ISRU Privacy Policy

Last Updated: 3rd July 2025

Data Controller: Tom Sachs Studio, LLC, 245 Centre St, New York 10004

The Short Version

We collect only what we need to run ISRU: your name, email, phone, shoe size (for prizes), and optionally your city (for local store drawings). Your exercise photos stay private unless you choose to make them public. We don't sell your data, we don't track you across the web, and you can delete your account anytime. No kids under 13.

What We Collect

Information you give us:

• Name
• Email address
• Phone number
• Shoe size (to fulfill exclusive shoe prizes for leaderboard winners)
• Photos of you exercising (you control whether these are public or private)
• City (optional - only if you want to enter local store drawings)

Information collected automatically:

• Anonymous server logs for security and diagnostics
• Your authentication token (stored locally on your device)

How We Use Your Information

We use your information to:

• Run the ISRU app and track your daily participation
• Contact you about your account
• Fulfill prizes (exclusive shoes for leaderboard leaders)
• Enter you in local store drawings (only if you opt in)
• Keep the app secure and prevent fraud

Legal Basis for Processing (for our EU friends)

We process your data based on:

• Contract: We need your basic info to run the app for you
• Consent: For optional stuff like making photos public or entering local store drawings
• Legitimate Interest: For security, fraud prevention, and anonymous diagnostics

Who We Share With

We don't sell or rent your data. Period.

We only share your information with:

• Infrastructure providers (Heroku, AWS, Cloudflare) who help us run the app
• Our Shopify store for prize fulfillment
• Your local Nike store - but ONLY if you explicitly opt in for local drawings
• Law enforcement if legally required

We don't share your personal info for marketing. Any marketing emails come only from us, and only if you've opted in.

As we promise when you sign up: We will never, ever, ever sell your data. Even if we sell our souls to the devil, we will not sell our mailing list.

For SNKRS app benefits, we use a privacy-preserving token system. We don't share your personal data directly with SNKRS.

Your Rights

You can:

• Delete individual photos anytime
• Delete your entire account anytime (7-day grace period, then permanent deletion after 30 days)
• Access your data by emailing nikecraft@tomsachs.org
• Export your data (for EU users - email us and we'll send your data in a portable format)
• Correct your info directly in the app (for security, email verification required to change your primary account email)
• Change privacy settings for your photos (public/private)
• Opt out of emails in Account Settings or by emailing us (no hard feelings)

We won't discriminate against you for exercising any of these rights.

Marketing Communications

If you check the box giving us "permission to send early announcements about future product releases and studio events," then yes, we will spam you (lovingly). But as promised: we will never, ever, ever sell your data.

You can opt out anytime in Account Settings or by emailing us. No hard feelings.

Data Retention

• Active accounts: We keep your data while you use ISRU
• Deleted accounts: 7-day soft delete (you can change your mind), then permanent deletion after 30 days
• Server logs: Kept anonymously for reasonable periods for security

International Users

ISRU is available globally. Your data is processed in the USA. By using ISRU, you consent to the transfer of your data to the USA. We use standard security measures to protect your data during transfer.

No matter where you are, we treat your data with the same respect. For EU users, our legal basis is detailed above.

Security

We use industry-standard security measures including encryption in transit and at rest. We do our best to protect your data, but no system is 100% secure. If something goes wrong, we'll notify affected users promptly.

Children

No one under 13 can create an account. Parents can operate accounts for their kids, but the parent must be the account holder.

Local Storage

The ISRU app stores:

• Your authentication cookie
• Cached images to save bandwidth

Delete the app to remove this local data.

Changes to This Policy

We'll notify you of changes through in-app notifications. Continued use after the effective date means you accept the new policy.

California Residents

Good news: We don't share your personal information with third parties for their direct marketing purposes. So there's nothing to opt out of.

Governing Law

This policy is governed by the laws of New York and the USA.

Contact Us

Questions? Email nikecraft@tomsachs.org

Why this policy is different: We built ISRU to celebrate daily movement, not to harvest data. No tracking pixels, no behavioral advertising, no creepy stuff. Just you, your daily exercise, and maybe some cool shoes.