Brick Run 개인정보 처리방침 · Privacy Policy

Controller: Dendrove

• Regulatory & Legal (DPO): dpo@dendrove.com
• General privacy inquiries / data rights: privacy@dendrove.com
• Customer support: support@dendrove.com

This policy applies to the Brick Run app (“App”). Additional rules for health and precise-location data are embedded throughout and in the HealthKit/Health Connect annex.

Summary

• We collect the minimum data needed to provide features (run logging/analysis), operate accounts securely, comply with laws, and support users (data minimization).
• Sensitive data (health) and precise location (GPS routes) are used only for features and analytics—not for ad targeting, sale, or third-party marketing.
• You may exercise access, rectification, deletion, restriction, portability, and withdrawal of consent at any time, and lodge a complaint with a supervisory authority.

1. Data We Collect

• Account/Profile: name, email, profile image, Google UID/ID token via Google Sign-In; login logs (timestamps, partial IP)
• Running/Health Data (with your consent):
  • Precise location / GPS routes, distance, speed/pace, elevation, workout time, cadence (if available)
  • Heart rate and derived metrics (if available)
  • Body metrics: height, weight, date of birth, gender (for performance metrics/personalization)
• Device/App Info: device model, OS/app version, language/timezone, crash/error logs
• Advertising IDs: AAID/IDFA, coarse IP, AdMob SDK impression/click events (personalization is consent-based)

2. Purposes & Legal Bases (GDPR)

• Create/manage accounts, authenticate and control access: contract necessity
• Store workouts, provide stats/charts, personalized analysis: contract necessity and, where applicable, consent
• App stability, security, fraud prevention (logs): legitimate interests
• Customer support: contract necessity / legitimate interests
• In-app ads and measurement (AdMob): consent
• Legal compliance and dispute handling: legal obligation
• Processing of sensitive (health) and precise-location data: explicit consent

3. Handling of Sensitive & Precise Location Data

• Processed strictly to the minimum extent for features and analytics (purpose limitation).
• Never used/provided for ad targeting, sale, or third-party marketing.
• Upon withdrawal of consent, we stop new processing (subject to statutory retention).
• When you delete data, raw GPS traces and raw health data are erased; aggregated/de-identified statistics may be retained for service quality.

4. Sharing & Processors

• Auth: Google Sign-In (Google)
• Ads: Google AdMob
• Analytics/Logs (optional): Firebase Analytics/Crashlytics
• Disclosures may occur when required by law or for disputes/investigations.

Third parties operate under their own privacy policies. We do not provide health/precise-location data for advertising.

5. Retention

• Account & workouts: retained until you request deletion (indefinite). Certain records may be retained as required by law or for dispute handling.
• Logs/ad metrics: retained briefly for technical/legal needs, then aggregated/anonymous or deleted.

6. Your Rights & How to Exercise

• Rights: access, rectification, deletion, restriction, portability, withdrawal of consent, object to certain processing
• How: in-app Settings > Privacy/Account, or privacy@dendrove.com (rights & general privacy), and dpo@dendrove.com for regulatory/legal matters.
• Complaints: you may lodge a complaint with your local supervisory authority (e.g., Korea PIPC or your EEA/UK authority).

7. Ads & Personalization

• We use AdMob but do not use health or precise location data for ad targeting.
• You can manage ad personalization/tracking in your device OS/app settings.
• (California) We do not sell or share personal information for cross-context behavioral advertising. You may request to limit the use of sensitive personal information by contacting us (use subject: [CCPA Request]).

8. Security

• TLS in transit, encryption at rest (where applicable), access controls/least privilege, anomaly monitoring
• We will notify you of breaches as required by law.

9. International Transfers

Where applicable, we rely on adequacy decisions, Standard Contractual Clauses (SCCs), and supplementary measures.

10. Children

The App is not directed to children under 13 (or a higher local age). We do not knowingly collect children’s health/precise-location data.

11. Automated Decision-Making

We do not engage in automated decisions producing legal or similarly significant effects.

12. Regional Notices (Brief)

• EEA/UK (GDPR/UK GDPR): see Section 2 for legal bases. You may lodge complaints with your supervisory authority. Where legally required, we will appoint and disclose our EU/UK representative here.
• California (CCPA/CPRA): We do not sell or share personal information. You may request to know/delete/correct/limit sensitive data.
• Republic of Korea (PIPA): Data subject rights available; cross-border transfer safeguards will be disclosed where applicable.

13. Contact & Deletion

Use in-app Settings > Delete Account (if available) or privacy@dendrove.com. For general help contact support@dendrove.com; for regulatory/legal communications contact dpo@dendrove.com. Data will be erased except where retention is required by law.

14. Changes

We will announce changes via in-app notice or by updating the “Effective Date”.

Annex: HealthKit / Health Connect Notice

• Apple HealthKit: health data is used only for features/personalization; not for ads/marketing/sale/sharing. You can change permissions in iOS Settings.
• Android Health Connect: accessed health data is used only to provide services; not for ad targeting. You can manage permissions in Android Settings.