Privacy Policy

1. What information do we collect?

Personal information you provide to us

In Short: We collect personal information that you voluntarily provide to us.

We collect personal information that you voluntarily provide when you:

• create an account;
• sign in to the Services;
• purchase a subscription, one-time purchase, or other paid feature;
• connect third-party services or integrations;
• contact us for support;
• sign up for emails or other communications;
• submit information through forms or surveys; or
• otherwise interact with the Services.

Depending on how you use the Services, the personal information we collect may include:

• your name;
• your email address;
• account login information;
• purchase and transaction information;
• customer support messages and related information; and
• any other information you choose to provide to us.

Health and fitness data

In Short: If you choose to connect fitness or health-related services or grant permissions, we may access, import, process, and in some cases store health and fitness activity data so the Services can create images, videos, overlays, maps, and workout summaries for you.

When you connect supported services such as Garmin, Strava, COROS, or Apple Health, or when you grant applicable device or app permissions, we may access or collect health and fitness data associated with your workouts and activities.

Depending on the integrations and features you use, this data may include:

• activity or workout type;
• workout date and time;
• duration or moving time;
• distance;
• pace or speed;
• elevation or elevation gain;
• route, map, GPS, or location data related to an activity;
• calories burned;
• cadence;
• heart rate; and
• other workout or activity metrics made available by the connected service or permission you authorize.

We use this health and fitness data only to provide and improve the Services, including importing your workouts, generating overlays and visual content, displaying workout stats, showing route or map data, supporting app features, and maintaining your account experience.

We do not use your health or fitness data for advertising purposes.

Photos, videos, and media

If you choose to use photo or video features in the Services, we may access or process photos, videos, and related media that you select or upload in order to create, edit, save, or share content through the Services.

Payment information

If you make purchases, payment information may be collected and processed by third-party payment processors or app marketplaces, including Apple App Store and Google Play. We do not store full payment card details unless expressly stated at the point of collection.

Information automatically collected

In Short: Some information is collected automatically when you use the Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not usually reveal your specific identity, but may include:

• IP address;
• device type and device identifiers;
• operating system and version;
• browser type;
• language preferences;
• app version;
• referring URLs;
• country or general location information based on IP address;
• usage information; and
• crash, diagnostic, and performance data.

This information is primarily needed to maintain the security and operation of the Services, improve performance, analyze usage, and support internal analytics and reporting.

Information collected through mobile devices

If you use our mobile application, we may request access to certain device features or permissions in order to provide app functionality. Depending on your device and how you use the app, this may include access to:

• camera;
• photo library or storage;
• notifications;
• location related to workout route or map features, where enabled by you; and
• health, fitness, or activity-related permissions that you choose to authorize.

If you grant permission, you may later change or revoke it in your device settings or within the applicable connected service.

2. How do we use your information?

In Short: We use your information to provide, improve, support, and protect the Services.

We may use personal information collected through the Services to:

• create and manage your account;
• authenticate you and maintain your login session;
• connect supported integrations and import your activity data;
• provide and deliver the Services;
• generate workout overlays, route visuals, maps, images, videos, and related content;
• display workout statistics and summaries;
• process transactions and purchases;
• manage subscriptions and billing;
• send you service-related messages, including administrative updates and support responses;
• send marketing communications where permitted by law and subject to your preferences;
• improve the Services, user experience, and app performance;
• monitor and prevent fraud, abuse, and security issues;
• comply with legal obligations; and
• enforce our terms, conditions, and policies.

We may also use aggregated or de-identified information for analytics, reporting, and product improvement.

3. What legal bases do we rely on to process your information?

In Short: We only process your personal information when we have a valid legal reason to do so.

If you are located in the European Economic Area (EEA), United Kingdom, or a jurisdiction with similar laws, we process your personal information only when we have a valid legal basis, including:

• Consent — where you have given us permission to process your information for a specific purpose, which you may withdraw at any time;
• Performance of a contract — where processing is necessary to provide the Services you have requested;
• Legal obligations — where processing is necessary to comply with our legal or regulatory obligations; and
• Legitimate interests — where processing is necessary for our legitimate interests, such as operating, securing, analyzing, and improving the Services, provided those interests are not overridden by your rights and freedoms.

Where we process special categories of data, such as health or fitness data, we rely on your explicit consent, which you provide when you choose to connect an integration or grant a permission. You can withdraw that consent at any time by disconnecting the integration or revoking the permission.

4. When and with whom do we share your information?

In Short: We may share information in limited situations, including with service providers, when you request sharing, as required by law, or in connection with business transfers.

We may share your information in the following situations:

Service providers

We may share your information with vendors, consultants, contractors, and other service providers who perform services for us or on our behalf, such as:

• hosting;
• analytics;
• payment and subscription processing;
• customer support;
• email delivery;
• cloud storage; and
• infrastructure and app performance monitoring.

Connected services and user-directed actions

If you choose to connect a third-party service, import activity data, or export, save, or share content from the Services, information may be transferred as needed to complete that action. For example, if you authorize a supported integration or choose to share content you created, the relevant information may be processed or transmitted to complete your request.

Legal obligations and protection of rights

We may disclose your information when we believe it is necessary to:

• comply with applicable law, regulation, legal process, or government request;
• enforce our agreements and policies;
• detect, investigate, or prevent fraud, abuse, or security issues; or
• protect the rights, property, or safety of Endurance Apps, Run Photo, our users, or others.

Business transfers

We may share or transfer your information in connection with, or during negotiations of, any merger, financing, sale of company assets, acquisition, or other business transaction involving all or part of our business.

We do not sell your personal information. We do not share your health or fitness data with third parties for their own advertising purposes.

5. Which third-party services and integrations do we use?

In Short: We rely on trusted third-party services to operate the app, and you choose which fitness integrations to connect.

Fitness and health integrations

When you choose to connect a service such as Garmin, Strava, COROS, or Apple Health, we access only the workout and activity data needed to provide the features you use. Your use of those services is also governed by their own privacy policies, including:

• Garmin — garmin.com/en-US/privacy/connect;
• Strava — strava.com/legal/privacy;
• COROS — see the privacy policy available at coros.com; and
• Apple — apple.com/legal/privacy.

You can disconnect an integration at any time within the app or in the third-party service's own settings.

Apple Health (HealthKit)

If you connect Apple Health, we use HealthKit data solely to provide the app features you request, such as importing workouts and generating overlays, stats, maps, and summaries. We do not use HealthKit data for advertising or marketing, we do not sell it, and we do not share it with third parties for their own purposes. We do not use HealthKit data for any purpose other than supporting your health and fitness experience within the Services.

Infrastructure and business providers

We use third-party providers for services such as hosting, cloud storage, databases, authentication, crash and performance monitoring, analytics, email delivery, and subscription and payment processing (for example, the Apple App Store and Google Play). These providers process information only as needed to perform services for us and are expected to protect it.

6. Do we use cookies and other tracking technologies?

In Short: We may use cookies and similar technologies to collect and store information.

We may use cookies, SDKs, pixels, local storage, and similar tracking technologies to operate the Services, remember preferences, analyze usage, improve performance, and support security and analytics.

You can usually control cookies through your browser settings. Mobile operating systems may also provide controls for app tracking and permissions.

7. How do we handle international data transfers?

In Short: We are based in the United States and may process and store your information there and in other countries.

We operate from the United States and use service providers that may be located in the United States and other countries. If you access the Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries that may not have the same data-protection laws as your jurisdiction.

Where required by applicable law, we take steps to ensure that appropriate safeguards are in place for international transfers of personal information, such as standard contractual clauses or other lawful transfer mechanisms.

8. How long do we keep your information?

In Short: We keep your information only as long as necessary for the purposes described in this Privacy Notice unless a longer retention period is required by law.

We retain personal information for as long as reasonably necessary to:

• provide the Services;
• maintain your account;
• complete transactions;
• store or display your imported activity data and created content as part of the Services;
• comply with legal, tax, accounting, or reporting obligations;
• resolve disputes; and
• enforce our agreements.

When we no longer have a legitimate business need to process your personal information, we will delete, anonymize, or securely store it until deletion is possible.

9. How do we keep your information safe?

In Short: We use reasonable measures to protect your information, but no system is completely secure.

We maintain reasonable technical, administrative, and organizational safeguards designed to protect the personal information we process, such as encryption of data in transit, access controls, and the use of reputable infrastructure providers. We review our practices from time to time and work to limit access to personal information to those who need it to operate the Services.

However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for using a strong, unique password.

If we become aware of a security incident that affects your personal information, we will take appropriate steps to address it and will provide any notifications required by applicable law.

10. Do we collect information from minors?

In Short: We do not knowingly collect personal information from children under 13.

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected personal information from a child under 13, please contact us at support+runphoto@enduranceapps.com, and we will take reasonable steps to investigate and address the issue.

If a minor is permitted to use the Services under applicable law, such use must be supervised by a parent or legal guardian.

11. What are your privacy rights?

In Short: Depending on where you live, you may have rights regarding your personal information.

Depending on applicable law, you may have the right to:

• request access to the personal information we hold about you;
• request correction of inaccurate personal information;
• request deletion of your personal information;
• request a copy of your information in a portable format;
• object to or restrict certain processing; and
• withdraw consent where processing is based on consent.

You may also opt out of marketing emails by using the unsubscribe link in those emails or by contacting us at support+runphoto@enduranceapps.com.

If you have an account, you may be able to review or update certain account information directly within the app or by contacting us. We will respond to your request consistent with applicable law and may need to verify your identity first.

12. Controls for Do-Not-Track features

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature or setting. Because there is not yet a uniform technology standard for recognizing and implementing DNT signals, we do not currently respond to them.

13. Do United States residents have specific privacy rights?

In Short: Yes. Depending on your state, you may have additional rights regarding your personal information.

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, or another U.S. state that has enacted a comprehensive consumer privacy law, you may have some or all of the following rights, subject to exceptions under applicable law:

• the right to know about and access the personal information we process about you;
• the right to correct inaccurate personal information;
• the right to request deletion of your personal information;
• the right to obtain a portable copy of your information;
• the right to opt out of the “sale” of personal information or targeted advertising; and
• the right not to receive discriminatory treatment for exercising your privacy rights.

We do not sell your personal information, and we do not use your health or fitness data for targeted advertising.

California “Shine the Light”

California residents may request information regarding the disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their own direct marketing.

Authorized agents and appeals

You may use an authorized agent to submit a request, subject to verification. If we decline to act on your request, you may appeal our decision by contacting us, and depending on your state you may also be able to contact your state attorney general with concerns. To exercise any of these rights, contact us at support+runphoto@enduranceapps.com.

14. Do EU, UK, and other international residents have specific rights?

In Short: Yes. If you are in the EEA, UK, or Switzerland, you have rights under the GDPR and similar laws.

If you are located in the EEA, UK, or Switzerland, you have the right to access, correct, delete, restrict, or object to our processing of your personal information, the right to data portability, and, where processing is based on consent, the right to withdraw that consent at any time.

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal information infringes applicable law. To exercise any of these rights, please contact us at support+runphoto@enduranceapps.com. We will respond consistent with applicable law.

15. Third-party websites and links

The Services may contain links to third-party websites, apps, or services that we do not own or control, including connected fitness platforms and app marketplaces. This Privacy Notice does not apply to those third parties, and we are not responsible for their content, security, or privacy practices. We encourage you to review the privacy policy of any third party you interact with.

16. Do we make updates to this notice?

In Short: Yes. We may update this Privacy Notice from time to time.

We may update this Privacy Notice to reflect changes to our practices, technology, legal requirements, or other operational reasons. The updated version will be indicated by the “Last updated” date at the top of this Privacy Notice. Your continued use of the Services after an updated Privacy Notice is posted means you acknowledge the updated notice.

17. How can you contact us about this notice?

If you have questions or comments about this Privacy Notice, you may contact us at:

Run Photo
A product of Running Apps & Fitness Plans LLC d/b/a Endurance Apps
PO Box 270333
Louisville, CO 80027
United States
support+runphoto@enduranceapps.com

18. How can you review, update, or delete your data?

To request access to, review, update, correct, or delete your personal information, or to delete your account, please email us at support+runphoto@enduranceapps.com. You may also be able to delete your account directly within the app.

When you delete your account, we will delete or de-identify your personal information, except where we are required or permitted to retain it under applicable law. We may need to verify your identity before completing your request, and we will respond in accordance with applicable law.