Privacy Policy

This Privacy Policy is a working draft and is pending review by our legal counsel. We publish it in the interest of transparency; the substance below accurately reflects how the Ruckus app handles your data today.

Ruckus (the "App") is operated by Gnome Bobon, LLC, a Delaware limited liability company ("Gnome Bobon," "we," "us"). The App is a mobile fitness-tracking platform focused on rucking — walking or hiking with a weighted pack. This Privacy Policy explains what information we collect when you use Ruckus, how we use it, and the choices you have.

We will never sell your personal data. Full stop. Ruckus is funded by subscriptions, not by advertising or data brokering. We do not sell, rent, or trade your personal information to third parties, and we do not use your activity, location, or health data to target ads — ours or anyone else's.

The only situation in which your data could move to another company is a business transfer (for example, if Gnome Bobon is acquired). That is different from selling data as a product, and it comes with protections for you. We explain exactly how that works in the "Business Transfers" section below.

Account information. When you create an account we collect your phone number (used as your sign-in identifier and to send one-time verification codes), and — if you choose to provide it — your display name, email address, and profile photo. Providing an email is optional; if you add one, we send a confirmation link to verify it. Marketing emails are opt-in and off by default; you can change this in your settings at any time.

Activity data. When you record a ruck we collect the route, GPS coordinates, distance, pace, duration, elevation gain, step count, body weight, ruck weight, estimated calories, heart rate (if available), and any goals or notes you attach. Location data is collected only while you have an active ruck in progress. We use background location so tracking stays accurate when the screen is off or the app is in the background, but location tracking stops as soon as the ruck ends.

Motion & fitness. During an active ruck we read your device's motion sensors (pedometer) to count steps. This is used only to display and record your ruck stats.

Health data. With your permission, on iOS we read your heart rate and body weight from Apple Health to improve calorie estimates and show live heart-rate zones, and we save your completed rucks to Apple Health as workouts so they count toward your activity rings. On Android we use Health Connect for the equivalent, with your permission. Health data we read is processed on your device; the rucks you choose to save are written to your health store. We do not use health data for advertising.

Heart-rate monitors (Bluetooth). If you choose to pair an external Bluetooth heart-rate monitor, Ruckus connects to it to show your live heart rate during a ruck. We use Bluetooth only to read heart-rate data from a device you pair.

Photos and camera. If you set a profile photo or add a photo to a ruck, we access your photo library or camera — only for the image you select or take — and store it in our backend. We do not scan or upload your other photos.

Contacts. If you choose to find friends through your phone contacts, we read your address book on-device to suggest matches. We do not upload your full contact list to our servers.

Device data. We collect a push-notification token, your device model, OS version, and app version so we can deliver notifications and diagnose issues.

Subscription data. If you subscribe, our subscription-management provider (RevenueCat) records your purchase status, product, and renewal state. Apple or Google process the payment itself; we do not see or store card numbers.

Diagnostics and analytics. When the app crashes or hits an error, we send crash and error reports (through Sentry) so we can fix bugs; these reports include technical details about the app state and your device. We also collect product-usage analytics (through PostHog) — for example, that a ruck was started or a screen was viewed. Analytics events are tied to a random account identifier, not to your phone number.

We use the information we collect to:

• Provide the core service — track rucks, calculate stats, store history, sync between your devices.
• Authenticate you and secure your account.
• Power social features you opt into, such as friend connections and shared activity.
• Send notifications you have enabled.
• Process subscriptions and manage entitlements.
• Diagnose crashes and improve performance.
• Comply with legal obligations.

We do not sell your personal information, and we do not use your activity, location, or health data for advertising.

We share information with vendors who help us run the service. They process data on our behalf and are contractually limited to that purpose.

• Supabase — backend hosting, authentication, and database storage (United States). Stores your profile, rucks, GPS routes, friend connections, and push-notification tokens.
• RevenueCat — subscription management.
• Twilio — delivers SMS verification codes.
• Mapbox — renders maps; receives map-tile requests that include approximate location.
• Apple App Store / Google Play — process subscription payments.
• Apple Health / Android Health Connect — read and write health data on your device, with your permission.
• Sentry — crash and error reports.
• PostHog — product-usage analytics.

We may also disclose information if required by law, or to protect the rights or safety of Ruckus or others. For corporate transactions such as a merger, acquisition, or sale of assets, see the "Business Transfers" section below.

If Gnome Bobon is involved in a merger, acquisition, financing, reorganization, bankruptcy, or a sale of all or substantially all of our assets, user information may be transferred to the successor or acquiring entity as part of that transaction. This is a normal part of a business changing hands — it is not the same as selling your data as a product, and it does not change our commitment never to sell your personal data.

If such a transfer happens, your information will remain subject to this Privacy Policy, or the successor will be required to honor commitments at least as protective as those made here. We will notify you (in the app or by email) of any change in ownership or of any material change in how your information is handled.

Access and correction. You can review and update your profile information in the app at any time.

Deletion. You can permanently delete your account and associated data in the app from Settings → Manage Account → Delete My Account. Deletion is processed immediately; some records may persist in backups for up to 30 days before being purged.

Subscription cancellation. Cancel your subscription through your Apple App Store or Google Play account at any time. Cancellation stops future renewals; we cannot issue refunds for past charges (those are handled by the store under its policy).

Permissions. You control location, motion, Bluetooth, contacts, photos, notifications, and health permissions through your device settings, and you can revoke them at any time.

Data export. You can request a copy of your data from the Privacy screen in the app or by emailing support@ruckusapp.fit.

California and other US state residents: you have the right to know what personal information we collect, request deletion, and not be discriminated against for exercising these rights. We honor these rights for all users regardless of state.

We keep your account data for as long as your account is active. When you delete your account we remove identifying data immediately and purge backups within 30 days. Aggregated, de-identified analytics data may be retained indefinitely.

We use industry-standard practices to protect your data — encryption in transit (TLS), encrypted storage on our backend, and least-privilege access controls for staff. On your device, your data is protected by your phone's built-in security (passcode / Face ID). No system is perfectly secure; we encourage you to keep your device and Ruckus app up to date.

Ruckus is operated from the United States. If you use the app from outside the United States, your information will be transferred to and processed in the United States, which may have different data-protection laws than your jurisdiction.

Ruckus is intended for users aged 13 and older. Subscriptions may only be purchased by users aged 18 and older or with a parent or guardian's consent. We do not knowingly collect personal information from children under 13; if you believe a child has provided us with personal information, please contact us so we can delete it.

We may update this Privacy Policy from time to time. If we make material changes we will notify you in the app or by email. The "Last Updated" date at the top of this policy reflects the most recent revision. Your continued use of Ruckus after a change indicates your acceptance of the updated policy.

Ruckus is operated by Gnome Bobon, LLC. Questions or requests about your privacy? Email us at support@ruckusapp.fit.