Privacy policy

FNISH is based in the Netherlands. The controller of your personal data is [legal entity name: to be completed by FNISH before launch], registered with the Dutch Chamber of Commerce (KvK) under [KvK number: to be completed by FNISH before launch], at [registered address: to be completed by FNISH before launch].

Contact for privacy questions: info@fnish.co.

• Partner applications. We store what you send us to handle your application: your name, your email address and what you tell us about your organisation. Legal basis: our legitimate interest in replying to you. We delete applications that don’t lead to a partnership within 12 months.
• Keeping the form safe. We limit how often one connection can submit the partner form. For this we store a one-way, keyed hash of your IP address for at most a day, never the address itself. Legal basis: legitimate interest in preventing abuse.
• Codes. The affiliate program is paused. If you have a code of your own, we store it with a name for it and the FNISH account it belongs to. When you sign in here you see how many people added it, how many have paid and what it earned, never who they are. If you add someone’s code in the app, your account keeps it, and what you pay is used to work out that rider’s share. If you delete your account, those amounts stay for our books, no longer tied to you.

On this website we do not ask for health information, injuries, age, disability information, training data or your precise location.

This site uses no advertising or analytics cookies and no tracking pixels. If you have a code and sign in to see what it earned, your browser keeps that sign-in in session storage until you close the tab. Our hosting provider may keep standard technical logs for security and reliability. The App Store and Google Play have their own policies once you follow a link there.

• Supabase: database hosting. [confirm project region (EU recommended): to be completed by FNISH before launch]
• Vercel: website hosting.
• Resend: sending email.

We have, or will have before launch, data processing agreements with these providers. Where a provider processes data outside the European Economic Area, it does so under appropriate safeguards such as the EU Standard Contractual Clauses. We never sell your data, and we don’t use it to train AI models.

You can ask to see, correct or delete your data, to restrict or object to how we use it, or to receive it in a portable format.

You can contact us using the details above.

If you’re unhappy with how we handle your data, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

FNISH is intended for athletes aged 18 and over.

If we change this policy, we’ll update the version date above. If a change affects how we use data you’ve already given us, we’ll tell you by email.