Runner’s Review — Privacy & Terms Annex
Aquaduct Data Strategies LLC — DBA: Runner’s Review Version: 1.1-draft Effective Date: March 21, 2026 Last Updated: 2026-10-24
This annex supplements the Aquaduct Data Strategies LLC master Terms of Service and Privacy Policy. It describes data practices specific to the Runner’s Review iOS application, the runnersreview.net website, and associated backend services. In the event of conflict between this annex and the master documents, this annex controls for Runner’s Review.
App Store Connect URL:
https://legal.aquaductdata.com/annexes/runners-review
1. About Runner’s Review
Runner’s Review is a race discovery and review platform for runners, operated as a DBA of Aquaduct Data Strategies LLC. The application is distributed through the Apple App Store as an iOS application. Backend services are hosted on Google Cloud Platform.
2. Data We Collect
The following data types are collected by Runner’s Review. Data is collected only to the extent necessary to provide the features described.
2.1 Account and Identity Data
| Data Type | How Collected | Purpose |
|---|---|---|
| Apple ID (anonymized user identifier) | Sign in with Apple | Account creation and authentication |
| Email address | Sign in with Apple (if user elects to share) | Account communication, support |
| Display name / username | User-provided at registration | In-app display |
Note on Sign in with Apple: Apple’s Sign in with Apple may provide either the user’s real email address or a privacy-relay email address (Hide My Email), depending on the user’s choice. We accept and work with either.
2.2 User-Generated Content
| Data Type | How Collected | Purpose | Storage |
|---|---|---|---|
| Race reviews and ratings | User submitted in-app | Product functionality — community reviews | Google Cloud SQL |
| Photos and images | User uploaded in-app | Attached to race reviews | Google Cloud Storage (GCS) |
| App usage analytics | Automatically logged when analytics collection is permitted | App usage events (e.g., api_request, race_view, search_performed); collection is privacy-gated via is_analytics_collection_allowed() — only logged when the user has permitted analytics | Google Cloud SQL |
2.3 Challenge Participation and Leaderboard Data
Runner’s Review includes optional competitive features (“Compete”) in which participation publishes information to other users of the app. This is the only category of data we display to other people, and it is entirely opt-in.
| Data Type | How Collected | Purpose | Visible To |
|---|---|---|---|
| Display name | From your account profile | Identify you on a leaderboard | Other participants in that challenge; other users of global/regional/friends pace boards |
| Challenge progress | Your participation in a challenge you joined | Rank participants of that challenge | Other participants in that challenge |
| Pace Rank score | Calculated from your approved race reviews (with extra weight for detailed ones) and challenges you have completed. Despite the name it is a contribution score — it does not measure your running pace, speed, distance, or time, and we do not collect fitness or health data to produce it | Rank users on app-wide pace boards | Other users of global, regional and friends pace boards |
| Leaderboard participation flag | Your explicit consent when first prompted | Record that you agreed to appear | Us only |
Leaderboard display is off until you turn it on. You are asked once, in-app, before any of your information appears on a leaderboard. If you decline, you may still use the rest of the app; nothing about you is displayed to other users.
There are two kinds of leaderboard, and they are governed differently.
- Challenge leaderboards rank the participants of a single challenge. Leaving that challenge removes you from it.
- App-wide pace boards (global, regional, and friends) rank all consenting users independently of any challenge. Leaving a challenge does not remove you from these — they are governed by your leaderboard consent, not by challenge membership.
Participation is therefore not the same as consent. Joining or leaving an individual challenge controls whether you appear on that challenge’s board. Your overall consent to leaderboard display is a separate, durable setting that leaving a challenge does not change or revoke. See Section 6 for how to exercise each control.
2.4 Precise Location Data
| Data Type | How Collected | Purpose | Retention |
|---|---|---|---|
| GPS coordinates (precise) | Device location services (when permission granted) | Proximity-based race search and discovery | Session only — not persistently stored |
Important: Runner’s Review requests location permission for the purpose of returning nearby race results relevant to the user’s current location. Location data is used in real time for search queries and is not stored to a database, logged to a user profile, or transmitted to third parties beyond the immediate GCP query processing. Users may deny location permission; search by city/zip code remains available without location access.
2.5 Apple HealthKit
Runner’s Review does not access Apple HealthKit data. The application does not request HealthKit permissions and does not read from or write to Apple Health. App usage analytics described in Section 2.2 are automatically logged app-interaction events and are not sourced from HealthKit or any health data source.
If HealthKit integration is added in a future version, this annex will be updated before the relevant App Store release, and users will be notified per the change notification procedure in the master Privacy Policy.
2.6 Technical and Security Data
| Data Type | How Collected | Purpose | Retention |
|---|---|---|---|
| Firebase App Check tokens | Automatically by Firebase SDK | Verify that requests originate from a genuine Runner’s Review app instance (anti-abuse) | Session/request scoped |
| Device type and OS version | App metadata | Compatibility diagnostics and crash reporting | 12 months |
| App version | App metadata | Feature rollout and support | 12 months |
| Error and crash logs | Automatically captured | Bug diagnosis and service improvement | 12 months |
2.7 The runnersreview.net Website
The website lets anyone look up races without an account. It has no sign-in and no forms that collect your name or email.
What the website collects about you. Unless you accept analytics (below), the site’s own code reads none of your personal details: not your IP address, location, browser details or cookies, and it keeps no record of your visits itself. The only record is then our hosting provider’s server logs, described next.
Searching for races. Race search works through ordinary links, so what you type or pick (a race name, a place, a distance, dates, a radius) becomes part of the page’s web address. We use it only to show you results, and we don’t save your searches. Because your search is in the web address:
- your browser keeps it in your history, like any page you visit;
- our hosting provider, Vercel, records each request in its server logs: the web address (including your search), your IP address, your browser type and the time. These logs exist so the site can run and stay secure. We don’t use them to profile visitors or for advertising, and they are kept for up to 30 days;
- a results page may be stored briefly, for about 15 minutes, so the next person who runs the same search gets it faster. That copy holds the results, not who searched.
When you type a place, the suggestions come from a list loaded into your browser. Your keystrokes are not sent anywhere.
Storage on your device. The website sets no cookies of its own. If you accept analytics, Google Analytics sets its cookies (described below). The site saves small settings in your browser, and only when you act:
| Item | Where | Set when | Kept until |
|---|---|---|---|
rr-theme | Browser local storage | You choose light or dark | You clear your browser data |
rr-banner | Browser session storage | You dismiss the app banner | You close the tab |
rr-consent | Browser local storage | You choose Accept or Decline in the analytics banner | You clear your browser data, or change it under “Cookie settings” |
Race ratings. Race pages show the average star rating and the number of reviews that Runner’s Review app users have given that race. Only these totals appear on the website: no reviewer names or review text.
Analytics, only if you accept. The website asks before using Google Analytics. Until you choose, nothing loads from Google. If you decline, nothing ever does.
If you accept, Google Analytics (Google LLC) counts visits so we can see which pages and links help runners:
- What is sent: the page you visit, as its address without your search (search terms, place names, filters and tracking codes are removed before sending); which site you came from (the site’s name only); a fixed page title; the race you are looking at (by its public web name); and which app or registration links you click.
- What Google collects by itself: an identifier stored in its
_gacookies, your IP address (which Google uses to estimate a city-level location and does not give us), and your browser, device type, screen size and language. - What is never sent: your searches, names, email addresses or any account details.
- Settings we use: advertising features and Google signals are off, and we do not share the data with other Google products. Analytics data is kept for 2 months, then deleted.
- Changing your mind: use “Cookie settings” at the bottom of any page. Declining after accepting stops all further collection and deletes the
_gacookies from your browser. Data already sent is deleted when its 2 months run out.
No advertising. Apart from Google Analytics if you accept, the website loads nothing from other companies: no visit counting, no advertising or tracking tags, no maps and no outside fonts. Safari may contact Apple to display the “Get the app” banner; that is your browser’s own feature.
Links that take you elsewhere (only when you click them):
- “Register on RunSignUp”: RunSignUp receives the race you picked and our affiliate code, and may pay Runner’s Review a commission for the registration. Registration happens on RunSignUp’s site, under RunSignUp’s privacy policy. Your searches are not passed along.
- The App Store: links to the Runner’s Review app tell Apple which part of our site the link was on (for example “website” or “web-race”), so we can see in aggregate which pages lead people to the app. They carry nothing about you.
- Our legal pages, OpenStreetMap’s copyright page, aquaductdata.com, and email to contact@runnersreview.net.
When you leave our site, the page you go to learns only that you came from runnersreview.net, not what you searched for.
Behind the scenes, no visitor data. We build the race pages from our own race catalog in advance, tell search engines (through IndexNow) which of our pages have changed, and read Google Search Console’s aggregated counts of search queries for our site. None of these involve information about individual visitors.
3. Third-Party Service Providers
Runner’s Review uses the following third-party services. Each provider processes data only as necessary to deliver the described function.
| Provider | Service | Data Shared | Provider Privacy Policy |
|---|---|---|---|
| Google Cloud Platform — Cloud SQL | Relational database hosting | Account data, reviews, app usage analytics | Google Privacy Policy |
| Google Cloud Platform — Cloud Storage (GCS) | Photo and image storage | User-uploaded photos | Google Privacy Policy |
| Google Cloud Platform — Cloud Vision API | Image analysis for content review | User-uploaded photos (processed for content moderation) | Google Privacy Policy |
| OpenAI — API | Automatic check of review text against our community rules (content moderation), when a review is written or reported | The text of a review only: no name, account, email, star rating, photos or location. OpenAI does not use it to train its models. Its abuse-monitoring logs keep it for up to 30 days, longer only if the law requires it or it is needed to protect against harm. | OpenAI Privacy Policy |
| Google Firebase — App Check | App integrity verification | App Check tokens, device signals (no personal data transmitted) | Google Privacy Policy |
| Apple Inc. — Sign in with Apple | Authentication | Apple ID, email (if shared by user) | Apple Privacy Policy |
| Apple Inc. — App Store / TestFlight | App distribution and beta testing | Standard App Store analytics (aggregate, per Apple’s policies) | Apple Privacy Policy |
| Vercel Inc. | Hosting and delivery of the runnersreview.net website | Web addresses you request (including any search terms), IP address, browser type, time (server logs, up to 30 days) | Vercel Privacy Policy |
| Google LLC — Google Analytics | Website visit counts, only if you accept (runnersreview.net) | Page addresses without searches, referring site name, page title, race web name, link clicks, _ga cookie identifier, IP address (approximate city-level location), browser and device type (kept 2 months) | Google Privacy Policy |
Runner’s Review does not use:
- Advertising SDKs or ad networks
- Third-party analytics platforms in the app (e.g., Firebase Analytics, Mixpanel, Amplitude). The website uses Google Analytics only if you accept it (Section 2.7).
- Social sharing SDKs beyond Sign in with Apple
- Location data aggregators or brokers
4. How We Use Your Data
We use the data described in Section 2 to:
- Authenticate and manage your account — Sign in with Apple handles authentication; we store the resulting user identifier to maintain your account
- Deliver core app functionality — Display race listings, store and retrieve your reviews and photos; log app usage analytics events when analytics collection is permitted
- Enable location-based search — Return nearby races relevant to your current location when location permission is granted
- Moderate content — Use Google Cloud Vision to review uploaded photos, and OpenAI to check the text of reviews when they are written or reported, for compliance with our Terms of Service. The check is automatic: a review that breaks the rules may be held back or not published. Only the review’s text is sent for the check, never who wrote it
- Ensure app security and integrity — Firebase App Check verifies that requests come from legitimate app instances
- Diagnose issues and improve the app — Crash logs, error reports, and usage data help us identify and fix bugs
We do not use Runner’s Review data to:
- Serve targeted advertising
- Build behavioral profiles for third-party marketing
- Store or share location data beyond real-time GCP query processing
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data (active users) | Deleted promptly upon verified deletion request; a de-identified compliance receipt is retained |
| Reviews | Duration of account; permanently deleted with the account |
| App usage analytics (activity_logs) | 12 months rolling; deleted on account deletion request |
| Photos (GCS) | Duration of account; deleted on account deletion request |
| Precise location data | Not stored — used in-memory for search query only |
| Firebase App Check tokens | Session/request scoped |
| Error and diagnostic logs | 12 months rolling |
| Website hosting logs (runnersreview.net) | Up to 30 days (held by Vercel) |
| Website analytics (Google Analytics, only with your consent) | 2 months, then deleted by Google |
To delete your account and all associated data, use Settings → Privacy → Delete Account in the app (you will be asked to type DELETE to confirm). If you cannot access the app, email legal@aquaductdata.com with the subject “Account Deletion Request — Runner’s Review.”
6. Your Privacy Choices
| Choice | How to Exercise |
|---|---|
| Leave a single challenge | In-app: open the challenge → Leave Challenge. Removes you from that challenge’s leaderboard only. Does not change your overall leaderboard consent. |
| Decline leaderboard display entirely | Decline the one-time in-app consent prompt. Nothing about you is shown to other users. |
| Withdraw leaderboard consent after granting it | Email legal@aquaductdata.com — subject: “Leaderboard Opt-Out — Runner’s Review”. We hide you from global, regional and friends pace boards. (An in-app settings toggle for this is planned; until it ships, the email route is the supported path and we honour it.) |
| Deny or revoke location access | iOS Settings → Privacy & Security → Location Services → Runner’s Review → set to “Never” |
| Delete uploaded photos | In-app photo management, or via account deletion request |
| Delete your account and all data | In-app: Settings → Privacy → Delete Account (type DELETE to confirm). Fallback if you cannot access the app: email legal@aquaductdata.com — subject: “Account Deletion Request — Runner’s Review” |
| Access a copy of your data | Email legal@aquaductdata.com — subject: “Data Access Request — Runner’s Review” |
For full rights including California/CCPA rights, see the master Privacy Policy, Sections 9 and 10.
7. Children’s Privacy
Runner’s Review is not directed at children under 13. We do not knowingly collect personal information from users under 13. If you believe a child under 13 has registered, please contact legal@aquaductdata.com.
8. Apple App Store Privacy Nutrition Label
The following reflects Runner’s Review’s Apple App Store privacy declarations. This annex serves as supporting documentation for those declarations.
| Category | Collected? | Linked to Identity? | Used for Tracking? |
|---|---|---|---|
| Contact Info (email) | Yes (if shared via Sign in with Apple) | Yes | No |
| Identifiers (User ID) | Yes | Yes | No |
| Photos or Videos | Yes (user-uploaded) | Yes | No |
| Location (Precise) | Yes (when granted) | No — session only, not stored | No |
| User Content (reviews) | Yes | Yes | No |
| App Usage Data (analytics events: race_view, search_performed, api_request) | Yes (when analytics permitted) | Yes | No |
| Crash Data | Yes | No | No |
| Health & Fitness | No | — | — |
| Purchases | Yes (subscription and in-app purchase records — Compete / Director tier — linked to your account) | Yes | No |
| Browsing History | No | — | — |
| Search History | Yes (search_performed events logged to activity_logs when analytics permitted) | Yes | No |
9. Subscriptions and Auto-Renewal
Runner’s Review offers one or more optional paid subscription plans that unlock additional in-app features. The following applies to any Runner’s Review subscription purchased through the Apple App Store:
- Pricing. Current subscription pricing and billing period (e.g., monthly or annual) for each available plan are displayed in-app at the point of purchase, before you confirm.
- Payment and auto-renewal. Payment is charged to your Apple ID at confirmation. Subscriptions automatically renew for the same billing period unless auto-renewal is turned off at least 24 hours before the end of the current period.
- Cancellation. You may manage or cancel your subscription at any time in your App Store account settings. Cancellation takes effect at the end of the current billing period; you retain access to paid features through that period.
- Billing and refunds. All billing for App Store subscriptions, and any refund requests, are handled by Apple in accordance with Apple’s own terms, not by the Company.
This section supplements master Terms of Service Section 3.4 (Subscriptions and Auto-Renewal) for the Runner’s Review product, per master Terms Section 11.
10. Governing Documents
This annex is to be read together with:
For general contact, support, or privacy requests, see Master Privacy Policy Section 15.
11. Version and Effective Date
| Attribute | Value |
|---|---|
| Version | 1.1-draft |
| Effective Date | March 21, 2026 |
| Last Updated | 2026-10-24 |
| Status | Draft — technical review complete; pending final approval |
Document History
| Date | Version | Changes | Author |
|---|---|---|---|
| 2026-03-21 | 1.0-draft | Initial draft | ADS Legal |
| 2026-03-21 | 1.1-draft | Technical review corrections: (1) removed shoe inventory — feature not in app; (2) rewrote activity_logs as app usage analytics (api_request, race_view, search_performed) with is_analytics_collection_allowed() privacy gate; (3) corrected Search History in Nutrition Label from No to Yes | ADS Legal |
| 2026-07-25 | 1.1-draft | Added Section 9 (Subscriptions and Auto-Renewal), mirroring the in-app paywall disclosure (PaywallView.swift, legalSection) per Apple App Store Review Guideline 3.1.2. Renumbered former Section 9 (Governing Documents) → Section 10 and former Section 10 (Version and Effective Date) → Section 11. Launch-gating fix — ASC links directly to this annex, which contained no subscription language. | ADS Legal |
| 2026-07-25 | 1.1-draft | Corrected Section 8 (Apple App Store Privacy Nutrition Label) Purchases row from No to Yes — Director Premium Annual and the Runners Review Premium subscription group are in a live App Store Connect draft submission; purchase/subscription records are collected server-side (subscriptions table: product_id, status, expiration) and linked to the user account. Matches master Privacy Policy CCPA table (Commercial information — Runner’s Review). | ADS Legal |
| 2026-10-03 | 1.1-draft | Added Section 2.7 (the runnersreview.net website: search terms in web addresses, hosting logs up to 30 days, no cookies, two browser-storage settings, aggregate race ratings, no analytics, registration and App Store links, the RunSignUp affiliate code and commission); Vercel added to Section 3; website logs added to Section 5 (#1077) | Shade (ADS Agent) |
| 2026-10-24 | 1.1-draft | Approved by Diego 2026-10-24. Section 2.7: Google Analytics only with consent (what is sent and never sent, Google’s own collection, ads and signals off, no sharing, 2-month retention, withdrawal via Cookie settings); rr-consent storage row; Section 3: Google Analytics provider row and an app/website scope note; Section 5: 2-month analytics retention (site#253, aquaduct-source#1077) | Shade (ADS Agent) |
| 2026-10-24 | 1.1-draft | Approved by Diego 2026-10-24. Section 3: OpenAI provider row (review text only, for automatic moderation; not used for training; abuse-monitoring logs up to 30 days per OpenAI’s published API data controls, read 2026-10-24). Section 4 item 4: automatic text moderation of reviews when written or reported. Published before any real review text is sent (rR#9703 R0a). Also corrects the Last Updated line, which the GA4 amendment left at 2026-10-03. | Shade (ADS Agent) |
This annex was prepared by Aquaduct Data Strategies LLC and has not been reviewed by a licensed attorney. Apple HealthKit data is explicitly not collected. Accuracy of all data types and third-party integrations should be confirmed before App Store Connect submission.