Privacy Policy
FrenzyRun is a running game. To work at all it needs your email address and the GPS track of the runs you record. This page says exactly what we keep, why, and how to get rid of it.
Who we are
FrenzyRun is operated by Julien Malherbe, based in Spain. For anything about your data, write to hello@frenzyrunapp.com.
What we collect
| Data | Why |
|---|---|
| Email address | It is your account. We send a one-time code to it so you can sign in. Required. |
| Display name and, if you upload one, a profile photo | Shown to other players on leaderboards and city pages. Optional. |
| GPS track of runs you record | Route, distance, elevation and timing. This is what the game scores: which flags you crossed, which cities you ran in, how far you went. Recorded only while you have a run running in the app. |
| Activity files you choose to import | If you upload GPX or FIT files to seed your history, we read the same fields as above. |
| Game progress | Level, experience, medals, badges, streaks, FrenzyCoins balance and transactions, territory and thrones. |
| Notification token | If you allow notifications, an anonymous device token so we can send them. Nothing else about your device. |
| App language | So emails and notifications arrive in the language you use the app in. |
We do not collect contacts, photos beyond a profile picture you pick, advertising identifiers, or your location while you are not recording a run. There are no third-party analytics or advertising SDKs in the app.
What other players can see
FrenzyRun is partly competitive, so some of your information is visible to others: your display name, profile photo, level, experience, badges, the cities you hold, and your position on leaderboards, along with the distance and time of runs that count towards those standings.
Legal basis
Under the GDPR we process your email address and run data to perform the contract you enter into by using the app — without them there is no game. Location recording and push notifications additionally rest on the consent you give in your device's permission prompts, which you can withdraw at any time in your device settings.
Who we share it with
We do not sell your data, and we do not share it for advertising. We use these providers to run the service:
| Provider | What for | Where |
|---|---|---|
| Hetzner Online GmbH | Servers and database | Germany (EU) |
| Amazon Web Services (SES) | Sending your login-code emails | Ireland (EU) |
| Google (Firebase Cloud Messaging) | Delivering push notifications | Transfers outside the EU under Standard Contractual Clauses |
| Cloudflare | DNS for our domain | Global |
We may also disclose data if the law requires it.
How long we keep it
Your account and its runs are kept for as long as your account exists, because the game is cumulative — your level, medals and territory are computed from your whole history. Login codes expire within minutes. If you ask us to delete your account, we remove it as described below.
Deleting your account
Write to hello@frenzyrunapp.com from the address you signed up with and ask us to delete your account. We will delete your account, your runs and their GPS tracks, your game progress and your profile photo within 30 days, and confirm when it is done.
Some records may survive in anonymised form where they no longer identify you — for example, a city's historical throne record continues to exist without your name attached.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, or export it, and you can object to how we use it. Write to hello@frenzyrunapp.com and we will respond within 30 days. If you think we have handled your data badly you can complain to your national data protection authority — in Spain that is the Agencia Española de Protección de Datos.
Children
FrenzyRun is not intended for children under 16. We do not knowingly collect data from them. If you believe a child has created an account, write to us and we will remove it.
Security
Traffic between the app and our servers is encrypted with TLS. Sign-in tokens are stored hashed, never in plain text, and you can sign out of every device from the app. No system is perfectly secure, but we do not store passwords, because there are none.
Cookies
This website sets no cookies and runs no analytics. The mobile app does not use cookies; it holds a sign-in token on your device, which is removed when you sign out.
Changes
If we change this policy we will update the date at the top, and tell you in the app if the change is significant.