Privacy Policy FR|EN

Last updated: April 25, 2026

RunRival ("we", "us", or "the app") is a running challenge app that lets you compete with friends using data from Apple Health. This Privacy Policy explains what data we collect, why, and how it is stored.

Data we collect

• Apple HealthKit running workouts (distance, duration, start time, pace). Read-only — we never write to your Health data.
• Display name and optional profile photo you choose, so your friends can recognize you in a league. Photos are stored as compressed images in our database.
• Anonymous Firebase user ID, generated on first launch. If you choose to Sign in with Apple, this ID is linked to your Apple account so you can keep your progress across devices and reinstalls.
• Push notification token, so we can notify you when a friend runs or passes you in a league.
• League data you explicitly share: league name, invite code, scores, and rival pass history.
• Verified corporate email (optional, enterprise mode) if you choose to join an organization via the magic link sent to your work inbox. Stored only to be displayed to that organization's HR admins. See the Organizations section below.

Data we do NOT collect

• Your personal email address, phone number, or real identity (unless you Sign in with Apple — in which case we only see an opaque Apple-provided identifier; or unless you explicitly join an organization via magic link, see below).
• GPS coordinates or routes. Only distance and duration are read from HealthKit.
• Heart rate, sleep, nutrition, or any non-running HealthKit data.
• Third-party tracking SDKs or advertising identifiers.

Error monitoring

We use Sentry (sentry.io) to detect and fix server-side technical errors. Sentry only receives technical information (error messages, stack traces) and does not collect any personal data, HealthKit data, or plaintext user identifiers. Sentry data is hosted in the EU (Frankfurt).

How your data is stored

Data is stored in Google Firebase (Firestore and Firebase Authentication) in European data centers (europe-west1). Access is restricted by Firestore security rules: only you can read your own workouts and only participants of a league can see each other's scores.

Data retention

Workout records are retained while your account is active, in order to compute your scores across current and historical leagues. They are permanently deleted when you delete your account. Nudge notifications expire after 30 days. Rival activity and rank events expire after 7 days. Your user profile and challenge data are kept until you delete your account.

Data sharing

We do not sell, rent, or share your data with third parties. Your workouts and scores are only visible to the participants of leagues you join.

Organizations (enterprise mode)

If your organization offers RunRival internally, you can join it by proving you own a corporate email address (via a magic link sent to your inbox). Joining an organization is always a voluntary action on your part — it is never enabled by default.

If you join an organization, the HR admins of that organization can see in their dashboard:

• Your display name (as you chose it in the app) and your verified corporate email;
• The date you joined the organization;
• Global and aggregated organization-wide statistics: total number of weekly runs, cumulative kilometers, participation rate, daily activity.

HR admins never see your individual runs, personal scores, paces, profile photo, or any HealthKit data. The statistics displayed are always aggregated at the organization level.

You can leave an organization at any time: an admin can remove you from the dashboard, which immediately deletes your organization link and your corporate email from your profile. You can also fully delete your account (see Your rights) to erase everything.

Push notifications

Notifications are routed through the Expo Push Service and then to Apple Push Notification service (APNs). We send notifications when a rival in your league runs, or when your rank changes. You can disable notifications at any time in iOS Settings → RunRival → Notifications.

HealthKit disclosure

RunRival reads running workouts from HealthKit only. HealthKit data is never sent to our servers in raw form — we send only the processed summary (distance, duration, pace, date) needed to compute your score. HealthKit data is never shared with third parties or used for advertising.

Your rights

• Revoke HealthKit access anytime: iOS Settings → Health → Data Access & Devices → RunRival.
• Delete your account and all associated data directly in the app: Stats tab → Account → Delete my account. This permanently removes your profile, workouts, stats, challenge participation, notifications, and Firebase Auth record. You can also email us.
• Export your data directly in the app: Stats tab → Account → Export my data. This provides a JSON file containing your profile, workouts, monthly stats, and challenge data (GDPR Article 15).

Children

RunRival is not directed at children under 13. We do not knowingly collect data from children.

Changes to this policy

If we make material changes, we will update the "Last updated" date at the top of this page.

Contact

Questions about this policy or your data? Email [email protected].

RunRival · Scoring · Terms · Support · Contact