Privacy Policy

RunUntil (“RunUntil”, “we”, “us”, or “our”) is a mobile fitness app that turns your runs, walks, and bike rides into real-world photo missions. This Privacy Policy explains what information the app handles, how it is used, and the choices you have.

RunUntil is designed to be private by default. We do not require you to create an account, and the information you generate while using the app — your profile, activity routes, photos, and statistics — is stored locally on your device rather than on our servers.

The app collects and stores the following categories of information directly on your device:

• Profile information. Details you enter during onboarding, such as your name, height, weight, fitness level, motivation, preferred environment, unit preferences, and your weekly activity goal.
• Location data. Precise GPS location is used to record your activity route and to suggest nearby photo targets. With your permission, location is collected continuously while an activity is in progress, including in the background when the app is not on screen.
• Photos and camera access. Photos you capture for mission targets, including the location at which each photo was taken.
• Activity data. Metrics derived from your activities, such as distance, duration, pace, speed, estimated calories, and your route history.
• Support messages. If you contact us through the in-app support form, we receive the email address and message you provide.
• Device diagnostics. When you submit a support request or when the app reports a crash, we may receive technical details such as app version and build, platform, operating-system version, device model, language, time zone, your subscription status, and an anonymous identifier provided by our subscription provider.

We do not ask for your email address to use the app, and we do not maintain user accounts or passwords.

We use the information described above to:

• track your activities and draw your route on a map;
• suggest and generate photo-mission targets relevant to your surroundings;
• validate that a captured photo matches its mission target;
• calculate your statistics, streaks, and progress toward your goals;
• manage your subscription and any promotional offers;
• respond to your support requests and diagnose technical problems; and
• understand how the app is used so we can improve it.

When you capture a photo for a mission, the photo is sent to our backend, which uses a third-party artificial-intelligence service (Google Gemini) to check whether the photo matches the assigned target. The same technology is also used to generate photo-target suggestions for your activities.

The captured photo itself is stored locally on your device. Photos are sent to the AI service only for the purpose of validation and are not retained on our servers after the validation result is returned.

RunUntil relies on the following third-party service providers. Each processes data only as needed for the function described, and their handling of data is governed by their own privacy policies:

• RevenueCat — manages subscriptions and in-app purchases and assigns an anonymous identifier to your installation.
• Google Gemini — performs AI photo validation and target generation (via our backend).
• Google Maps — displays maps and route tiles.
• PostHog and Amplitude — provide product analytics.
• Sentry — provides crash and error reporting.
• Expo — provides app build and over-the-air update services.
• Telegram — receives support tickets, which are forwarded to a private support channel for our team.

Your profile, activities, routes, photos, and statistics are stored only on your device. RunUntil does not back up this data to the cloud and does not synchronize it across devices. As a result, the data exists on a single device, and if you uninstall the app or switch devices, that data cannot be restored.

Because your data is stored on your device, it remains available until you choose to remove it. You can:

• delete individual activities, which also removes their associated routes and photos;
• use the in-app account-deletion option, which wipes your on-device data, including your profile, activities, photos, and locally stored settings; or
• uninstall the app, which removes its local data from your device.

Please note that deleting your data within the app does not cancel any subscription. Subscriptions are managed by the app store (Apple App Store or Google Play) and must be cancelled there.

The app asks for certain device permissions so it can function. You can grant or revoke these at any time in your device settings, though some features will not work without them:

• Location (including background location) — to record routes and suggest targets;
• Camera — to capture mission photos;
• Notifications — to send activity and progress reminders; and
• File storage — to save your photos and app data on your device.

RunUntil is not directed to children under the age of 13, and we do not knowingly collect information from children under 13. If you believe a child has provided us with information, please contact us so we can address it.

Depending on where you live, you may have rights to access, correct, or delete your personal information, or to object to or restrict certain processing. Because RunUntil stores your information on your device and does not maintain user accounts, you can exercise most of these rights directly: you can view and edit your profile, delete your activities and photos, and erase all on-device data using the in-app account-deletion option.

If you have a request relating to information processed by our support or analytics providers, or any other privacy question, contact us using the details below.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes may also be communicated within the app. Your continued use of RunUntil after an update means you accept the revised policy.

If you have questions about this Privacy Policy or how your information is handled, contact us at support@rununtil.app.