1. Introduction
Welcome to run10k ("App", "we", "our" or "us"). This Privacy Policy describes how we collect, use, store, and protect your personal data in compliance with the General Data Protection Law (LGPD - Law No. 13.709/2018) and other applicable laws.
By using our application, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please do not use our App.
Data Controller
run10k
Address: São Paulo, Brazil
Email: privacy@run10k.app
2. Data We Collect
2.1. Data Provided Directly by You
- ▪ Full name
- ▪ Email address
- ▪ Password (stored encrypted)
- ▪ Account creation date
Processed directly by Apple In-App Purchase or Google Play Billing. We do not store credit card data. We only keep subscription status and history for support.
d) App Usage Data- ▪ Completed, skipped, or modified workouts
- ▪ Rate of Perceived Exertion (RPE)
- ▪ Personal notes and progress
2.2. Data Collected Automatically
We collect technical data (Model, OS, IP), usage/analytics data (Screen views, session time) and use Cookies/Similar Technologies for performance.
2.3. Location Data
With your permission, the App accesses, collects, uses, and processes precise location data from your device GPS while you record a run, including route points, distance, pace, speed, start/end time, and related workout metrics. When you start an active run, location may continue to be collected in the background or while the screen is locked so the App can keep recording your route and workout metrics accurately until you stop the activity.
This app collects location data to enable run tracking, route recording on the map, distance and pace calculation, and workout history even when the app is closed or not in use, only during an active run started by you.
We use location data only to provide core running features such as live run tracking, map route display, pace and distance calculation, workout history, progress analysis, and personalized training recommendations. Location data may be stored in your account history and processed by our secure cloud infrastructure to sync your runs across devices and support app functionality. Location data may be shared only with essential infrastructure, maps, operational analytics, or secure processing providers needed to deliver these features. We do not sell location data or use it for third-party advertising.
3. How We Use Your Data
We use your data strictly under LGPD legal bases:
- ▪Contract Performance: Generating AI workout plans, managing account and payments.
- ▪Consent: Device permissions such as location during active runs, push notifications, and marketing communications.
- ▪Legitimate Interest: App improvements, security, and analytics.
- ▪Legal Obligation: Invoices and judicial requirements.
4. Third-Party Sharing
Your data is shared only with essential providers for service operation:
We use market-leading AI providers to process anonymized quiz data (no name/email) and generate your personalized workout. Data retention at the provider is minimal and restricted for safety purposes.
Important: We never sell, rent, or trade your personal data.
5. International Transfer
Some technology providers may process data outside of Brazil. We ensure that these partners adopt standard contractual clauses and security certifications (ISO 27001, SOC 2) compatible with LGPD.
6. Data Security
We employ encryption in transit (HTTPS/TLS) and at rest, password hashing (bcrypt/SHA-256), and strict access controls. However, no system is 100% impenetrable. In case of an incident, we will notify you and the ANPD as required by law.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Registration Data | Account Duration + 5 years (Legal) |
| Quiz Data / Workouts | Account Duration + 1 year |
| Run Location Data / Routes | Account Duration + 1 year |
| Payment Data | 5 years (Fiscal) |
| Logs (IP) | 6 months (Legal Requirement) |
8. Your Rights (LGPD)
You have full control over your data. You may request:
- ▪ Confirmation and Access
- ▪ Data Correction
- ▪ Anonymization/Blocking
- ▪ Portability
- ▪ Consent Verification
- ▪ Account Deletion
Send an email to privacy@run10k.app or access Settings > Privacy in the App. Response time: up to 15 business days.
9. Final Provisions
Minors
The App is not intended for individuals under 18 years of age. Accounts created by minors without supervision will be deleted.
Changes
We will notify you of changes via App or Email. Continued use implies acceptance.
Law and Jurisdiction
Governed by Brazilian laws. The courts of the Judicial District of São Paulo, SP are elected.