Privacy Policy

The short version

• We record your precise location only while a run is active, because the checkpoints and powerups you chase are real places.
• We do not sell your personal information, and we do not use your run data for advertising.
• Deleting your account deletes your runs, your recorded route points, and your social activity.
• You can turn off location access at any time in your device settings. Dash cannot record a run without it.

Who this policy covers

This policy applies to the Dash mobile app, this website, and the Dash backend services. Dash is currently in development, so some features described here may change before general release.

Information we collect

Account information

When you create an account we store your name, email address, and whether that email has been verified. If you sign up with a password we store a cryptographic hash of it, never the password itself. If you sign in with Google we store the identifiers and tokens that provider returns so we can keep you signed in. You also choose a username, and may upload an avatar image.

Location and run data

While you are recording a run, we collect a sequence of location points. Each point contains latitude and longitude, an elevation reading, the accuracy reported by your device, and a timestamp. From those points we derive your route, distance, duration, average speed, and elevation gain and loss. You may also add a description to a run.

This is precise location data, and it is the most sensitive information Dash holds. We collect it only during an active run — not in the background when you are not running, and not when the app is closed.

Social activity

We store who you follow, who follows you, and the kudos you give and receive on runs.

Device and notification data

If you enable push notifications, we store the push token your device issues so we can deliver them, along with a record of each notification we sent and whether delivery succeeded.

Technical and session data

When you sign in we create a session and record the IP address and browser or device user agent associated with it. We use this to keep you signed in, to let you see and revoke active sessions, and to detect abuse.

Waitlist

If you join the waitlist on this site, we store the email address you submit so we can tell you when Dash is ready to test. We use it for nothing else, and you can ask us to remove it at any time.

How we use your information

• To record, display, and score your runs.
• To place checkpoints and powerups along your route and confirm that you reached them.
• To show your activity to the people you have chosen to share it with, and to power feeds and leaderboards.
• To send you notifications you have asked for, such as a new follower or kudos on a run.
• To send service email you cannot opt out of while you hold an account, such as sign-in codes and security notices.
• To keep the service working and secure — debugging, preventing abuse, and enforcing our Terms of Service.

We do not sell your personal information. We do not serve advertising, and we do not share your location data with advertisers or data brokers.

What other people can see

Your username and avatar are visible to other Dash users. Your runs — including the route you took — are visible to the people who follow you, and may appear in feeds and leaderboards. Kudos you give are visible to the person who recorded the run.

A recorded route can reveal where you live and work. Consider that before you share runs that start or end at your front door.

Who we share it with

We share information with a small number of service providers who process it on our behalf, under contract, and only to run the service:

• Cloud hosting and database providers, which store your account, run, and location data.
• Amazon S3, which stores avatar images.
• Expo, together with Apple Push Notification service and Firebase Cloud Messaging, which deliver push notifications to your device.
• Our email provider, which delivers sign-in codes and notification email.

We may also disclose information if we are legally required to, or where we believe it is necessary to protect the safety of a person. If Dash is ever acquired, your information may transfer as part of that transaction, and we will tell you before it does.

How long we keep it

We keep your account, runs, and route points for as long as your account exists, because your history is the point of the product. Sessions expire on their own. Notification records are kept for a limited period so we can diagnose delivery problems.

When you delete your account, we delete your profile, runs, recorded route points, follows, kudos, and push tokens. Backups are purged on a rolling schedule after that.

Your choices

• Location. Revoke location access in your device settings at any time. Existing runs stay until you delete them; Dash will not be able to record new ones.
• Notifications. Turn push and email notifications off in the app's settings, or in your device settings.
• Individual runs. Delete any run, which also deletes its recorded route points.
• Your account. Delete it from the app's settings, or write to us and we will do it.

Your rights

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to how we use it, or receive it in a portable format. If you are in the EEA or the UK, our lawful bases are the performance of our contract with you (to provide the service), your consent (for location and notifications, which you can withdraw), and our legitimate interests (security and abuse prevention).

To exercise any of these rights, email privacy@simonmanzler.com. We will not treat you differently for asking.

Security

Data is encrypted in transit. Passwords are stored only as hashes. Access to production data is limited to the people who need it to operate the service. No system is perfectly secure, and we cannot guarantee absolute security — if we discover a breach affecting your personal information, we will notify you as required by law.

International transfers

We operate from the United States, and your information may be processed there or in other countries where our providers operate. Where required, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

Children

Dash is not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, email us and we will delete it.

Changes to this policy

If we make a material change, we will update the date above and, for significant changes, notify you in the app or by email before the change takes effect.

Contact us

Questions about privacy? Email privacy@simonmanzler.com. For anything else, see Support.