Privacy

alng is made by Flarp Studios LLC (“we”). This page explains what we collect and why.

What we collect

• Account: your name and email address, from Sign in with Apple, Google or an email code.
• Runs, walks and rides: which one it is, when it started and finished, your time or distance goal, distance covered, your checkpoint and cheer settings, how it ended and who could see it.
• Location: only while you’re out, end-to-end encrypted (see below).
• Cheers and comments: the ones people in your circle send, end-to-end encrypted.
• Your circle: who is in it, your sharing settings and anyone you’ve snoozed.
• Notifications: a token for each device so alerts can reach it, and one for each Live Activity you follow on your Lock Screen.

We use this only to run alng: to show your activity to your circle, pass on their cheers and comments, and alert them if you’re late. Your History and any workouts you save to Apple Health, heart rate included, stay on your devices, and your app settings in your own iCloud. Heart rate is only shown on your watch; it’s never shared with your circle or sent to us.

Encryption

Your location and routes are encrypted on your iPhone before they’re sent. Only the people you share your map with can decrypt them. Cheers and comments are encrypted the same way, so only the person they’re sent to can read them. We can’t, and nor can anyone with access to our servers. Your encryption key is kept in your iCloud Keychain.

Apple can’t read your notifications. On devices that support it, our servers encrypt the text for your device, so Apple only sees a generic alert.

Everything else, such as your name, email, your circle, and when you started, how far you went and how it ended, is encrypted in transit and at rest but readable by our servers, which need it to alert your circle if you’re late.

Who sees it

People in your circle, and anyone you ask to join their circle, see your name and the email you sign in with, so they know it’s you. They see your activity, and your location if you share your map with them. Only your primary contacts see your full route; others see where you are now. You can leave anyone out of a single run, walk or ride. Our service providers store the encrypted data on our behalf. We don’t sell your data, show ads or track you.

No tracking

The app has no analytics, no crash reporting and no advertising SDKs. If you choose Google sign-in, Google’s sign-in library handles that step.

This website has no analytics and serves its own fonts. Apart from invite links, which ask our server who sent the invite, it makes no requests anywhere else.

Keeping and deleting it

Runs, walks and rides are deleted from our servers 7 days after they end, along with their locations, cheers and comments, and Live Activity tokens. Invites are deleted 7 days after they’re used or expire.

A device’s notification token is deleted when you sign out on it, or when Apple tells us it’s no longer valid.

Your name, email, your circle and your sharing settings are kept until you delete your account in the app (Settings, then Delete Account), which permanently removes them from our servers.

Contact

Email hello@alng.app. Changes to this policy will be posted here.