Privacy Policy

🛡️ Your Privacy Matters

CoreRun ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

By using CoreRun, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the app.

📊 Information We Collect

• Account Information — When you create an account, we collect your name, email address, and profile photo (optional). This data is provided voluntarily by you.
• Habit & Activity Data — Habit names, completion logs, streak data, journal entries, and notes you voluntarily enter into the app. All habit tracking is done by your choice.
• Group & Social Data — Group memberships, accountability partner connections, and messages exchanged within groups — all initiated by your voluntary participation.
• Device & Usage Information — Device type, operating system, app version, crash logs, and anonymized usage analytics to improve app performance.
• Images & Media — Profile photos and journal images you voluntarily upload. These are stored securely with encryption at rest.

🔐 Data Encryption & Security

• Data in Transit — All communication between the app and our servers is encrypted using TLS 1.3.
• Data at Rest — All stored data is encrypted at rest using AES-256 encryption on Google Cloud / Firebase servers.
• Local Storage — Cached data on your device is stored in encrypted Hive boxes. No sensitive data is stored in plain text locally.
• Image & Media Security — All uploaded images are stored in Firebase Storage with user-scoped access rules. Only you can access your own media files.
• Authentication Security — Passwords are never stored in plain text. Biometric authentication is available for additional security.

📈 How We Use Your Information

• Provide & Improve the Service — To operate the app, track your habits, calculate streaks, and display your progress.
• Notifications & Reminders — To send you habit reminders and streak alerts — only if you opt in.
• Accountability Features — To facilitate group features and partnerships that you voluntarily join.
• Crash Reporting & Diagnostics — Anonymized crash reports help us fix bugs. No personal data is included.

👆 Your Choices & Consent

• Voluntary Data Entry — All habit data, journal entries, notes, and images are entered voluntarily by you.
• Optional Features — Groups, accountability partners, notifications, and social features are entirely optional.
• Data Export — You can export all your data at any time from Profile › Export Data.
• Account Deletion — You can delete your account and all data permanently from Profile › Delete Account.

🔗 Data Sharing & Third Parties

• Firebase (Google Cloud) — We use Firebase for authentication, database, storage, analytics, and crash reporting.
• No Ad Networks — We do not use advertising SDKs or share your data with any advertising platforms.
• Legal Requirements — We may disclose information if required by law or court order.

👶 Children's Privacy

CoreRun is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will promptly delete such information.

⏰ Data Retention

We retain your personal data only as long as your account is active. When you delete your account, all associated data is permanently deleted from our servers within 30 days. Anonymized analytics data may be retained for service improvement but cannot be linked back to you.

✏️ Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy in the app and updating the "Last updated" date.

📧 Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: