Runmon privacy policy & terms

Effective 30 September 2026 · Back to Runmon

In short. Runmon reads the runs you record on Strava, with your permission, to feed a virtual pet. It keeps each run's details for seven days, then only the XP it earned. Other players see your pet, never your runs. Nothing is sold, advertised with, or put through any AI. Disconnect and your runs are deleted at once and everything else within four weeks.

Privacy policy

Who runs Runmon

Runmon is a free game made and run by one person in Singapore, for a small group of players. In this policy "Runmon", "I" and "me" mean that person, who decides how your data is used and is responsible for it (the "controller" under the GDPR and UK GDPR, and the organisation under Singapore's Personal Data Protection Act 2012). Contact: ryancgq@gmail.com.

Runmon is not made, endorsed or sponsored by Strava. It connects to Strava through Strava's public API. Strava's own privacy policy governs what Strava does with your data, and where this policy and Strava's conflict, Strava's controls.

What Runmon collects

What	Where it comes from	Why
Your Strava athlete ID, and the access tokens Strava issues	Strava, when you connect	To read your runs, and to file your pet under your account so it follows you to a new phone
For each run or trail run you record after connecting: when it started, distance, moving time, elevation gain, activity type, whether it was entered by hand, the device that recorded it, and Strava's ID for it	Strava's API, read-only (`activity:read`), each time you open Runmon	To turn your runs into XP for your pet, show you the run, and not count it twice
Your pet: its name, species, level, XP, badges, mood, streak, battles and raid swings, your friend code, and your settings (units, body weight for the calorie estimate)	You, and the game	To run the game
A record that you were shown this information and when	The app	To show your consent

Runmon does not collect your name, email, photo, location or GPS routes from Strava, and cannot see activities you keep to "Only You". It uses no cookies, analytics, trackers or advertising. When you email me, I have your email address and what you wrote, and use it only to answer you.

How long it is kept

What	How long
Each run's details (time, distance, pace, device) and its Strava ID	Seven days, on Runmon's server and on your phone. Then the run is folded into your pet: the XP it earned, the run count and your streak and mood carry on; the details are deleted.
A run you delete on Strava, or make "Only You"	Removed from Runmon within 48 hours of Strava telling Runmon.
Your tokens	Until you disconnect, when they are revoked with Strava and deleted.
Your pet and game data	While you are connected. After you disconnect, four weeks in case you come back, then erased from the server and, the next time you open the app, from your phone.
A pet you delete	Kept four weeks in case it was a mistake (email me to have it put back), then erased.
Nightly backups (pet name, species, level and XP only — no runs, no distances)	Fourteen days. When a player is erased they are removed from every backup at the same time.

Who sees what

You see everything about your own pet and your runs from the last seven days.
Other players see your pet's name, species, form, level, streak, best streak and badge count, any attack penalty on it, and any "Runmon firsts" race it won. They never see your runs, distances, times, dates, XP or Strava profile.
Me, as the admin, can see each pet's name, level, XP and whether it is connected, to keep the game running and to restore a pet that was lost. The admin view shows no runs or distances.
Nobody else. Your data is never sold, rented, shared with advertisers or data brokers, or used for analytics, and it is never put into any artificial-intelligence system, including for training.

Service providers

Runmon uses these to run, and they process data only to provide their service:

Cloudflare (Workers and Durable Objects) — runs Runmon's server and stores the data above. It sees your IP address as any website host does.
GitHub Pages — serves the app's files. It sees your IP address as any website host does.
Strava — the source of your runs.

These providers may process data outside Singapore and outside your own country, including in the United States, under their own data-protection terms.

Strava's usage data. Strava may monitor and collect data about how Runmon uses Strava's API, and may use it for any business purpose, including improving its services, providing support, and checking that Runmon complies with Strava's terms.

Why Runmon is allowed to use it

Your consent, which you give by connecting Strava after being told what is collected (GDPR Art. 6(1)(a); PDPA consent obligation). You can withdraw it at any time by disconnecting. Keeping the game running and secure once you have joined relies on Runmon's legitimate interest in doing so (GDPR Art. 6(1)(f)).

Your rights, and how to use them

See your data — Settings → Download my data gives you everything your phone holds (the server holds the same save). Email me for anything else.
Stop — Settings → Disconnect, or remove Runmon at strava.com/settings/apps. Your runs are deleted at once; the rest within four weeks.
Delete — Settings → Delete my pet, or email me to have everything about you erased straight away. I will confirm by email when it is done.
Correct, object, or move your data — email me.
Complain — to me first, please; and you can always go to Singapore's Personal Data Protection Commission, or the data-protection authority where you live.

I answer requests within 30 days, and usually much sooner.

Security

Everything travels over HTTPS. Strava tokens stay on the server and never reach your phone; your phone holds a signed session instead. The admin view is password-protected and locks out repeated wrong guesses. If there is ever a breach affecting your data, I will tell you and the authorities as the law requires, and Strava within 24 hours.

Children

Runmon is not meant for anyone under 13, and Strava's own age rules apply to connecting.

Changes

If this policy changes, the app will say so. If Runmon ever wants to collect something new from Strava, it will ask you first.

Terms of use

The game. Runmon is free, for fun, and offered as it is. There is no charge for anything in it.
Strava. Using Runmon with Strava is also subject to Strava's terms of service. Runmon is not affiliated with Strava.
Play fair. Don't try to cheat, break, overload or get into parts of Runmon that aren't yours, or use it to harass other players. I may remove a player who does.
Look after yourself. Runmon is a game, not training or medical advice. Run safely, and within your limits.
No warranties. To the extent the law allows, Runmon and its third-party service providers (including Strava, Cloudflare and GitHub) provide it "as is" and disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose and non-infringement.
Limits of liability. To the extent the law allows, neither Runmon nor its third-party service providers are liable for any indirect, consequential, special or punitive damages, or for lost data, arising from your use of Runmon.
Ending. You can stop at any time by disconnecting or deleting your pet. Runmon may end or change the game; if it stops using Strava, it will tell you and delete what it holds.
Law. These terms are governed by the laws of Singapore.

Contact

Questions, problems, or requests about your data: ryancgq@gmail.com.