Privacy Policy

Who controls your information

Tam: Claim Your Turf ("Tam", "we", "us", or "our") is the controller of the personal information described in this policy. Questions and privacy requests can be sent to support@runwithtam.app.

Information you provide

Account and profile information may include your email address, name, display name, avatar, password credentials, Apple or Google sign-in identifier, age group, birthday month and day, gender, height, weight, referral source, profile settings, selected territory and locator colours, and an optional home privacy location and cloak radius.

Content and community information may include activity names and descriptions, private activity notes, profile and territory-texture images you upload, clubs, follows, cheers, comments, reports, blocks, challenge participation, accountability commitments, shoe details, notification preferences, and messages you send to support. Private notes are not shown to other users.

Activity, location, motion, and health information

When you start recording, Tam collects precise GPS coordinates, timestamps, altitude and accuracy readings, reported speed, movement and step signals, and recording diagnostics. Collection can continue in the background while an activity is active, including when the screen is locked. Tam derives or stores route geometry, distance, duration, pace, cadence, elevation gain and loss, calories, activity type, territory results, personal records, streaks, achievements, and integrity or validation results.

If you choose to connect Apple Health or Health Connect, Tam reads only the records you approve, which may include completed exercise sessions and routes, distance, steps, heart rate, elevation gained, and related workout timestamps. The integration is optional, and Tam does not write workouts back to those services. See our Health Data page for details about permission, use, and deletion choices.

Precise routes are used to calculate activities, territory, and integrity. Raw route data is encrypted in Tam's server storage. A simplified route and derived activity metrics are retained with the activity. Turning off location or motion permissions may cause missing or less accurate results.

Device, log, and purchase information

We may automatically receive IP address, user agent, device and operating-system details, app version, device or installation identifier, push token, request and security logs, crash reports, and activity-recording diagnostics such as whether a location sample arrived in the foreground or background and why it was accepted or rejected.

Tam uses Sentry for crash, error, and performance monitoring. Sentry may receive technical diagnostic information such as stack traces, device and operating-system details, app version, and relevant request or session context needed to investigate reliability problems. Tam does not use Sentry to intentionally collect your health records or precise route as analytics data.

Tam uses PostHog for pseudonymous product analytics, such as feature usage, navigation, performance, and aggregate product improvement. Tam configures these events not to include your name or email address and does not use PostHog for advertising or to analyze precise routes or health records.

If you use Tam Pro, we and RevenueCat process your Tam user identifier, store, product and entitlement identifiers, purchase, renewal, expiry, cancellation and refund status, transaction events, trial or subscription status, and limited device or platform information. Apple and Google process your payment method. Tam does not receive or store your full card number, bank details, or store password.

Photos, videos, and sharing exports

When you select a photo or video for an activity share, your device gives Tam access to that selected item so Tam can create the export you request. The original remains in your device library and is not uploaded to Tam merely because you selected it. The finished export may include metrics you choose to display and is shared only when you use your device's sharing controls.

Images submitted as profile or territory textures are uploaded to Tam, stored, and may be reviewed for moderation.

How we use information

• Provide accounts, authentication, activities, maps, route replay, territory, rankings, clubs, social features, challenges, streaks, badges, accountability tools, and support.
• Calculate fitness and territory results, detect duplicate or implausible activities, prevent cheating, protect users, and enforce our Terms.
• Provide and synchronize Tam Pro entitlements, process store events, and answer subscription or refund questions.
• Send transactional emails and, with permission, push notifications.
• Debug, secure, maintain, analyze, and improve Tam.
• Comply with law and establish, exercise, or defend legal claims.

Tam does not sell personal information and does not use health or precise location data for third-party advertising.

Automated checks and generated content

Tam uses automated quality and integrity checks to score activity data and may flag or reject activity, territory, leaderboard, streak, XP, badge, or personal-record results. Signals can include speed, route quality, duplication, location accuracy, timing, and device movement data. Flagged results may be reviewed and corrected, and you may contact support to challenge a result.

For some territory-steal posts, Tam may send a public display name, coarse public place label, and non-precise result category to an AI text provider such as OpenRouter or DeepSeek to generate a short feed caption. We do not send precise route coordinates, health data, private notes, email addresses, or payment data for this purpose.

Activity visibility and location privacy

You choose an activity audience, such as your club, followers, public-safe, or private. New activities do not show a geographic map in feeds unless you turn on Show map on feed for that activity. When the map is off, Tam may show a normalized route silhouette that preserves the path's shape without geographic coordinates or an underlying map.

If you show a map, Tam applies the activity's start and end hiding choices and your home cloak before creating the public route. Your full private route remains available to you and is still used for activity metrics, territory calculation, and integrity checks. You can change supported privacy settings or delete an activity later. Location labels such as city, state, or country may be shown according to your settings.

Other people may save or reshare information you publish. Removing content from Tam cannot remove copies they made outside the service.

When we disclose information

We disclose only the information needed to providers that operate Tam, including infrastructure and storage providers; Apple and Google for sign-in, health integrations, and store purchases; RevenueCat for subscription management; Expo for push delivery; Mailgun for account and support email delivery; Sentry for crash, error, and performance monitoring; PostHog for pseudonymous product analytics; and OpenRouter or DeepSeek for the limited generated-caption use described above. These providers may process information in countries other than yours under their own safeguards and our agreements.

We may also disclose information when required by law, to protect users or the service, in a business reorganization, or with your direction. We do not give precise location or health information to advertisers or data brokers.

Retention and deletion

We generally retain account, profile, social, health-import, activity, and precise route information while your account is active. You can delete individual activities. When you request account deletion, the account is disabled for a 30-day recovery period; signing in during that period cancels the request. After the recovery period, personal information is permanently deleted or de-identified, except for limited records we must keep for security, fraud prevention, transactions, disputes, or law.

Some de-identified territory geometry may remain where removing it would alter other users' territory history, but it will no longer be linked to your account or original GPS route. Backups and provider logs may take additional time to cycle out under restricted access. Short-lived verification codes, local recording journals, and invalid push tokens are removed when no longer needed. Subscription transaction records may be retained for legal, accounting, fraud-prevention, and dispute purposes.

Your choices and rights

You can update profile and privacy settings, choose each activity's audience and map visibility, disable notifications, disconnect optional health integrations, revoke device permissions, delete activities, request an encrypted data export, or request account deletion in the app. Depending on your location, you may also request access, correction, deletion, restriction, portability, or objection, withdraw consent, and complain to your data-protection authority. To exercise a right or appeal an integrity result, contact support@runwithtam.app. We may verify your identity before completing a request.

Security and children

We use access controls, encrypted transport, encrypted raw-route storage, monitoring, and other reasonable safeguards. No online service can guarantee absolute security.

Tam is not directed to children under 13. If the law where you live requires a higher age to consent to data processing, you may use Tam only with valid parent or guardian authorization. Contact us if you believe a child provided information without the required permission.

Legal bases and international processing

Where a legal basis is required, we process information to perform our contract with you, based on your consent for optional health, location, media, and notification access, for legitimate interests such as service security and improvement, and to comply with legal obligations. You can withdraw consent through device or app settings, but this does not affect earlier lawful processing.

Tam and its providers may process information outside your country. Where required, we use appropriate contractual, organizational, and technical safeguards for those transfers.

Changes and contact

We may update this policy as Tam develops or the law changes. We will update the date above and provide additional notice when a material change requires it. For questions, requests, or complaints, email support@runwithtam.app.

Notifications and communications

We use notification preferences, push tokens, email addresses, and delivery status to send account, security, service, activity, social, club, territory, subscription, and support communications. This can include verification codes, password-reset messages, welcome messages, data-export notices, and support replies. Optional push categories can be disabled in Tam or through device settings, and promotional emails can be turned off through their unsubscribe or preference controls. Essential account, security, service, and transaction messages may still be sent.

Push delivery may use Expo or other delivery providers, and email delivery may use Mailgun or another provider. For email delivery, Mailgun may process the recipient address, message content, timestamps, and delivery, bounce, complaint, or suppression metadata. We retain notification preferences and delivery records only as needed to respect your choices, deliver messages, secure the service, troubleshoot delivery, and meet legal obligations. We do not use health or precise location data to target advertising through notifications.