Privacy Policy

Last updated: [Date]. Operated by [Registered entity name] (“corun”, “we”). Contact: [email protected].

1. Who we are

corun provides live location sharing for group runs and events via the Android app and this website (corun.in and corun-d2c01.web.app). Grievance / privacy contact: [email protected] · named officer: [Grievance officer name].

2. Data we collect

• Account: Google sign-in identifiers, display name, email (organizers and signed-in runners).
• Guest join: Firebase anonymous uid, display name you enter, optional emergency contact (name, phone, relationship).
• Location: precise or approximate GPS, speed and timestamps while you share during an event.
• Run / fitness: distance, pace, finish status and related summaries.
• Device: FCM push token, app version, platform; crash/diagnostics only if enabled later.
• Website analytics (optional): Firebase Analytics / GA4 only after cookie consent (see Cookie Policy).

3. Why we process it

• Show your live position to the event organizer’s race team for safety and timing.
• Planned safety alerts (SOS, stopped, off-route) — coming soon; not shipped yet.
• Provide post-run summaries; delete detailed GPS traces on the schedule below.
• Operate accounts, Premium (Google Play Billing), and prevent abuse.

We do not sell location data or use it for advertising. Marketing and brand use require separate opt-ins (not enabled in this draft site).

4. Who sees your data

• Event organizers for the event you join (live map, alerts, reports as designed).
• CoRun as operator of the service.
• Processors: Google Firebase / Google Cloud (hosting region: Singapore, asia-southeast1), Google Play for subscriptions.

5. Retention (proposed)

• Live RTDB position: deleted when you stop/leave or the event ends.
• Full-resolution GPS traces: 30 days after the event (proposed).
• Derived summaries: until account deletion (guests: proposed expiry after inactivity — [confirm]).
• Consent / processing logs: at least 1 year where Rules require.
• SOS incident records: [1–3 years — counsel to confirm].

6. Children

corun is intended for users 18+. Guest join cannot verify parental consent. Under-18s should not use guest mode; organizers must not enrol minors without a lawful parental-consent process.

7. Your choices

• Pause or stop sharing from the run screen; leave the event.
• In-app: Settings → delete account (signed-in).
• Web: Account deletion (works without signing in).
• Cookie analytics: Accept / Reject / Cookie settings on this site.

8. International transfers

Primary processing and storage is on Google Cloud in Singapore. We rely on our contract with Google (Cloud DPA). We will update this policy if India’s DPDP negative list or our region changes.

9. Changes

We may update this draft. Material changes will be posted here with a new date. Lawyer-approved version will replace this page.

← Back to home