1. Information we collect

Personal information

Email Address: We collect your email address when you create an account to log in to vol. This is used to identify and associate your account with your running data.

Run data

When you use vol to track your runs, we collect the following statistics: Start and end date and time of your run, total distance, average pace, total elevation gain, Total run time. This data is linked to your account and used to generate a custom graphic output based on your running performance.

Location data

We do not store your location data on our, or any third-party provider’s servers. Location data is only accessed and stored temporarily on your device during an active run to calculate distance, elevation, and speed. Once the run is complete, only summarised run statistics (listed above) are saved on servers.

2. How we use your information

We use the data we collect to: Authenticate your account and ensure secure access via your email address.

Legal basis for processing (GDPR)

For users in the EU, we process your data based on the following legal grounds:

Contract: Processing your email and run data is necessary to provide the app’s services as per our agreement with you.

Legitimate interest: We may process data to improve our app, provided it does not override your rights.

Consent: If we send optional communications (like newsletters), we rely on your explicit consent.

3. How we protect your data

On-device storage: Location data stays on your device and is not transmitted to our or third party servers.

Encryption: Your email and run statistics are stored securely using industry-standard encryption methods.

Limited Access: Only authorised personnel have access to your data, and only for the purpose of providing support to you.

Data retention: We retain your data only as long as necessary to provide the service or as required by law. If you delete your account, your data is removed within 30 days.

4. Sharing your information

We do not sell, trade, or share your personal information with third parties, except in the following cases:

If required by law or to comply with legal processes (such as court orders).

To protect the rights, property, or safety of vol, our users, or the public.

For EU users, any international data transfers (such as to servers outside the EU) are conducted under appropriate safeguards, such as Standard Contractual Clauses.

5. Your rights and choices

Global options

Account deletion: You can delete your account at any time by navigating to ‘Profile’ and selecting the ‘Delete account’ option in the app, or alternatively by contacting us at support@vol.run. Upon deletion, all associated run data and your email will be removed from our servers.

EU Data Subject Rights (GDPR)

If you are in the EU, you have the following rights:

Access: Request a copy of the personal data we hold about you.

Rectification: Correct inaccurate or incomplete data.

Erasure: Request deletion of your data (“right to be forgotten”).

Restriction: Limit how we process your data in certain cases.

Portability: Receive your data in a structured, machine-readable format.

Objection: Object to processing based on legitimate interests.

Withdraw Consent: Revoke consent for optional processing at any time.

To exercise these rights, contact us at support@vol.run. We will respond within one month, as required by GDPR.

California Residents (CCPA)

If you are a California resident, you have the following rights:

Know: Request details about what personal information we collect, use, or disclose.

Delete: Request deletion of your personal information.

Opt-out: Opt out of the sale of your personal information (note: we do not sell your data).

Non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To make a CCPA request, contact us at support@vol.run. We will verify your identity and respond within 45 days.

6. Children’s privacy

vol is not intended for use by children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such data, we will delete it promptly. In the EU, we comply with GDPR age-of-consent rules and will seek parental consent where required by local law.

7. International data transfers

We may process or store your data outside your country of residence (e.g., in the United States). For EU and UK users, we ensure compliance with GDPR through safeguards like Standard Contractual Clauses. For other regions, we adhere to local data protection laws as applicable.

8. Changes to this privacy policy

We may update this Privacy policy from time to time. If we make significant changes, we will notify you via the app or email. The latest version will always be available on our website at vol.run/privacy.

9. Contact Us

If you have questions, concerns, or wish to exercise your rights under GDPR, CCPA, or other laws, please contact us at:

Email: support@vol.run

Website: vol.run/privacy

For EU users, our Data Protection Officer can be reached at support@vol.run. For GDPR-related complaints, you may also contact your local data protection authority.