Privacy Policy

TERRA · last updated October 2026

TERRA is a running game. This policy explains what we collect and why. We keep it minimal on purpose.

Who we are

TERRA (working name), a solo-founder product operating in the EU. Data controller contact: me@muratbock.com.

What we collect

• Account: a stable ID from Sign in with Apple or Sign in with Google, a handle you choose, and a display colour. We never receive your password. We do not collect your email unless the provider supplies it.
• Runs: the GPS track you record (or import from HealthKit / a connected service like Strava), plus distance, duration and pace. Your track is used to draw and claim ground.
• Position on the nearby-runners map (normal runs, not live links): if you keep "Show me on the map" on, your position is shared with nearby runners blurred by about 250 m and delayed by about a minute, and only while a run is active. You can turn this off at any time. If you set a home privacy zone, no dot is shown near home on this map. We retain a precise copy server-side solely for anti-cheat; it is not shown to other runners and is deleted with your account.

Live runs

• Going live is optional. When you go live, anyone with the link sees your exact, real-time position, the trail you have run, your pace, distance and time, until you end the live. Live links are not blurred or delayed, and the home privacy zone does not apply to them (it only affects the nearby-runners map).
• A live ends when you end it, about 15 minutes after the app stops sending updates, or 8 hours after it started. You can end or revoke a live at any time.
• Viewers can comment anonymously or with a name they choose. To enforce blocks, reports and abuse limits we store a hashed viewer identifier and a hashed (keyed) form of the commenter's or reporter's network address (the IPv4 address, or the first half of an IPv6 address), never the IP address itself.
• The live link, its position data, comments and these hashed identifiers are deleted 24 hours after the live ends. The run itself is saved like any other run.

Server logs

Our server logs each request (time, method, path) with a shortened IP address only: the last part of an IPv4 address is set to zero, and an IPv6 address is cut to its first 48 bits. The full IP address is never written to the logs. Logs are size-limited and are overwritten as they rotate.

What we do NOT do

No third-party advertising SDKs. No selling your data. No free-text profiles or messaging. Any future in-app partner placements will be clearly labelled (EU DSA / UWG).

Your rights (GDPR)

You can delete your account and all associated data from Settings → Delete account; erasure is immediate and complete (Art. 17). To request a copy of your data (Art. 20), email me@muratbock.com. You may also lodge a complaint with your local data-protection authority.

Where data lives

On a single server in the EU. Backups are encrypted.

Placeholder legal text pending founder + legal review. Contact: me@muratbock.com.