used to look up and report your payment status back to you. |
| Server operational logs (timestamps, which tool was called, request/response status, error messages) | To operate, debug, and troubleshoot this app. For registration requests specifically, these logs can include the data you submitted (e.g. your name and email address) so that failed registrations can be diagnosed. Logs are written to the hosting provider's standard log stream and are not used for any purpose beyond operating and troubleshooting this app. |
1.3 What this app does NOT collect
- Payment card numbers or any other card data — entered directly into Stripe's own hosted checkout page, which this app never sees.
- Government identifiers (e.g. Social Security numbers), passwords, API keys, or multi-factor authentication codes — this app never asks for these.
- Your ChatGPT account identity or profile information beyond what you explicitly type in to complete a registration.
- Location tracking in the background — location is only used if you explicitly provide it (e.g. "races near me") for that one search.
- Any data from other apps, browser history, or device sensors.
- File uploads — this app has no tool that accepts file or document uploads.
2. How This Data Is Used
- To search for and display races matching your criteria.
- To show you details, events, and pricing for a specific race.
- To determine which additional fields a specific race's director requires before you register, and to submit only the fields that race actually asks for.
- To submit your registration — including any race-director-required fields and any optional add-ons, donation, coupon, or team choice you make — to RunTheDay on your behalf.
- To create a Stripe payment session for your registration fee, and to check whether that payment has completed when you ask.
- To operate, secure, and troubleshoot this app (operational logging, error diagnosis).
This app does not use your data for advertising, profiling, or any purpose other than the ones listed above.
3. Third Parties This App Shares Data With
| Third party | What's shared | Why |
|---|---|---|
| RunTheDay (runtheday.com, operated by AVIMBU) | Search filters, race selection, and whatever registration fields the specific race you're registering for requires — always at minimum your first name, last name, email, and phone number, and optionally age/date of birth, address, gender, pace, emergency contact, shirt size, disclaimer agreement, add-ons, donation, coupon code, and team choice, depending on what that race's director has configured and what you choose to add | RunTheDay is the race registration platform of record — your registration is created directly in their system. Their handling of this data is governed by RunTheDay's own privacy policy. |
| Stripe, Inc. | Registration fee amount and a reference ID (race name, registration ID) — never your card details, which go directly to Stripe's own checkout page | To process your registration payment. Stripe's handling of your payment data is governed by Stripe's Privacy Policy. |
This app does not sell your data, and does not share it with any party for advertising or marketing purposes.
4. Data Retention
| Data | Retention |
|---|---|
| Race search results cache (in-memory, per conversation) | 5 minutes, then automatically discarded |
| Selected race details cache (in-memory, per conversation) | 10 minutes, then automatically discarded |
| Guest authentication token / registration session mapping | 24 hours, then automatically expired |
| Short payment-link redirect | 1 hour, then automatically expired |
| Server operational logs | Retained per the hosting infrastructure's standard log rotation; not used or accessed outside of operating and troubleshooting this app |
This app does not maintain a persistent user account or profile — nothing here is kept beyond the windows above. Your actual registration and payment records — including any of the race-specific fields described in Section 1.1 — are retained by RunTheDay and Stripe respectively, per their own retention policies, since they are the systems of record for those transactions.
5. Your Rights and Controls
- Access / correction / deletion of registration records — since these are held by RunTheDay (the race organizer platform), contact RunTheDay directly, or contact us (below) and we will help route your request.
- Payment records — held by Stripe; see Stripe's Privacy Policy for your rights regarding payment data.
- Everything else this app itself holds — expires automatically per the retention table above; there is no separate deletion request needed.
6. Security
- All traffic between ChatGPT, this app, RunTheDay, and Stripe is encrypted in transit (HTTPS/TLS).
- Authentication tokens are short-lived and scoped to a single registration session, and are redacted from operational logs (never written in full, only truncated previews when logged at all).
- This app never receives or stores payment card numbers — that data goes directly to Stripe's own PCI-compliant checkout page.
- The interactive widgets shown in ChatGPT run under a Content Security Policy that restricts network access to only the specific domains this app needs (RunTheDay's API, its CDN, and Stripe checkout) — they cannot make arbitrary outbound requests.
7. AI Training
This app does not use the data described above to train, fine-tune, or improve any AI or machine learning model, and does not provide it to any third party for that purpose. How OpenAI/ChatGPT itself may use conversation data is governed separately by OpenAI's own Privacy Policy and is outside this app's control.
8. Children's Privacy
This app is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided data through this app, contact us and we will work with RunTheDay to remove it.
9. Changes to This Policy
If this app's data practices change — for example, if a tool starts collecting additional fields — this page will be updated accordingly, and the "Last updated" date at the top will reflect the change.
10. Contact
Questions about this policy, or requests regarding your data, can be sent to
support@runtheday.io.