Run Run Day Privacy Policy

This policy explains how Wolflume Inc. ("Wolflume", "we", "us") collects, uses and shares personal information when you use the Run Run Day (跑啦喂) mobile app and its related services. For our company website, see the website privacy policy.

Information we collect

Account. Your email address and password, used to create and sign in to your account. Sign-in is handled by Amazon Cognito; we never see your password in plain text. We also assign you an internal user ID and a runner number that friends can use to find you.

Profile. Information you choose to add, such as your display name, username, district, running experience, goals, bio, quote, usual pace, distances, running days and times, usual routes, gear, races, results and personal bests. If you use running-buddy matching, you may also add your age, gender, pairing photos and pairing preferences. Age and gender are optional.

Photos. Photos you choose from your photo library for your profile, cover, posts, chats or club albums. We re-encode uploaded photos and remove embedded metadata, including GPS location, before storing them. The app does not access your camera.

Location and runs. When you start a run, the app uses your device's precise location (with your permission, while the app is in use and during an active run) to measure distance and pace and to save your route. We store your run records (date, distance, time, splits, pace and any notes or location text you add) and your GPS route. Your GPS route is private to you and is not shown to other users. The app does not track your location when you are not recording a run.

Social activity. Running-buddy likes and passes, matches, chat messages and shared photos or run summaries, meetups you organise or join, friend connections, friend posts, and ratings you give to other runners after a run. Individual ratings are kept private; other runners only ever see an aggregate score, and only after enough people have rated them.

Clubs. Clubs you join, the information you provide when joining (which may include your reason for joining, experience, goals and phone number), attendance, announcements read, race results and medals, and club album photos and captions. If you apply to create a club, we collect the applicant's name, role, email, phone or WhatsApp number and club details.

Safety features. If you turn on location sharing in a safety session, your most recent location is shared with the in-app contact you choose, for that session only.

Notifications and device. If you allow push notifications, we store a push token (via Amazon SNS) and a random installation ID so we can send the notification types you choose.

Purchases. If you subscribe, payment is processed by Apple or Google. We and our subscription provider, RevenueCat, receive your internal user ID and subscription status, not your payment card details.

Reports and support. If you report or block another user, or email us, we keep that information to handle your request and keep the community safe.

What we don't do

We do not sell your personal information.
We do not show third-party advertising or use third-party analytics, advertising or tracking SDKs in the app.
We do not access your contacts, camera, microphone or health data.

How we use information

To provide the app: accounts, run tracking, profiles, matching, chat, friends, clubs, meetups and notifications.
To suggest compatible running buddies based on your profile and preferences.
To keep the community safe, including handling reports, blocks and misuse.
To manage subscriptions and features you pay for.
To respond to you, maintain and secure our services, and comply with the law.

What other people can see

Other app users can see your public profile, subject to your privacy settings. You can hide groups of information (such as habits, results, equipment, identity details, highlights and club information) or hide your profile from others. Your age is only shown if you choose to show it. If you set a gender, it is shown on your profile.
Friends can see your friend posts. You can choose to hide distance or pace on a post. GPS routes and private notes are never included.
Matches can see the messages, photos and run summaries you send them.
Club coaches can see the information you provide when joining their club. Club members can see your name, bio and district in the member directory.
The public (without signing in) may see a limited runner page (name, bio or quote, district, usual pace, tags and cover photo) unless you hide your profile, club albums that the club makes public, recruiting club pages, and club race results, which may include winners' names.
Share cards are created on your device and only shared where you choose. Route and location are off by default.

Service providers

We share information only with providers that help us run Run Run Day, under contracts that limit how they can use it:

Amazon Web Services: hosting, databases, file storage, sign-in (Cognito), push notifications (SNS) and email.
Apple: App Store, push notifications and maps on iOS. Google: push notifications and maps on Android.
RevenueCat: subscription management.
Cloudflare: email routing for our support addresses.

We may also disclose information if required by law, to protect the safety of our users or the public, or as part of a business transfer such as a merger or acquisition.

Where your information is stored

Run Run Day data is stored on Amazon Web Services servers in the United States (Ohio). If you use the app from Hong Kong, Canada or elsewhere, your information is transferred to and processed in the United States, where it is subject to local law. We protect it with encryption in transit and at rest and with restricted access.

How long we keep information

Account, profile and run data are kept while your account is active.
Match chat messages are kept while the match remains active.
Incomplete route uploads are removed after 2 days. Server logs, which exclude chat content and request bodies, are kept for 14 to 30 days.
When you delete your account, your personal information is deleted automatically, usually within minutes and always within 30 days. Records other people still rely on, such as club member lists, race results and past group runs, keep the entry but show "已刪除用戶" (deleted user) instead of your name and contact details.
We keep reports and sanctions concerning your account, without your profile or contact details, to prevent abuse, and anything we must keep to comply with the law.

Your choices and rights

Privacy settings: choose what appears on your profile, and pause or stop running-buddy matching.
Location: you can change location permission at any time in your device settings. Run tracking needs location to work.
Notifications: choose which notification types you receive in the app, or turn them off in your device settings.
Export: download a copy of your profile and training data from Account Settings in the app.
Delete your account: delete it yourself from Account Settings in the app, or email us. You are signed out on all devices immediately. If you are the last coach of a club, you will be asked to hand over coaching first.
Access and correction: you can ask for access to, or correction of, the personal information we hold about you.

Depending on where you live, you have rights under privacy laws such as Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Hong Kong's Personal Data (Privacy) Ordinance. To make a request, email info@wolflume.com. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the Office of the Privacy Commissioner for Personal Data, Hong Kong.

Children

Run Run Day is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us and we will delete it.

Security

We use encrypted connections, encrypted storage, private file storage with time-limited access links, and access controls to protect your information. No system is perfectly secure, so please use a strong, unique password.

Changes to this policy

We may update this policy from time to time. If we make significant changes, we will let you know in the app or by email. The date at the top shows when it was last changed.

Contact

Wolflume Inc., Ontario, Canada
Privacy questions: info@wolflume.com
App support: hello@runrunday.com