Privacy Policy

This Privacy Policy describes how OB Labs LLC (“OB Labs,” “we,” “us,” or “our”) collects, uses, and shares information in connection with the Cinder Run mobile application for iOS (the “App”) and the website at oblabs.co/cinder. By installing or using the App, you agree to this Privacy Policy.

1. Summary

Cinder stores your training profile, running plan, completed runs, and reflections only on your iPhone. GPS routes, pace, cadence, and heart-rate samples used during runs are processed on your device to coach you and are not uploaded to OB Labs servers. Optional Apple Health sync (Pro) writes completed workouts to Apple Health on your device and reads heart rate when you grant permission.

In short: we built Cinder Run to do its job on your iPhone. We do not operate servers that store your content, we do not sell or rent your personal information, we do not run third-party advertising inside the App, and we do not require you to create an account.

2. Information we collect

2.1 Information stored only on your device

The following categories of information are created and stored only on your iPhone. We do not receive or store this information on our servers:

• training profile and assessment answers
• your adaptive running plan and session history
• GPS-derived distance, pace, cadence, and run reflections
• coaching preferences and notification settings
• your Pro unlock entitlement

2.2 Information transmitted off your device

The App transmits the following limited information off your device, only as necessary to operate, secure, and improve it:

• purchase events sent to RevenueCat and Apple when you buy or restore the Pro unlock
• anonymous Apple Search Ads attribution signals required by Apple's advertising framework

2.3 System permissions

The App requests the following iOS system permissions. You may grant or revoke these at any time in the iOS Settings app.

• Location — When In Use & Always (NSLocationWhenInUseUsageDescription, NSLocationAlwaysAndWhenInUseUsageDescription). Cinder tracks outdoor runs by GPS to measure distance and pace, and continues tracking when your screen is off during an active run if you grant Always location.
• Motion & Fitness (NSMotionUsageDescription). Cinder reads running cadence from your iPhone to coach your stride.
• Apple Health (NSHealthShareUsageDescription, NSHealthUpdateUsageDescription). With Pro, Cinder can save completed runs to Apple Health and read heart rate during runs when your Watch or strap records it.
• Notifications (NSUserNotificationsUsageDescription). Cinder can send optional local reminders on run days and a gentle evening skip nudge — scheduled on your device, not from our servers.

2.4 Information you choose to share

If you contact us for support or to exercise a privacy right, we will receive the contents of your message and any information you choose to include (for example, your email address and a description of your issue). We use that information only to respond.

3. How we use information

We use the limited information described above to:

• provide and operate the App and its features;
• process your Pro unlock purchase and verify your entitlement when you install the App on a new device or reinstall it;
• measure the effectiveness of our advertising in a privacy-preserving way, using Apple's frameworks that do not identify you to us;
• detect, investigate, and prevent abuse, fraud, or violations of our Terms; and
• comply with applicable law and respond to lawful requests from authorities.

We do not use your information to build advertising profiles, and we do not allow third parties to do so through the App.

4. How we share information

We share information only with the limited categories of recipients described below. We do not sell or rent personal information.

4.1 Service providers

We rely on the following service providers to operate the App. Each is bound to use the data we share only to provide services to us:

• Apple Inc. (App Store) — distributing the app, processing payments, and providing crash analytics if you opt in at the iOS level. Data shared: whatever you've consented to share with Apple at the system level; we do not receive your Apple ID, payment details, or precise device identifiers. See their privacy policy at https://www.apple.com/legal/privacy/.
• RevenueCat, Inc. — in-app purchase processing, entitlement management, and anonymized purchase analytics. Data shared: an anonymous app-user identifier (not your name, email, or Apple ID), purchase events, and your device's country and language. See their privacy policy at https://www.revenuecat.com/privacy/.
• Apple Inc. (Apple Search Ads) — measurement of advertising effectiveness using Apple's privacy-preserving AdAttributionKit / SKAdNetwork frameworks. Data shared: aggregated, non-identifying conversion signals that cannot be tied to a specific person; no IDFA or contact information is shared by us. See their privacy policy at https://searchads.apple.com/privacy.

4.2 Legal and safety

We may disclose information when we have a good-faith belief that disclosure is required by law or legal process, necessary to enforce our Terms, or necessary to protect the rights, property, or safety of OB Labs, our users, or the public.

4.3 Business transfers

If OB Labs is involved in a merger, acquisition, financing, or sale of assets, information held by us may be transferred as part of that transaction, subject to confidentiality obligations and applicable law.

5. Data retention

Content you create in the App — for example, your training profile, running plans, completed runs, reflections, and coaching preferences — is stored on your device and remains there until you delete it or uninstall the App. When you uninstall the App, iOS deletes the App's local data.

We retain purchase records for as long as necessary to administer your Pro unlock, comply with tax and accounting obligations, and resolve disputes. Aggregate, non-identifying advertising-measurement data may be retained indefinitely.

6. Children

The App is not directed to children under 13 and we do not knowingly collect personal information from children under 13. If you believe that a child has provided personal information to us, please contact us at privacy@oblabs.co and we will take appropriate steps to delete it.

7. Security

We design the App to minimize the information that leaves your device, which is the strongest security measure we can take on your behalf. For the limited information that is transmitted (described in Section 2.2), we use industry-standard transport encryption. No system is perfectly secure, however, and we cannot guarantee the security of information transmitted over the internet.

8. International users

We operate from Texas, United States. If you access the App from outside the United States, you understand that information transmitted off your device (as described in Section 2.2) may be processed in the United States, which may have data-protection laws different from those in your country. Where required by law, we rely on appropriate safeguards (such as standard contractual clauses) for any international transfer.

9. Your rights

Depending on where you live, you may have the following rights with respect to personal information we hold about you. To exercise any of these rights, contact us at privacy@oblabs.co. We will respond within the time required by applicable law.

• Access and portability. You may request a copy of the personal information we hold about you in a portable format.
• Correction. You may request that we correct inaccurate personal information.
• Deletion. You may request that we delete personal information we hold about you, subject to legal exceptions. Note that content stored only on your device (Section 2.1) is under your control and we cannot delete it remotely.
• Objection and restriction. You may object to or request that we restrict certain processing.
• Opt out of sale or sharing. OB Labs does not sell personal information and does not share it for cross-context behavioral advertising, as those terms are defined under California, Colorado, Connecticut, Virginia, Utah, and similar state laws. You therefore have nothing to opt out of in this regard.
• Withdraw consent. Where we rely on your consent for processing, you may withdraw it at any time.
• Complaints. If you are in the European Economic Area, the United Kingdom, or another jurisdiction with a data- protection authority, you have the right to lodge a complaint with your local authority.

We will not discriminate against you for exercising any of these rights.

10. California privacy notice

For purposes of the California Consumer Privacy Act (as amended by the California Privacy Rights Act, the “CCPA”), the categories of personal information we collect, the sources of that information, and the purposes for which we use it are described in Sections 2 and 3 above. We do not “sell” or “share” personal information as those terms are defined under the CCPA, and we do not use or disclose sensitive personal information for purposes other than those permitted under Section 7027 of the CCPA regulations.

11. Do Not Track

We do not respond to “Do Not Track” browser signals because the App does not track users across third-party websites or services.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Effective” date at the top of this page and, if the changes are material, we will provide additional notice through the App or by email if you have contacted us.

13. Contact us

Questions about this Privacy Policy, or requests to exercise any of the rights described above, may be sent to:

OB Labs LLC
Attn: Privacy
5600 W Lovers Ln, Ste 116-276, Dallas, TX 75209
Email: privacy@oblabs.co