Privacy policy

• Account data — email address, nickname, chosen player colour, optional avatar. Needed to create and run your account. When you sign in with Google, we receive from Google only your verified email address. When you sign in with Apple, we receive from Apple your account identifier, your email address (an Apple relay address if you choose “Hide My Email”) and — on the first sign-in only — your first name, which we use to suggest a nickname.
• Fitness profile (optional) — first and last name, sex, height, weight and date of birth, if you enter them in the settings. Used solely to calculate calories burned and indicators (BMI, BMR) more accurately. They are not visible to other players and you can change or delete them at any time.
• Run routes (GPS location) — a recording of your route during a run that you start with the START button and end with the FINISH button. It's the core of the game: from the route we derive the captured territory. We do not track your location outside an active run.
• Health and activity data from Health Connect — if you deliberately connect StreetSiege to Health Connect (Android) and grant permission, we read workouts recorded there by other apps: the activity type, date and duration, distance, route (location data from the workout), calories burned, heart rate and step count. We use them solely to import your activity into the game — the workout's route becomes a run in StreetSiege (territory capture, history, statistics), exactly like a run recorded directly in the app. You grant and revoke this access in Health Connect at any time.
• Health and activity data from the Health app (Apple Health) — on iPhone, if you grant permission, we read workouts saved in the Health app by other apps (e.g. Apple Watch, Strava): the activity type, date and duration, distance, route, calories burned and heart rate — solely for the same purpose as Health Connect data. We do not write anything to the Health app. You can revoke access in iPhone Settings → Privacy & Security → Health.
• Activity import from Strava — if you connect a Strava account, after each new activity we receive its data from the Strava API (type, time, distance, GPS route, heart rate) for the same purpose — importing it into the game. You can disconnect Strava at any time in the app.
• Game stats — distances, times, captured territories, experience points, quests. Some of them (nickname, level, territories, ranking position) are visible to other players.
• Push notification token — a device identifier in the Expo Push service, so we can deliver notifications about your ground being taken or expiring, and quest reminders.
• Diagnostic data — anonymous app crash reports in the Sentry service, used solely to fix bugs.
• Premium subscription data — subscription status, the chosen plan and the purchase identifier from Google Play or the App Store, needed to grant and verify Premium. Payment is handled by Google Play or Apple — we do not receive your card details.
• Device-integrity signal — a Google Play Integrity verdict used solely to detect cheating (e.g. faked location), without identifying you personally.

Health data — how we handle it. Data read from Health Connect, from the Health app (Apple Health) and imported from Strava (including workouts, distance, route, heart rate, calories, steps) is used solely to import your activities into gameplay: deriving captured territory and keeping your history and statistics. We do not use health data for advertising, we do not sell it, and we do not share it with third parties. The route and metrics of an imported activity are stored the same way as a run recorded in the app and are subject to the same retention and deletion rules (sections 05–06). Reading from Health Connect and the Health app requires your explicit consent and you can revoke it at any time in your phone settings; you can disconnect Strava in the app. Deleting your account also deletes data imported from these sources.

You can delete your account yourself in the app: Profile → Account → Email & password → Danger zone → Delete account. The action is immediate and irreversible:

• email address, nickname, password and avatar are permanently erased,
• your territories disappear from the map and notification tokens are deleted,
• data imported from Health Connect and Strava (and the Strava connection) — treated like runs recorded in the app and deleted under the same rules,
• your gameplay history (runs, territorial events) is anonymised — it can no longer be linked to you.

You can also request account deletion by email: kawalec@gmail.com (from the address linked to the account).