Privacy Policy
Saffrun helps runners in the EU find better gear with independent, AI-driven shoe recommendations. We only collect the data we need to provide this service and to improve it responsibly.
Controller & contact
The data controller for Saffrun is AFN Labs (sole proprietorship), established in the Netherlands. For users in the Netherlands and the European Economic Area (EEA), we process personal data in accordance with the GDPR and Dutch data protection law. For privacy requests or questions, contact us at support@saff.run or via the Contact page. Full entity details are available on the Legal Information page.
What data we collect
- Quiz answers: Running experience, goals, distances, pace, surface preferences, and other answers you give in the shoe quiz.
- Account data (if you register): Email, name (if provided), and preferences stored in your account.
- Technical data: IP address, device type, browser, and similar data needed for security and basic operation.
- Cookies and similar tech: See the Cookies section below.
- Communications: If you contact us, we process the content and contact details you provide.
Purposes & lawful bases
- Providing the service (contract): To run the quiz, generate recommendations, and manage your profile and locker.
- Analytics & improvement (consent): We use non-essential analytics (PostHog) only with your consent. You can withdraw or change consent at any time via Cookie preferences.
- Security (legitimate interest): To protect against abuse, fraud, and security incidents. Lawful basis: legitimate interest.
- Affiliate tracking: When you click through to retailers, affiliate networks (e.g. Awin, Daisycon) may set cookies and process data per their policies to attribute commissions. We do not control their processing; see Cookies and third parties below.
Processors & third parties
We use the following processors and services that may process personal data on our behalf or as independent controllers:
- Clerk: authentication and account management
- PostHog: product analytics (only with your consent)
- Vercel: hosting and serverless functions
- Railway: backend and database hosting
- Affiliate networks (e.g. Awin, Daisycon): tracking of clicks and conversions to retailers.
We choose providers that meet GDPR requirements and do not sell your personal data.
International transfers
Some processors may be located outside the EEA. Where data is transferred, we ensure appropriate safeguards are in place.
Cookies & affiliate tracking
We use cookies for essential operation, analytics (with consent), and affiliate tracking when clicking retailer links.
Retention
- Account and quiz data: retained while your account is active; deleted or anonymised after closure, unless legal obligations apply.
- Logs and security-related data: typically up to 12 months.
- Analytics: aggregated or pseudonymised where possible, in line with provider settings and consent.
Your rights & complaint authority
Under the GDPR you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data (subject to exceptions)
- Restrict processing in certain cases
- Data portability where applicable
- Object to processing based on legitimate interest
- Withdraw consent at any time (where we rely on consent), e.g. via "Cookie preferences" in the footer
To exercise these rights, contact us at support@saff.run. If you are in the Netherlands or another EEA country, you also have the right to lodge a complaint with your local supervisory authority. In the Netherlands, that is the Autoriteit Persoonsgegevens (AP).
Expert insight: Our AI shoe quiz is designed to be helpful without being intrusive. We do not need detailed medical histories or precise GPS traces to suggest gear; we rely on high-level signals like experience, distance ranges, and surface type.
Last updated: March 2026. We may update this policy from time to time.