Privacy Notice
This notice covers two things: the ClaimRush app during its private beta test, and the waitlist form on this website. It is written to be read, not to be survived. If anything here is unclear, email us and we will explain it.
Who is responsible for your data
The data controller is Tuomas Korhonen, acting as an individual. There is no company behind ClaimRush yet.
Contact: jeanbaptiste.baillieul@gmail.com
A company (ClaimRush Oy) is planned. If it is established and takes over as controller, we will tell you before that happens.
What we collect
Location, while you run
ClaimRush reads your iPhone's GPS location during a run, including when the app is in the background and the screen is locked. Location is sampled at the device's most accurate setting, roughly every 10 metres.
Two different things happen to that data, and the difference is the important part.
On our servers we hold tiles, never your route. Each location reading is converted on your phone into a grid square of about 50 × 50 metres, and only the squares reach us. Your individual GPS coordinates are never sent to our servers.
On your phone, your route is saved. So that you can look back at your own runs drawn on a map, the app stores each run's GPS points in its local storage on your device. That route never leaves your phone. It is not uploaded, no other player can see it, and we cannot see it either.
What we store on our servers is:
- Claimed tiles — the grid square index and the time you claimed it
- Run summaries — duration, distance, number of tiles, and when the run happened
- Your account — nickname, avatar, and your aggregate totals
Be clear about what the server-side record still means: a tile plus a timestamp can be converted back into an approximate location. We hold a record, accurate to about 50 metres, of where and when you moved during the test. That is personal data and we treat it as such. What we do not hold is a street-level trace of your exact route — that stays on your device.
Your account
You sign in with Apple. We receive an identifier for your Apple account and store the nickname and avatar you choose. We do not receive your Apple password.
Health and fitness data — none
ClaimRush does not read or write any Apple Health data during this test. The app has no Health integration: Apple Health appears in the app as "coming soon" only. You will not be asked for health permissions.
Notifications
If you turn on push notifications, we store your device's notification token so we can send them.
Waitlist signups (this website)
If you fill in the form at getclaimrush.com/waitlist, we store the email address you enter, your phone number if you choose to give one (it is optional), and the areas of the city you selected. We use this only to decide who to invite to the beta and to contact you about it. We do not send marketing, and we do not share it.
Technical data
Crash reports, app version and session counts, generated by TestFlight and collected by Apple. We see these through TestFlight; Apple's own privacy policy applies to TestFlight itself. This website is served by Cloudflare, which processes request data such as IP addresses in order to deliver and protect the site.
Feedback
Anything you send us: messages, screenshots, bug reports, and answers to questions we ask during or after the test.
Why we collect it
Only to run and evaluate this beta test. Specifically:
- to make the game work — awarding tiles, scoring, rankings, drawing the map, showing friends' results
- to find bugs and problems, including tiles that fail to register
- to understand how the game is actually used, so we can decide what to build next
- to invite people from the waitlist into the test
We do not use your data for advertising, profiling, or automated decision-making about you, and we do not sell it.
Legal basis
Consent (GDPR Article 6(1)(a)). Taking part is entirely voluntary, and no special category data (Article 9) is collected.
You can withdraw your consent at any time, without giving a reason, by emailing us. Withdrawing means we stop processing your data and delete it. It does not affect processing that already took place before you withdrew.
How long we keep it
On our servers: we keep your data until the analysis of this test round is finished, and in any case no longer than 12 months from the end of the test. After that it is deleted. We also delete it sooner if you ask.
On your phone: your saved routes, run summaries and claimed tiles stay until you remove them — by clearing your run history or deleting the app. We set no expiry on them, because we cannot reach them and they are your own history.
Waitlist signups: kept until the beta programme ends, or until you ask us to remove you.
Who can access it
- Tuomas Korhonen and the ClaimRush development team — currently two developers. Access is limited to those who need it to run the test.
- Supabase, our database and hosting provider, acting as a data processor. They store the data on our behalf and do not use it for their own purposes.
- Cloudflare, which hosts this website.
- Apple, for TestFlight distribution, crash reports, Sign in with Apple and MapKit map rendering, under Apple's own terms.
Nobody else. ClaimRush has no connection to Strava or any other fitness service.
Where your data is stored
Our Supabase project is hosted in the United Kingdom (London region). The UK is outside the EEA, so this is an international transfer. It is covered by the European Commission's adequacy decision for the United Kingdom, which means no additional safeguards are required for it.
Your rights
Under GDPR you have the right to:
- access the data we hold about you, and get a copy
- rectify it if it's wrong
- erase it ("right to be forgotten")
- restrict or object to our processing
- data portability — receive your data in a machine-readable format
- withdraw consent at any time, as described above
- lodge a complaint with a supervisory authority. In Finland that is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), tietosuoja.fi
How to delete your data
In the app, Delete account (in Settings, under Account) permanently deletes your account and everything we hold about you on our servers — your profile, claimed tiles, points and run summaries — and signs you out. If you only want to clear your runs, Clear Run History removes your runs and the routes saved on your phone. Deleting the app removes everything stored locally.
The one thing in-app deletion does not cover is a waitlist entry on this website, which is separate from the app. To have that deleted — or if you would rather we handle the whole deletion for you — email jeanbaptiste.baillieul@gmail.com with the subject "Delete my data", from the address you signed up with. We will delete it and confirm when it's done, within 30 days at the latest. You do not have to give a reason.
One limit worth being straight about: we cannot delete the routes stored on your phone, because we never had them. Those go when you clear your run history or delete the app — which is in your hands, not ours.
Deleting your ClaimRush data does not remove you from TestFlight. You can leave the test in the TestFlight app at any time.
Data security
Server-side data is stored in our Supabase project with access restricted to the development team, and row-level security limits what any client can read or write. The route data on your phone is protected by your device's own security — your passcode, Face ID or Touch ID — the same as any other app's local data.
This is an early-stage beta, not a hardened production system. Please assume the same level of care you would with any small beta, and don't put anything in feedback that you wouldn't want us to read.
Changes to this notice
If we change how we handle your data during the test, we will email the testers before the change takes effect, and update the date at the top of this page.
Questions
Email jeanbaptiste.baillieul@gmail.com. A real person reads it.