GraFeeti Privacy Policy

GraFeeti is a GPS running game played across Massachusetts.

Last updated: 26 September 2026

This policy describes what GraFeeti collects, why, who it is shared with, and how to delete it. It covers the GraFeeti iOS app and its Apple Watch companion.

The short version. GraFeeti records your runs so it can score them. That means location data, including while the app is in the background during a run. Your data is not sold, is not used for advertising, and is not shared with data brokers or analytics companies. You can delete your account, and everything that identifies you, from inside the app at any time.

What is collected

Data	Why
Location, including background location GPS coordinates during a run: the route, start and end points, and distance.	To measure how far you ran and to detect when you pass within 75 metres of a pin. Background access is required because a run continues with the screen off and the phone in a pocket. Collected only while a run is active — GraFeeti does not track you between runs.
Email address	To create and sign in to your account, and to reset your password.
Username and profile tag Your chosen name and the graffiti tag you draw.	Shown publicly on leaderboards, pin walls and the activity feed. This is the point of the game.
Run history Distance, duration, pace, date, and which pins you reached.	To calculate street cred, XP and monthly standings.
Motion and fitness activity	To improve GPS accuracy and distinguish running from travelling by vehicle.

GraFeeti does not collect contacts, photos, microphone audio, advertising identifiers, or your device's address book. There is no analytics SDK and no advertising SDK in the app.

Apple Health

If you grant permission, GraFeeti writes your completed runs to Apple Health: the workout, distance, active energy burned, and the route.

GraFeeti does not read any data from Apple Health. Health access is write-only. The app cannot see your heart rate, weight, sleep, steps, medical records or any other health information, and it does not request permission to.

Health data is never used for advertising, never used for marketing, and is never shared with, sold to, or disclosed to any third party, including data brokers. It is not used for any purpose other than recording your run in Apple Health on your own device.

Health permission is optional. Declining it does not affect anything else in the app. You can revoke it at any time in the iOS Health app under Sharing → Apps.

What your location is used for, and what it is not

Location is used to score runs and nothing else. It is not used to build an advertising profile, is not sold, and is not shared with data brokers.

Your run start and end points

Because a run often starts at home, GraFeeti trims the beginning and end of your route before showing it to anyone else. This is on by default. You can change it in the app. Other users never see your untrimmed start or end point.

Who your data is shared with

Recipient	What they receive	Why
Supabase database and authentication hosting	Your account, runs, allocations and tag.	They store the data on GraFeeti's behalf. They do not use it for their own purposes.
Open-Meteo weather	Your approximate coordinates, rounded to three decimal places (roughly 110 metres), with no account or device identifier attached.	To show current conditions. The request is anonymous and cannot be tied back to you.
Pollinations image generation, only if you use it	The text prompt you type in the Tag Studio. No location, no account identifier.	To generate artwork for your tag. Used only when you press generate.

Your data is never sold. It is not shared with advertisers, analytics providers, or data brokers.

What other players can see

Your username, tag, rank, street cred, XP, and total miles.
Your runs in the activity feed — distance, duration, date and pins reached.
Your route, with the start and end trimmed unless you turn that off.

Your email address is never shown to other players.

Deleting your account

You can delete your account in the app: open your profile, scroll to Account, and choose Delete account. It takes effect immediately and cannot be undone.

Deletion permanently removes:

your login and email address;
your username, profile and graffiti tag;
every GPS route, start point and end point you have recorded;
your follows.

Finished months keep an anonymised record of the mileage itself, with no name, email, account or location attached to it, so that other players' past results do not silently change. This residual data cannot be linked back to you or to any device, and cannot be used to identify you.

Runs you have already written to Apple Health belong to you and stay on your device. Delete them in the Apple Health app if you want them gone.

Data retention

Your account and runs are kept for as long as your account exists. When you delete your account, identifying data is removed at that moment rather than on a schedule.

Children

GraFeeti is not directed at children under 13 and does not knowingly collect personal information from them. If you believe a child has created an account, contact us and it will be removed.

Security

Connections use HTTPS. Passwords are stored as salted hashes by Supabase Authentication and are never visible to GraFeeti. No system is perfectly secure, and no absolute guarantee is offered.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Deletion is available directly in the app. For anything else, contact us using the address below.

Changes

If this policy changes materially, the date at the top will be updated and the change will be noted in the app.

Contact

Questions about privacy, or a request about your data: keeno721@gmail.com