Privacy Policy

1. Introduction

NetRace is an app that helps runners keep the race photos that carry their BIB number, along with a record of the races they have joined. This policy explains what data we collect, what we use it for, who we share it with, how long we keep it, and what rights you have over your data.

This policy applies to the NetRace app on iOS and Android and to the netrace.vn website. By using NetRace, you confirm that you have read and understood this policy.

We make three commitments. First, your photos are private: in the app, only you can see photos that carry your BIB number. Second, we do not sell personal data and we show no advertising in the app. Third, marketing messages are sent only with your consent, and you can turn them off at any time.

2. Who we are

NetRace is operated by NetSpace DIGITAL SPACE TECHNOLOGY & MEDIA JOINT STOCK COMPANY, enterprise code 0111188540, referred to below as “NetRace” or “we”.

Our head office is at 3rd Floor, Mipec Building, 229 Tay Son, Kim Lien Ward, Hanoi.

Our representative office is at DD1 - DD1A Bach Ma, Hoa Hung Ward, Ho Chi Minh City.

You can reach our data protection team at contact@netrace.vn or on 0888 138 888.

For app account data, including your login phone number or email, your settings and your messaging choices, NetRace is the data controller. For athlete lists, race results and race photos supplied by the race organizer, NetRace processes data on behalf of the organizer under a data processing agreement with each organizer; the organizer is the controller of your race registration data.

3. Data we collect

When you sign in, we collect the phone number or email you provide. In your profile you may optionally enter a display name, province or city, and club.

From the organizers of the races you registered for, we receive your full name, BIB number, distance, race name and official result. From the organizer and the race photographers, we receive photos that carry your BIB number, together with the time and location of the photo point.

When you report a photo, request a missing race or contact support, we store the content of that request. We also store choices you make in the app, such as hidden photos, notification settings and whether you accept or decline marketing messages.

When you use the app, some technical data is recorded automatically, including device type, operating system, app version, push tokens and error logs.

On the netrace.vn website, we use the analytics tool Amplitude to record how you use the site: pages viewed, buttons clicked, page response times, the BIB numbers you search for and the number of photos found, the ticket purchase steps and the order outcome (race, distance, number of tickets, amount, order code), together with device type, browser, IP address and approximate location (province, city, country) derived from the IP address. When you are signed in, this data is linked to your NetRace account ID, without your name, email or phone number.

We also record how visits to the website unfold — page layout, clicks, scrolling and mouse movement — to find where the site is hard to use or broken. What you type into fields is always masked; personal details shown on the page — names, emails, phone numbers and attendee details in orders and tickets — are masked; selfies, faces cropped from selfies and profile pictures are not recorded.

Through the app we do not collect your location, contacts, other photos on your device, facial or biometric data, health data, ID document numbers or payment information.

4. How we use data

We use your phone number or email together with race participation data to sign you in and to verify that you own a BIB number. Race participation data and photos are used to show your photo library and profile. This processing is to provide the service you request, based on the consent you gave when registering for a race and when using the app.

Push tokens are used to tell you when new photos are ready, only if you allow notifications on your device. The content of your requests is used to handle photo reports, race requests and support.

Your email or phone number is used to send messages from organizers, such as sales dates or offers, only if you have given separate consent for this purpose. You can withdraw consent at any time.

Technical data and access logs are used to protect the service, prevent unauthorized access, fix bugs and improve the app; where possible, we process this data in a form not linked to your identity. We may also process data where the law requires it.

Website analytics and visit recordings are used to understand how athletes use the site — which steps of photo search or ticket purchase cause trouble, which pages are slow — so we can fix bugs and improve the site. We do not use this data for advertising.

The app uses face matching algorithms solely to help runners locate their own photos from race event galleries. Facial data/selfie is processed strictly with explicit user consent per race and is never shared with third parties. Uploaded selfie photos are not stored on our system and are deleted immediately after matching.

5. Race photos and privacy

Photos are private by default: a photo appears only in the accounts of people whose BIB numbers appear in it, and the app has no public photo gallery. For photos with several people, every athlete whose BIB is in the photo sees it in their own account.

You can hide a photo, report a photo tagged to the wrong person, or request that a photo be removed. Removal requests are passed to the organizer for review.

The current version only matches photos by BIB number and does not use face recognition. If a face search feature is added later, we will ask for your separate consent before processing.

When you save a photo to your device or share it through another app, its further use is governed by the policy of the place you share it. Please respect the image of other people in the photo.

6. Notifications and marketing

New-photo notifications are sent only if you allow notifications on your device; you can turn them off in the app or device settings. Messages from organizers are off by default and are sent only if you turn them on in the app or have agreed with the organizer. Every email contains an unsubscribe link that takes effect as soon as you click it. We do not send marketing from anyone other than the organizers of races you joined.

7. Sharing data

We do not sell your personal data, and we share it only in the following cases.

We share with the organizers of races you joined your requests about photos and results, and your messaging choices, so that requests can be handled; the organizer is also the party that supplies race data to us.

We use infrastructure providers for cloud storage, email and messaging, push notifications, error tracking and website usage analytics (Amplitude, Inc., United States). Each provider receives only the data needed for its service, is bound by confidentiality contracts, and may process data only on our instructions.

We provide data to competent state authorities when required by law. If NetRace merges or is transferred, the necessary data may be passed to the successor; we will notify you beforehand.

8. Storage location and retention

Data is stored on servers located in Vietnam, except the website analytics data described in section 3, which Amplitude stores on servers in the United States. This transfer abroad is carried out in accordance with personal data protection law.

Your account and profile are kept until you delete your account. Full-size photos are kept for 1 year after the race date and may then be reduced; original photos held by the organizer are kept under the organizer’s rules. Messaging choices and consent history are kept while you use the service and for as long as needed to demonstrate compliance. Technical and access logs are kept for 12 months. After you delete your account, data is deleted within 30 days, except what the law requires us to keep.

Website visit recordings are deleted automatically after 1 month; other analytics data is kept for as long as we use Amplitude. When you delete your account, or send a request to contact@netrace.vn, the analytics data linked to your account is deleted within 30 days.

9. Security

Data is encrypted in transit. Photo links are short-lived, and original photos have no public link. Access is assigned by role; every time staff view athlete data it is logged. Phone numbers and emails are partly masked in admin tools. The app signs you in with one-time codes and does not store passwords.

No system is completely secure. If an incident affects your data, we will notify you and the competent authorities as required.

10. Your rights

Under data protection law, you have the right to be informed about the processing of your data; to consent, refuse or withdraw consent; to access, view and receive a copy of your data; to request correction of wrong data; to request deletion; to request restriction of or object to processing; and to complain, denounce, sue and claim compensation as provided by law.

You can exercise many of these rights yourself in the app under Settings: download my data, view hidden photos, turn messages on or off, and delete your account. For your name, BIB number and results managed by the organizer, contact the race organizer or send us a request to forward. For any other request, write to contact@netrace.vn; we respond within the period set by law.

11. Deleting your account

You can delete your account in the app under Settings, Delete account, or at netrace.vn/xoa-tai-khoan. When you do, we delete your profile, the links between you and BIB numbers, your in-app photo library and your messaging choices. Results and original photos kept by the organizer under each race’s rules are not deleted; you can ask the organizer to remove photos. Data is removed from our systems within 30 days, except what the law requires us to keep.

12. Children

The app is intended for people aged 16 and over. For athletes under the required age, processing data needs the consent of a parent or guardian. If we find we have collected a child’s data without this consent, we will delete it.

13. Cookies and similar technologies

The app uses no cookies or advertising identifiers and does not track you across other apps or websites.

The netrace.vn website uses two kinds of cookies. Necessary cookies keep you signed in. Amplitude’s analytics cookie stores a random device ID in your browser for up to 1 year to recognize visits from the same browser; it is not used for advertising and does not track you on other websites.

You can delete or block cookies in your browser settings. To have the analytics data linked to your account deleted, send a request to contact@netrace.vn.

14. Changes to this policy

We may update this policy. Important changes will be announced in the app at least 7 days before they take effect. The effective date is shown at the top of the policy.

15. Contact

For any questions about this policy, contact NetSpace at 3rd Floor, Mipec Building, 229 Tay Son, Kim Lien Ward, Hanoi; data protection and support email contact@netrace.vn; hotline 0888 138 888.