Welcome to Own-it, the GPS territory-capture game where you run and cycle real-world loops to claim zones, compete with rivals, and build your crew. This Privacy Policy explains what personal data we collect, why we collect it, how it is stored, and your rights over it. By using Own-it you agree to this policy.
Own-it is operated by the Own-it development team. If you have any questions at any point, reach us at support@runnerapp.run.
Own-it is designed primarily for users in the UAE, Saudi Arabia, Qatar, Kuwait, Bahrain, Oman, and Egypt. We comply with the EU General Data Protection Regulation (GDPR) for users in the European Economic Area, and apply equivalent protections globally.
Contents
Data We Collect
We collect only what is needed to operate the app and provide you with a personalised, competitive experience.
- Email address
- Username (chosen by you)
- Country selection
- Language preference (EN / AR)
- Account creation date
- Apple ID (if signing in with Apple)
- Google account name & profile photo (if signing in with Google)
- GPS route coordinates
- Distance & duration
- Average and max speed
- Pace (cycling mode)
- Zones captured
- Calories (from Watch)
- Territory ownership records
- Crew memberships
- Private room history
- Leaderboard rankings
- Attack / defend events
- Profile photo (optional)
- Feed post photos (optional)
- Feed post captions (optional)
- Friends list
- Push notification token
- Apple Watch heart rate
- Apple Watch activity rings
- Pro subscription status
- Subscription tier & renewal date
- (Payment details handled entirely by Apple)
Data We Do Not Collect
We deliberately avoid collecting data that is not necessary for the app to function:
How We Use Your Data
Authentication methods — we offer three ways to sign in:
- Apple We receive your name and email from Apple. Apple may anonymize your email using their Private Relay service.
- Google We receive your name, email, and profile photo from Google.
- Email We send a one-time magic sign-in link to your email via Resend. No password is ever stored.
| Purpose | Data used | Legal basis |
|---|---|---|
| Account creation & authentication | Email, username | Contract performance |
| Magic link email sign-in (email users) | Email address | Contract performance |
| GPS territory capture gameplay | Live GPS coordinates | Contract performance |
| Displaying live positions to other players during runs | GPS coordinates (active run only) | Contract performance |
| Run & cycle stat tracking | Distance, time, speed, pace, GPS path | Contract performance |
| Leaderboard rankings | Username, country, activity stats | Legitimate interest |
| Community feed posts | Username, photo (optional), caption (optional), activity stats | Consent (opt-in per post) |
| Friends & crew features | Username, crew memberships | Contract performance |
| Push notifications (zone attacks, streaks, events) | Device token | Consent (system prompt) |
| Pro subscription management | Subscription status | Contract performance |
| Apple Watch integration | Heart rate, activity data | Consent (HealthKit prompt) |
| App improvement & debugging | Anonymised crash logs (via Xcode / Firebase) | Legitimate interest |
We never sell your personal data to any third party. We never use your data for advertising profiling. Your GPS data is used solely to power the game, track your activities, and display territory on the map.
Third-Party Services
Own-it integrates with the following third-party services. Each operates under its own privacy policy.
| Service | Provider | What data they receive | Purpose |
|---|---|---|---|
| Apple Sign In | Apple Inc. | Name, email (may be anonymized by Apple) | Authentication |
| Google Sign In | Google LLC | Name, email, profile photo | Authentication |
| Firebase Auth | Google LLC | Email address, auth tokens | Secure user authentication |
| Firebase Firestore | Google LLC | User profiles, game data, feed posts | Database storage |
| Firebase Storage | Google LLC | Profile photos, feed photos | Media file storage |
| Mapbox | Mapbox Inc. | Approximate location for map tile requests | Rendering the map |
| Resend | Resend Inc. | Email address (magic link delivery only) | Transactional email — magic link sign-in |
| Google AdMob | Google LLC | Device identifiers (free users only, opt-in rewarded ads) | Advertising — optional rewarded ads for free users |
| Apple HealthKit | Apple Inc. | Heart rate, calories — processed on device only | Workout stats, saving workouts to Health app |
| Apple StoreKit 2 | Apple Inc. | Subscription receipt (opaque, validated by Apple) | Pro subscription management |
| Apple Push Notification Service (APNs) | Apple Inc. | Device push token | Delivering in-app notifications |
All Google Firebase data is stored in Google Cloud data centers. Google LLC is a certified processor under GDPR. For Firebase's privacy policy visit firebase.google.com/support/privacy. For Mapbox visit mapbox.com/legal/privacy.
Data Storage & Retention
All data is stored on Google Cloud infrastructure (Firebase). Here is how long we retain each category:
| Data category | Retention period |
|---|---|
| Account data (email, username, profile) | Until you delete your account |
| GPS run / cycle data & stats | Until you delete your account or individual runs |
| Territory & game state | Until you delete your account |
| Feed posts & photos | Until deleted by you, or when your account is deleted |
| Magic link tokens | 10 minutes (auto-expired in Firestore) |
| Push notification tokens | Until you disable notifications or delete account |
| Subscription status | Until subscription lapses or account is deleted |
| Anonymised crash / performance logs | 90 days (Firebase Crashlytics default) |
When you delete your account, we initiate deletion of all personal data from Firebase Firestore and Firebase Storage within 30 days. Residual backups may persist for up to 60 days before full purge.
Location Data
Location is central to how Own-it works. Here is exactly how we use it:
- Continuous GPS tracking to draw your route
- Territory zone capture detection
- Your live position is shown on the shared map to other active players
- Background location used to continue tracking if you switch apps
- Approximate location to centre the map
- Show nearby territories and zones
- Not sent to other users
GPS coordinates from completed runs are stored as part of your run history in Firebase Firestore. We do not sell or share location history with advertisers. You can delete individual runs or your entire account to remove all stored coordinates.
HealthKit & Apple Watch
If you connect an Apple Watch, Own-it requests access to HealthKit to read heart rate and activity data during workouts, and to save completed runs as workouts in the Health app.
- Heart rate (live, during run)
- Active calories
- Activity ring data
- Workout records (distance, time, calories)
- Saved to your Apple Health app
HealthKit data is processed on your device and used only to display live stats during your run. We do not upload raw HealthKit data to our servers. Apple enforces strict HealthKit usage rules — we cannot use this data for advertising or share it with third parties.
Profile & Feed Photos
Uploading a profile photo or posting to the community feed is entirely optional.
- Stored in Firebase Storage
- Visible to all Own-it users on the map and leaderboard
- Replaceable or removable any time from Profile settings
- Photo and caption are optional per post
- Stored in Firebase Storage and Firestore
- Visible to all users in the community feed
- You can delete individual posts at any time
Do not upload photos that include identifiable third parties without their consent. By uploading a photo you confirm you hold the rights to share it.
Push Notifications
Own-it sends push notifications for the following events:
You will be asked for notification permission during onboarding. You can change this at any time in your iPhone's Settings → Own-it → Notifications. Disabling notifications does not affect gameplay — you will still receive in-app alerts.
Subscriptions & Payments
Own-it Pro is available as a monthly or yearly subscription. All payments are processed entirely by Apple through the App Store using StoreKit 2. Own-it never sees, stores, or handles your payment card details.
We receive only a subscription status receipt from Apple (active / expired / trial) to unlock Pro features. Subscription management, refunds, and cancellations are handled through your Apple ID account settings.
Advertising
Free users of Own-it may encounter optional rewarded ads powered by Google AdMob. These ads are entirely opt-in — you actively choose to watch them in exchange for in-game rewards (such as bonus points or zone boosts). We never show interstitial or banner ads that interrupt gameplay.
- Optional rewarded ads only
- You tap "Watch ad" to earn a reward
- Never shown automatically
- AdMob may collect device identifiers
- No ads of any kind
- AdMob SDK inactive
- No device identifiers collected for ads
AdMob may use device identifiers for ad personalization where permitted by your device settings. You can opt out at any time in Settings → Privacy & Security → Tracking on your iPhone. Opting out means you may still see ads but they will not be personalized to your interests. For AdMob's privacy policy visit policies.google.com/privacy.
Children
Own-it is not directed at children under 13 years of age. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@runnerapp.run and we will delete the data promptly.
Users between 13 and 17 should obtain parental consent before creating an account. GPS-based features that share live location with other players require particularly careful parental consideration for minors.
Your Rights
Under GDPR and equivalent regional laws, you have the following rights regarding your personal data. All can be exercised by contacting us at support@runnerapp.run or through in-app settings where available:
- Access — request a copy of all personal data we hold about you
- Deletion — delete your account and all associated data from the app
- Export — download your run history and activity data
- Correction — update your username, country, or language preference
- Opt out of feed — choose not to post to or appear in the community feed
- Notification opt-out — disable push notifications via iOS Settings
- Restrict processing — object to processing based on legitimate interest
- Lodge a complaint — complain to your local data protection authority (EU users: your national DPA)
We will respond to all data rights requests within 30 days. For account deletion, use Profile → Settings → Delete Account in the app, or email us and we will action it within 5 business days.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to the app or applicable law. When we make material changes we will notify you via a push notification or an in-app banner, and update the "Last updated" date at the top of this page.
Continued use of Own-it after the effective date of a revised policy constitutes your acceptance of the changes. If you do not agree with a change, you may delete your account before the change takes effect.
Contact Us
For any privacy-related questions, data requests, or concerns, please reach us at:
Own-it Support Team
Email: support@runnerapp.run
We aim to respond to all enquiries within 2 business days. For urgent data deletion requests we will confirm receipt within 24 hours and complete deletion within 5 business days.