Privacy Policy

Information we collect

We handle information you provide and information generated when you use the service:

• Account information: an account identifier, linked Apple or Google sign-in identifiers, authentication/session records, and profile details your provider supplies, which may include your name, email address, and profile image URL. A provider may supply a private relay email instead of your personal email.
• Adventure information: chapter progress, completed and read chapters, credited distances, workout identifiers and aliases used to prevent duplicate credit, and preferences such as language, distance units, distance goal, and audio settings. With an account, these records are synchronized for backup and restoration.
• Feedback and feature-use information: feedback answers, any optional comment, chapter starts and completions, feedback prompt events, qualifying-workout events, timestamps, source (phone, Watch, Health, or practice), and content version. Guest submissions use a pseudonymous guest identifier; pseudonymous records are not necessarily anonymous.
• Support information: messages and contact details you choose to send us. Please avoid including sensitive information that is not needed to resolve your request.
• Technical information: servers may receive or log IP addresses, request times, requested resources, browser or app request details, and errors needed to operate, secure, and troubleshoot the service.

Apple Health, workouts, and device permissions

With your permission, SagaRun reads walking/running workout records and distance from Apple Health to credit story progress. On your device, imported records can include a workout identifier, activity type, distance, start and end times, and recording app. The Apple Watch companion can record a walk or run and save the workout to Apple Health. Live distance and elapsed time can be shared between your paired Watch and iPhone.

Health and fitness information is sensitive. Account backup can send workout-derived credited distances, workout identifiers and aliases, chapter progress, and related event timestamps to our server. This is not a backup of your full Health history. SagaRun does not upload raw Health samples, heart-rate readings, or GPS routes to our server. It does not request camera, photo-library, flashlight, or location access for the current features.

We use Health-derived information to provide the fitness and adventure features, prevent duplicate workout credit, synchronize progress, and support those features. We do not sell it, use it for advertising or marketing, or disclose it to advertising platforms or data brokers. We do not use it to build unrelated user profiles.

You can refuse or withdraw Health permissions in Apple's Health or device privacy settings. This may stop workout import or recording; practice features remain available. Revoking permission stops future access but does not automatically erase previously credited progress or server backups. Contact us or use account deletion if you also want stored account data removed.

If you allow notifications, SagaRun may notify you about chapter progress. You can change notification permissions in device settings. Local app storage holds preferences and progress; paired-device communication supports the Watch experience.

Why we process information

We process only information reasonably needed for stated purposes: providing the app and account services, crediting and restoring progress, honoring your preferences, responding to support and privacy requests, protecting the service, and meeting legal obligations. Feedback and chapter engagement help us understand and improve the story experience. Health-derived records are restricted to the fitness-related purposes explained above.

Depending on the processing and applicable law, our basis is performance of our agreement with you, your consent (including consent required for sensitive information), compliance with a legal obligation, or a legitimate interest in securely operating and improving SagaRun, subject to your rights. Accepting general Terms is not a substitute for consent where separate consent is required.

The current release has no advertising SDK, third-party marketing tracker, or paid subscription checkout. We do not send promotional messages without permission where required. If we introduce new collection, marketing, or paid features, we will update these disclosures and obtain any required consent before the new processing begins.

Feedback and user content

In-app feedback is available to authorized staff for product review and support. It is not published as a public profile or community post. We will seek separate permission before using identifiable feedback as a public testimonial. Any content you voluntarily post on an external public channel is governed by that channel's own privacy practices.

Sharing and third-party services

We may share information with authorized employees and contractors, and with hosting, storage, security, maintenance, and professional service providers who need it to deliver the service. We may disclose information where required by law, to protect legal rights and safety, or in a lawful business transfer. Access is limited to the relevant purpose; these disclosures do not authorize advertising use of Health-derived information.

Apple provides App Store distribution, Apple Health, and Sign in with Apple where enabled. Google provides Google sign-in where enabled. Their own privacy policies govern their services. Our current app and website do not integrate Google Analytics, Mixpanel, Stripe, Google Payments, or Apple Pay services.

Providers may process information outside your country, including outside Thailand. Where applicable law requires safeguards for an international transfer, we will use the required safeguards or another lawful basis for that transfer.

Security

We use reasonable technical and organizational measures to protect information, including secured production connections, restricted administrative access, protected authentication credentials, and account-scoped progress handling. No electronic transmission or storage is completely secure. Protect your device and sign-in accounts, and notify us if you suspect unauthorized access. We will address and notify relevant data breaches as required by applicable law.

Retention and account deletion

We retain account information and synchronized progress while needed to provide your account. Guest feedback and feature-use entries are subject to scheduled removal once their recorded event time is more than one year old. If you choose to bring guest data into an account, it becomes account-linked data and follows account retention instead.

Open Your account, select Delete account, and verify a linked sign-in method to request deletion in the app. Deletion removes the account, linked identity records, account sessions, backed-up progress, and account-linked feedback from the active account database. The signed-in local adventure on your iPhone is removed; a separate guest adventure is kept. Deletion of the corresponding Watch profile is applied when the Watch can reconnect and safely switch profiles.

Limited records can remain to finish provider-access revocation, recognize a completed deletion request, and prevent an old guest credential from restoring or claiming deleted account data. Operational logs, protected backup copies, support records, and information subject to legal obligations may remain for as long as necessary for their purposes. Retained data must not be used to recreate a deleted account.

Deleting SagaRun or your SagaRun account does not delete workouts already saved in Apple Health, delete your Apple or Google account, or automatically cancel a store subscription. Manage those records or services with their respective providers. Contact us if you cannot access account deletion or want to request removal of guest submissions; we may need enough information to verify and locate your records.

Your rights and choices

Depending on applicable law, you may request access or a copy of your information, correction, deletion, restriction, portability, or object to processing. You may withdraw consent without affecting processing already lawfully carried out. Some requests are subject to legal exceptions and proportionate identity verification.

An account is optional, and you can control Health and notification permissions through your device. Withdrawing a permission may limit the related feature. We will not unlawfully discriminate against you for exercising your privacy rights.

Contact us using the details below to make a request or complaint. We will investigate and respond as required by law. You may also complain to your competent data protection authority, including Thailand's Personal Data Protection Committee where applicable.

Children's privacy

SagaRun is not directed to children under 13 and we do not knowingly collect their personal information. If you believe a child under 13 has provided information, contact us so we can investigate and remove it as appropriate. For other minors, parental or guardian consent must be obtained where applicable law requires it.

Cookies, external services, and business transfers

Our Cookie Policy explains necessary website cookies and related app storage. External websites and providers have their own policies, which apply when you use their services.

If our business or assets are acquired or transferred, personal information may transfer lawfully with them. The recipient must respect applicable privacy obligations and the purposes in this Policy, or obtain another lawful basis for any change.

Changes to this Policy

We may update this Policy as the service, data handling, or law changes. We will publish the updated Policy and date on the website. The app links to the website for the latest published version. We will provide notice of material changes and obtain new consent where legally required.

Contact us

Suphasit Thongniam
suphasit.tn@gmail.com