Privacy Policy

Effective Date: 24 October 2026

Introduction

Rijjin, Inc.’s (“Rijjin”) privacy policy (the “Privacy Policy”) explains how Rijjin collects, uses, and shares your personal data. Further, the Privacy Policy describes how to manage your privacy controls and your rights in connection with our websites and the related mobile applications and services (collectively, the “Services”). Please also read our Terms of Service which sets out the terms governing the Services.

Information Rijjin Collects

Rijjin collects information about you, including information that directly or indirectly identifies you, if you or your other members choose to share it with Rijjin. We receive information in a few different ways, including when you track, complete or upload activities using the Services. Rijjin also collects information about how you use the Services. There are also several opportunities for you to share information about yourself, your friends, and your activities with Rijjin. Some of these types of information include:

• Basic Account Information. Your name, email address, date of birth, gender, height, weight, username and password.
• Sign-In Accounts. If you sign in to Rijjin with an external sign-in service, that service shares with Rijjin, with your permission, an identifier for your account with it and, depending on the service and your choices, your name or display name, email address, and profile picture. Rijjin uses this information to create your account and sign you in. Each service’s own privacy policy governs what that service collects.
• Content You Share. Information collected when you choose to upload a picture, activity or post; join a challenge; add your equipment usage; view, comment on, like, rate, or review others’ activities; or otherwise use the Services.
• Messages. Conversations in Rijjin are end-to-end encrypted. The text of your messages and the photos, videos, and files you send in a conversation are encrypted on your device, and only the people in the conversation can read them; Rijjin cannot. To deliver messages, Rijjin processes information such as who is in a conversation and when messages are sent, and, when you share an activity, route, or other Rijjin item into a conversation, that its members may view it. A group conversation’s name and photo are not end-to-end encrypted, because they are shown to people before they join, and Rijjin checks group photos for prohibited content.
• Contact Information. Data such as name, email address, physical address, phone number, or other contact information.
• Location Information. Data on your device location while using Rijjin’s Services. Rijjin does not track your device location when you are not using Rijjin’s Services. If you would like to stop the device location tracking, you may do so at any time by adjusting your device settings.
• Live Location Sharing (Beacon). When you start Beacon, Rijjin collects your device’s location continuously, including while the app runs in the background, and shares it with the people you choose: the Rijjin members you add and anyone you send a Beacon link to. Sharing continues until you stop it or it expires, after 24 hours unless you set another time. If the app is closed, updates stop until you open it again. Unless you choose to keep the route, Rijjin keeps only your latest location while Beacon is on, and none after it ends; a route you keep stays in your account until you delete it. The privacy zones you set for your profile and activities do not apply to Beacon. You can remove a person or revoke a link at any time.
• Connected Devices and Apps, Third Party Accounts. Data from devices and apps you connect to Rijjin, or accounts you create with third-party products and services that you have agreed to make available to Rijjin. For example, you may connect your Garmin or Suunto account to Rijjin. Data from these devices and apps may then be passed along to Rijjin.
• Health Information. Data relating to the health status of an individual, including data related to one’s physical health or condition. Health information also includes data that can be used to make inferences about or detect the health status of an individual, such as heart rate or other measurements. Before you can upload health information to Rijjin, you must give your explicit consent to the processing of that information by Rijjin. You can withdraw your consent to Rijjin processing your health information at any time; Health Data and Withdrawing Consent sets out each step and what it does.
• Payment Information. Data about your billing address and method of payment, such as bank details, credit, debit, or other payment card information.
• Technical Information and Log Files. Data from your browser, computer, or other mobile device, which provide us with technical information when you access or use the Services. This data includes device and network information, log files, and analytics information. Log Files include IP addresses, browser type, internet service provider (ISP), referring/exit pages, platform type, date/time stamp, and number of clicks. This information is used to analyze trends, track member movement in the aggregate, and to otherwise administer, protect, and secure the Services.
• Diagnostics and App Usage. The app records diagnostic information, such as crash logs, error reports, and performance data, so that we can find and fix problems and give you a more reliable experience. It also records how the app is used, for example which screens are opened and which features are used, so that we can understand how the Services are used and improve them. Rijjin may use third-party service providers to collect and analyze this information on its behalf.
• Other Information. Information Rijjin may collect from you through third parties, such as feedback surveys. Rijjin may also collect information about you from other members’ use of the Services, such as when they comment on your activities.

Rijjin’s Use of Personal Information

Rijjin uses your personal data to provide our Services, to process your transactions, to communicate with you, for security and fraud protection, and to comply with law. We may also use personal data for other purposes with your consent. Rijjin collects personal data necessary to provide our Services, including to provide you with the ability to:

• Record your activities and analyze your performance. For example, to compare your past efforts, analyze your fitness level, and (with your consent) use your health information to provide you with interesting and useful performance analysis.
• Make effort-based predictions. For example, to provide an estimate of how long it would take to complete a designated activity.
• Interact with other athletes. For example, to compare your fitness level to other individuals or groups, compete on segments, participate in clubs, challenges, or events, follow other athletes, and use features that help athletes interact with one another, such as group activities.
• Manage your training. For example, to set goals and use your training dashboard.
• Explore new places to go. For example, to discover routes or segments where you can pursue activities.

Your information, including parts of your profile, username, photos, members you follow and who follow you, clubs you belong to, your activities, the devices you use, and kudos and comments you give and receive will be shared on Rijjin so that you may be able to participate in the Services, for example to show your place on a leaderboard. Certain information (e.g., your name, and some profile information) is also available to non-members on the web.

• Protect You and the Services. We use the information we collect to protect members, enforce our Terms of Service, and promote safety. For example, we find and remove content that violates our terms, such as spam, as well as suspend or terminate accounts that share such content. When you report a member, a message, a place, or other content, we review the report together with the content it cites. Because conversations are end-to-end encrypted, Rijjin can see a reported message only if you send it to us: when you report a message, the app asks for your consent and then sends Rijjin the reported message and up to four messages before it, decrypted, together with any photos or files in them. Rijjin restricts this evidence to the people who review reports and uses it only to review the report and act on it.
• Improve our Services. We also use the information we collect to analyze, develop and improve the Services. To do this, Rijjin may use third-party analytics providers to gain insights into how our Services are used and to help us improve the Services.
• Communicate with You. To respond to communications, reach out to you about your transactions or account, market our products and services, provide other relevant information, or request information or feedback. From time to time, Rijjin may use your personal data to send important notices, such as communications about purchases and changes to our Terms of Service or other policies. Because this information is important to your interaction with Rijjin, you may not opt out of receiving these important notices.
• Process Your Subscription. To process your subscription, Rijjin must collect data such as your name, purchase, and payment information.
• Aggregate Information. Rijjin does not sell your personal information. Rijjin may aggregate the information you and others make available in connection with the Services and post it publicly or share it with third parties. Examples of the type of information we may aggregate include information about equipment, usage, demographics, routes and performance. Rijjin may use, sell, license, and share this aggregated information with third parties for research, business or other purposes, or to help our partners understand more about athletes, including the people who use their products and services.

Rijjin’s Sharing of Personal Information

In addition to sharing aggregated data about our members as described above, Rijjin also shares personal information in accordance with your preferences, as needed to run our business and provide the Services, and where required for legal purposes, as set forth below.

• Service Providers. Rijjin may engage third parties to act as our service providers, including to host and store data; to support, improve, promote, and secure the Services; to deliver notifications; to analyze usage and diagnose problems; to process payments; or to fulfill orders. These service providers only have access to the information necessary to perform these limited functions on our behalf and are required to protect and secure your information. These service providers cannot use the personal data we share for their own purposes and must delete or return the personal data once they have completed the services.
• Information and Activities. As a social network, we share your information with other Rijjin members and the public in accordance with your privacy controls. You can also share your activities via text, email, or on social media applications like Facebook, Instagram, and Twitter. If you link your Rijjin account to other social networks and share your activities, they will be viewable on such third-party platforms, including your location information. You should use caution when sharing information via third parties and you should carefully review the privacy practices of such third parties.
• Live Location (Beacon). When you start Beacon, your location is shared with the Rijjin members you add and with anyone who has a Beacon link you sent, for as long as the Beacon runs. A link works for whoever holds it, so share it only with people you trust; you can revoke it at any time.
• Availability on Rijjin. When you join the Rijjin community, your profile and your activities are set to be viewable by everyone by default. Your name and other profile information is viewable by other Rijjin members and the public, and your photos and routes may be accessed by other Rijjin members and non-members, or viewable on publicly-accessible Rijjin pages or in search engine results.
• Third Party Business via API or Other Integrations. Rijjin enables you to share your information and content with third party apps, plugins, or websites that integrate with the Services, as well as with third parties who work with Rijjin to offer an integrated feature, such as a challenge sponsor or tracking watch. You can choose to share your profile data and activity data (including private activities). Information collected by these third parties is subject to their terms and policies. Rijjin is not responsible for the terms or policies of third parties.
• Others. Rijjin may share personal data with others at your direction or with your consent. We may also disclose information about you if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate. We may also disclose information about you where there is a lawful basis for doing so, if we determine that disclosure is reasonably necessary to enforce our Terms of Service or to protect our operations or users. Rijjin may share or transfer your information in the event of a reorganization, merger, sale, securities offering, bankruptcy, or other similar transaction.
• DMCA Notifications. Rijjin may share your information with third parties when we forward Digital Millennium Copyright Act (DMCA) notifications, which will be forwarded as submitted to us without any deletions.

How We Protect Information

Rijjin takes several measures to safeguard the collection, transmission and storage of the data we collect. We employ reasonable protections for your information that are appropriate to its sensitivity. The Services use industry standard Secure Sockets Layer (SSL) technology to allow for the encryption of personal information and credit card numbers. Rijjin engages providers that are industry leaders in online security, including services verification, to strengthen the security of our Services. The Services are registered with site identification authorities so that your browser can confirm Rijjin’s identity before any personal information is sent. In addition, Rijjin’s secure servers protect this information using advanced firewall technology.

Managing Your Settings

• Privacy Controls. Rijjin offers several features and settings to help you manage your privacy and share your activities. Most privacy controls are located in your privacy controls page, but some are specific to individual activities, athletes, or routes. Rijjin provides you the option to make your activities private.
• Notifications and Email Preferences. Rijjin offers various ways to manage the notifications you receive. You can choose to stop receiving certain emails and notifications by indicating your preference. You may also unsubscribe by following the instructions contained at the bottom of marketing or promotional emails. Any administrative or service-related emails (to confirm a purchase, or an update to this Privacy Policy or our Terms of Service, etc.) generally do not offer an option to unsubscribe as they are necessary to provide the Services you requested.
• Update Account Information. You may correct, amend, or update profile or account information at any time by adjusting that information in your account settings.
• Delete Information/Accounts and Downloading Your Data. You can delete your account or download your data using our self-service tools. Deleting your account deactivates it immediately and hides your profile and your content from everyone. For a limited recovery period, which the app states when you delete, the deletion is reversible and signing in again restores your account in full. Once that period ends the deletion becomes permanent and the account can no longer be restored. Rijjin then erases your identifying information and all of your content that is not shared into someone else’s surface, and completes that erasure within 90 days. Additionally, we may retain information where deletion requests are made to comply with the law and take other actions permitted by law.

Some content you shared into other people’s surfaces is kept after your account is deleted, because erasing it would remove part of another member’s own record. This is limited to: messages you sent in conversations, media and files you shared into a conversation, comments you left on other members’ content, and your edits to co-edited routes that someone else owns. That content stays visible to the people it was shared with, attributed to “Deleted User” instead of to you, with no path back to your identity. It is erased once the last such reference is gone. Content that others independently copied may also remain. Your public profile may be displayed in search engine results until the search engine refreshes its cache.

Rijjin also provides you the option to remove individual activities you have posted without deleting your account. Once removed, the activities may remain on Rijjin’s systems until you delete your account.

Health Data and Withdrawing Consent

You can withdraw your consent to Rijjin processing your health data at any time, and you do not need to contact us to do it. There are three separate steps, and they do different things.

• Turn health sync off. In the app, open Settings, then Apps and Devices, and turn health sync off. Rijjin stops reading new data from Apple Health or Health Connect immediately, and this device’s registration is removed. Activities already imported are kept.
• Revoke access at the operating system level. On Android, open Health Connect and remove Rijjin’s permissions under App permissions; the app’s disconnect screen can also hand every Health Connect permission back on your behalf. On iOS, Apple does not permit an app to revoke its own Health access, so you must remove it yourself in Settings, then Privacy & Security, then Health, then Rijjin.
• Delete health data already imported. Turning sync off stops further reading but does not by itself remove readings already in your account. Individual readings can be deleted from the “All readings” list in each section of your Health screen. Deleting a reading also prevents it being synced again, and does not change your device’s own Health data. Activity metrics already calculated from a deleted reading are not recalculated. Deleting your account erases your health data entirely once the deletion completes.

Rijjin requests only the following health data: sleep sessions and their stages, weight, height, body mass index, body fat percentage, lean body mass, resting heart rate, heart rate variability, VO₂max, and workouts including their route and heart rate. Access is read-only — Rijjin never writes anything back to Apple Health or Health Connect, does not sell this data, and does not use it for advertising. The current list is shown in the app at any time under “How Rijjin uses your health data”.

Your Rights

At Rijjin, we respect your ability to know, access, correct, transfer, restrict the processing of, and delete your personal data. We provide the same suite of privacy tools and controls to all our members worldwide. To exercise your privacy rights, you may contact Rijjin at the below:

If you reside in the EEA, U.K., or Switzerland, you have the right, subject to the conditions set out in the General Data Protection Regulation (“GDPR”) or other applicable law, to request from Rijjin access to and rectification or erasure of your personal data, data portability, restriction of processing of your personal data, the right to object to processing of your personal data, and the right to lodge a complaint with a supervisory authority. For more information about these rights, please visit the European Commission’s “My Rights” page relating to GDPR, which can be displayed in a number of languages.

If you are a California resident, California law may provide you with additional rights regarding your personal data. To learn more about your California privacy rights, please visit the California Consumer Privacy Act of 2018.

Transfers of Personal Information Between Countries

Rijjin’s Services are provided throughout the world. To make that possible, your personal data may be transferred to or accessed by Rijjin’s entities or employees around the world, to perform processing activities such as those described in this Privacy Policy in connection with your use of the Services. Rijjin complies with laws on the transfer of personal data between countries to help ensure your data is protected, wherever it may be.

Personal data relating to individuals in the EEA, U.K., and Switzerland is controlled by Rijjin, Inc. Rijjin’s international transfer of personal data collected in the EEA, U.K., and Switzerland is governed by Standard Contractual Clauses. Rijjin’s international transfer of personal data collected in participating Asia-Pacific Economic Cooperation (APEC) countries abides by the APEC Cross-Border Privacy Rules (CBPR) System and Privacy Recognition for Processors (PRP) System for the transfer of personal data.

Personal data relating to individuals in China mainland may be processed by Rijjin in countries outside of China mainland. Where this occurs, it will be done in compliance with local laws. As outlined in this Privacy Policy, Rijjin may also transfer such personal data to third parties, who may in turn store or transfer the data outside of China mainland.

Retention of Information

Rijjin retains information as long as it is necessary to provide the Services to you and others, subject to any legal obligations to further retain such information. Information associated with your account will generally be kept until it is no longer necessary to provide the Services or until your account is deleted. In addition, you can delete some items of information (e.g., profile information) and you can remove individual activities from view on the Services without deleting your account. For example, disconnecting Apple Health or Health Connect stops Rijjin reading new health data, but health data already imported stays in your account until you delete it or delete your account. Your account is deactivated immediately and can be restored by signing in during the recovery period stated in the app. After that your personal information is erased, and that erasure completes within 90 days. System logs cycle out on their own retention schedule. Additionally, we may retain information to comply with the law, prevent fraud, collect fees, resolve disputes, troubleshoot problems, assist with investigations, enforce the Terms of Service and take other actions permitted by law. The information we retain will be handled in accordance with this Privacy Policy.

Information connected to you that is no longer necessary and relevant to provide our Services may be de-identified or aggregated with other non-personal data to provide insights which are commercially valuable to Rijjin, such as statistics of the use of the Services. For example, we may retain publicly available segments or routes and other depersonalized geolocation information to continue to improve the Services. This information will be de-associated with your name and other identifiers.

Children

We request individuals under the age of 13 in the U.S. and Japan, and under the age of 16 in the rest of the world, not provide personal data to Rijjin. If we learn that we have collected personal data from a child under the age of 13 in the U.S. or Japan, or under 16 in the rest of the world, we will take steps to delete the information as soon as possible.

Privacy Policy Information

Rijjin reserves the right to modify this Privacy Policy at any time. Please review it occasionally. If Rijjin makes changes to this Privacy Policy, the updated Privacy Policy will be posted on the Services in a timely manner and, if we make material changes, we will provide a prominent notice. If you object to any of the changes to this Privacy Policy, you should stop using the Services and delete your account.

This policy was written in English. To the extent a translated version conflicts with the English version, the English version controls. Unless indicated otherwise, this Privacy Policy does not apply to third party products or services or the practices of companies that we do not own or control, including other companies you might interact with on or through the Services.

All trademarks are the property of their respective owners.