RunPlashRunPlash Privacy Policy
Last updated: October 2026
RunPlash ("Service") values users' personal information and complies with the Personal Information Protection Act and related laws.
1. Personal Information Collected
① Social login info: name (nickname), email address, profile photo (if provided)
② Profile photo (self-uploaded): profile photo selected and uploaded directly by the user via camera or photo gallery
③ GPS location: collected only while running, stored as route data after the run ends
④ Running records: distance, time, pace, elevation
⑤ Device info: device model, OS version, app version, device identifier (Device ID) (for error analysis and fraud prevention)
⑥ Push notification token (FCM token): used to send crew invite, dispatch, and siege notifications
⑦ Payment information: purchase records generated by Apple/Google for in-app purchases (order number, amount, date/time, refund status). The Company does not directly collect or store payment method details such as card numbers; these are processed by Apple/Google and the Company's payment-processing subprocessor (RevenueCat).
⑧ Garmin connection data (optional, only if the user connects Garmin): Garmin account identifier, access credentials (tokens) issued by Garmin, and running activity data from Garmin Connect (GPS route, distance, time, elevation, heart rate, cadence, calories, device name). Daily health (wellness) data such as sleep or stress is not collected.
2. Purpose of Collection
① Providing the Service: running records, territory system, crew features
② Service improvement: statistical analysis, bug fixes
③ Marketing (with consent): event and new feature announcements
④ Processing paid event participation, cancellation, and refunds, and preventing fraudulent payments
⑤ Garmin connection (optional): importing runs recorded on a Garmin watch for running records and territory, defense, and siege scoring, and sending zones or official courses the user selects to Garmin Connect as courses
3. GPS Location Data
Location data is collected only while running and collection stops when the run ends. Location permission can be changed anytime in device settings. Precise location data is stored encrypted on the server. If the user connects Garmin, running routes recorded on the Garmin watch are received from Garmin and stored in the same way as other running records.
4. Retention and Destruction
① Retained for the duration of Service use
② Destroyed within 30 days of account deletion (except where retention is required by law)
③ GPS route data: destroyed immediately upon account deletion
④ Payment and refund records may be retained for the period separately required by applicable law, including consumer protection laws governing e-commerce.
⑤ Garmin connection: when the user disconnects Garmin or deletes their account, the Company stops receiving Garmin activities immediately and deletes the Garmin access credentials without delay. Runs already imported are retained like other running records and destroyed upon account deletion. Garmin notification logs are deleted automatically after 30 days. Users can also revoke RunPlash's access directly in their Garmin Connect account settings.
5. Third-Party Disclosure
Personal information is not provided to third parties without user consent, except when requested by investigative authorities under applicable law.
When the user uses "Send course to Garmin watch," the name and route of the selected course are sent to Garmin Connect (Garmin Ltd. and its affiliates) at the user's request.
Data received from Garmin is not sold, is not shared with third parties other than the processors listed below, and is not processed by AI systems or used to train, evaluate, or improve AI models. It is not sold or provided to sponsors, advertisers, or data brokers, and reports shared with sponsors contain only aggregate statistics that do not identify any individual.
6. Processing Entrustment
The Company entrusts the following personal information processing tasks to support the Service:
① Google LLC (Firebase) — account authentication, data storage/management, push notifications, error and usage analytics
② Google LLC (Google Maps Platform) — map display and route guidance
③ RevenueCat, Inc. — in-app purchase processing and purchase status management
④ Kakao Corp. — Kakao social login
The Company requires its processors, by contract, to handle personal information securely in accordance with the Personal Information Protection Act. Any change to the scope of entrusted work or to a processor will be announced through this Policy.
7. User Rights
Users may exercise the following rights at any time:
① Request to view, correct, or delete personal information
② Withdraw consent to location data collection
③ Opt out of marketing communications
④ Withdraw consent to the Garmin connection: disconnect at any time in Settings > Connected devices > Garmin in the app
8. Cookies and Analytics
Firebase Analytics is used to analyze app usage patterns. Collected data is aggregated in a form that cannot identify individuals.
9. Data Protection Officer
Name: RunPlash Privacy Team
Email: runplash@gmail.com
10. International Transfer of Personal Information
The Company transfers personal information overseas as follows to provide the Service:
① Recipient: Google LLC (Firebase/Google Analytics) — Country: United States — Items transferred: account info, running records (including activities imported via the Garmin connection), device info — Purpose: service infrastructure and usage analytics
② Recipient: RevenueCat, Inc. — Country: United States — Items transferred: purchase records, account identifiers — Purpose: in-app purchase processing
③ Recipient: Apple Inc. / Google LLC — Country: United States — Items transferred: login information, payment information (processed by each company) — Purpose: social login and in-app purchases
④ Recipient: Garmin Ltd. and its affiliates (Garmin Connect) — Country: United States and other countries where Garmin processes data — Items transferred: name and route of courses the user chooses to send — Purpose: sending courses to the Garmin watch (only when the user uses the Garmin connection and course sending)
These transfers occur to the extent necessary to provide the Service (contract performance). Users may decline these transfers by discontinuing use of the related features (social login, in-app purchases, Garmin connection, etc.), which may limit availability of those features.
11. Additional Notice for California Residents (CCPA/CPRA)
The Company does not sell users' personal information to third parties for monetary consideration. However, depending on how analytics tools such as Firebase Analytics are configured, certain data processing may be classified as a "share" under applicable law. California residents have the right to request access, deletion, correction, and portability of their personal information, and the right to limit certain processing, without discrimination for exercising these rights. Requests may be submitted via the contact email below, including through an authorized agent.
12. Additional Notice for Users in the European Economic Area (EEA) (GDPR)
The Company processes personal information on the basis of user consent or the performance of the Service agreement. Users residing in the EEA have the right to access, rectify, erase, restrict the processing of, and port their personal information, the right to object to processing, and the right to lodge a complaint with their local data protection authority. The Company endeavors to apply appropriate safeguards for international transfers as required by applicable law.
Contact: runplash@gmail.com