Privacy Policy

Last updated: 17 October 2026

This policy describes how RNKX handles your personal and workout-related data.

1. Who we are

RNKX (“RNKX”, “we”, “us”, or “our”) operates a fitness competition platform that lets athletes connect wearables, sync workouts, earn scores, and compete in Engine and Run leagues.

This Privacy Policy explains how we collect, use, store, and share personal data when you use the RNKX website, mobile experience, and related services (collectively, the “Service”). Contact us through the RNKX app: Settings → Contact support. We will respond as soon as we reasonably can.

2. Data we collect

We may collect the following categories of information:

• Account data: email address, authentication identifiers, and credentials managed through our auth provider.
• Profile data: display name, username, country, avatar, league selections, privacy preferences, and subscription status.
• Workout and performance data: activity type, duration, timestamps, distance, pace, heart rate, scores, league assignments, and related metrics used for rankings and fair-play checks.
• Device and wearable data: connected device types (e.g. Apple Watch, WHOOP, Garmin, Coros, Polar, Oura, Samsung, Strava integrations via our partners), sync timestamps, and data you authorise us to receive from third-party health or fitness APIs.
• Social and communications data: friend connections, club memberships, direct and group messages you send in the app, and support messages you submit.
• Technical data: app version, device type, IP address, log data, and similar information needed to operate and secure the Service.
• Purchase data: subscription status and transaction identifiers from Apple App Store or other platforms (we do not receive your full payment card details).
• Notifications: push notification tokens and delivery metadata if you enable alerts.
• Advertising measurement data (iOS app): an install identifier from our attribution provider, the fact that the app was installed and that sign-up was completed, your RNKX account ID, and how you found the app (for example which advert). Your device’s advertising identifier (IDFA) is collected only if you allow tracking when iOS asks.

3. How we use your data

We use personal data to:

• Provide the Service, including account creation, workout sync, scoring, leaderboards, seasons, and social features.
• Apply fair-play and integrity rules (for example minimum duration, daily scoring limits, and anomaly checks).
• Process Premium subscriptions and restore purchases through platform billing.
• Send service-related notifications you opt into (e.g. messages, invites, score alerts).
• Respond to support requests and improve reliability, security, and user experience.
• Measure which of our adverts lead to app installs and completed sign-ups, so we can spend our advertising budget sensibly.
• Comply with legal obligations and enforce our Terms, Waiver, and community standards.

4. Legal bases (EEA/UK users)

Where applicable law requires a legal basis, we rely on: performance of our contract with you; legitimate interests in operating, securing, and improving the Service; compliance with legal obligations; and your consent where required (for example optional marketing, certain device permissions, or allowing tracking for advertising measurement when iOS asks). You may withdraw consent without affecting lawfulness of processing before withdrawal.

5. How we share data

We do not sell your personal data. We may share data with:

• Infrastructure and hosting providers that process data on our behalf under contractual safeguards.
• Wearable and integration partners (such as Apple HealthKit, WHOOP, Garmin Connect, and Terra for COROS and Polar devices) only when you connect them and authorise data flow.
• Payment and subscription platforms (e.g. Apple) to manage Premium status.
• Push notification services to deliver alerts you enable.
• Our attribution provider (AppsFlyer) and advertising platforms (such as Meta) to measure the results of our adverts. We share only app install and sign-up completion events and the identifiers described above. We never share workout, health, heart-rate, pace, or wearable data with them.
• Other RNKX users according to your settings (for example public profile, leaderboard placement, club visibility, and messages you send).
• Authorities or third parties when required by law or to protect rights, safety, and integrity of the Service.

6. Garmin Connect data

If you connect your Garmin account, RNKX may receive activity and fitness data that you authorise Garmin to provide. We use Garmin-derived data only to provide RNKX features you request, including workout sync, scoring, rankings, leaderboards and competition features.

Garmin-derived data is never sold, used for advertising, or used to train artificial intelligence (AI) or machine-learning models. It is processed only by RNKX and the service providers that run RNKX on our behalf (such as our database host and the AI-assisted tools we use to operate and support the Service), under terms that do not allow them to use it for their own purposes or to train AI models.

You can disconnect Garmin from RNKX at any time and may request deletion of your RNKX account and associated personal data, subject to the retention terms set out below.

7. International transfers

Your data may be processed in countries other than where you live. Where required, we use appropriate safeguards (such as standard contractual clauses) for transfers from the EEA, UK, or Switzerland.

8. Retention

We keep personal data for as long as your account is active and as needed to provide the Service, resolve disputes, enforce agreements, and meet legal requirements. When you delete your account, we delete or anonymise personal data within a reasonable period, except where retention is required by law or for legitimate backup, security, or fraud-prevention purposes.

9. Your rights and choices

Depending on your location, you may have the right to:

• Access, correct, or delete your personal data.
• Object to or restrict certain processing.
• Data portability.
• Withdraw consent where processing is consent-based.
• Lodge a complaint with your local data protection authority.

10. Account controls

You can stop advertising tracking at any time in iPhone Settings → Privacy & Security → Tracking. You can update profile and privacy settings in the app, disconnect wearables, and delete your account from Settings. Account deletion is intended to be permanent and removes your associated app data subject to the retention limits above.

11. Health and fitness data

Workout and heart-rate data may qualify as health-related information in some jurisdictions. RNKX uses this data only to power scoring, rankings, recovery insights (where available), and features you request. It is never used for advertising or shared with advertising or attribution partners. RNKX is not a medical device and does not provide medical advice. Do not use the Service as a substitute for professional healthcare.

12. Children

The Service is not directed to anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will take appropriate steps to delete it.

13. Security

We implement technical and organisational measures designed to protect personal data. No method of transmission or storage is completely secure; you use the Service at your own risk and should protect your login credentials.

14. Changes

We may update this Privacy Policy from time to time. We will post the revised version with a new “Last updated” date. Material changes may be communicated in-app or by email where appropriate. Continued use after changes take effect constitutes acceptance of the updated policy.

15. Contact

Contact us through the RNKX app: Settings → Contact support. We will respond as soon as we reasonably can.