RACERZ

Consumer Health Data Privacy Policy

Version 1.2 — Effective 2 September 2026

1. Scope

This policy applies to residents of Washington, Nevada, and other US states with consumer-health-data laws, and supplements our Privacy Policy. It describes how RACERZ (Bred Applications, CVR 45915905, Denmark) handles consumer health data.

2. Consumer Health Data We Collect

• Weight, height, gender (provided by you, with consent). We do not collect a date of birth.
• Run performance: distance, duration, pace, cadence, step count, elevation, per-kilometre splits.
• Derived fitness metrics: VDOT fitness score, fatigue profile, personal records, training zones.
• A mock-location flag used in fitness-data validation.

3. Sources

Directly from you; from your device's sensors during runs you start; and derived by our servers from the above.

4. Why We Collect It

Solely to provide the service you request: run tracking, opponent simulation, fair matchmaking, anti-cheat validation, display of the resulting race simulations to other users, and your own statistics. We collect no consumer health data beyond what these features need.

5. Sharing

Consumer health data is shared only with processors under contract: Supabase (storage, in the European Union) and Google/Firebase (push delivery). RevenueCat (subscriptions) and GitHub (static content) receive no health data. When you race in ranked mode, a derived fitness summary (VDOT score, fatigue profile, recent maximum distance) is shared with your opponent's device solely to simulate your performance — never your health inputs or identity beyond username.

We do not sell consumer health data, and we do not share it for advertising. Product analytics (TelemetryDeck, anonymised, EU-hosted) never receives health data, run data or anything that could be linked to you — see the Privacy Policy.

6. Your Rights

• Access: full JSON export in the app (Settings), or by email.
• Deletion: delete your account in the app or via the account deletion page — immediate and permanent, and gone from routine backups within 30 days. Deletion erases your consumer health data from our database and from your device. Your subscription record at our payment processor is not health data and is retained by them under their own terms; no health data was ever sent to them. If you signed in with Apple, deleting your account also revokes the app's Sign in with Apple tokens.
• Withdraw consent: any time in Settings. Withdrawing deletes your body data and the derived metrics. Because ranked races are simulated from your fitness profile, ranked play stops working until you complete a new placement race; the rest of the app is unaffected.
• No discrimination for exercising any of these rights.

Requests and questions: contact@bredapplications.com. If we refuse a request, you may appeal by replying to our decision; if the appeal fails, you may contact your state Attorney General.

7. Changes and Contact

Material changes are announced with 30 days notice via in-app notification. Contact: contact@bredapplications.com.