Iver — Last updated: October 2026
Iver ("we", "us") operates the marketplace for private runs at iver.run. We are the data controller for personal data collected through the platform.
Account data: Name, email address, phone number, profile photo.
Google sign-in: If you sign in with Google, Google shares your name, email address and profile picture with us, and nothing else from your Google account. We never see your Google password. We use them only to create your Iver account and fill in your profile, which you can change at any time. Your name and picture then appear on your profile, just as if you had typed them in yourself. We store them with the rest of your account data in Supabase, and never sell them or use them for advertising. You can remove Iver's access at any time at myaccount.google.com/connections.
Booking data: Run bookings, dates, time stamps, number of runners.
Payment data: Processed by Stripe. We do not store card details — Stripe does. We receive confirmation of payment and payout status.
Location data: City-level location used to surface relevant tours. We do not track your GPS.
Usage data: Pages visited, the page or campaign that brought you here (for example, which poster QR code you scanned), device type and browser — collected with PostHog, hosted in the EU, to improve the platform. We run it in cookieless mode: nothing is stored on your device. PostHog uses your IP address and browser details to estimate your approximate location and to count unique visitors with an anonymous identifier that changes daily.
Account activity: When you are signed in, we also record key actions in PostHog — signing up, completing your profile, creating a run, and making, paying for, cancelling or rating a booking — linked to your account's random ID, never your name, email address or phone number. This helps us see how the service is used. These records are not linked to your anonymous browsing.
| Purpose | Legal basis |
|---|---|
| Creating and managing your account | Contract |
| Processing bookings and payments | Contract |
| Sending booking confirmations and updates | Contract |
| Preventing fraud and abuse | Legitimate interest |
| Improving the platform | Legitimate interest |
| Marketing emails (if opted in) | Consent |
We do not sell your data. We do not share it with third parties beyond what is needed to operate the service.
We keep your account data for as long as your account is active. Booking records are kept for 3 years for accounting and legal purposes. You can request deletion of your account at any time (see Section 6).
As a person in the EEA, you have the right to:
To exercise any of these rights, email privacy@iver.run. We will respond within 30 days.
You also have the right to lodge a complaint with your national data protection authority. In Norway, this is Datatilsynet.
We only use essential cookies, to keep you logged in. We do not use analytics or advertising cookies: our analytics (PostHog) runs without cookies or any other storage on your device. You can disable cookies in your browser settings, though logging in will not work without them.
We may update this policy. We will notify you by email or a notice on the site for material changes.