Legal
Privacy Policy
Last updated: May 29, 2026 ยท Effective immediately
Plain English summary: RunReward collects your location data only while a run is active, uses it solely to validate your run and award coins, and never sells your personal data to anyone. You can delete your account and all associated data at any time.
๐ Introduction
RunReward ("we", "our", or "us") is operated by Revaltronics and is available on Android via Google Play. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights over your data.
By using the RunReward app or website, you agree to the practices described in this policy. If you do not agree, please do not use our services.
๐ฆ Information We Collect
We collect the following categories of information:
- Account information โ name, email address, and profile details you provide during sign-up or onboarding.
- GPS / location data โ precise location is collected only while a run is actively in progress. We do not track your location in the background or when you are not running.
- Run data โ distance, pace, duration, step count, and route coordinates for each run you record.
- Device information โ device model, OS version, app version, and a unique device identifier used for fraud prevention.
- FCM token โ a Firebase Cloud Messaging token to send you push notifications. This is refreshed automatically and nulled when it becomes stale.
- Ad interaction data โ whether you watched a rewarded ad to completion, processed via AdMob Server-Side Verification (SSV). We do not collect any ad-targeting profiles.
- Coin transaction history โ a ledger of coins earned and redeemed, stored to maintain your wallet balance.
๐ฏ How We Use Your Information
- To operate the service โ validate runs, calculate coins earned, maintain your streak and leaderboard position.
- Anti-cheat verification โ GPS data is processed server-side to detect vehicle use, implausible speeds, and timestamp anomalies. This ensures fair play for all users.
- Push notifications โ run results, coin credits, milestone unlocks, and promotional messages. You can disable these in your device settings at any time.
- Reward redemption โ your name and email may be shared with Amazon or Flipkart solely to fulfil a gift card redemption you initiate.
- Analytics and improvement โ aggregated, anonymised usage patterns help us improve the app. We do not build individual behavioural profiles for advertising.
- Legal compliance โ we may use or disclose your data where required by applicable Indian law.
๐ Location Data
RunReward requests the ACCESS_FINE_LOCATION permission on Android. Location is accessed only while a run session is active โ from the moment you tap "Start Run" until you tap "End Run".
We do not use background location. We do not share raw GPS coordinates with any third party except as anonymised, aggregated zone statistics shown on in-app territory maps.
GPS coordinates are stored encrypted on our servers for up to 90 days to support run validation disputes, after which they are permanently deleted.
๐ค Third-Party Services
We use the following third-party services, each governed by their own privacy policies:
- Google AdMob โ serves rewarded video ads. AdMob may collect device identifiers for ad serving. See Google's Privacy Policy.
- Firebase (Google) โ used for push notifications (FCM) and crash reporting. See Firebase Privacy.
- Google Maps โ map rendering inside the app. See Google's Privacy Policy.
- Amazon / Flipkart โ contacted only when you redeem a reward. Your name and email are shared solely to fulfil the gift card.
We do not sell, rent, or trade your personal data to any third party for advertising or marketing purposes.
๐ Data Security
We take reasonable technical and organisational measures to protect your data:
- All data is transmitted over HTTPS / TLS 1.2+.
- Passwords are hashed using bcrypt and never stored in plain text.
- Our servers are hosted in a secured environment with access controls and audit logging.
- FCM tokens are automatically cleared when they become stale, reducing the risk of notification spoofing.
No system is 100% secure. If you believe your account has been compromised, contact us immediately at hello@runreward.in.
๐ถ Children's Privacy
RunReward is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover we have inadvertently collected such data, we will delete it promptly. If you believe a child has provided us their information, please contact us.
โ๏ธ Your Rights
You have the following rights regarding your personal data:
- Access โ request a copy of the personal data we hold about you.
- Correction โ update inaccurate or incomplete data via your in-app profile settings.
- Deletion โ permanently delete your account and all associated data from within the app via Settings โ Delete account, or email us at hello@runreward.in. Deletion is completed within 7 days.
- Notification opt-out โ disable push notifications at any time in your device settings.
- Data portability โ request an export of your run history and coin transaction data in a machine-readable format.
To exercise any of these rights, contact us at hello@runreward.in.
๐ Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, send a push notification or in-app alert. Continued use of RunReward after changes are posted constitutes acceptance of the updated policy.