RythmRun Privacy Policy
Last Updated: October 2025
Introduction
RythmRun (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the “App”).
By using RythmRun, you agree to the collection and use of information in accordance with this policy.
- Account Information: Username, first name, last name, email address
- Profile Information: Profile picture (optional)
- Authentication Data: Secure token-based authentication
Location Data
- We collect real-time location data when you use the GPS tracking feature during workouts
- Location data includes latitude, longitude, altitude, speed, and accuracy
- This data is used solely to track your fitness activities and provide distance/pace information
Activity Data
- Workout type, duration, distance, speed, calories
- Start and end times of activities
- Descriptive text and activity routes
- Social interactions (likes, comments on activities)
Social Data
- Friend relationships and friend requests
- Likes, comments, and social interactions on activities
- Device information (device type, OS version)
- App usage data
- Error logs and crash reports
- Network information
Purpose of Data Collection
- Service Delivery: To provide and maintain the App’s features
- Activity Tracking: To record and display your fitness activities
- Social Features: To enable friend connections, likes, and comments
- App Improvement: To analyze usage patterns and improve functionality
- Security: To authenticate users and protect against fraud
- Communication: To send you updates about the App (only if you opt-in)
Data Usage Limitations
- We do not sell your personal information
- We do not share your data with advertisers
- We do not use your data for marketing purposes beyond essential app updates
Data Storage
Local Storage
- Profile information and preferences are stored on your device
- Activity data is cached locally for offline access
Cloud Storage
- Your account information and activities are stored on secure servers
- Profile pictures are stored on our servers
- Data is encrypted in transit and at rest
Retention Period
- Your account data is retained as long as your account is active
- Deleted activities are removed from active databases within 30 days
- Backups may retain deleted data for up to 90 days for disaster recovery
We Share Data With:
- Your Friends: Activities marked as public are visible to your friends
- Public Activities: If you mark activities as public, anyone using the App can see them
- Service Providers: Third-party services necessary for app functionality (only as needed)
We Do NOT Share:
- Location data with third parties
- Personal contact information
- Private activity data with non-friends
Your Privacy Rights
You Have The Right To:
- Access: Request a copy of your personal data
- Correction: Update your information at any time through app settings
- Deletion: Delete your account and request data removal
- Portability: Request data in a portable format
- Opt-out: Disable location tracking or social features
How to Exercise Rights:
- Update profile: Use in-app settings
- Delete account: Contact support at [saurabh.iiitk.job@gmail.com]
- Data request: Email us at [saurabh.iiitk.job@gmail.com]
Location Privacy
Location Data
- We only collect location data when you actively start a workout
- Location tracking can be disabled in app settings at any time
- Location data is stored to recreate your workout route
- You can choose to make activities private (friends only) or public
Location Sharing
- Your exact location is never shared with other users in real-time
- Only workout routes (after completion) are visible to friends
- Start/end locations are approximate, not exact addresses
Children’s Privacy
Our App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
Security
Security Measures
- All data transmission is encrypted using HTTPS/TLS
- Passwords are hashed using industry-standard bcrypt
- Authentication uses secure JWT tokens
- Regular security audits and updates
While we use commercially acceptable means to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
International Data Transfers
Your information may be transferred to and maintained on servers located outside of your country. By using our App, you consent to this transfer.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy in the App
- Sending you an email notification (if you’re subscribed)
- Updating the “Last Updated” date
You are advised to review this Privacy Policy periodically.
If you have questions about this Privacy Policy, please contact us:
- Email: [saurabh.iiitk.job@gmail.com]
- Website: [https://github.com/cosmicsaurabh]
Compliance
This Privacy Policy is designed to comply with:
- General Data Protection Regulation (GDPR) - EU
- California Consumer Privacy Act (CCPA) - California
- Children’s Online Privacy Protection Act (COPPA)
Data Protection Officer
If you have privacy concerns or wish to file a complaint, contact our Data Protection Officer at [saurabh.iiitk.job@gmail.com].
Your acceptance of these terms
By using RythmRun, you signify your acceptance of this Privacy Policy. If you do not agree to this policy, please do not use our App.