Privacy Policy

Last updated: April 28, 2026

1. Introduction

Runya (“we”, “our”, or “us”) operates a running club platform available as a mobile application and web service. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our services.

By registering an account or using Runya, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use our services.

2. Information We Collect

2.1 Information You Provide

  • Phone number — used to create your account and verify your identity via OTP.
  • Telegram account — optionally linked for receiving OTP codes and notifications.
  • Profile information — display name, profile photo, and preferences you choose to add.
  • Payment details — billing information processed through Click or Payme. We do not store full card numbers; payment processors handle PCI-DSS compliance.

2.2 Information Collected Automatically

  • Location data — GPS coordinates collected during active runs and events for route tracking, auto check-in, and geofencing features. Location is only collected while the app is in use unless you grant background location permission.
  • Device information — device type, operating system version, and push notification token (FCM) for sending alerts.
  • Usage data — pages visited, features used, and interactions within the app to improve our services.
  • Run metrics — distance, pace, duration, and route data generated during your runs.

3. How We Use Your Information

  • Create and manage your account and club memberships.
  • Verify your identity via OTP (SMS or Telegram).
  • Record and display your run history, routes, and event participation.
  • Enable geofencing-based auto check-in at club events.
  • Process donations and membership payments through Click and Payme.
  • Send push notifications and Telegram messages about events, club activity, and account actions.
  • Provide club administrators with aggregated member and event analytics.
  • Detect and prevent fraud, abuse, and security incidents.
  • Comply with legal obligations applicable in the Republic of Uzbekistan.

4. Location Data

Runya uses your device's GPS to power core features: live route tracking during runs, geofence-based event check-in, and club location display on maps. Location data is collected only when you are actively using a location-dependent feature. We do not sell or share your precise location with third parties outside of the services described in this policy.

You may revoke location permissions at any time in your device settings. Doing so will disable route tracking and auto check-in functionality.

5. Sharing Your Information

We do not sell your personal data. We may share information with:

  • Club administrators — your name, membership status, and event participation within clubs you join.
  • Payment processors — Click and Payme receive billing details necessary to process transactions.
  • Telegram — your Telegram user ID is used solely for delivering OTP codes and opted-in notifications.
  • Hosting and infrastructure providers — servers that store and process data on our behalf under confidentiality agreements.
  • Law enforcement or government authorities — when required by law or to protect the rights and safety of users.

6. Data Retention

We retain your account data as long as your account is active. Run history and route data are retained to provide your activity feed and club analytics. You may request deletion of your account and associated data at any time by contacting us (see Section 10). Payment records may be retained for the legally required period under Uzbek financial regulations.

7. Data Security

We protect your data using industry-standard measures including encrypted transmission (HTTPS/TLS), hashed credentials, JWT-based authentication with short-lived tokens, and restricted access controls. OTP codes are stored temporarily in Redis with a short expiry and are never logged to permanent storage.

No method of transmission or storage is 100% secure. We encourage you to protect your account by keeping your phone number private and revoking access if you suspect unauthorized use.

8. Children's Privacy

Runya is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and personal data.
  • Object to or restrict certain processing activities.
  • Withdraw consent (e.g., background location access, push notifications) at any time.

To exercise these rights, contact us using the details in Section 10.

10. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us:

  • Product: Runya
  • Email: support@runya.uz
  • Country: Republic of Uzbekistan

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Continued use of Runya after changes are posted constitutes your acceptance of the revised policy.