Privacy Policy
1. Who we are
DemetRUN (the “App”) is a running and walking game for iPhone. This Privacy Policy explains what personal data we process, why, and the rights you have under the EU General Data Protection Regulation (GDPR).
The data controller is Maryna Yankevych, a self-employed individual registered in Cyprus. Contact: support@demetrun.com.
2. Summary
- Apple Health data is processed on your phone. Raw Health data — sleep, heart rate, steps, workouts with their times, durations and distances — never leaves your device.
- The cloud is optional. Backup, friends and sign-in work only if you turn on the cloud. Without it, the whole game runs on your phone.
- Where data is stored. Our servers and database are in Germany, Finland and France.
- No ads, no tracking, no selling of data. Health data is never used for advertising or marketing and never shared with third parties for those purposes.
- Usage statistics only with your consent, and never with Health values.
- This website sets no cookies, runs no tracking script and loads nothing from third parties. To know which pages are useful, we read our own web-server log, in which IP addresses are truncated before they are written (Section 12).
3. Apple Health
With your permission, the App reads the following from Apple Health: workouts (including distance, duration, pace and elevation), heart rate, resting heart rate, sleep, steps, walking and running distance, active energy and flights climbed. It does not write anything to Apple Health.
These values are used only on your device to run the game: to turn your runs or steps into in-game energy, to work out your recovery (the farm's weather) and how fast your crops grow. The App keeps the resulting game state in its local storage on the phone; it is not synced to iCloud.
Only game results derived from Health can leave your phone — in the farm backup and the farm snapshot your friends see (Section 4), and only if you turn on the cloud. Raw Health values never do. Health data is never used for advertising, marketing or profiling, never sold, and never sent to analytics, crash-reporting or subscription providers.
You can change Health permissions at any time in the iPhone Settings → Health → Data Access & Devices → DemetRUN.
4. What data we process, and why
| Data | Examples | Purpose | Lawful basis |
|---|---|---|---|
| Account (cloud on) | A random account identifier, your farm code and farm name. If you sign in: your email, or the identifier Apple or Google gives us (with the email they share), and for Sign in with Apple a token used only to revoke the link when you delete your account | Keep your farm and friends tied to you; let you sign in on a new phone | Contract (Art. 6(1)(b)) |
| Farm backup (cloud on) | A snapshot of the game state: energy, coins, pantry, seeds, plots, buildings, level, album, eggs; per-week game scores (effort points, share of your weekly norm, league); total climb; this week's runs only as run type, effort points and energy earned; how many good nights this week. No raw Health data — no sleep, heart rate, steps, or workout times, durations or distances — and no HealthKit identifiers | Restore your farm on a new phone. Because the scores are derived from your workouts and recovery, we treat the backup as health data | Your explicit consent (Art. 6(1)(a), Art. 9(2)(a)) |
| Friends (cloud on) | Who you follow; a snapshot of your farm that friends see (farm name, your hen's name, crops, buildings, league); waterings and crows between farms | The social features you choose to use | Contract; the snapshot is part of the consent above |
| Email sign-in codes | Your email address and a one-time code, stored only as a hash and valid for 10 minutes | Sign you in with email | Contract |
| Subscription (from the version that introduces DemetRUN+) | Your account identifier, product, subscription status and expiry | Unlock what you paid for | Contract |
| Usage statistics (only with your consent) | Which screens and game actions are used, app version, device type; linked to a pseudonymous identifier. No Health values | Understand what works and improve the game | Consent (Art. 6(1)(a)) |
| Diagnostics | Crash reports and error events with a pseudonymous identifier, app version and device model | Find and fix bugs | Legitimate interest (Art. 6(1)(f)) |
| Support email | What you write to us | Answer you | Legitimate interest |
| Website visits | A standard web-server log of each request to demetrun.com: page requested, time, referring page, browser type, a campaign tag from the link you followed (for example “tiktok”), and a truncated IP address (the last part is discarded before writing, so the full address is never stored) | See which pages people find useful and which links lead to the App Store | Legitimate interest (Art. 6(1)(f)) |
We do not make automated decisions about you that produce legal or similarly significant effects (Art. 22). The App gives game hints about load and recovery; they are not medical advice.
5. Your choices in the App
Shortly after you start your farm, the App asks you separately about (a) the cloud — backup and friends — and (b) usage statistics. Both are off unless you agree. You can change either at any time in Settings → Account. Turning the cloud off stops sending anything to our servers; deleting what is already there is a separate button (Section 9).
A demo mode (“Try with an example”) fills the farm with made-up runs without reading Health; nothing from it is sent to us.
6. Processors and other recipients
We use the following processors. Each is bound by a Data Processing Agreement.
| Processor | Role | Location | Transfer safeguard |
|---|---|---|---|
| Hetzner Online GmbH | Servers (API, this website, self-hosted crash reporting) | Germany / Finland (EU) | Within the EU |
| Scaleway SAS | Managed database; sending email sign-in codes | France (EU) | Within the EU |
| PostHog Inc. (EU Cloud) | Usage statistics, only with your consent | Data stored in the EU (Frankfurt, Germany) | EU hosting; Standard Contractual Clauses for any access from the US |
| RevenueCat, Inc. | Subscription management (from the version that introduces DemetRUN+) | United States | Standard Contractual Clauses |
Crash reports go to GlitchTip, which we run ourselves on our servers in the EU; no third party receives them.
Apple distributes the App, provides Apple Health and Sign in with Apple, and processes payments; for these it acts as an independent controller under its own privacy policy. Google acts as an independent controller when you choose “Sign in with Google”; we receive only your Google account identifier and email.
Your friends see the farm snapshot described in Section 4 once they have your farm code.
7. International transfers
Your data is stored in the EU. The only transfer outside the EU is to RevenueCat (United States), once subscriptions are available, limited to your account identifier and subscription state and protected by Standard Contractual Clauses. Contact us for a copy of the safeguards.
8. Retention
- Account, farm backup and friends data: kept while your account exists; deleted immediately when you delete the account.
- Email sign-in codes: valid for 10 minutes, stored only as a hash.
- Usage statistics: up to 12 months.
- Crash reports: up to 90 days.
- Website visit log: up to 14 days, then deleted automatically. We may keep daily totals (visits per page, per referring site, per campaign) that contain no IP address and cannot identify anyone.
- Database backups: a rolling window of up to 7 days; deleted data disappears from backups as the window rolls over.
- On your phone: the game stays until you delete the App.
9. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict and object to the processing of your data, to data portability, and to withdraw consent at any time without affecting processing already done. In the App:
- Export: Settings → Account → Export my data — a file with everything we hold about you.
- Delete: Settings → Account → Delete account — erases your account and everything on our servers at once, and revokes Sign in with Apple.
- Withdraw consent: turn off the cloud or statistics in Settings → Account.
Deleting your account does not cancel an App Store subscription — manage that in your Apple ID settings. For anything else, write to support@demetrun.com; we answer within one month. You also have the right to lodge a complaint with a data protection supervisory authority — in your country, or in Cyprus: the Office of the Commissioner for Personal Data Protection, dataprotection.gov.cy.
10. Children
The App is not directed at children under 13. The cloud features (account, backup, friends) and usage statistics are for users aged 16 or older; younger players can play on the phone only, or with the consent of a parent where local law allows. If you believe a child has given us data, contact us and we will delete it.
11. Security
Encryption in transit (TLS) everywhere; the database is encrypted at rest; refresh tokens and sign-in codes are stored only as hashes; short-lived access tokens; rate limits on sign-in. No system is perfectly secure, but we keep what we hold to the minimum.
12. This website
demetrun.com sets no cookies, runs no tracking scripts and loads nothing from third parties — there is no cookie banner because there is nothing to consent to. Our web server writes a log of requests (Section 4) with the IP address truncated before it reaches the disk; the log stays on our server, is not sent to any analytics provider and is deleted after 14 days. Links like demetrun.com/go/tt only add a campaign tag and send you on to the App Store, so we can tell which channel brought you there; App Store Connect then shows us totals, never who you are. You email us only if you choose to.
13. Changes
We may update this policy. Material changes will be announced in the App. The “Last updated” date above always shows the current version.
14. Contact
Maryna Yankevych, a self-employed individual registered in Cyprus
support@demetrun.com