Privacy Policy
Last Updated: September 16, 2026
Your privacy matters to us. This policy explains what information Dromos collects when you discover events, register to run, organize a race, or make a payment — and how we use, share, and protect it.
It applies to the Dromos website and mobile app, and to everyone who uses them, whether you are a runner or an event organizer.
01Introduction
Dromos (“Dromos,” “we,” “us,” or “our”) operates a platform — available on the web and as a mobile app — where runners discover and register for running events, and organizers create and manage those events. This Privacy Policy explains what information we collect, how we use it, when we share it, and the choices and rights you have.
By creating an account or using Dromos, you agree to the practices described here. If you do not agree with this policy, please do not use the platform.
02Information We Collect
We collect the following categories of information so the platform can work as intended.
Account Information
Dromos uses Google Sign-In to create your account. When you sign in, we receive your name, email address, and profile photo from Google. We also store the account role you use (runner or organizer) and any profile details you choose to add, such as your date of birth, blood type, and emergency contact.
Registration Information
When you register for an event, we collect the details needed to process that registration — your name, contact details, chosen category and distance, shirt size, emergency contact, and (where relevant) health details such as blood type. Organizers provide organization details such as their organization name, contact person, and website.
Where you register other people alongside yourself, we collect the same details for each of them from you. Where a participant is under 18, we also collect the name of the parent or guardian who consented on their behalf.
Medical Certificates
Some distances require a medical certificate from your doctor. Where the organizer of an event has set that requirement, you may upload one against your registration. This is health information, and we treat it differently from everything else described here.
The file is stored privately. It is never published, never given a public address, and is not visible to other runners, to other organizers, or to anyone browsing the site. It can be opened only by you and by the organizing team of the event you uploaded it for, and only through a temporary link that expires within minutes. Dromos staff do not have access to it, and neither do an organizer's race-day volunteers — they are shown only whether a certificate was accepted, never the document itself.
We delete the file automatically 7 days after the event. A certificate is needed up to race day and not after it, so we do not keep one longer than that. What remains afterwards is only whether the organizer accepted it, which is part of their record of who took part; the document itself is gone.
You can also remove it yourself at any time before then, from My Races, using the Remove button beside the certificate; doing so deletes the file itself, not merely our link to it. It is also deleted when you delete your Dromos account. Uploading a certificate is optional and never a condition of registering or of taking part — an organizer may still ask to see one at the venue.
Information Organizers Provide About You
An organizer may bring an existing event onto Dromos and upload the registrations they already hold — including details of people who registered elsewhere and have never used Dromos. Where that happens, the organizer is the source of the information and remains responsible for having collected it lawfully. We use it only to run that event on their behalf: producing the roster, race numbers, check-in, and results. If your details reached us this way and you want them removed, contact us and we will work with the organizer.
Payment and Purchase Information
Payments are processed by trusted third-party payment providers. When you pay, we do not receive or store your card numbers, wallet PIN, or banking log-in credentials. We receive limited payment details from the provider — such as the payment status, method, amount, and a reference number — to confirm your registration and issue your ticket. We also record what you bought, including any add-ons such as shirts or extras, and the amount of any refund.
Refund Account Details
Some payment methods cannot be reversed by our payment provider — QR Ph, for example, cannot be refunded through the provider at all. If you are owed a refund on a payment like that, we ask you where to send it and store what you give us: the method you choose, the name on the account, and the account or mobile number. We ask for this inside the Dromos app where you have an account, and by a link sent to your registered email address where you do not.
We use these details for one purpose only — to send you the refund you are owed. We do not use them to take payment, we do not share them with the event organizer unless the organizer is the party who owes you the refund and is making the transfer, and we do not use them for anything else. The account number is encrypted while stored, and screens inside Dromos show only its last four digits; it is shown in full only to the person making the transfer, at the moment they make it.
These details are kept with the registration they relate to, under the retention rules described below, and you can ask us to delete them at any time using the rights set out in User Rights.
Organizer Identity Verification
Before we send an organizer money for the first time, we ask the person behind the organization to prove who they are by uploading a government-issued ID. We ask for this at the first payout rather than at sign-up, so that nobody has to hand over an ID simply to list an event.
We do not keep the document. It is stored privately while it waits to be reviewed, can be opened only by a Dromos administrator and only through a temporary link that expires, and is deleted the moment a decision is recorded. If nobody has reviewed it within 21 days it is deleted anyway and we ask again. We never record the ID number at all. What we keep is the outcome — that a check was done, when, by whom, the type of document shown (for example “PhilID”), and any note the reviewer wrote.
Organizer Payout Details
To send an organizer their money, we collect the bank or e-wallet account it should go to: the institution, the name on the account, and the account number. This applies to organizers only — a runner is never asked for an account except in the refund case described above.
The account number is encrypted while stored, and screens inside Dromos show only its last four digits. We use it to send payouts and for nothing else, and never to take payment. Before the first real payout we send a small verification transfer carrying a short code, which the organizer reads from their own banking app and types back to us; this confirms the account is real and reachable by the person claiming it.
Payout accounts are never edited in place. Changing one retires the old record and creates a new one, so that a past payout can always be traced to the account it was actually sent to. Retired records are kept with the payment history under the retention rules described below.
Race Numbers, Check-In and Results
When you take part in an event, we hold the race number assigned to you, whether you checked in or collected your race kit, and any results the organizer publishes through Dromos — such as your finish time, category placing, and rank.
Device Information
We collect technical information about the device you use, such as device type, operating system, app version, browser type, and IP address. This helps us keep the platform secure and diagnose problems.
Usage Information
We collect information about how you use Dromos — for example, events you view, searches you make, features you use, and timestamps of your activity. If you use map or location features, we may use approximate location to show nearby events.
03How We Use Information
We use the information we collect to:
- Create and manage your account and keep you signed in.
- Facilitate event registrations and payment transactions. Any refunds are processed and managed solely by the event organizer in accordance with their published refund policy.
- Generate your digital QR ticket and enable race-day check-in.
- Provide organizers with the tools to manage participants and their events.
- Send transactional messages such as confirmations, receipts, and event updates.
- Keep the platform safe by detecting and preventing fraud and abuse.
- Improve the platform, understand how it is used, and develop new features.
- Comply with legal obligations and enforce our terms.
04Email and Notifications
We send two kinds of email. Transactional emails — such as registration confirmations, payment receipts, ticket details, refund notices, and important event updates — are necessary to provide the service, and you cannot opt out of them while you have an active registration or account.
We may also send optional updates, such as organizer digests or product announcements. You can opt out of these non-essential emails at any time using the unsubscribe link they contain or by contacting us. Email is delivered through a third-party email provider on our behalf.
The mobile app can also send push notifications — for example a reminder a few days before your race, a reminder the evening before it, and a note when results for your event are published. We ask for your permission before sending any, and you can turn them off at any time in your device settings. Turning them off does not affect your registration.
05Information That Is Public
Most of what we hold about you is private to you, the organizer of the events you enter, and our service providers. Two things are different.
Race results are public. When an organizer publishes results through Dromos, your name, category, race number, finish time, and placing can be viewed by anyone with a link to that event’s results page, and may be indexed by search engines. This is the long-standing convention for timed races and is part of taking part in one.
Separately, images you upload — a profile photo, or an event’s cover image and gallery if you are an organizer — are stored so they can be displayed in the app. Your profile is not listed on any public page, but the image files themselves are served from a public web address, so anyone holding the direct link to an image can open it. Please keep that in mind when choosing a photo.
If you would rather a published result about you were removed, contact the event organizer, who controls what is published for their event. You can also contact us and we will help.
07Third-Party Services
Dromos relies on reputable third-party services to operate. These include providers for sign-in and authentication, database and file hosting, online payments, email delivery, and maps. Each provider processes information under its own privacy policy and security practices.
Event pages may also link to organizers’ own websites or social media. We are not responsible for the privacy practices of sites we do not operate, and we encourage you to review their policies.
08Data Retention
We keep your personal information for as long as your account is active or as needed to provide the platform. We retain certain records longer where required — for example, registration and payment records may be kept to meet financial, tax, and legal obligations, and to preserve the history of past events.
When information is no longer needed, we take reasonable steps to delete or anonymize it. You may request deletion of your data as described in the User Rights section below.
When You Delete Your Account
You can ask us to delete your account from the Dromos app, or by emailing us. It does not happen immediately: the request sits for 30 days, during which you can sign in and cancel it. After that it is carried out and cannot be undone.
What is erased. Your profile — your name, email address, phone number, photo, date of birth, blood type, emergency contact and the rest of it — together with your Google sign-in, your profile photo file, any medical certificates you uploaded (including any you uploaded for people you registered), your saved events, and your notification settings and devices. Questions you asked an organizer that were never answered are deleted with them.
What stays, and why. Your registrations remain part of the organizer's record of who took part, along with the name you gave at the time, any race number assigned to you, whether you checked in, and any results already published. So do the waivers you accepted and the payment records we are required to keep. These are not ours alone to erase — they are an organizer's record of an event that actually happened, and a record of what you agreed to. A question of yours that an organizer answered publicly stays on the event page as part of its FAQ, with your name removed from it.
Because the account is emptied rather than removed outright, a marker remains showing that it was deleted and when. It holds no personal information about you.
09Data Security
We use reasonable administrative, technical, and physical safeguards to protect your information. Data is encrypted in transit using HTTPS, access to systems is restricted, and we work with established infrastructure and payment providers.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach that affects your personal data, we will notify you and the appropriate authorities as required by law.
11User Rights
Subject to applicable law, you have the right to:
- Access the personal information we hold about you.
- Correct information that is inaccurate or out of date.
- Request deletion of your personal information.
- Object to or restrict certain processing of your information.
- Withdraw consent where our processing is based on consent.
- Request a copy of your information in a portable format.
- Lodge a complaint with the National Privacy Commission of the Philippines.
12Children's Privacy
Dromos is intended for users who are at least 18 years old. We do not knowingly collect personal information directly from children without appropriate consent.
Minors may take part in events where the organizer permits it, in which case a parent or guardian is responsible for registering the minor and providing any required consent, such as an event waiver. If you believe a child has provided us information without proper consent, please contact us so we can address it.
13International Data Transfers
Dromos uses cloud infrastructure and service providers that may store or process information on servers located outside the Philippines. Where information is transferred internationally, we take steps to ensure it remains protected in a manner consistent with this policy and applicable data protection laws.
14Philippine Data Privacy Act (RA 10173)
Dromos complies with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations. Under the Act, you have rights including the rights to be informed, to access, to correct, to object, to erasure or blocking, to damages, and to data portability.
For the personal information we handle to run the platform, Dromos acts as a personal information controller. Event organizers are separately responsible as controllers of the registration information they collect and use for their own events. If you have concerns we cannot resolve, you may contact the National Privacy Commission (privacy.gov.ph).
15Changes to this Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top of this page. For material changes, we will provide additional notice, such as an in-app message or email. Your continued use of Dromos after an update means you accept the revised policy.
16Contact Us
If you have questions about this Privacy Policy or how we handle your information, or if you would like to exercise your privacy rights, please reach out.
Email: [email protected]