Plain English summary: Recura collects only what it needs to deliver AI gait analysis and ranked 1v1 duels. Your running videos are deleted right after analysis — we keep only the numbers. Any health information is optional and only collected with your consent. We use your location during a live duel (including in the background while the duel is running) purely to measure distance. We never sell your data, and you can delete your account anytime.
Recura ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Recura mobile application and website (the "Service").
Recura is operated as a sole trader business based in the United Kingdom. This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using Recura you agree to the practices described here.
Recura is a mobile application providing two core services:
Recura does not provide personalised coaching, medical advice, physiotherapy, or any health treatment service.
When you create an account, we collect your email address, a username of your choice, and a password (encrypted using industry-standard hashing — never stored in plain text).
You may optionally provide your name, gender, age, height, weight, and running experience level. This helps contextualise your gait analysis results. We never sell this information and never share it with third parties in identifiable form.
You may choose to tell us about injuries or health conditions so we can tailor your gait targets and any rehabilitation guidance. This is health information ("special category" data under UK GDPR). It is entirely optional, is collected only with your explicit consent, is used solely to personalise your experience, and is never sold or shared with third parties. You can delete it at any time in the app, and the app works fully without it.
To understand how Recura is used and where to improve it, we use Firebase Analytics (Google Analytics for Firebase) to collect aggregated, non-identifying usage data: when the app is opened, which screens and features you use (for example completing a gait analysis, starting or finishing a duel, or viewing the upgrade screen), roughly how long you spend in the app, and basic device and app details. This is associated with an app-instance identifier — a random ID specific to your installation, not your name or email.
We use this Firebase analytics data only to measure things like engagement, retention and feature usage so we can make the app better. It is not linked to advertising and, on its own, does not track you across other companies' apps. You can reset the app-instance identifier by reinstalling the app, and deleting your account removes your associated data (Section 11).
With your permission, Recura uses Apple's Advertising Identifier (IDFA) to measure the performance of our advertising — for example, to understand which advert led you to download Recura. To do this we share a limited set of events (such as app install, account sign-up and subscription start) with our advertising partner TikTok (see TikTok's Privacy Policy). We ask for your permission through Apple's App Tracking Transparency prompt, and you can decline — Recura works exactly the same either way. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking. We do not show ads inside Recura, and we never sell your personal data.
Age restriction: this advertising measurement is enabled only for users aged 18 and over. For anyone under 18 we never show the tracking prompt, never use the advertising identifier, and never share advertising data.
We use your information strictly to:
Some of what Recura handles is sensitive — your running video, the biomechanics derived from it, any health or injury information you provide, and your precise location during a duel. This section explains how we protect it.
Before your first gait analysis, we ask for your explicit consent to capture and analyse a short running video. Movement data derived from video can be considered biometric in some regions (for example under the Illinois Biometric Information Privacy Act and similar US state laws), so we treat it accordingly.
Your running video is processed to extract numeric metrics and then deleted immediately. We do not keep the raw footage, we do not create a stored biometric template or face/identity scan, and we do not profit from biometric identifiers.
Any injury or health information you provide is optional, collected only with your explicit consent, used solely to personalise your gait targets and guidance, and never sold or shared. You can withdraw it at any time in the app.
We do not share your video, gait, health, or location data with researchers or any third party for research or any other purpose, beyond the infrastructure providers needed to run the app (Section 8). Our limited advertising measurement (Section 2) uses only app-event and advertising-identifier data — never your video, gait, health, or location data. If we ever introduce optional research sharing in future, it will be opt-in, clearly explained, and you will be asked separately before anything is shared.
You can revoke location or health permissions at any time in your device settings or in the app, and you can delete your account and associated data whenever you wish (Section 11).
We use Firebase Authentication to securely manage accounts. Security measures include password hashing using industry-standard cryptographic methods, email verification for new accounts, encrypted data transmission (HTTPS/TLS), secure cloud storage via Firebase and Google Cloud Platform, and access controls limiting which personnel can access personal data.
Data is stored in secure data centres operated by Google Cloud Platform, primarily in the EU and US, subject to appropriate transfer safeguards under UK GDPR. We retain your personal data for as long as your account is active. Upon account deletion, personal data is removed within 30 days, except where legally required to retain it.
We do not sell your personal data. We share data with the following service providers only as necessary to operate the Service:
By participating in ranked duels, your username and ranking position are visible on public leaderboards within the app. Your real name, email, and personal profile details are never displayed publicly. Choose a username that does not identify you if you wish to remain private.
Contact us at Mozza@recura.pro to exercise any right. We respond within 30 days. You may also lodge a complaint with the Information Commissioner's Office at ico.org.uk (UK users), or with your local data protection supervisory authority if you are located in the European Economic Area, Switzerland, or Norway.
If you are a resident of the United States, the following applies in addition to the rights described above. Recura does not sell or share your personal information for money or for cross-context behavioural advertising.
California (CCPA/CPRA): You have the right to know what personal information we collect and why, to access and delete it, to correct it, and not to be discriminated against for exercising these rights. Because we do not sell or share personal information, no "Do Not Sell or Share My Personal Information" action is needed — but you may still contact us to exercise any right.
Other US states (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon and others with comprehensive privacy laws): you have comparable rights to access, delete, correct, and opt out of targeted advertising or any sale. We honour these rights for all US users regardless of state.
Consumer health data: Some US states (for example Washington's My Health My Data Act, Nevada, and Connecticut) regulate "consumer health data." Your gait, movement, and any health information are collected only to provide the features you request, only with your consent, are never sold, and are not shared with any third party for research or advertising. You may withdraw consent or request deletion at any time by emailing Mozza@recura.pro.
Biometric data: Some US states (for example Illinois (BIPA), Texas, and Washington) regulate "biometric identifiers." Where movement data derived from your running video is treated as biometric, we collect it only with your consent, use it solely to produce your gait analysis, delete the underlying video immediately after processing, do not sell or profit from it, and do not disclose it to third parties.
To exercise any US privacy right, email Mozza@recura.pro. We will verify your request and respond within the timeframe your state's law requires (typically 45 days).
Recura is intended for users aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you believe someone under 16 has provided us data, contact us at Mozza@recura.pro and we will delete it promptly. Users aged 16–17 should have a parent or guardian review this policy.
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via the app or email before they take effect. Continued use of Recura after changes take effect constitutes acceptance of the updated policy.
For any questions about this Privacy Policy or your data:
Email: Mozza@recura.pro
Business: Recura (sole trader, United Kingdom)
We aim to respond to all privacy enquiries within 5 business days.