Privacy Policy for Are You Faster

Introduction

Welcome to Are You Faster! We are committed to protecting your privacy and being transparent about the data we collect and how we use it. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data.

Are You Faster is a fitness tracking app that gamifies outdoor running by letting you compete against AI-powered virtual animal opponents in real-time GPS-tracked races.

Information We Collect

1. Location Data (GPS)

What We Collect:

• Your precise GPS coordinates (latitude, longitude, altitude)
• Speed and direction of movement (meters/second)
• Location accuracy measurements (meters)
• Timestamps of location samples during runs
• Continuous route data during active workout sessions

When We Collect It:

• Only during active workout sessions (when you start a run)
• Tracking continues when your screen is locked or you switch apps (via foreground service)
• A persistent notification shows "Tracking Run" while GPS is active
• Tracking stops immediately when you end your workout
• We do NOT track location when the app is closed

Why We Collect It:

• To measure your running distance and calculate pace
• To generate route maps showing where you ran
• To power the game mechanics (comparing your progress against virtual animal opponents)
• To calculate calories burned based on distance and speed
• To track elevation gain and loss during your runs

How Long We Keep It:

• Location data is stored locally on your device in an encrypted Room database
• You can delete individual runs at any time, which permanently deletes associated location data
• All location data is immediately deleted when you delete your account
• We never transmit GPS coordinates to external servers

2. Fitness & Activity Data

What We Collect:

• Distance traveled (meters)
• Duration of runs (seconds)
• Average and maximum speed (meters/second)
• Elevation gain and loss (meters)
• Calculated calorie expenditure
• Run start and end times
• Game mode (Hunt or Escape) and opponent animal
• Run outcome (win/loss), XP earned, and achievements unlocked

Why We Collect It:

• Fitness tracking and progress monitoring
• Gamification features (XP, levels, achievements)
• Personal statistics and run history
• To display your fitness journey over time

Storage: Local device only (Room Database with CASCADE delete protection)

3. Account Information (Optional)

Anonymous Mode (Default):

• A random UUID is generated locally as your user ID
• No personal information is collected
• No internet connection required for this mode

When you sign in with Google Sign-In (Optional):

• User ID (Google's unique identifier)
• Email address (optional - you can use Google's limited account feature)
• Display name (optional)
• Profile photo URL (optional - if you've set one)

Why We Collect It:

• To create and maintain your user account
• To associate your workout data with your profile
• To enable account recovery if you reinstall the app
• To sync your progress across device reinstalls (local backup only)

How We Store It:

• Account credentials (OAuth tokens) are stored securely in Android's EncryptedSharedPreferences using AES256-GCM encryption
• Account information is stored locally in encrypted Room database
• We do not transmit your account information to any external servers (except OAuth authentication with Google)

4. Device & App Data

What We Collect:

• Device model (displayed in Settings for support purposes)
• Android API level (displayed in Settings)
• App version (displayed in Settings)
• User preferences (units, theme, map style, haptics, voice cues, accessibility settings)

Storage: Local only (DataStore Preferences)

Purpose: App functionality and personalization

What We Do NOT Collect

• ❌ We do NOT collect analytics or usage data (no Firebase, no third-party analytics)
• ❌ We do NOT use advertising identifiers or ad networks
• ❌ We do NOT access your contacts, photos, camera, microphone, or SMS
• ❌ We do NOT track your location when the app is closed
• ❌ We do NOT sell or share your data with third parties
• ❌ We do NOT use cookies or tracking pixels
• ❌ We do NOT collect device IMEI or phone numbers

Permissions Required

The app requests the following Android permissions:

ACCESS_FINE_LOCATION & ACCESS_COARSE_LOCATION (Required)

Purpose: Track your running route during gameplay using GPS

When Requested: When you attempt to start your first run

Background Usage: Yes, via foreground service (only during active runs)

User Control: You can revoke this permission in Android Settings → Apps → Are You Faster → Permissions

FOREGROUND_SERVICE & FOREGROUND_SERVICE_LOCATION (Required)

Purpose: Continue tracking during active runs when app is backgrounded

Notification: Required persistent notification shows "Tracking Run"

User Control: Can be stopped via notification or in-app controls

INTERNET & ACCESS_NETWORK_STATE

Purpose:

• Load map tiles from OpenFreeMap (self-hosted tile server)
• Google OAuth2 authentication (if you choose to sign in)

Note: Map tiles are the only data transmitted during normal use. No fitness or GPS data is sent.

POST_NOTIFICATIONS (Android 13+)

Purpose: Show progress notifications during runs

Required: Yes for foreground service visibility (Android requirement)

VIBRATE

Purpose: Haptic feedback for UI interactions and game events

User Control: Can be disabled in Settings → Preferences → Haptics

WAKE_LOCK

Purpose: Keep screen on during active runs (optional)

Duration: Only during active gameplay session

How We Use Your Information

Your data is used exclusively to provide the app's core functionality:

• Core Features: Track your runs, display maps and statistics, power the game mechanics
• Personalization: Remember your preferences (units, map style, audio settings, theme)
• Progress Tracking: Maintain your XP, level, achievements, and run history
• Account Management: Authenticate your identity (if you sign in with Google)

We do NOT use your data for:

• Advertising or marketing
• Third-party analytics
• Selling to data brokers
• Any purpose other than providing the app's features

Data Storage and Security

Local Storage Only

Are You Faster is designed with privacy by default. All your data remains on your device:

• Run Data: Stored in encrypted Room database on your device
• Location History: Kept locally, never transmitted to servers
• Account Tokens: Secured in EncryptedSharedPreferences with AES256-GCM encryption
• Preferences: Stored in DataStore on your device

Security Measures

• Encryption at Rest: EncryptedSharedPreferences using AES256-GCM for sensitive session data
• Encryption in Transit: All network calls use HTTPS (OAuth tokens, map tiles)
• App Sandbox: Android app isolation protects your data from other apps
• Database Protection: Room database with SQLite encryption (if device encrypted)
• No Network Transmission: Fitness data never leaves your device

Android Backup

• Android Auto Backup is enabled for preferences (DataStore)
• Sensitive data (Room Database, EncryptedSharedPreferences) is excluded from backups
• You can disable backups in Android Settings → System → Backup

Third-Party Services

Sign-In Provider:

• Google Sign-In: Managed by Google with OAuth 2.0 security
• We only request minimal scopes: email, profile, openid
• Google is an independent data controller for sign-in events

Review Google's privacy policy: Google Privacy Policy

OpenFreeMap (Map Tiles):

• Map tiles are provided by OpenFreeMap (self-hosted open-source tiles)
• Based on OpenStreetMap data (© OpenStreetMap contributors)
• Map requests contain only tile coordinates (lat/lon bounding boxes)
• No personal information or GPS routes are sent to map providers

MapLibre (Map Rendering):

• Open-source library for map rendering (BSD license)
• Runs entirely on your device
• No data collection or network access

Data Sharing & Export

Currently Implemented:

• ✅ NO third-party data sharing
• ✅ NO server transmission of user data
• ✅ NO analytics services (Firebase, etc. not integrated)
• ✅ NO advertising networks
• ✅ NO social media integrations

Data Export (User-Initiated):

You can export your data in JSON format:

• Settings → Export My Data
• Format: Standard JSON file
• Data Included: User profile, run history statistics
• Note: GPS coordinates are NOT included in export (privacy protection)
• Delivery: Android share sheet to your chosen app

Social Sharing (User-Initiated):

• Share run results as static image placard
• NO Location Data in shared images
• NO Personal Information (optional display name only)
• User Control: Fully opt-in, triggered by share button

Your Rights and Choices

Access Your Data

All your data is accessible within the app. View your run history, statistics, and account information anytime.

Delete Your Data

• Individual Runs: Tap and hold to delete any run from your history
• Full Account Deletion: Settings → Account Management → Delete Account
• Deletion is immediate and permanent
• All associated data is removed from your device (profile, runs, preferences, tokens)
• Cascade Delete: Deleting your account automatically removes all runs and associated GPS data

Export Your Data

Go to Settings → Export My Data to receive a JSON file with your profile and run history.

For assistance: support@areyoufaster.com

Control Permissions

Manage app permissions in Android Settings → Apps → Are You Faster → Permissions:

• Location: Required for GPS tracking during runs
• Notifications: Required for foreground service visibility (Android 13+)

You can revoke permissions at any time. Note that location permission is essential for the app's core functionality.

Opt-Out Options

• Haptic Feedback: Settings → Preferences → Haptics
• Voice Cues: Settings → Preferences → Audio
• Map Style: Choose between multiple map themes

Children's Privacy (COPPA/GDPR)

Are You Faster is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

Age Restriction: 13+

COPPA Compliance:

• NO targeted advertising to children
• NO behavioral tracking for advertising purposes
• Anonymous mode doesn't collect personal info (compliant for all ages when used anonymously)

If you believe a child under 13 has used the app, please contact us at support@areyoufaster.com so we can assist with account removal.

Google Play Data Safety

In accordance with Google Play requirements, we declare:

Data Collected:

• ✅ Location: Precise location for app functionality (required)
• ✅ Personal Info: Email, name (optional, via Google Sign-In only)
• ✅ Health & Fitness: Fitness info (distance, speed, calories) for app functionality
• ✅ Device IDs: Generated UUID for anonymous users

Data NOT Collected:

• ❌ App activity / analytics
• ❌ Advertising IDs
• ❌ Contacts, calendar, photos
• ❌ Audio, video, or voice

Security Practices:

• ✅ Data encrypted in transit (HTTPS)
• ✅ Data encrypted at rest (EncryptedSharedPreferences)
• ✅ User can delete data
• ✅ Data is NOT shared with third parties
• ✅ Data is NOT transmitted to servers (local-only)

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through:

• In-app notification
• Updated "Last Updated" date
• Email notification (if you provided an email via Google Sign-In)

Your continued use of the app after changes constitutes acceptance of the updated policy.

Contact Us

UK GDPR Compliance

Are You Faster CIC is registered in the United Kingdom and complies with UK GDPR requirements.

Data Controller: Are You Faster CIC

Lawful Bases:

• Contract (Art. 6(1)(b)): Provide app's core functions
• Consent (Art. 6(1)(a)): Location permissions (withdrawable in Android Settings)
• Legitimate Interests (Art. 6(1)(f)): On-device performance/security
• Special Category Data (Art. 9(2)(a)): Health data (distance, pace, calories) processed with explicit consent when you start a run

Supervisory Authority: Information Commissioner's Office (ICO)

If you have concerns about our data practices, you can lodge a complaint with the ICO at ico.org.uk