গোপনীয়তা নীতি

Dourabo (“we”, “our”, or “us”) is operated by Nerddevs. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information when you use the Dourabo mobile application, its Apple Watch and Wear OS companion apps, and the website (together, the “Service”).

By using the Service, you agree to the collection and use of information as described in this policy.

1. Information We Collect

1.1 Account information

When you create an account, we collect:

• Email address
• Display name
• Profile photo (if signing in with Google, or if you upload one)
• Authentication method (Google or email/password)

1.2 Optional profile details

You may choose to add more to your runner profile. All of these are optional, and you can edit or remove them at any time:

• Name in Bangla, phone number, and a short bio
• Home city or district (used for “new race in my city” alerts)
• Date of birth, T-shirt size, and blood group
• The year you started running and your personal best times

1.3 Events and activity in the Service

• Events you save or track and their statuses (Planning to Register, Registered, Completed)
• The race distance you registered for
• Reminder and notification preferences
• App settings such as theme and language

1.4 Runs you record

When you record a race or a practice run, we store the route, distance, time, pace, splits, pauses, and, if available, heart rate and calories burned. See Section 4 — Location and run tracking and Section 5 — Heart rate and health data.

1.5 Content you submit

• Archive uploads — race certificates and photos you add to a completed event.
• Event submissions — details and banner images of events you submit for listing. Once approved, the event information is shown publicly.
• Event reports — the reason and message you send when you report a problem with an event.
• Bug reports and support requests — your description, any screenshots you attach, and basic technical context (app version, platform, device model, and the screen you were on).

1.6 Device information

To deliver notifications, we store a push notification token for each device you sign in on, the device platform (Android, iOS, or web), and your time zone, which we use to send reminders and digests at a sensible local time. When you link a smartwatch, we store a device record and a token that lets the watch sync with your account.

1.7 Analytics

The mobile app uses Firebase Analytics to understand how features are used (for example, which screens are opened and whether tracking starts successfully). This data is used only to improve the Service. It does not include your route or heart rate, and we do not use it for advertising.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and runner profile
• Display and sync your tracked events across your devices
• Record and show your runs, including route, distance, pace, time, and heart rate
• Give spoken distance and pace updates during a run, if you turn them on
• Schedule and deliver reminders, event updates, and announcements
• Store and display your archive uploads
• Review event submissions, event reports, and bug reports, and reply to you about them
• Maintain the security and integrity of the Service
• Comply with legal obligations

3. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties.

We never use your location or health data for advertising, and we never share it with advertisers, data brokers, or insurers.

We share information only in the following circumstances:

3.1 Service providers

We rely on a small number of trusted third-party providers to operate the Service. They act only on our instructions, may use your data solely to provide their service to us, and are contractually obligated to protect it. These fall into the following categories:

• Authentication (Firebase Authentication) — to verify your identity when you sign in.
• Push notification delivery (Firebase Cloud Messaging) — to send reminders and announcements to your device.
• App analytics (Firebase Analytics) — to measure feature usage.
• Hosting, storage, and database infrastructure — to run our servers and store your account data, tracked events, runs, and uploaded media.
• Map tiles (OpenStreetMap) — to draw maps. Your device requests map images for the area being shown; your account details are not sent.

3.2 Public content

Events you submit are shown publicly once approved. Your runs, heart rate, profile details, reports, and archive are private to your account.

3.3 Legal requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities such as a court or government agency.

3.4 Business transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

4. Location and Run Tracking

Run tracking is optional. It runs only when you explicitly start tracking a race or a practice run on your phone or watch, and it stops when you finish or discard the session.

4.1 What we collect

While a run is being tracked, we collect precise GPS coordinates at regular intervals to build your route and calculate live distance, pace, and elapsed time. These coordinates are stored with the run on your account so you can review your route afterwards. To keep distances accurate, our servers filter out inaccurate GPS points before calculating your statistics.

4.2 Background collection

Races are long, and runners typically keep the phone in a pocket or armband. So that your run is not lost, Dourabo continues to record your location in the background — with the screen off or the app closed — for the duration of an active run. On Android, a persistent notification remains visible the entire time location is being recorded. On iOS, the system location indicator is shown. On Apple Watch, recording runs as a workout session.

Before we request location permission, the app shows a disclosure explaining this background collection. You may decline, in which case run tracking will not start.

4.3 Limits on use

• Location is collected only during an active run, never otherwise.
• Location is used only to record your route and running statistics.
• Location data is never sold, shared for advertising, or used to profile you.

Outside of an active run, we do not collect device location. Filtering events by city or district is based only on selections you make manually.

4.4 Your control

You can revoke location permission at any time in your device settings. Doing so disables run tracking but does not affect your account, tracked events, or any other feature. You can delete a recorded run, together with its route and heart rate data, from the app, or delete your account (see Section 6).

5. Heart Rate and Health Data

If you record a run on a smartwatch, Dourabo can show and save your heart rate. This is optional and requires your permission.

5.1 What we collect

• Apple Watch — with your permission, Dourabo reads heart rate, walking/running distance and active energy (calories) from Apple HealthKit while a run is being recorded.
• Wear OS — with your permission (body sensors), Dourabo reads heart rate from the watch’s sensors through Health Services while a run is being recorded. With the separate physical activity permission, it also reads the calories the watch counts.

Heart rate is read only during an active run. The readings are stored with that run on your account so you can see your average and maximum heart rate.

Calories

A run shows the calories burned: the figure your watch measured, or otherwise an estimate from the run and your profile. The estimate needs your weight, and uses your gender and date of birth when the run has heart rate. All three are optional fields on your profile, are never shown to anyone else, and are used only for this. Without a weight, runs show no calories rather than a guess, and you can change or clear these fields at any time.

5.2 Saving to Apple Health

On Apple Watch, a finished run is saved to Apple Health as a running workout, including its route, so it appears alongside your other workouts. You can manage or remove this access at any time in the Health app or in Settings.

5.3 Limits on use

• Health data is used only to show your heart rate and run statistics.
• Health data is never used for advertising or marketing, never sold, and never shared with third parties, including advertisers, data brokers, and insurers.
• Data obtained from Apple HealthKit is not stored in iCloud by us.
• Dourabo is not a medical device, and heart rate readings are not medical advice.

5.4 Your control

You can decline or revoke heart rate access at any time in your watch’s settings (or, on iPhone, in the Health app). Run tracking keeps working without it. Deleting a run or your account deletes the heart rate data we stored with it.

6. Data Retention and Deletion

We retain your account information, tracked events, and recorded runs for as long as your account is active. Uploaded media is retained until you delete it or delete your account.

You can delete your account at any time from within the app. This permanently deletes your profile, tracked events, recorded runs (including route and heart rate data), practice runs, archive uploads, linked watches, event and bug reports, and your sign-in account. Events you submitted that were approved and published stay listed, but are no longer linked to you.

You can also request deletion by contacting us at the address below. We will process deletion requests within 30 days. Server backups are overwritten on a rolling basis.

7. Security

We implement industry-standard measures to protect your data, including HTTPS encryption for all data in transit, secure token-based authentication, private storage for uploaded files, and role-based access controls on our backend.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

8. Children’s Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly. If you believe we may have collected such information, please contact us.

9. Your Rights

You may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — edit your profile in the app, or ask us to correct data
• Deletion — delete runs or your whole account in the app, or ask us to
• Withdrawal of consent — withdraw consent for location, heart rate, or push notifications at any time through your device settings

To exercise any of these rights, contact us at the address below.

10. Push Notifications

The Service uses push notifications for reminders about events you track, updates to those events, new races in your city, replies to your reports, and occasional announcements. You can turn individual alerts off in the app’s settings, or disable all notifications in your device’s settings. Disabling notifications does not affect your account or tracked events.

11. Third-Party Links

Event pages may include links to external registration and organizer websites operated by third parties. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the date at the top of this page or by sending a notification through the Service. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Nerddevs
Email: [email protected]