Privacy Policy

Last Updated: September 19, 2026

Rote8 ("we", "our", or "us") is dedicated to protecting your privacy. This Privacy Policy governs the manner in which the Rote8 mobile application ("App") and website (https://rote8app.com) collect, store, process, and protect your personal information in compliance with Apple App Store review guidelines and Google Play developer data safety policies.

1. Information We Collect

We collect information only as necessary to provide running shoe rotation tracking, Strava synchronization, and telemetry features:

Account Information: When you register or sign in, we collect your email address, authentication identifier, and optionally your athlete name and profile photo (via Google Sign-In, Apple Sign-In, or Strava OAuth).
Shoe & Gear Data: Details about the running shoes you add to your virtual rack, including brand, model, nickname, initial mileage offset, target retirement mileage, size preference, and category tags (Daily, Tempo, Race, Trail, Recovery).
Workout & Activity Telemetry: When connected to Strava, we receive workout metrics including activity title, distance, moving time, elapsed time, start timestamp, and gear assignment IDs via Strava API webhooks.
Push Notification Tokens: Device registration tokens (via Firebase Cloud Messaging and Notifee) used solely to dispatch real-time lock-screen notifications when a workout is uploaded.
Diagnostics & Analytics: Anonymous crash reports and performance metrics collected via Google Analytics 4 (GA4) and Firebase Crashlytics to diagnose software exceptions and ensure native build stability.

2. Third-Party Integrations & Processors

Rote8 utilizes trusted, industry-standard third-party services to deliver core functionality:

Strava API v3: If you authorize Strava connectivity, we obtain OAuth 2.0 access tokens to detect your runs and update gear assignments. We store your encrypted refresh tokens securely and never post unauthorized activities to your Strava feed. You can revoke access at any time directly in Strava settings or Rote8 Settings.
Google Firebase: We utilize Google Cloud Firestore, Firebase Authentication, Cloud Functions, and Firebase Cloud Messaging. Data is processed securely in accordance with Google Firebase Privacy Policy.
Google Analytics 4 & Firebase Crashlytics: Used to track crash traces and anonymous application performance. These tools do not collect personally identifiable fitness data.

3. How We Use Your Data

Your data is used strictly for the following operational purposes:

To calculate and visualize remaining foam health, life bar status, and mileage arc telemetry.
To automatically associate running activities with your virtual shoe rack.
To sync gear assignments back to your Strava account upon selection.
To deliver actionable lock-screen notifications allowing instant 1-tap shoe logging.
To alert you when shoes approach 80% (Warning) and 100% (Retirement) lifespan thresholds to prevent overuse injuries.

4. Account & Data Deletion (Apple & Google Store Compliance)

In full compliance with Apple App Store Guideline 5.1.1(v) and the Google Play User Data & Account Deletion Policy, users have the unconditional right to delete their account and erase all associated personal data at any time:

In-App Deletion: Open Rote8 > Navigate to Settings > Scroll to Account > Tap Delete Account. Confirming will permanently delete your authentication record, all virtual shoe rack entries, and historical run associations from our Firestore databases.
Web / Email Request: If you have uninstalled the app or prefer to request deletion via email, you may contact our privacy desk at [email protected] with the subject line "Account Deletion Request" from your registered email. All data is purged within 30 days of verification.

5. Data Security & Storage

We implement industry-standard encryption protocols (TLS/HTTPS in transit, AES-256 at rest) across all Cloud Firestore instances. Strict Firestore security rules ensure that authenticated users can only read, write, or modify their own shoe and activity documents. We never sell, rent, or monetize runner data to advertising networks.

6. Children's Online Privacy Protection

Rote8 is not directed to children under the age of 13. We do not knowingly collect or solicit personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it immediately.

7. Contact & Privacy Inquiries

If you have questions, feedback, or privacy-related requests regarding Rote8, please contact us at:

Email: [email protected]
App Identifier: com.rote8.app (iOS) / com.rote8app (Android)