Privacy Policy

Introduction

RØUT (“we,” “our,” or “the App”) is developed by David Capp, an independent developer committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our iOS application and website (collectively, the “Service”).

RØUT is designed with a privacy-first, local-first approach. We collect only the minimum data necessary to provide you with AI-powered running routes and navigation features. We do not require account creation, and your route history is stored locally on your device.

Information We Collect

Location Data

We collect your current GPS coordinates when generating routes, continuous location updates during active navigation, and heading/compass direction for navigation guidance.

• Foreground: When you request a new route or view the map
• Background: Only during active turn-by-turn navigation (a blue indicator bar is displayed)

Route coordinates are stored locally on your device in your route history. We retain up to 100 recent routes locally. Location data is never uploaded to cloud storage or synced across devices.

Route Requests

• Your natural language prompts (e.g., “5k loop through the park”)
• Your starting location coordinates
• Requested route distance

This data is sent securely to our AI backend to generate your personalised route and is not permanently stored on our servers after route generation completes.

Email Address (Website)

When you join our TestFlight waitlist via the website, we collect your email address. This is used to:

• Send you a waitlist confirmation email
• Notify you when TestFlight access is available
• Send product launch updates

Emails are sent via Resend, a transactional email service. We do not sell or share your email address with third parties for marketing purposes. You can unsubscribe at any time.

Usage Analytics

We use PostHog, a privacy-focused analytics platform hosted in the European Union, to understand how the App is used and improve your experience.

• Anonymous device identifier (not linked to your identity)
• App feature usage (screens viewed, buttons tapped)
• Route generation metrics (distance, completion rates)
• Session replays in wireframe mode (visual layout only)

All text inputs (your route prompts) are automatically masked and not recorded. No personally identifiable information is collected. Data is processed in EU data centres under GDPR protections.

Website Analytics

Our website uses Vercel Analytics to understand how visitors interact with the site.

Cookies (Website)

Our website uses cookies and localStorage. You can manage your preferences via our cookie consent banner:

• Essential: Required for the site to function (always enabled)
• Analytics: Help us understand site usage and improve the experience
• Marketing: Used for personalised content (optional)

Subscription Information

If you subscribe to RØUT Premium, transactions are processed entirely by Apple through the App Store. We receive only transaction status (active/expired) and product identifiers. We do not receive or store your payment details, Apple ID, or billing address.

Information We Do Not Collect

RØUT is designed to respect your privacy. We explicitly do not collect or access:

• Personal accounts or login credentials (no account required)
• Health or fitness data (no HealthKit integration)
• Photos, camera, or media library
• Contacts or address book
• Calendar or reminders
• Microphone or audio recordings
• Browsing history
• Advertising identifiers
• Data from other apps

How We Use Your Information

Third-Party Services

RØUT integrates with the following third-party services to provide its features:

RouteSketch Backend

• Purpose: AI route generation
• Data shared: Starting location, route prompt, target distance
• Privacy: Data processed only for route generation, not permanently stored

Apple WeatherKit

• Purpose: Display current weather and forecasts
• Data shared: Location coordinates
• Privacy: Subject to Apple's Privacy Policy

Open-Meteo

• Purpose: Retrieve elevation data for route profiles
• Data shared: Route coordinates
• Privacy: Open-source service, no account required. Learn more

Overpass API (OpenStreetMap)

• Purpose: Access road network data for accurate route snapping
• Data shared: Geographic bounding box coordinates
• Privacy: Public API, no personal data collected. OpenStreetMap Privacy Policy

PostHog Analytics

• Purpose: Anonymous product analytics
• Data shared: Usage events, anonymous device ID, wireframe session replays
• Location: European Union
• Privacy: GDPR compliant. PostHog Privacy Policy

Apple App Store / StoreKit

• Purpose: In-app subscriptions
• Data shared: Transaction verification only
• Privacy: Subject to Apple's Privacy Policy

Resend

• Purpose: Transactional email delivery (waitlist confirmation, updates)
• Data shared: Email address
• Privacy: Subject to Resend's Privacy Policy

Vercel Analytics

• Purpose: Website visitor analytics
• Data shared: Page views, anonymous usage data
• Privacy: Subject to Vercel's Privacy Policy

Data Storage and Security

Local Storage

• Route history is stored locally on your device
• Data is protected by iOS device encryption
• We do not use iCloud sync or cloud backup for app data

Data Retention

Security Measures

• All network communications use HTTPS/TLS encryption
• Location permissions follow iOS security model
• No sensitive data stored in plain text
• Session replay masks all text inputs

Your Rights and Controls

Location Permissions

You control location access through iOS Settings:

• While Using: Required for route generation
• Always: Optional, enables background navigation
• Never: App will have limited functionality

To change: Settings > Privacy & Security > Location Services > RØUT

Delete Your Data

• Clear route history: Available in app settings
• Reset analytics ID: Reinstall the app
• Request data deletion: Contact us at the email below

Your Rights Under GDPR (EU Users)

• Access: Request a copy of your data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Portability: Export your routes as GPX files
• Object: Opt out of analytics (contact us)

Your Rights Under CCPA (California Users)

• Know: What personal information is collected
• Delete: Request deletion of your data
• Non-discrimination: Equal service regardless of privacy choices

International Data Transfers

Your data may be processed in:

• United States: Route generation backend
• European Union: Analytics processing (PostHog)

Where data is transferred outside your region, we ensure appropriate safeguards are in place, including Standard Contractual Clauses where applicable.

Children's Privacy

RØUT is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, the “Last Updated” date will be revised and material changes will be communicated via App Store update notes. Continued use of the Service constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact:

David Capp

Email: inforoutrun@gmail.com

We aim to respond to all privacy inquiries within 30 days.