Stampede Privacy Policy

Last updated: 31 July 2026

This Privacy Policy describes how your personal information is collected, used, and shared when you use the Stampede app ("the App") provided by Bayaq PLT.

Stampede is a running app. You run in the real world to claim territory for one of three factions. To do that, the App has to know where you ran — so location data is the core of the service, not an optional extra.

1. Information We Collect

a. Location data (GPS routes). While you are recording a run, the App collects your device's precise location, including in the background if you leave the App or lock your phone. The resulting route is stored on our servers and used to work out which regions you ran through. Background collection only happens while a run is actively being recorded; it stops when you finish the run.

b. Health data (Apple Health / Health Connect). If you grant permission, the App reads:

• Workouts — so runs you recorded on a watch or another app can count toward your territory.
• Workout routes — the GPS path of those workouts. Without this, an imported run cannot claim any territory.
• Body mass (weight) — used only to estimate the calories burned on a run. If you do not provide it, the App shows a dash instead of a number. We do not guess.

Health data is read only. The App never writes to Apple Health or Health Connect, and never collects health data you have not explicitly granted.

c. Account information. Your email address and the display name and username you choose. If you sign in with Apple or Google, we receive only your email and name from that provider via OAuth2. We never receive your password.

d. Profile photo. If you choose to upload one.

e. Push notification token. If you allow notifications, so we can tell you when someone takes a region you hold.

2. How We Use It

a. Your run routes are matched against region boundaries to calculate the influence a run earns, and to place you on the leaderboards for those regions.

b. Your display name, username, faction and score are shown publicly on the leaderboards of regions you have run in, and to other players on the map. Your email address, precise routes, and weight are never shown to other users.

c. Weight is used solely to estimate calories burned. It is never shared and never shown to anyone but you.

d. To send you notifications about your territory, if you have allowed them.

3. What We Do Not Do

a. We do not sell your personal information.

b. We do not use your health or location data for advertising.

c. We do not share your health data with third parties.

d. We do not use your data to train any product outside Stampede.

4. Sharing Your Information

Your data is stored with Supabase (our database and authentication provider), and Google Maps is used to display maps within the App. We may share information to comply with applicable laws and regulations, respond to a subpoena, search warrant, or other lawful request, or to otherwise protect our rights.

5. Security

Data is transmitted over HTTPS and stored using industry-standard security measures. We take reasonable precautions to protect your personal information from loss, misuse, unauthorized access, disclosure, alteration, or destruction.

6. Data Retention

We retain your personal information only for as long as necessary to provide the Stampede service and to comply with applicable legal obligations.

• Account information, profile data, runs, GPS routes, territory, and leaderboard data are retained while your account is active.
• Health data imported from Apple Health or Health Connect is retained only as necessary to support features such as imported runs and calorie estimates.
• If you delete your account from within the App, we permanently delete your account, runs, routes, territory, profile information, and associated personal data from our active systems, except where we are required by law to retain certain records.
• Deleted data may remain in secure encrypted backups for a limited period before being automatically removed.

7. Your Choices

a. You can revoke location or health permissions at any time in your device's Settings. Revoking health access stops imports; revoking location access stops run tracking. The App will continue to work, but it will not be able to record or import runs.

b. You can delete your account at any time from Settings inside the App. This permanently deletes your account, your runs, your routes, your influence, and associated personal data from our active systems. This action cannot be undone.

8. Children

Stampede is not directed at children under 13, and we do not knowingly collect personal information from them.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision.

10. Contact

Questions about this Privacy Policy or your personal information can be sent to hazmi@tied.fit.