This privacy policy applies to the Run Story app (hereby referred to as "Application") for mobile devices that was created by Finish Line Labs, LLC (hereby referred to as "Service Provider") as a Free service. This service is intended for use "AS IS".

The Application does not directly collect personally identifiable information. To function, it relies on the following:

• Strava account connection. You authenticate with your Strava account using Strava's OAuth. The Application receives an access token and uses it to fetch your activity data (distance, time, route, photos, etc.) from Strava on your behalf. Activity data is cached locally on your device so the Application can display it offline.
• Strava webhook. The Application uses a small webhook service that listens for activity-update notifications from Strava (for example, when you upload a new activity or add a photo). The webhook stores the notification payload (a minimal record identifying which activity changed) only long enough for the Application to fetch it. Once the Application retrieves the notification, the record is deleted from the server. No activity content is stored server-side — only the change notification itself, and only temporarily.
• Advertising. The Application displays banner ads via Google AdMob. AdMob may collect device identifiers and ad-interaction data in accordance with Google's privacy policy.
• Analytics. The Application uses Google Firebase Analytics to record anonymous, aggregate usage events (for example, which features are used) to help improve the Application.
• Maps. The Application renders maps using the Google Maps SDK. Standard device and request information may be transmitted to Google in accordance with Google's privacy policy.
• Notifications. If you opt in to the weekly summary notification, the Application schedules a local notification on your device. No notification content is sent through a remote server.

This Application does not access your device's location services or collect real-time location data. The only location information the Application sees is whatever is already attached to your Strava activities (which you control through Strava).

On supported iOS devices, the Application offers an optional Augmented Reality (AR) feature that overlays your run statistics on a live camera view. This AR feature uses Apple's ARKit framework, which on devices equipped with the TrueDepth camera may access face-tracking information (face geometry and depth data) to position the AR overlay correctly in front of you.

What is collected: Face geometry and depth data provided by ARKit while the AR camera view is active.

Purpose: Used solely to position and render the AR stats overlay on the live camera image during the AR session. The data is never used to identify a user, build a profile, train any model, or for any purpose other than rendering the AR overlay.

Where it is stored / shared: Face data is processed entirely on your device, in memory, only while the AR session is running. It is never saved to disk, never transmitted off the device, never sent to the Service Provider's servers, and never shared with any third party (including Strava, Google AdMob, Google Firebase, or Google Maps). When the AR session ends, the face data is discarded.

Retention: Zero. No face data persists beyond the active AR session.

The Application relies on the following third-party services, each governed by its own privacy policy:

• Strava (account authentication and activity data)
• Google AdMob (advertising)
• Google Firebase Analytics (anonymous usage analytics)
• Google Maps Platform (map rendering)

No user data is sold, rented, or shared with any other third party.

You can stop all collection of information by the Application by uninstalling it through the standard uninstall process on your mobile device or via the mobile application marketplace. You can also revoke the Application's access to your Strava account at any time from Strava's "My Apps" settings.

The Application is not used to knowingly solicit data from or market to children under the age of 13.

The Service Provider does not knowingly collect personally identifiable information from children. The Service Provider encourages all children to never submit any personally identifiable information through the Application and/or Services. The Service Provider encourage parents and legal guardians to monitor their children's Internet usage and to help enforce this Policy by instructing their children never to provide personally identifiable information through the Application and/or Services without their permission. If you have reason to believe that a child has provided personally identifiable information to the Service Provider through the Application and/or Services, please contact the Service Provider (mike@finishlinelabs.info) so that they will be able to take the necessary actions. You must also be at least 16 years of age to consent to the processing of your personally identifiable information in your country (in some countries we may allow your parent or guardian to do so on your behalf).

The Service Provider takes reasonable steps to safeguard the confidentiality of the limited data the Application handles. Authentication tokens are stored using encrypted storage on your device. The webhook service retains data only for the brief window required to deliver an update notification to your device, after which the record is deleted.

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to their Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.

This privacy policy is effective as of 2026-05-22

By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by the Service Provider.

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider:

Finish Line Labs, LLC
Email: mike@finishlinelabs.info