RITMOS RUN CLUB

Privacy Policy

Effective: September 3, 2026

English  ·  한국어

RITMOS RUN CLUB (the “Service”) is a running tracking and community app. This policy explains what personal information the Service collects, and how that information is used, stored, and shared.

1. Information we collect

CategoryDataWhen
AccountEmail address, social sign-in identifier (Google, Apple, Kakao), nickname, profile photoWhen you sign up or sign in
LocationGPS coordinates and route recorded during a run (precise location)Only while a run is being recorded
Health and fitnessDistance, time, pace, cadence, heart rate, caloriesWhen measured, or when you connect a health app
PhotosImages you attach to a runWhen you add them
ActivityRhythm (meetup) participation, follows, likes, comments, reward claimsWhen you use those features
DevicePush notification token (FCM)When you allow notifications

2. How we use it

We do not use your information for advertising, and we do not build advertising profiles or track you across other companies’ apps or websites.

3. Location

Location is collected only while you are recording a run. Recording continues with the screen off by means of a foreground service notification on your device. When you end a run, location collection stops. We do not collect location for advertising or tracking.

4. Health and fitness data (Health Connect / Apple Health)

Only if you grant permission, we read running-related workout data (distance, workouts, heart rate, calories and similar) and reflect it in your records. This data is used solely to display your records and calculate mileage. It is never provided to third parties for advertising, and it is not used for marketing.

5. Third parties who process data

ProviderPurpose
SupabaseAccount authentication and data storage (backend)
Google, Apple, KakaoSocial sign-in
Google Firebase Cloud MessagingSending push notifications
Google MapsDisplaying maps and routes

Runs, photos, and nicknames you set to public can be seen by other users. Apart from that, we do not sell your personal information and do not share it with third parties for advertising.

6. International transfer

The Service is operated from the Republic of Korea, and your account, run, and photo data are stored on servers located in Seoul, Republic of Korea (AWS ap-northeast-2). If you use the Service from outside Korea — including from the United States — your information is transferred to and processed in Korea, which may not provide the same level of data protection as your own country. By using the Service you understand and agree to this transfer.

Some of the providers listed in section 5 (Google Firebase Cloud Messaging and Google Maps) operate globally and may process the limited data they receive — a push notification token, or map tile requests — on servers in other countries.

7. Retention and deletion

Your data is retained while your account exists. In the app, Settings → Delete account immediately deletes your account together with the related run, photo, and activity data. If you would rather ask us, write to the address in section 12.

8. Your rights

You may request access to, correction of, or deletion of your information at any time, and you may withdraw location, health, and notification permissions from your device settings whenever you like.

9. Your California privacy rights

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the rights below. We honour these requests regardless of where you live.

To exercise any of these rights, write to the address in section 12. We may ask you to verify the email address on your account before we act on a request.

10. Your Canadian privacy rights

If you are in Canada, PIPEDA — and in Quebec, the Act respecting the protection of personal information in the private sector (Law 25) — gives you the right to access the personal information we hold about you, to have it corrected, and to withdraw consent. The rights described in sections 8 and 9 are available to you on the same terms, and you can exercise them by writing to the address in section 12. We rely on your consent to collect location and health data, and you can withdraw that consent at any time from your device settings without losing access to the rest of the Service.

11. Children

The Service is intended for people aged 14 or older and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, write to the address below and we will delete it.

12. Contact

Privacy questions and deletion requests: k27071@gmail.com

13. Changes

We may update this policy. When we do, we will post the revised version on this page together with its effective date.