LEGAL

Privacy Policy

Effective: [ ] October 2026

This is a translation. If it differs from the Korean version, the Korean version prevails.

RUNHEX ("we", "us") processes the personal information of people who use the RUNHEX app and website (run-hex.com) (the "Service") as described below, in line with Korea’s Personal Information Protection Act (PIPA) and other applicable laws.

1. Why we process personal information

To create and manage your account, confirm it is you, and prevent misuse
To save your runs, calculate distance, pace and Equiv-5K, and set your rank
To run Hextreak (your weekly run plan), Shields, milestones and notifications
To provide Squads, clans, friends and the feed
To make and share posters, run cards, diary pages and custom maps
To run tokens, the Shop, runes and capsules, and App guide rewards
To process RUNHEX Pro and in-app purchases and check purchase history
To answer support requests, handle reports and moderate the community
To meet legal obligations and handle disputes

2. What we collect

We use no advertising tracking, analytics SDKs or advertising SDKs.

Category	Items	How
Sign-up (required)	Email address, password (stored encrypted), display name, handle. If you sign in with Apple or Google: that account’s identifier, email and name	Sign-up screen, Apple or Google sign-in
Profile (optional)	Profile photo, tagline, country, city, gender, age band	Edit profile
Runner quiz (optional)	Running experience, reasons you run (up to 3), when you started, runs per week, estimated 5K time, race goal and month, devices you use	Quiz after sign-up; edit or clear it in Settings
Runs (required)	Distance, time, pace, Equiv-5K, start and end times, splits, elevation and pace changes, normalised route shape, real GPS route (latitude, longitude, speed, time, altitude), the town nearest your start	When you record a run
Health data (optional, separate consent)	Running workouts from Apple Health (HealthKit) or Health Connect: distance, time, pace, start and end times, workout route, heart rate (average, maximum, over time). On Android we also read distance segments, calories and steps on your device to work out distance; these are not stored on our servers.	When you connect a health app and allow access, including automatic background import
Use of the Service	Hextreak plan days and weekly results, Shields, breaks and their reason (injury, illness, travel or other, as you choose), milestones, rank and best time, token balance and history, cards and map styles you own, runes and capsules, App guide rewards	Created as you use the Service
Content you create	Diary pages (date, title, layout, up to 6 photos), custom maps (name, colours), feed posts (text, photos, likes, replies), Squads (name, photo, messages, reactions, invites), clans (posts, replies, votes, photo), friend requests and blocks, reports	What you enter
Live status	Whether you are running now (shown as "running now" to friends and Squad members; you can turn it off in Settings)	Automatically when a run starts and ends
Device and connection	Push notification token, platform, app version, language, time zone, IP address and access logs (server logs)	Automatically when you use the app
Purchases	Pro status and expiry, our billing provider’s (RevenueCat) customer ID and your email, transaction and product IDs for custom map slots. We never collect card numbers or other payment details (Apple handles payment).	When you buy in the app

3. How long we keep it

We keep your information until you delete your account, then delete it without delay. Copies in backups are deleted on the backup cycle, within 30 days of deletion at most.

We keep the following for set periods where the law or dispute handling requires it:

Records of contracts, withdrawals, payments and supply: 5 years (Act on Consumer Protection in Electronic Commerce)
Records of consumer complaints and disputes: 3 years (same Act)
Access logs: 3 months (Protection of Communications Secrets Act)
Records of location information use and provision: 6 months (Act on the Protection and Use of Location Information)
Excerpts of reported content and how the report was handled: [1 year] after handling (the link to the reported account is removed when it is deleted)

4. How we delete it

When the period ends or the purpose is met, we delete the information without delay so it cannot be recovered. When you delete your account, the photos stored on our servers (profile, feed, Squad and clan, diary) can no longer be opened from that moment, and are permanently erased from our storage, normally within minutes. Copies cached on our content delivery network disappear within one hour.

Squads and clans you share with others stay for their remaining members, unlinked from your deleted account. A clan whose captain leaves is handed to another member or archived. A photo you uploaded stays if it is still the picture of a Squad or clan that carries on.

5. What other users can see

Posters and videos leave the app only when you save or share them. A poster draws your full route, so check before posting one publicly if the run started at home.

All RUNHEX members: display name, handle, profile photo, tagline, country, city, rank (tier and division), Hextreak weeks, and weekly distance and check-ins on leaderboards
Friends and members of your clan: posts you share to the feed (text, photos, run card), for 30 days after you post them; after that only you can see them. People you have blocked, or who have blocked you, cannot see them. Post images are stored at unlisted web addresses, but anyone who has an address can open it. A run card shows distance, time, pace, splits, elevation, start time and the route on a map, without the first and last 200 m of the route. For runs under 600 m, only an outline of the route is shown, with no map location.
Members of your Squad: that you are in it, your weekly check-in status, messages, and run cards shared to the Squad (no start time, without the first and last 200 m of the route)
Friends and Squad members: "running now" (you can turn it off in Settings)
Your heart rate, gender, age band, time zone, quiz answers, diary, custom maps and full GPS routes are never shown to other users. Posters, videos and runner card images you save or share yourself can be seen by whoever you share them with.

6. Sharing with third parties

We do not sell or give your personal information to third parties, except when a public authority requests it through a lawful procedure.

7. Service providers we use

Our contracts with them require your information to be kept safe, and we oversee them.

Provider	What they do for us
Supabase, Inc.	Database, sign-in, file storage, realtime messages, server functions
RevenueCat, Inc.	Subscription and in-app purchase status
Google LLC	Google sign-in, push notifications (Firebase Cloud Messaging), Health Connect, app fonts (Google Fonts)
Apple Inc.	Sign in with Apple, App Store payments, push notifications (APNs), Apple Health
Cloudflare, Inc.	Storing and serving map tiles, hosting the website
GitHub, Inc.	Serving map label fonts
Resend, Inc.	Sign-up confirmation, password reset and other account emails

8. Transfers outside Korea

To provide the Service (perform our contract with you), we transfer personal information abroad as below. Transfers happen over the network whenever you use the Service. Recipients use it only for the work above and keep it until you delete your account or the contract with them ends.

Recipient (contact)	Country	Items	Purpose
Supabase, Inc. (privacy@supabase.com)	Ireland (AWS Europe)	Everything in section 2	Storage and processing
RevenueCat, Inc. (privacy@revenuecat.com)	United States	Account ID, email, purchase and subscription records	Purchase status
Google LLC (Google privacy contact form)	United States and others	Push token, sign-in details, IP address	Sign-in, notifications, fonts
Apple Inc. (Apple privacy contact form)	United States and others	Sign-in details, purchase details, push token	Sign-in, payments, notifications
Cloudflare, Inc. (privacyquestions@cloudflare.com)	United States and data centres worldwide	IP address, map area requested	Serving maps and the website
GitHub, Inc. (GitHub privacy contact form)	United States	IP address	Serving map label fonts
Resend, Inc. (Resend privacy contact, resend.com/legal/privacy-policy)	United States	Email address	Account emails

You can refuse these transfers by deleting your account, but you then cannot use the Service.

9. Health and location information

We read health data such as heart rate only if you agree to connect Apple Health or Health Connect, and use it only to import runs, count them for rank, tokens and Hextreak, and show them on your own run detail. We never write to Apple Health or Health Connect, and never use health data for advertising or sell it. You can withdraw access in your device settings at any time.

We collect location only during a run, after you allow location access, and handle it under Korea’s Location Information Act and our Location Terms.

10. Automated decisions

Your rank is set automatically from your best Equiv-5K: the time of any run of 1 km or more, converted to 5K with the Riegel formula. To ask how your rank was set or to dispute it, contact us below. Unless there is a good reason not to, we will explain it and review it again where needed.

11. Your rights

You can ask at any time to see, correct or delete your information, to stop its processing, or to withdraw consent. You can change most of it yourself in Profile > Settings, delete your account there, or email us. We act within 10 days of your request and tell you the result.

Someone you authorise can ask for you, with a letter of authorisation.

You must be 14 or older to use RUNHEX. If we learn an account belongs to someone under 14, we delete it and its information. Members under 18 cannot create or join Squads.

12. How we protect it

Encryption in transit (TLS) and encrypted password storage
Row-level security in the database, so you can reach only your own data
Minimal admin access, with access logged
Private files such as diary photos kept in storage only you can open

13. Cookies

The app uses no cookies. The website uses no cookies to identify you and no analytics; it may store only your language choice in your browser.

14. Privacy officer

Privacy officer: RUNHEX privacy team

Contact: mindol0911@gmail.com

Send questions, complaints or requests about your information to this address.

15. Getting help in Korea

Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
Personal Information Infringement Report Center: 118, privacy.kisa.or.kr
Supreme Prosecutors’ Office: 1301, www.spo.go.kr
Korean National Police Agency: 182, ecrm.police.go.kr

16. More for your country or region

UK and EEA: The UK and EU General Data Protection Regulation (GDPR) applies. Our legal bases are contract (providing the Service), legitimate interests (preventing misuse, improving the Service) and consent (location, push notifications); we process health data on the basis of your explicit consent. Korea has adequacy decisions from the EU and the UK. When providers in other countries, such as the United States, receive your data, we rely on Standard Contractual Clauses or the EU-US Data Privacy Framework. You can access, correct, erase, restrict, object to or port your data and withdraw consent, and complain to the Information Commissioner’s Office (ICO) or the authority where you live.

United States: We do not sell your personal information or share it for targeted advertising. Consumer health data under laws such as Washington’s My Health My Data Act (workout data and heart rate from health apps, and break reasons) is collected only with your consent, and handled only for the items, sources, purposes and providers in sections 2, 7 and 9. You can ask to see or delete your health data, or withdraw consent, at the contact below.

Japan: We handle personal information under Japan’s Act on the Protection of Personal Information (APPI). The countries your data goes to are listed in section 8; information on each country’s privacy system is on the website of Japan’s Personal Information Protection Commission. Ask us at the contact below to disclose, correct or stop using personal data we hold.

Other countries: Where the law of your country gives you more rights than this policy, that law applies.

17. Changes to this policy

If this policy changes, we tell you in the app and on the website 7 days before it takes effect (30 days before for changes that are important or work against you).

This policy takes effect on [ ] October 2026. The previous version (2 September 2026) is available on the website.

Terms of Service

Effective: [ ] October 2026

This is a translation. If it differs from the Korean version, the Korean version prevails.

Article 1 (Purpose)

These Terms set out how the RUNHEX app and related services (the "Service") provided by RUNHEX ("we") may be used, and the rights and duties of RUNHEX and its members.

Article 2 (Definitions)

"Member": a person who agrees to these Terms and creates an account
"Rank": the tier and division set from your runs, converted to Equiv-5K times
"Hextreak": the number of weeks in a row you complete your weekly run plan
"Tokens (TK)": points used only inside the Service, with no monetary value
"Paid services": things you buy with money in the app, such as RUNHEX Pro and custom map slots

Article 3 (Posting and changing these Terms)

We post these Terms in the app and on the website. We may change them within the law, and tell you in the app and on the website 7 days before a change takes effect (30 days before a change that works against you). If you do not agree to a change, you can stop using the Service and delete your account.

Article 4 (Accounts)

You must be 14 or older to join. You can sign up with an email and password, or with Apple or Google.

Keep your account details safe, and tell us at once if someone else uses your account.

Members under 18 cannot create or join Squads, and need a parent or guardian’s consent before buying paid services.

Article 5 (What the Service includes)

We provide:

Recording runs with GPS, or importing them from Apple Health or Health Connect
Setting your rank from your runs and showing it on leaderboards
Hextreak, Shields, breaks and milestones
Squads, clans, friends and the feed
Progress analysis (Hexanalysis)
Posters, run cards, the diary and custom maps
Tokens, the Shop, runes and capsules, and App guide rewards

Article 6 (Rank and runs)

Only runs of 1 km or more count for rank and tokens. Your rank is set automatically from your best Equiv-5K, and we may change how it is calculated to keep it fair.

Do not submit runs you did not run yourself, other people’s runs, or altered or machine-made data. Runs that look wrong, for example because of unrealistic speed, may not count or may be removed, and your rank and tokens may be adjusted.

Article 7 (Tokens and rewards)

You earn tokens from runs (your first 2 runs of 1 km or more each day), completing App guides and similar actions, and can spend them only on in-app items such as cards, map styles and Shields.

Tokens cannot be bought with money, exchanged for cash or goods, or transferred to other members. If we find an error or misuse, we may adjust tokens and items.

Capsules are free random rewards earned by running distance. The chance of each reward is shown in the app.

Article 8 (Paid services)

RUNHEX Pro is a monthly auto-renewing subscription, priced on the App Store. It is charged to your Apple ID and renews automatically unless you cancel at least 24 hours before the current period ends. Cancel under Subscriptions in your App Store account settings.

Pro includes: explanations for Progress scores, saving animated posters, route colour mixes, up to 20 custom maps, an unlimited diary (3 pages free), 1 Shield a month, and Pro-only Shop designs. Your rank, tokens, Hextreak and Squads are the same with or without Pro.

When Pro ends, custom maps beyond the slots you bought are locked but not deleted, and diary pages beyond your 3 oldest become read-only.

Custom map slots are consumable purchases that members without Pro buy one at a time; each slot is granted as soon as you buy it.

Members who joined before 8 October 2026 and received lifetime Pro keep it. That promotion is no longer offered.

Article 9 (Withdrawal and refunds)

Purchases in the app are made through Apple’s App Store, so refunds are requested through Apple (reportaproblem.apple.com).

Under Korea’s Act on Consumer Protection in Electronic Commerce you may withdraw a purchase within 7 days. Withdrawal may be limited, as far as the law allows, for subscription benefits you have already used and for digital content such as custom map slots that is delivered and starts being used at once; we say so on the purchase screen. Where the law gives you stronger rights, those apply.

Article 10 (Community and content)

You own what you post: Squad messages, clan posts, feed posts and photos. You let us show and store it inside the Service, free of charge, as far as needed to run the Service.

Harassment, hate, threats, sexual content, defamation, spam, impersonation and content that infringes others’ rights are banned, with zero tolerance. You can report a message, Squad or post and block a member. We review reports within 24 hours and remove content or restrict accounts. Posting many times in a short period may be limited.

Article 11 (Not allowed)

Manipulating or unfairly gaining rank, tokens, leaderboards or Hextreak
Reverse-engineering or altering the app, or using automated tools or bots
Collecting or publishing other members’ personal information without permission
Breaking the law or these Terms

Article 12 (Restrictions and ending the contract)

If you break these Terms we may warn you, remove content, adjust runs or tokens, suspend you or delete your account. Unless the breach is serious, we tell you first and you can object.

You can leave at any time in Profile > Settings > Delete account; your information is then handled as the Privacy Policy says. Deleting your account does not cancel an App Store subscription, so cancel it in the App Store yourself.

Article 13 (Changes and interruptions)

We may change or stop parts of the Service for operational or technical reasons, and tell you in advance about important changes. If a paid service stops, we handle it as the law requires.

Article 14 (Health and safety)

RUNHEX records exercise; it is not a medical device. Talk to a professional before starting exercise if you need to, and stay aware of your surroundings while running. Our analysis and scores are for reference.

Article 15 (Limits of liability)

We are not liable for loss caused by natural disasters, by your own fault, or by outages of outside services we cannot control. We remain liable, as the law provides, for loss caused by our intent or gross negligence.

Article 16 (Governing law and courts)

These Terms are governed by the laws of the Republic of Korea. Disputes go to the court with jurisdiction under Korea’s Civil Procedure Act. You keep the rights the consumer protection law of your country gives you.

Supplementary provision

These Terms take effect on [ ] October 2026.

Contact: mindol0911@gmail.com

Location-Based Service Terms

Effective: [ ] October 2026

This is a translation. If it differs from the Korean version, the Korean version prevails.

Article 1 (Purpose)

These Terms set out, under Korea’s Act on the Protection and Use of Location Information, how RUNHEX ("we") provides location-based services and the rights and duties of RUNHEX and the people whose location we process.

Article 2 (What we provide, and fees)

We provide these location-based services free of charge:

Recording your route with GPS during a run and calculating distance, pace and Equiv-5K
Showing where you are on the map during a run
Turning a run into a map poster or video, and finding the town name printed on the poster
Finding the town nearest your start to award runes and other rewards
Showing your route on run cards shared with friends and Squads (without the first and last 200 m)

Article 3 (Collection and consent)

We collect location only while you record a run, and only if you allow location access on your device and agree to these Terms. You can turn off location access or withdraw this consent at any time; you then cannot record GPS runs or use location features.

Article 4 (How long we keep it)

Location in your runs is kept until you delete that run or your account, then deleted without delay.

As the law requires, we automatically record and keep records of location information use and provision for 6 months.

Article 5 (Giving location to others)

We never give your location to third parties without your consent. Only when you share a poster, video or run card yourself can the people you share with see the route; run cards shared to the feed and Squads leave out the first and last 200 m.

Article 6 (Your rights)

Use these rights in the app settings or by contacting us below. If you withdraw consent, we delete the location information and records without delay, except where the law requires us to keep them.

Withdraw all or part of your consent to location collection, use or provision
Pause location collection, use or provision
See, or be told about, the records of how your location was collected, used or provided
Ask us to correct errors

Article 7 (Children under 14)

RUNHEX is only for people 14 and older, and we do not collect the location of children under 14.

Article 8 (Location information officer)

Location information officer: RUNHEX location data team

Contact: mindol0911@gmail.com

Article 9 (Damages and limits)

If we break the Location Information Act and you suffer loss, you can claim damages, and we are liable unless we prove we were not at fault. Location may be inaccurate depending on GPS signal, your device and the network.

Article 10 (Dispute mediation)

For disputes about location information you can apply for mediation to the Korea Communications Commission or the Personal Information Dispute Mediation Committee (1833-6972).

Article 11 (Business details)

RUNHEX · Location-based service report no.: [Number] · Contact: mindol0911@gmail.com

These Terms take effect on [ ] October 2026.