RunPlashRunPlash Privacy Policy
Last updated: October 2026
RunPlash ("Service") values users' personal information and complies with the Personal Information Protection Act and related laws.
1. Personal Information Collected
① Social login info: name (nickname), email address, profile photo (if provided)
② Profile photo (self-uploaded): profile photo selected and uploaded directly by the user via camera or photo gallery
③ GPS location: collected only while running, stored as route data after the run ends
④ Running records: distance, time, pace, elevation
⑤ Device info: device model, OS version, app version, device identifier (Device ID) (for error analysis and fraud prevention)
⑥ Push notification token (FCM token): used to send crew invite, dispatch, and siege notifications
⑦ Payment information: purchase records generated by Apple/Google for in-app purchases (order number, amount, date/time, refund status). The Company does not directly collect or store payment method details such as card numbers; these are processed by Apple/Google and the Company's payment-processing subprocessor (RevenueCat).
⑧ Third-party fitness service connections (optional, if and when offered): if RunPlash offers an optional connection to a third-party fitness service such as Garmin and you choose to connect it, we receive your completed running activities from that service (GPS route, distance, duration, pace, elevation, activity time) together with the identifier and access token needed to receive them. We do not collect health, sleep, or wellness data through such connections.
2. Purpose of Collection
① Providing the Service: running records, territory system, crew features
② Service improvement: statistical analysis, bug fixes
③ Marketing (with consent): event and new feature announcements
④ Processing paid event participation, cancellation, and refunds, and preventing fraudulent payments
⑤ If you connect a third-party fitness service such as Garmin, importing and verifying your runs from that service so they can count toward territory capture, defense, and your running records
3. GPS Location Data
Location data is collected only while running and collection stops when the run ends. Location permission can be changed anytime in device settings. Precise location data is stored encrypted on the server.
If an optional connection to a service such as Garmin is offered and you use it, GPS route data for imported runs is received after the activity has been uploaded to that service, rather than collected in real time by the RunPlash app. Such connections are optional; you can use the Service with RunPlash's own GPS tracking without connecting any third-party service.
4. Retention and Destruction
① Retained for the duration of Service use
② Destroyed within 30 days of account deletion (except where retention is required by law)
③ GPS route data: destroyed immediately upon account deletion
④ Payment and refund records may be retained for the period separately required by applicable law, including consumer protection laws governing e-commerce.
⑤ Third-party fitness service connections: when you disconnect a service or delete your account, we stop receiving your activities from that service and delete the stored access credentials without delay. Activities already imported are deleted together with your account as described above. You can also revoke access at any time from the third-party service's own account settings.
5. Third-Party Disclosure
Personal information is not provided to third parties without user consent, except when requested by investigative authorities under applicable law.
Data received from a connected third-party fitness service such as Garmin is used only to operate the Service for you. It is not sold or provided to sponsors, advertisers, or data brokers. Reports shared with event sponsors contain only aggregate statistics that do not identify any individual.
6. Processing Entrustment
The Company entrusts the following personal information processing tasks to support the Service:
① Google LLC (Firebase) — account authentication, data storage/management, push notifications, error and usage analytics
② Google LLC (Google Maps Platform) — map display and route guidance
③ RevenueCat, Inc. — in-app purchase processing and purchase status management
④ Kakao Corp. — Kakao social login
The Company requires its processors, by contract, to handle personal information securely in accordance with the Personal Information Protection Act. Any change to the scope of entrusted work or to a processor will be announced through this Policy.
7. User Rights
Users may exercise the following rights at any time:
① Request to view, correct, or delete personal information
② Withdraw consent to location data collection
③ Opt out of marketing communications
④ Disconnect a third-party fitness service and withdraw consent to importing data from it
8. Cookies and Analytics
Firebase Analytics is used to analyze app usage patterns. Collected data is aggregated in a form that cannot identify individuals.
9. Data Protection Officer
Name: RunPlash Privacy Team
Email: runplash@gmail.com
10. International Transfer of Personal Information
The Company transfers personal information overseas as follows to provide the Service:
① Recipient: Google LLC (Firebase/Google Analytics) — Country: United States — Items transferred: account info, running records (including activities imported from a connected third-party fitness service, if used), device info — Purpose: service infrastructure and usage analytics
② Recipient: RevenueCat, Inc. — Country: United States — Items transferred: purchase records, account identifiers — Purpose: in-app purchase processing
③ Recipient: Apple Inc. / Google LLC — Country: United States — Items transferred: login information, payment information (processed by each company) — Purpose: social login and in-app purchases
These transfers occur to the extent necessary to provide the Service (contract performance). Users may decline these transfers by discontinuing use of the related features (social login, in-app purchases, etc.), which may limit availability of those features.
11. Additional Notice for California Residents (CCPA/CPRA)
The Company does not sell users' personal information to third parties for monetary consideration. However, depending on how analytics tools such as Firebase Analytics are configured, certain data processing may be classified as a "share" under applicable law. California residents have the right to request access, deletion, correction, and portability of their personal information, and the right to limit certain processing, without discrimination for exercising these rights. Requests may be submitted via the contact email below, including through an authorized agent.
12. Additional Notice for Users in the European Economic Area (EEA) (GDPR)
The Company processes personal information on the basis of user consent or the performance of the Service agreement. Users residing in the EEA have the right to access, rectify, erase, restrict the processing of, and port their personal information, the right to object to processing, and the right to lodge a complaint with their local data protection authority. The Company endeavors to apply appropriate safeguards for international transfers as required by applicable law.
Contact: runplash@gmail.com