Last updated: March 2026
RunPG ("we", "our", "the app") is a mobile fitness app that turns your runs into an RPG adventure. This policy explains what data we collect, why we collect it, and your rights.
By using RunPG you agree to this policy. If you do not agree, please uninstall the app and contact us to delete your data.
| Category | Data | Why |
|---|---|---|
| Account | Name, email address, profile photo (from Google or Apple Sign-In); display name and username you choose in-app | Create and identify your account |
| Location | Precise GPS coordinates, collected continuously during an active run (including when the screen is off) | Track distance, pace, and route for your run |
| Fitness & Activity | Run distance, duration, pace, XP earned, level, streak, weekly stats, personal records | Power the RPG progression system and your run journal |
| Social | Friend connections, reactions to runs, challenge history, leaderboard data | Enable friends features and weekly challenges |
| Strava (optional) | Strava access token (stored securely), activity IDs of synced runs | Sync completed runs to your Strava account if you connect it |
| Usage & Diagnostics | Screen views, feature interactions (PostHog), crash reports and device info (Firebase Crashlytics) | Improve the app and fix bugs |
| Push Notifications | Device push token (FCM) | Send challenge and social notifications (only if you grant permission) |
We do not collect: payment information, contacts, photos, microphone, or camera data.
Location is the most sensitive data we use. Here is exactly how it works:
We do not sell your data. We do not use your data for advertising.
RunPG uses the following third-party processors. Each has its own privacy policy:
Your data is retained for as long as your account is active. If you delete your account, we will delete your profile, run history, and social data from our servers within 30 days.
You have the right to:
To exercise any of these rights, email us at support@runpg.fit.
RunPG is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us data, please contact us and we will delete it promptly.
All data is stored in Google Firebase with security rules that restrict access to the authenticated account owner. Strava tokens are stored in a private Firestore subcollection not accessible to other users. We use HTTPS for all data in transit.
We may update this policy as the app evolves. If we make material changes, we will notify you through the app. Continued use after changes take effect constitutes acceptance.
Questions about this policy? Email us at support@runpg.fit.