Privacy
Policy

01 / What Recura Is

Recura is a mobile application providing two core services:

• AI Running Gait Analysis: Record a short video of yourself running. Our AI analyses your biomechanics (cadence, stride, foot strike, joint angles, etc.) and returns a gait score and movement metrics.
• Ranked 1v1 Duels: A competitive ranked system where you race opponents in your division. Users progress through nine ranks: Rebuilding, Pacer, Stride Runner, Tempo Runner, Iron Runner, Apex Runner, Recura Ultra, Recura Legend, and Hall of Fame, each with three internal divisions (Div III, Div II, Div I). Progress is tracked in Recura Points (RP) earned or lost per duel.

Recura does not provide personalised coaching, medical advice, physiotherapy, or any health treatment service.

02 / Information We Collect

Account Information

When you create an account, we collect your email address, a username of your choice, and a password (encrypted using industry-standard hashing, never stored in plain text).

Profile Information (Optional)

You may optionally provide your name, gender, age, height, weight, and running experience level. This helps contextualise your gait analysis results. We never sell this information and never share it with third parties in identifiable form.

Health Information (Optional: Consent Required)

You may choose to tell us about your health or how you are getting back into running, so we can set your gait targets. This is health information ("special category" data under UK GDPR). It is entirely optional, is collected only with your explicit consent, is used solely to personalise your experience, and is never sold or shared with third parties. You can delete it at any time in the app, and the app works fully without it.

Gait, Movement and Video Data

• Running videos you submit for analysis are sent to our secure analysis server, processed, and then deleted immediately once analysis is complete. We do not keep the raw video, and we do not build a video library from it.
• We retain only the derived numeric metrics: cadence, stride length, ground contact time, vertical oscillation, foot strike pattern, pronation angle, hip drop, and your gait score.
• Historical metric data so you can track your progress over time.

Competitive and Duel Data

• Your division ranking and tier
• Duel results (wins, losses, performance metrics used in matchmaking)
• Your username and ranking position on public leaderboards

Location Data

• During a live duel, and only with your permission, we use your device's precise GPS location to measure the distance you run in real time and save your route.
• Because a duel keeps running while your screen is locked or the app is in the background, location is collected in the background for the duration of that active duel. This is why iOS shows a location indicator and asks for location permission, and why a Lock Screen / Live Activity widget may display your live duel progress.
• We do not collect your location when you are not in an active duel. Distance is calculated on your device. We save the duel result, total distance and the route you ran to your account, so you can see it again. We never use location for advertising.

Device and Technical Information

• Device type, operating system, and app version
• IP address (security purposes only)

Analytics & Usage Data

To understand how Recura is used and where to improve it, we use Firebase Analytics (Google Analytics for Firebase) to collect aggregated, non-identifying usage data: when the app is opened, which screens and features you use (for example completing a gait analysis, starting or finishing a duel, or viewing the upgrade screen), roughly how long you spend in the app, and basic device and app details. This is associated with an app-instance identifier, a random ID specific to your installation, not your name or email.

We use this Firebase analytics data only to measure things like engagement, retention and feature usage so we can make the app better. It is not linked to advertising and, on its own, does not track you across other companies' apps. You can reset the app-instance identifier by reinstalling the app, and deleting your account removes your associated data (Section 11).

Advertising and Measurement

With your permission, Recura uses Apple's Advertising Identifier (IDFA) to measure the performance of our advertising, for example, to understand which advert led you to download Recura. To do this we share a limited set of events (such as app install, account sign-up and subscription start) with our advertising partner TikTok (see TikTok's Privacy Policy). We ask for your permission through Apple's App Tracking Transparency prompt, and you can decline: Recura works exactly the same either way. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking. The only ads in Recura are optional rewarded ads you choose to watch to earn an extra analysis. We never sell your personal data.

Age restriction: this advertising measurement is enabled only for users aged 18 and over. For anyone under 18 we never show the tracking prompt, never use the advertising identifier, and never share advertising data.

03 / How We Use Your Information

We use your information strictly to:

• Provide and operate the gait analysis and ranked duel features
• Calculate and display your gait scores, metrics, and performance history
• Match you with opponents of similar ranking in duels
• Display your username and rank on public leaderboards (as part of the competitive feature you opt into by participating)
• Send essential account and service notifications
• Improve our AI analysis models using anonymised, aggregated metrics (never your raw video)
• Understand feature usage, engagement and retention through privacy-respecting analytics, so we can improve the app
• Comply with legal obligations

04 / Legal Basis for Processing (UK GDPR)

• Contract performance: Processing your account information and gait metrics is necessary to provide the Service you signed up for.
• Consent: Collecting optional health information, and using your precise location during duels, relies on your consent, which you can withdraw at any time in the app.
• Explicit consent (Article 9): Any health information you choose to provide is "special category" data and is processed only with your separate, explicit consent.
• Legitimate interests: Improving our AI models using anonymised metrics, understanding aggregated app usage and retention through privacy-respecting analytics, maintaining app security, and stopping fraud.
• Legal obligation: Where we are required to retain or disclose data by law.

05 / Sensitive Data: Health, Biometric & Location

Consent before analysis

Before your first gait analysis, we ask for your explicit consent to capture and analyse a short running video. Movement data derived from video can be considered biometric in some regions (for example under the Illinois Biometric Information Privacy Act and similar US state laws), so we treat it accordingly.

We delete the video

Your running video is processed to extract numeric metrics and then deleted immediately. We do not keep the raw footage, we do not create a stored biometric template or face/identity scan, and we do not profit from biometric identifiers.

Health information

Any health information you provide is optional, collected only with your explicit consent, used solely to personalise your gait targets, and never sold or shared. You can withdraw it at any time in the app.

No research or third-party sharing

Your control

You can revoke location or health permissions at any time in your device settings or in the app, and you can delete your account and associated data whenever you wish (Section 11).

06 / Authentication and Security

We use Firebase Authentication to securely manage accounts. Security measures include password hashing using industry-standard cryptographic methods, email verification for new accounts, encrypted data transmission (HTTPS/TLS), secure cloud storage via Firebase and Google Cloud Platform, and access controls limiting which personnel can access personal data.

07 / Data Storage and Retention

• Firebase Firestore: Profile data, gait metrics, performance history, and duel records
• Analysis server: Running videos are processed in memory and deleted immediately once analysis completes, they are not stored long-term
• Local Device Storage: Cached preferences and offline data

Data is stored in secure data centres operated by Google Cloud Platform, primarily in the EU and US, subject to appropriate transfer safeguards under UK GDPR. We retain your personal data for as long as your account is active. Upon account deletion, personal data is removed within 30 days, except where legally required to retain it.

08 / Third-Party Services

We do not sell your personal data. We share data with the following service providers only as necessary to operate the Service:

• Google Firebase / Google Cloud Platform: Authentication, database, and storage infrastructure
• Firebase Analytics (Google Analytics for Firebase): Aggregated, privacy-respecting usage analytics to understand engagement and retention, never used for advertising or cross-app tracking
• Apple App Store / Google Play Store: Subscription and payment processing (we receive only confirmation of subscription status, we never receive or store your payment card details)
• TikTok (advertising measurement): For users aged 18 and over who grant App Tracking Transparency permission, we share limited app events (install, sign-up, subscription start) and Apple's advertising identifier to measure our advertising, see Section 2. Never enabled for users under 18.
• Google AdMob: Serves the optional rewarded ads. It receives device and ad interaction data, and uses your advertising identifier only if you allow tracking when iOS asks.

09 / Public Leaderboard

By participating in ranked duels, your username and ranking position are visible on public leaderboards within the app. Your real name, email, and personal profile details are never displayed publicly. Choose a username that does not identify you if you wish to remain private.

10 / Subscriptions and Payments

• Payments are processed entirely by Apple (App Store) or Google (Play Store)
• We never receive, process, or store your payment card details
• We receive only confirmation of your subscription status
• Refund and cancellation terms are governed by Apple's or Google's policies

11 / Your Rights Under UK GDPR

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Request that we limit processing in certain circumstances
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for optional health data or location processing at any time without affecting your core access to the Service

Contact us at Mozza@recura.pro to exercise any right. We respond within 30 days. You may also lodge a complaint with the Information Commissioner's Office at ico.org.uk (UK users), or with your local data protection supervisory authority if you are located in the European Economic Area, Switzerland, or Norway.

12 / Your US Privacy Rights

If you are a resident of the United States, the following applies in addition to the rights described above. Recura does not sell or share your personal information for money or for cross-context behavioural advertising.

California (CCPA/CPRA): You have the right to know what personal information we collect and why, to access and delete it, to correct it, and not to be discriminated against for exercising these rights. Because we do not sell or share personal information, no "Do Not Sell or Share My Personal Information" action is needed, but you may still contact us to exercise any right.

Other US states (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon and others with comprehensive privacy laws): you have comparable rights to access, delete, correct, and opt out of targeted advertising or any sale. We honour these rights for all US users regardless of state.

Consumer health data: Some US states (for example Washington's My Health My Data Act, Nevada, and Connecticut) regulate "consumer health data." Your gait, movement, and any health information are collected only to provide the features you request, only with your consent, are never sold, and are not shared with any third party for research or advertising. You may withdraw consent or request deletion at any time by emailing Mozza@recura.pro.

Biometric data: Some US states (for example Illinois (BIPA), Texas, and Washington) regulate "biometric identifiers." Where movement data derived from your running video is treated as biometric, we collect it only with your consent, use it solely to produce your gait analysis, delete the underlying video immediately after processing, do not sell or profit from it, and do not disclose it to third parties.

To exercise any US privacy right, email Mozza@recura.pro. We will verify your request and respond within the timeframe your state's law requires (typically 45 days).

13 / Children's Privacy

Recura is intended for users aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you believe someone under 16 has provided us data, contact us at Mozza@recura.pro and we will delete it promptly. Users aged 16–17 should have a parent or guardian review this policy.

14 / Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via the app or email before they take effect. Continued use of Recura after changes take effect constitutes acceptance of the updated policy.