Privacy Policy
Last updated: December 3, 2025
Introduction
Territory Runner ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services. Please read this policy carefully. By using Territory Runner, you consent to the practices described in this policy.
Information We Collect
Account Information
When you create an account, we collect:
- Username (your chosen display name)
- Email address (for account verification and recovery)
- Password (securely hashed, never stored in plain text)
- Optional profile information (name, profile picture, phone number)
GPS and Location Data
To provide our core service, we collect GPS data during your runs, including:
- Latitude and longitude coordinates
- Timestamp of each location point
- GPS accuracy (in meters)
- Altitude (elevation above sea level)
- Speed (as reported by your device)
GPS data is collected every 3 seconds during active runs (approximately 400 points per 20-minute run). This data is essential for calculating territories, tracking your running routes, and providing accurate statistics.
Run Statistics
For each run you complete, we calculate and store:
- Total distance covered
- Duration of the run
- Average pace and speed
- Start and end times
- Territories claimed during the run
- Points earned
Territory Data
When you claim territories, we store:
- Polygon geometry of the territory (created from your GPS loop)
- Territory area (in square meters)
- Territory perimeter
- Capture timestamp
- Your user ID as the owner
Guest Mode
You can try Territory Runner without creating an account using Guest Mode. In this mode, we generate a temporary anonymous user ID stored only on your device. Guest data (limited runs) is stored on our servers but is not linked to any personal information. Guest data may be automatically deleted after a period of inactivity. If you later create an account, you can optionally migrate your guest data to your new account.
How We Use Your Information
We use your information to:
- Provide and maintain our services
- Create and display territories on the map
- Calculate and display leaderboards
- Track your running statistics and progress
- Send account-related notifications (password resets, etc.)
- Improve and optimize our services
- Prevent fraud and ensure fair gameplay
Data Storage and Security
Your data is stored using industry-standard cloud infrastructure:
- Authentication: Account credentials are managed by AWS Cognito with secure password hashing
- GPS Data: Run data with GPS paths is stored in Amazon DynamoDB with automatic encryption at rest
- Territory Data: Territory polygons are stored in PostgreSQL with PostGIS for geospatial operations
- Transmission: All data is transmitted over HTTPS with TLS encryption
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
Data Retention
We retain your data for as long as your account is active. Run data includes a TTL (time-to-live) of one year, after which it may be automatically removed. Territory data is retained as long as you own the territory. Upon account deletion, your personal information is removed, and your runs and territories are anonymized (see Account Deletion below).
Account Deletion
You can delete your account at any time through the app's settings, or by submitting a deletion request via our website. When you delete your account:
- Your personal information (username, email) is permanently deleted from our authentication system
- Your runs and territories are anonymized - they remain in the system but are no longer linked to any identifying information
- Anonymized data is retained for leaderboard integrity and historical accuracy
- This action is irreversible - you cannot recover your account or data after deletion
Third-Party Services
We use the following third-party services:
- AWS Cognito: For secure user authentication
- Amazon DynamoDB: For storing run data
- Google Maps (Mobile): For displaying maps in the mobile app (subject to Google's Privacy Policy)
- Google Analytics (Website): We use Google Analytics on our website to understand usage patterns. This collects anonymized data about page visits and does not include your GPS data or run information
- Expo Location: For accessing device GPS capabilities
Background Location Access
Territory Runner requests background location permission to continue tracking your runs even when the app is in the background or your screen is locked. This ensures accurate GPS tracking during your entire run. Background location data is only collected during active runs that you explicitly start. We do not track your location when you are not running.
Your Rights
Depending on your location, you may have the following rights:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Withdraw consent for data processing
- Object to certain processing activities
To exercise these rights, please contact us using the information below.
Children's Privacy
Territory Runner is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Territory Runners
Email: [email protected]