Legal

Privacy Policy

Effective date: September 4, 2026
Last updated: September 4, 2026

ROVUN is a running app that turns the streets you cover into a shared territory competition.

This Privacy Policy explains how Evgeny Timofeev, trading as ROVUN (“ROVUN,” “we,” “us,” or “our”), handles personal information when you visit rovun.app, use the ROVUN app, or contact us.

This policy describes how information is handled when you use the service.

Privacy contact: support@rovun.app
Business address: 245 Ross Dr, New Westminster, BC V3L 0C6

1. Information we collect

Account and profile information

When you sign in using Apple or Google, our authentication provider may receive an account identifier, email address, name, and profile-image information, depending on the provider and your settings.

We also process the information used to create your ROVUN profile, such as your username, display name, home city, selected avatar symbol, and emblem.

ROVUN does not receive your Apple or Google password. Authentication credentials used to keep you signed in are stored using the device’s secure credential storage.

Location and running information

With your permission, ROVUN uses location information to position the map, identify nearby streets, and record your movement during a run.

An active run may continue receiving location updates when the app is in the background or your phone is locked. Location access is subject to your device settings and operating-system restrictions.

Run information may include:

  • Precise route coordinates.
  • Run identifiers, start times, duration, and distance.
  • Pace and other calculated performance statistics.
  • Run titles.
  • Streets and sections covered or claimed.
  • Territory changes and related activity.
  • Loop boundaries and calculated areas.

Completed runs are stored on your device and uploaded to our backend for account history, synchronization, and shared territory features. Runs recorded without an internet connection may be queued and uploaded when connectivity returns.

Notes, photos, and device preferences

You may choose to add private notes or before/after photos to a run.

In the current app, those notes and photos are stored locally and are not included in run submissions to the territory backend. A locally selected profile photo and optional body measurements are also stored on the device.

Local information may be included in device backups or transferred using operating-system features, depending on your settings. “Stored locally” does not mean that information can never leave the device.

We also store preferences such as display appearance, measurement units, notification choices, and optional Health export settings.

Health and fitness information

If you enable Apple Health integration and grant the relevant permissions, ROVUN may access available heart-rate information and write completed running workouts, distance, estimated active energy, and workout routes to Apple Health.

The Health permission screen may also request access to workout and route information. Access depends on the permissions you grant and the features supported by your installed version.

You may separately provide optional body information, such as height, weight, birth year, and sex, for fitness estimates. Availability of importing this information from Apple Health may vary by version and permission.

Health information and locally stored body measurements are not included in public territory profiles or the current territory-backend run payloads. ROVUN does not use Apple Health data for advertising or marketing.

Device motion information may also be used, with permission, to support movement or distance estimates.

Support communications

When you contact us, we process the information you provide, which may include your contact details, account information, description of a problem, screenshots, and diagnostic reports.

Please avoid sending unnecessary location details, health information, passwords, or sign-in codes.

Technical information

The app and the services it connects to may process technical information needed to provide and protect the service, such as IP addresses, request timestamps, device or software details, authentication events, and error information.

Diagnostic logs may contain contextual information about a request or failure. We do not need your password to investigate a support issue.

Website information

Our website is hosted by Lovable. Visiting the website may result in processing connection and request information, including your IP address, browser information, and pages requested.

The website does not use analytics, advertising cookies, tracking tools, or contact forms.

2. What is public

ROVUN includes public competitive features.

Your username, display name, home city, avatar symbol, emblem, competitive statistics, and territory activity may be visible to other people. Public world information also includes account identifiers associated with profiles and activity.

Territory information may show which streets a runner holds, when claims or ownership changes occurred, and related performance information. This information may be accessible without signing in.

Public territory activity can reveal where and approximately when you run. It may allow someone to infer routines or places you regularly visit.

Your full saved run route is not included in the public world response. It is stored for authenticated account-history access. However, public street claims may still reveal parts of that route.

Your email address, private run notes, locally stored photos, and Apple Health readings are not published as part of your public territory profile.

Choose a display name carefully. Avoid using information you do not want associated with your activity, and consider the privacy implications of recording or claiming streets near sensitive locations.

3. How we use information

We use information to:

  • Create and maintain accounts.
  • Record runs and show personal running history.
  • Synchronize eligible activity with the backend.
  • Calculate and display territory claims, rankings, and achievements.
  • Display nearby streets and map information.
  • Provide optional Health and notification features.
  • Respond to support and privacy requests.
  • Investigate errors, misuse, and security issues.
  • Meet applicable legal obligations.

We do not sell personal information or use Apple Health data for targeted advertising.

4. Service providers and other disclosures

We use external services to operate ROVUN, including:

  • Rork Auth for account authentication.
  • Apple and Google when you choose their sign-in services.
  • Cloudflare-hosted infrastructure for backend requests, account-related records, run history, and territory data.
  • Apple mapping and location services for maps, place searches, geocoding, and map images.
  • OpenStreetMap-derived street data and Overpass services for retrieving street geometry.
  • Lovable for website hosting.

Street-data requests can include geographic areas relevant to your location. Mapping requests may include search text or a map region. Providers may also receive connection metadata such as IP addresses.

Providers handle information under their applicable terms, privacy policies, and any agreements with us. Their roles may differ: some process information on our behalf, while others provide services directly to you.

We may also disclose information where reasonably necessary to comply with law, respond to valid legal requests, protect safety and security, or establish, exercise, or defend legal claims.

If our business is reorganized, acquired, or transferred, information may be transferred as part of that transaction, subject to applicable law and appropriate notice.

5. Information you choose to share

If you export or share a run image, screenshot, or other content, the recipient or service you choose will receive the information included in it.

Check shared content for routes, coordinates, timestamps, names, photos, and other details you do not want to disclose. We cannot control copies made or retained by recipients.

Workout information written to Apple Health is also governed by your Apple Health settings. Other apps may access that information if you authorize them through Apple Health.

6. Permissions and choices

You can manage location, camera, photos, motion, notifications, and Health permissions through your device’s settings.

Disabling a permission may prevent the related feature from working. For example, disabling precise location may prevent reliable street claims.

Revoking a permission generally stops future access; it does not automatically erase information already stored.

Signing out does not delete your account or backend records. Uninstalling the app does not delete backend records and may remove locally stored information that has not been backed up.

Notifications may display street names, rival names, or territory information on your lock screen. You can control notification previews through iOS settings.

7. How long information is kept

Account, run, and territory records are currently retained to provide account history and shared competition features. The current backend does not apply a fixed automatic expiry to those records.

Local notes and photos remain in local storage until removed through available controls or otherwise removed from device storage. Device backups may have a separate lifecycle.

Support records and technical logs may be retained for support, security, legal, and operational purposes.

Support communications: We retain support messages and attachments for up to 12 months after a request is closed, then delete them.

Technical logs: We retain routine server, security, error, and website access logs for up to 30 days from collection. Relevant records may be retained longer where reasonably necessary to investigate a specific security incident, resolve a dispute, or meet a legal obligation.

Website information: If we use analytics, identifiable analytics records are retained for up to 90 days, after which they are deleted or irreversibly anonymized. Website contact-form submissions follow our support-communication retention period.

We must also consider applicable deletion obligations and any limited retention required by law or necessary for legal claims.

8. Privacy requests and account deletion

Depending on where you live and the circumstances, you may have rights to request access, correction, deletion, a portable copy, restriction of processing, or to object to certain processing. You may also have the right to withdraw consent and complain to a data-protection authority.

Contact support@rovun.app to make a request. We may need proportionate information to verify your identity. Do not send your password or sign-in codes.

You can contact us to submit a privacy or deletion request. We will respond in accordance with applicable law and the capabilities of the service at the time.

9. Legal grounds for processing

Where applicable law requires a legal basis, the relevant grounds may include:

  • Performing our agreement with you to provide requested account and running features.
  • Your consent for optional processing where consent is required.
  • Legitimate interests in operating, securing, and supporting the service, where those interests are not overridden by your rights.
  • Compliance with legal obligations.

Where health information or other sensitive information requires an additional legal condition, we must establish that condition, such as explicit consent where applicable.

Operating-system permission alone may not satisfy every legal consent requirement.

10. International processing

Our providers may process information outside your country. Those countries may have different data-protection laws.

Where required, appropriate safeguards must apply to international transfers.

ROVUN is operated from British Columbia, Canada. Personal information may be processed outside your province or country by providers supporting authentication, hosting, maps, website operation, and support communications. Processing locations depend on the provider and the service configuration. Information processed in another country may be subject to that country’s laws, including lawful access by its courts, law-enforcement agencies, and other public authorities.

For questions about our service providers, international processing, or applicable safeguards, contact support@rovun.app.

11. Security

We use safeguards intended to protect information, including authenticated access to private account history and secure credential storage on supported devices.

No service or storage system is completely secure. Protect your device and sign-in accounts, and contact us if you believe your ROVUN account has been accessed without authorization.

12. Age eligibility

ROVUN is intended for people aged 16 and over.

If you believe a person under 16 has created an account or provided personal information to us, contact support@rovun.app so we can investigate and handle the information in accordance with applicable law.

13. Changes to this policy

We may update this policy as the service changes. The latest version will be published on this page with an updated date.

Where required, we will provide additional notice or obtain consent before applying a material change.

14. Contact

Evgeny Timofeev
245 Ross Dr, New Westminster, BC V3L 0C6
support@rovun.app