Privacy Policy

Ruckus (the "App") is operated by Gnome Bobon, LLC, a Delaware limited liability company ("Gnome Bobon," "we," "us"). The App is a mobile fitness-tracking platform focused on rucking — walking or hiking with a weighted pack. This Privacy Policy explains what information we collect when you use Ruckus, how we use it, and the choices you have.

Account information. When you create an account we collect your phone number (used as your sign-in identifier and to send one-time verification codes), and — if you choose to provide it — your display name, email address, and profile photo.

Activity data. When you record a ruck we collect the route, GPS coordinates, distance, pace, duration, elevation gain, body weight, ruck weight, estimated calories, and any goals or notes you attach. Location data is collected only while you have an active ruck in progress; we use background location to keep tracking accurate when the screen is off, but tracking stops as soon as the ruck ends.

Health data. With your permission, we read your heart rate from Apple HealthKit to improve calorie estimates. We do not write data back to HealthKit and we do not use HealthKit data for advertising. On Android we may read equivalent data from Health Connect with your permission.

Device data. We collect a push-notification token, your device model, OS version, and app version so we can deliver notifications and diagnose issues.

Contacts. If you choose to find friends through your phone contacts, we read your address book on-device to suggest matches. We do not upload your full contact list to our servers.

Subscription data. If you subscribe, our payment processor (RevenueCat) records your purchase status, product, and renewal state. Apple or Google process the payment itself; we do not see or store card numbers.

Diagnostics. When the app crashes we send anonymized error reports so we can fix bugs. We may also collect aggregated, non-personal usage analytics to improve the product.

We use the information we collect to:

• Provide the core service — track rucks, calculate stats, store history, sync between your devices.
• Authenticate you and secure your account.
• Power social features you opt into, such as friend connections and shared activity.
• Send notifications you have enabled.
• Process subscriptions and manage entitlements.
• Diagnose crashes and improve performance.
• Comply with legal obligations.

We do not sell your personal information, and we do not use your activity, location, or health data for advertising.

We share information with vendors who help us run the service. They process data on our behalf and are contractually limited to that purpose.

• Supabase — backend hosting, authentication, and database storage (United States).
• RevenueCat — subscription management.
• Twilio — delivers SMS verification codes.
• Mapbox — renders maps; receives map-tile requests that include coarse location.
• Apple App Store / Google Play — process subscription payments.
• Sentry — anonymized crash reports.
• PostHog — aggregated product analytics.

We may also disclose information if required by law, to protect the rights or safety of Ruckus or others, or in connection with a corporate transaction such as a merger or acquisition.

Access and correction. You can review and update your profile information in the app at any time.

Deletion. You can permanently delete your account and associated data in the app from Settings → Manage Account → Delete My Account. Deletion is processed immediately; some records may persist in backups for up to 30 days before being purged.

Subscription cancellation. Cancel your subscription through your Apple App Store or Google Play account at any time. Cancellation stops future renewals; we cannot issue refunds for past charges (those are handled by the store under its policy).

Permissions. You control location, contacts, notifications, and health permissions through your device settings, and you can revoke them at any time.

Data export. You can request a copy of your data from the Privacy screen in the app or by emailing support@ruckusapp.fit.

California and other US state residents: you have the right to know what personal information we collect, request deletion, and not be discriminated against for exercising these rights. We honor these rights for all users regardless of state.

We keep your account data for as long as your account is active. When you delete your account we remove identifying data immediately and purge backups within 30 days. Aggregated, de-identified analytics data may be retained indefinitely.

We use industry-standard practices to protect your data — encryption in transit (TLS), encrypted storage on our backend and on your device, and least-privilege access controls for staff. No system is perfectly secure; we encourage you to keep your device and Ruckus app up to date.

Ruckus is operated from the United States. If you use the app from outside the United States, your information will be transferred to and processed in the United States, which may have different data-protection laws than your jurisdiction.

Ruckus is intended for users aged 13 and older. Subscriptions may only be purchased by users aged 18 and older or with a parent or guardian's consent. We do not knowingly collect personal information from children under 13; if you believe a child has provided us with personal information, please contact us so we can delete it.

We may update this Privacy Policy from time to time. If we make material changes we will notify you in the app or by email. The "Last Updated" date at the top of this policy reflects the most recent revision. Your continued use of Ruckus after a change indicates your acceptance of the updated policy.

Questions or requests about your privacy? Email us at support@ruckusapp.fit.