Provisional version, subject to change before launch. Français

Privacy policy

1. Who is responsible for your data

StrideRaid is published by Alex Chen, the controller of your data. Contact: contact@strideraid.app.

2. What we collect, and why

• Email address: to sign you in (one-time code). Legal basis: the contract (terms of use).
• Sign in with Apple, if you choose it: the identifier Apple assigns to your account for StrideRaid and your email address (your real one, or an Apple relay address if you choose to hide it). We do not ask for your name. A token provided by Apple is kept to revoke this access at Apple when you delete your account or unlink Apple. Legal basis: the contract.
• Sign in with Google, if you choose it: the identifier Google assigns to your account and your email address. Google also sends your Google account's name and photo: they are erased on receipt, never kept. Legal basis: the contract. Apple and Google can be linked or unlinked in Settings › Account, as long as you keep another way to sign in.
• Username, country, confirmation that you are 16 or older: game profile, leaderboard, minimum age. Legal basis: the contract.
• Profile photo, if you choose one: reduced to 512 × 512 pixels, stored in the European Union. It replaces the initial of your username everywhere in the game. Legal basis: the contract. A replaced or removed photo, or that of a deleted account, is erased within the hour. The same goes for the clan photo chosen by the leader, which replaces the clan's emblem.
• Year of birth, if you enter it in Settings: it stays on your phone and is only used to compute your heart rate zones; it is never sent.
• Your runs, read from Apple Health: date and time, duration, total distance, distance and heart rate summarised minute by minute, app and device model that recorded them, whether manually entered, whether indoors. To compute your damage to the boss and check that runs are real (anti-cheat). Legal basis: your explicit consent (health data, article 9 GDPR), asked separately and withdrawable at any time.
• Your damage, ranks and badges: to run the game. Legal basis: the contract.
• Reports sent, disputes: to fight cheating. Legal basis: our legitimate interest in a fair game.
• History of your consents: to prove your agreement. Legal basis: legal obligation.
• Premium subscription (no subscription is offered for now; if one is offered one day and you take it): chosen plan, purchase, renewal and expiry dates. To unlock Premium. Legal basis: the contract. We never see your bank details: payment is handled by Apple.

• Beta waiting list (form on strideraid.app): email address, iPhone or not, stated running frequency (rarely, 1 to 2, 3 to 4, 5 times a week or more), country, language, and where your visit came from if the link you followed said so (for example "instagram"). To send you the beta invitation, pick varied profiles and learn which channels make us known. Legal basis: your consent, confirmed by the link in the email you receive; a link in every email unsubscribes you (your answers are then deleted). To limit abuse, a non-reversible fingerprint of your IP address is kept for 24 hours.
• Visits to the strideraid.app website: audience measurement by Cloudflare Web Analytics, with no cookie and no identifier following you from one visit to the next; we only see overall figures (page views, countries, referring sites, device types). To improve the website. Legal basis: our legitimate interest.

A run's GPS route (successive positions, with their time and accuracy) is read by the app to show it in the run's details and to measure its distance and best times over 1 km, 5 km, 10 km and half marathon (the best times are used for "best time" duels). It is sent with the run and kept on the server, in a private space that only our server functions read: so you can find your runs and their map on another phone, and so a suspicious run can be checked. It is covered by the health consent. It stays private: only you see it, unless you choose to show it to your friends (see below). Routes of runs sent before this change (2026-10-18) were not sent. Your personal records (best times across all runs) are computed and kept on your phone, from the routes of all your runs in Health; they are never sent. A run's calories are read to be shown on your phone only; they are never sent. We never read your other sports activities or any other Health data.

Runs recorded with the app ("Record a run" button): your location is tracked by the iPhone GPS only during the run (locked screen included; a blue arrow shows it at the top of the screen), with your "While Using the App" permission. At the end, the run (workout, distance and route) is written to Health, then read and sent like the others, route included. We write nothing else to Health.

Push notifications, if you allow them: to alert you instantly (boss defeated, clan boss defeated, friend requests and acceptances, clan invitations and join requests, reactions to your runs, duels: invitation, acceptance, "ready", start and result; run reviewed, account restriction), the server keeps your device's token provided by Apple, the phone's language and time zone (so as not to wake you at night) and your notification settings. Notifications go through Apple's service (APNs). Legal basis: the contract. The token is erased when you sign out and when you delete your account.

3. What we do not do

• No advertising, no sale of data.
• Your health data is never used for marketing or advertising and never shared for those purposes.
• No health data is stored in iCloud.
• No health data in our technical tools (logs, error tracking, analytics).

4. Who sees what

• Other players see your public profile: username, profile photo, country flag, badges, damage, bosses fought and defeated, best rank, weekly streak. Never your exact kilometres, number of runs or run details. Your damage and distance badges (10 km, 50 km…) are computed from your runs and give an idea of the distance you ran: your consent covers their public display. Likewise, personal boss badges show that you completed a week's challenge (for example running 20 km, or running 6 days out of 7).
• Clans: a clan's name, description, emblem and level are public. If you join a clan, its name appears on your public profile, and your username and flag appear in its member list, visible to everyone. Your clan's members see your damage on the weekly clan boss (computed from the distance of your runs); a defeated clan boss gives you a public badge. Clan and country rankings only show damage totals and averages, with no player names. We keep the history of your memberships (join and leave dates) to credit your damage to the right clan; it is deleted with your account. If the team renames or removes a clan (inappropriate name), the reason is shown to its members and kept with their account. If you report a clan name, only the team knows; your report is kept with the decision taken, which is shown to you, and deleted with your account.
• Profile photo: any player can report it. If the team removes it (inappropriate photo), the reason is shown to you and kept with your account. If you report a photo, only the team knows; your report is kept with the decision taken, which is shown to you, and deleted with your account.
• Friends: your friends see the same as everyone (your public profile), grouped for them: a friends leaderboard on the current boss and a feed of your game feats (bosses defeated, top 10, final blow, personal and clan boss badges). Your friend requests, friend list and blocked players are only visible to you (and to each person involved for their own request); they are deleted with your account.
• Runs shared with your friends, only if you turn on "My friends see my runs" (Settings › Sharing): your friends see the date, distance, pace, time and damage of your validated runs from the last 30 days (except those you hide) and can react with ready-made reactions. As this information comes from your health data, turning it on is your explicit consent to this sharing (GDPR article 9(2)(a)), recorded with its date and withdrawn by turning the setting off. If you also turn on "My friends see my run routes", they see the route of these runs on a map, without an area of at least 200 m around the start and finish (removed by the server before sending; the area is shifted and sized differently for each player, and the points shown carry no time, so your home stays hidden): a separate explicit consent, recorded and withdrawn the same way. Reactions sent and received, and the players whose reactions you mute (never told), are kept with your account and deleted with it.
• Duels: you can challenge a friend or a member of your clan. During a duel, your opponent sees, for your validated runs that start during the duel, their number, their total distance and your result in the chosen format (distance, longest run, time of reaching the target distance or best time); nothing else. As this information comes from your health data, sending or accepting a challenge, after reading this on screen, is your explicit consent to this sharing with that opponent (GDPR article 9(2)(a)); the date of the challenge and of the acceptance is recorded. Your duels (opponent, format, dates, result) are kept with your account and deleted with it; they are included in your data export. Live duel: each records their run in the app; during the run, your opponent sees your distance and time since the start, updated every few seconds. Your location is shown to them only if you tick "Show my position" at the start of that duel (explicit consent, GDPR article 9(2)(a), for that duel only): only your latest position is kept, and it is erased as soon as your run ends. The distance and time of your duel run are kept with the duel.
• The StrideRaid team (administrators) may look at the details of a run checked by hand: suspicious, reported by players, in a week's top 10, or disputed by you.

5. Run checks (anti-cheat)

Each run is checked automatically (speed, consistency, manual entry, source app…). It may be rejected or put on hold for a human check; you always see its status and the reason, and you can dispute a rejected run within 7 days: a team member reviews it. These decisions only have effects within the game.

To check that runs really come from the StrideRaid app installed on a real iPhone, the app uses Apple's App Attest: a key created in the phone's secure chip, vouched for once by Apple, signs each upload. The server keeps the public part of this key (it does not identify you) and records on each run whether the signature is valid. This signature is mandatory: a run sent without a valid signature does not count automatically and goes to a human check. Legal basis: our legitimate interest (fair play).

In case of repeated cheating, the team may limit an account in the game (its runs no longer count against the boss and it no longer appears in other players' leaderboards). You are informed in the app, with the reason and how to dispute it (EU Digital Services Act, article 17).

6. Where your data is, and who helps us

• Supabase: database and account hosting, in the European Union (Frankfurt, Germany).
• Resend: sending sign-in and waiting-list emails (your email address only), in the United States; transfer covered by the EU–US Data Privacy Framework (Resend is certified) and the European Commission's standard contractual clauses.
• Apple: reading Health and local notifications, on your phone; sending push notifications (APNs).
• Cloudflare: the strideraid.app website, its audience measurement, the anti-bot check (Turnstile) on the waiting-list form and forwarding of messages sent to contact@strideraid.app, in the United States; transfer covered by the EU–US Data Privacy Framework.
• Google (Gmail): receiving messages sent to contact@strideraid.app.
• Google (sign-in): if you choose "Continue with Google", Google verifies your identity under its own privacy rules; we only receive what is described in section 2.
• RevenueCat (planned, not used while no subscription is offered): subscription management (your account's technical identifier, purchases and subscriptions, country and device), in the United States; transfer covered by the European Commission's standard contractual clauses. No health data.
• Sentry: app error reports (device model and system, app version, technical details of the error; no IP address, identity or health data), stored in the European Union; US company certified under the Data Privacy Framework.
• OpenStreetMap (OpenStreetMap Foundation, United Kingdom): map background shown to the team when it checks the route of a suspicious run. The team member's browser requests the map tiles of the area covered (with their IP address, without your identity or the route itself). No data processing agreement; the United Kingdom is recognised by the European Commission as providing adequate protection.

Each provider is bound by a data processing agreement (article 28 GDPR), except Google: messages sent to contact@strideraid.app arrive in a standard Gmail inbox, subject to Google's terms.

7. How long

• Run details (minute by minute, heart rate, device, GPS route): 24 months, then deleted automatically. Date, distance and status remain, as they support your badges and leaderboard history.
• Account and profile: as long as your account exists.
• Beta waiting list: until beta recruitment ends, or until you unsubscribe.
• Account deletion: everything is deleted immediately (profile, consents, runs, damage, reports, friends, clans). Hit points already taken from bosses are not recalculated. Your purchase history at RevenueCat is erased automatically within the hour; it stays with Apple, which handles payment.
• Backups: a full, encrypted copy of the database, kept for 4 weeks; deleted data therefore also disappears from backups within 4 weeks at most.

8. Your rights

From the app (Profile › Settings):

• Access and portability: "Export my data" (full file).
• Rectification: country; username (under the game's conditions).
• Withdrawing health consent: reading stops and your runs are deleted from the server; your account remains.
• Erasing a run: "…" button on the run in Profile › Runs › "Delete": its details (minute by minute, heart rate, device) are erased; the date, distance and damage already dealt remain.
• Erasure: "Delete my account", immediate.

For any other request (objection, restriction, question): contact@strideraid.app. You may also lodge a complaint with your data protection authority (in France, the CNIL: www.cnil.fr).

9. Minimum age

StrideRaid is reserved for people aged 16 or older, confirmed at sign-up.

10. Changes

Any significant change will be shown to you in the app; if it concerns your health data, your consent will be asked again.

Last updated: 21 October 2026.