rit.run 개인정보 처리방침 · Privacy Policy

Summary

• We collect data needed to provide features, including run logging and analysis, account operations, security, legal compliance, and customer support.
• This policy now reflects the App Store Privacy Label categories for Contact Info, Health & Fitness, Location, User Content, Identifiers, Usage Data, and Diagnostics.
• Health data and precise location / GPS routes are used for app functionality and run analysis, not for ad targeting, sale, or third-party marketing.
• You may exercise access, rectification, deletion, restriction, portability, and withdrawal of consent at any time, and lodge a complaint with a supervisory authority.

1. Data We Collect

• Account/Profile/Contact Info: name, email, profile image, user IDs/tokens from Google or Apple sign-in; login logs (timestamps, partial IP)
• Running/Health Data (with your consent):
  • Precise location / GPS routes, distance, speed/pace, elevation, workout time, cadence (if available)
  • Heart rate and derived metrics (if available)
  • Body metrics: height, weight, date of birth, gender (for performance metrics and personalization)
• User Content: customer-support emails/messages, photos/videos uploaded or submitted through app features, and related metadata
• Device/App Info and Identifiers: device model, OS/app version, language/timezone, internal user ID, device ID, AAID/IDFA, coarse IP, crash/error logs, and performance logs
• Usage and Advertising Data: app usage events, ad impressions/clicks, and campaign performance events, subject to your consent and platform settings

2. Purposes & Legal Bases (GDPR)

• Create/manage accounts, authenticate and control access: contract necessity
• Store workouts, provide stats/charts, personalized analysis: contract necessity and, where applicable, consent
• Product personalization, app stability, security, and fraud prevention: legitimate interests or, where applicable, consent
• Customer support: contract necessity / legitimate interests
• In-app ads, developer advertising or marketing, third-party advertising, and measurement: consent and platform privacy settings
• Legal compliance and dispute handling: legal obligation
• Processing of sensitive (health) and precise-location data: explicit consent

3. Handling of Sensitive & Precise Location Data

• Processed strictly to the minimum extent for app functionality and run analysis (purpose limitation).
• Health, fitness, and precise-location data are not used or provided for ad targeting, sale, third-party marketing, or tracking purposes.
• Upon withdrawal of consent, we stop new processing, subject to statutory retention and dispute handling.
• When you delete data, raw GPS traces and raw health data are erased; aggregated/de-identified statistics may be retained for service quality.

4. Sharing & Processors

• Auth: Google Sign-In, Sign in with Apple
• Ads and measurement: Google AdMob and related ad/measurement SDKs
• Analytics/Logs: Firebase Analytics/Crashlytics and similar tools
• Customer support/communications: email or support-tool providers for inquiry handling
• Disclosures may occur when required by law or for disputes/investigations.

Third parties operate under their own privacy policies. We do not provide health, fitness, or precise-location data for advertising.

5. Retention

• Account & workouts: retained until you request deletion (indefinite). Certain records may be retained as required by law or for dispute handling.
• Logs/ad metrics: retained briefly for technical/legal needs, then aggregated/anonymous or deleted.
• Support messages: retained for the period needed to handle inquiries and disputes, then deleted or anonymized.

6. Your Rights & How to Exercise

• Rights: access, rectification, deletion, restriction, portability, withdrawal of consent, object to certain processing
• How: in-app Settings > Profile > Delete Account, or privacy@dendrove.com (rights & general privacy), and dpo@dendrove.com for regulatory/legal matters.
• Complaints: you may lodge a complaint with your local supervisory authority (e.g., Korea PIPC or your EEA/UK authority).

7. Ads, Tracking & Personalization

• App Store tracking disclosures are limited to Contact Info, Identifiers, selected User Content, Diagnostics, and Advertising Data, subject to consent and OS settings.
• Health, fitness, precise-location data, and original photos/videos are not used for ad targeting.
• You can manage tracking and personalized ads through iOS App Tracking Transparency, Android advertising ID controls, and app or OS settings.
• (California) We do not sell personal information for money. If ad/measurement partner processing is considered “sharing” or targeted advertising under applicable law, you may opt out or request limitation of sensitive data use by contacting us with subject: [CCPA Request].

8. Security

• TLS in transit, encryption at rest (where applicable), access controls/least privilege, anomaly monitoring
• We will notify you of breaches as required by law.

9. International Transfers

Where applicable, we rely on adequacy decisions, Standard Contractual Clauses (SCCs), and supplementary measures.

10. Children

The App is not directed to children under 13 (or a higher local age). We do not knowingly collect children’s health/precise-location data.

11. Automated Decision-Making

We do not engage in automated decisions producing legal or similarly significant effects.

12. Regional Notices (Brief)

• EEA/UK (GDPR/UK GDPR): see Section 2 for legal bases. You may lodge complaints with your supervisory authority. Where legally required, we will appoint and disclose our EU/UK representative here.
• California (CCPA/CPRA): residents may request to know/delete/correct/opt out/limit sensitive data use.
• Republic of Korea (PIPA): Data subject rights available; cross-border transfer safeguards will be disclosed where applicable.

13. Contact & Deletion

Use in-app Settings > Profile > Delete Account or privacy@dendrove.com. For general help contact support@dendrove.com; for regulatory/legal communications contact dpo@dendrove.com. Data will be erased except where retention is required by law.

14. Changes

We will announce changes via in-app notice or by updating the “Effective Date”.

Annex: HealthKit / Health Connect Notice

• Apple HealthKit: health data is used only for features and personalized analysis; not for ads, marketing, sale/sharing, or tracking. You can change permissions in iOS Settings.
• Android Health Connect: accessed health data is used only to provide services; not for ad targeting or tracking. You can manage permissions in Android Settings.