CONQR Privacy Statement

CONQR is operated by Swank Labs LLC, a Washington limited liability company ("we," "us," or "our"). This Privacy Statement explains how we collect, use, and share information when you use CONQR.

If you are a resident of Washington, you should also review our Consumer Health Data Notice, which supplements this Statement.

Contact: info@runconqr.com

Information we collect

Information you provide

  • Account information: Email address and password.
  • Third-party sign-in: If you choose to sign in using Apple Sign-In or Google Sign-In, we receive information from that provider to authenticate you and create or access your CONQR account. This may include your name, email address (including an email relay address), and a provider-specific account identifier.
  • Optional coaching and training plan inputs: These inputs are voluntary and not required to use the App. If you enable coaching or training plans, we may collect:
    • Age range
    • Exact height
    • Exact weight
    • Sex or gender field as offered in-app
    • Fitness self-evaluation and general activity level
    • Optional running-related medical concerns you choose to provide for coaching context
  • Guild and event information:
    • Guild membership, RSVPs, and other participation signals.
    • If you are a guild owner, the posts and events you create (including text and any links you include).
    • Reports you submit (and reports submitted about your account/content).
    • Visibility: Guild posts, events, and RSVPs may be visible to other members of the relevant guild depending on the guild's settings.
  • Communications: Support messages, bug reports, and feedback you send us.

Information collected automatically

Location and route data

  • We collect precise GPS data during runs to map your route and calculate distance.
  • We store your precise route for your private run history. For social or community surfaces, we apply safety measures such as delayed visibility, map fuzzing, aggregation, or rendering into generalized shapes by default, but these measures are not a guarantee of anonymity.

Run and workout metrics

  • Distance, pace, speed, elevation, timestamps, and related workout data.
  • If connected, heart rate and other fitness metrics from your device or connected health platform (see "Health platform data" below).

Inferred metrics

We may process your run data and (if provided) optional coaching inputs to generate performance statistics such as cadence, stride estimates, and VO2Max estimates. These metrics are generated by our own algorithms on our servers.

Health platform data (Apple HealthKit and Google Health Connect)

If you grant permission, we may read heart rate, step count, and workout activity data from Apple HealthKit or Google Health Connect. We use this data solely to provide app features such as run tracking, training plans, and performance insights. We do not use data obtained from Apple HealthKit or Google Health Connect for advertising or marketing purposes, and we do not sell or disclose this data to third parties except as necessary to provide the Service through our service providers (and to OpenAI only if you opt in to AI coaching as described below).

Connected devices and fitness platforms

If you choose to connect a third-party device, wearable, or fitness platform (each, a "Connected Platform"), we may access and import activity and fitness data from that Connected Platform to provide the CONQR service. Depending on what you connect and what you authorize, this may include activity summaries (such as workout type, start time, duration, distance, pace, and calories), sensor and performance metrics (such as heart rate, cadence, power, and elevation), and route/GPS track data. We use this information to create and display your CONQR activity history and to power app features such as progression, challenges, and training insights. You can disconnect a Connected Platform at any time to stop future imports, and you can also control what data is shared through the permissions you grant in the Connected Platform. We may also allow you to import activity files you provide (such as FIT, GPX, or TCX) to create CONQR activity records.

Device and app data

  • Device model, operating system, unique identifiers, app version, and app usage events such as features used, session length, interactions, and progression events.
  • Crash and error data collected locally on your device by the operating system. We do not currently use a third-party crash analytics service. If we add one in the future, we will update this Statement and list the provider.
  • Weather and coarse location handling: To provide weather and "good time to run" features, we use a coarse, cached forecasting approach. We group areas (for example, roughly within several miles) and reuse cached forecasts for nearby users rather than querying weather on a per-user, per-request basis. Weather forecast data is retrieved from Open-Meteo, a third-party weather API. We send only coarse, grid-rounded coordinates — not your precise location — to retrieve forecasts. We do not need to store a continuous, precise background location trail for weather features.

Aggregated and de-identified data

We create aggregated and de-identified statistics to understand app performance, improve features, and develop insights. This data does not identify you and may be used for commercial or partnership purposes.

How we use information

We use your information to:

Provide and operate the App

  • Track runs, map routes, calculate stats, and power gameplay and progression.
  • Save your history and generate XP and rewards.
  • Connect to health and fitness APIs such as Apple HealthKit and Google Health Connect.

Personalize your experience

Use your history and interactions to personalize core product experiences such as suggested run timing and other in-app recommendations. This personalization is part of the Service and is not currently offered as a separate opt-out feature.

Guilds and events

  • Enable guild discovery, joining/leaving, posts, events, and RSVP functionality.
  • Enforce safety, integrity, and policy compliance, including handling reports and taking action under our Terms and Community Policy.

Training plans and coaching features (Opt-In)

If you opt in, we may use your run history, optional inputs (including exact height, exact weight, and any medical concerns you voluntarily provide), and inferred metrics to:

  • Generate personalized training plans
  • Provide coaching feedback and tips
  • Recommend pacing, mileage changes, and progression suggestions

Notifications (with device permission)

Run reminders, game events, and coaching tips.

You can manage notification permissions in your device settings and, where available, in-app by category.

Improve and secure the Service

  • Debugging, analytics, feature optimization, and system monitoring.
  • Detecting abuse, preventing fraud, and protecting users.

Process purchases and subscriptions

Manage subscriptions and in-app purchases, including entitlement status and related transaction metadata (such as transaction identifiers, purchase date, and subscription status).

Communicate with you

  • Service alerts, updates, and security notices.
  • We may send marketing communications where legally permitted. You can opt out at any time by following the unsubscribe instructions in the message or by contacting us.

Training plans and coaching opt-in

Before generating a personalized training plan or enabling coaching, we will request an explicit opt-in confirming that:

  • You are voluntarily providing optional coaching and training plan inputs.
  • We can use your run history, optional inputs, and inferred metrics to generate training and coaching recommendations.
  • If coaching is enabled, a limited data payload may be sent to our AI service provider to generate your coaching outputs.
  • You can withdraw consent at any time in the App settings. If you withdraw consent, we will stop using optional inputs for coaching and training plans going forward.

AI processing

If you use AI coaching features, we may send a limited payload to OpenAI via API to generate outputs for you. This data is processed subject to strict business terms, and we do not permit OpenAI to use data sent via the API to train OpenAI's public models.

AI coaching is not available by default for users under 18.

Guild types and location-based discovery

Guilds may be public or private, and may be organized as global, local, or hyperlocal groupings.

  • Global: Anyone can be eligible to join (subject to guild settings).
  • Local: Based on an approximate city-center grouping (typically a larger city hub).
  • Hyperlocal: Designed to be imprecise to reduce stalking risk. We generate an approximate center point by offsetting from a reference point using a randomized distance and direction, then define a broad radius for eligibility.

Eligibility is based on approximate methods and is not a guarantee of anonymity. Any attempt to identify or track people through location-based features is prohibited and may result in enforcement.

Posts, links, and events

Posts: Guild posts are text and may include links. Users can react to posts.

Link safety checks: We may check posted links for obvious safety risks (for example, whether a URL appears malicious). This may involve sending the URL to a third-party threat-intelligence or safe-browsing service. We do not rely on link checks as a guarantee of safety, and you should use caution when visiting external links. (External links and third-party services are also addressed in our Terms.)

Events: Guild owners can schedule events, including recurring runs or races. Users can RSVP. Events are user-hosted, and we do not verify organizers, venues, route safety, permits, or participant screening.

Sharing information

We share information only as necessary to operate CONQR.

Service providers

We use trusted third parties to process data on our behalf. They are bound by contractual obligations to protect your information and to use it only to provide services to us. Common categories include:

  • Backend and authentication: Supabase for authentication, database storage, and user management.
  • Infrastructure hosting: Fly.io for API and service hosting.
  • Email delivery: Resend for account and service emails.
  • Mapping and route visualization: Mapbox. Mapbox may collect de-identified telemetry to improve their maps. You can learn about and manage Mapbox telemetry preferences through the Mapbox information icon ("ℹ") displayed on map screens within the App, as required by Mapbox.
  • Weather data: Open-Meteo for weather forecasts (receives only coarse, grid-rounded coordinates as described above).
  • Purchases and subscriptions: RevenueCat plus the platform stores (Apple App Store and Google Play) to process purchases and manage entitlements.
  • AI processing: OpenAI for AI coaching outputs as described above.

User-directed sharing (Strava export)

If you choose to connect your CONQR account to Strava, we send your run to Strava via the Strava API as:

  • A GPX file upload
  • Limited metadata such as sport type and an activity name formatted like "CONQR Run YYYY-MM-DD"

To enable exports, we store a Strava access token for your account. You can disconnect Strava in CONQR and/or revoke access in Strava at any time. If access is revoked or you disconnect, we stop exporting runs, and we delete the Strava access token during disconnect and account deletion workflows.

Uploads are processed by Strava asynchronously. Once shared with Strava, your data is governed by Strava's policies and is no longer controlled by CONQR. We do not currently import data from Strava into CONQR.

No ads and no sale of identifiable data

  • We do not sell your identifiable data.
  • We do not share information for cross-site advertising.
  • We do not use data obtained from Apple HealthKit or Google Health Connect for advertising.
  • We may use and share aggregated, fully de-identified insights for commercial or partnership use.

Data retention

  • Account data: Deleted within 28 days after you request account deletion, subject to limited exceptions below.
  • Operational and security logs: May be retained for a limited period as needed to maintain security, prevent fraud, and comply with legal obligations.
  • User-generated content: Guild posts, events, RSVPs, and reports may be retained until deleted by you (where controls exist), removed for policy reasons, or deleted as part of account deletion workflows.
  • Aggregated and de-identified data: May be retained indefinitely because it cannot reasonably be linked back to you.
  • Backups: Residual copies of certain data may persist in backups for a limited period, and are not used for any other purpose during that time.

Children and teen users

CONQR is available for users age 13 and older. Users under 18 receive additional default privacy protections.

If you are under 18, a parent or legal guardian must review and agree to the Terms on your behalf. When a user selects an age range of 13–18 during onboarding, we mark the account and apply the most conservative privacy settings by default, including limiting public identity, restricting leaderboard visibility, restricting guild creation and event hosting, and disabling AI coaching features.

We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at info@runconqr.com.

International data transfers

CONQR is operated from the United States. If you use CONQR from outside the United States, your information may be transferred to, stored in, and processed in the United States and other countries where our service providers operate. These countries may have data protection laws that differ from the laws of your jurisdiction. By using CONQR, you consent to the transfer of your information to the United States and other jurisdictions as described in this Statement.

Your rights

Depending on your jurisdiction, you may have rights to:

  • Access your data
  • Delete your data
  • Correct your data
  • Opt out of marketing communications
  • Withdraw consent for optional processing such as coaching inputs
  • Appeal a decision we make regarding your privacy request
  • Obtain a portable copy of your data (provided in a standard machine-readable format such as JSON)
  • Restrict certain processing in some circumstances

Submit requests to info@runconqr.com.

Security

We use industry-standard measures to protect your information, including encryption in transit using HTTPS and TLS, authentication controls, and restricted access based on role and need.

Cookies and similar technologies

Our website uses cookies and similar technologies to operate the site, remember preferences, and analyze site usage.

  • Necessary cookies: Required for basic site operation.
  • Analytics cookies: Used to understand site usage and improve the experience.
  • Marketing cookies: We do not currently use marketing cookies; if we do in the future, we will do so only where permitted and with appropriate consent.

Consumer Health Data Notice

Washington residents should review our Consumer Health Data Notice for additional disclosures and rights related to consumer health data under the Washington My Health My Data Act.

Changes to this statement

We may update this Statement as needed. If changes materially affect your rights, we will notify you in the App or via email.

Contact

Swank Labs LLC DBA CONQR
info@runconqr.com