1. Introduction
MyFinishLine ("we", "our", "us") is a story-driven virtual fitness platform that allows users to participate in interactive fitness quests, track distance-based activities, unlock digital content, and earn optional physical rewards.
This Privacy Policy explains:
- what data we collect;
- how we process and use it;
- how we share it;
- your rights and choices.
We comply with applicable privacy laws and the Strava API Agreement requirements, including the prohibition on exposing private user data to other users.
The main website address is myfinishlineapp.com.
2. What Personal Data We Collect
We collect personal data that is necessary to provide, operate, improve, secure, and support the MyFinishLine Platform and related services.
2.1. Account and Profile Information
When you create an account or set up your profile:
- Name or nickname
- Email address
- Profile photo (optional)
- Time zone and language preferences
- User settings
- Country or region (if provided)
- Preferred units (metric / imperial)
2.2. Activity Data from Connected Providers
You can connect MyFinishLine with one of the fitness providers currently supported by the Platform. At the time of this Policy, the supported providers are Strava, Fitbit (through the Google Health API) and, in our iPhone app, Apple Health. Users may also manually enter activity information where this feature is available.
We receive only data you explicitly authorize the provider to share, such as:
- Distance traveled
- Activity type (running, cycling, walking, etc.)
- Duration
- Number of steps (where available)
- Completed quests
- Progress
- Achievements
- Unlocked rewards
- Other non-sensitive metrics
This activity information is health and fitness data. Section 2.3 explains what we read, why, and how we protect it. We do not collect medical records or diagnoses, and we do not store heart rate or other biometric data.
If location or route data is provided, we use only what is necessary for service delivery and do not retain precise private locations. We comply with provider terms including Strava API requirements.
2.3. Health and Fitness Data
Workout data from Apple Health, Strava and Fitbit is health and fitness data. We use it only to run your quest, and we handle it as follows.
What we read. With your permission, our iPhone app reads workouts from Apple Health: the activity type, start time, time zone, duration, distance, whether the workout was indoors or outdoors, and a workout identifier so the same workout is not counted twice. Access is read-only: we never write data to Apple Health. From Strava and Fitbit we receive the same workout details. Our Android app does not use Health Connect.
Why we use it. Only to move you along the quest route, calculate your progress, chapters and XP, and show your own statistics to you.
What we never do with it:
- we do not sell it;
- we do not use it for advertising, marketing or data mining, and we do not share it with advertising networks or data brokers;
- we do not share it with third parties, except service providers that host and store it on our behalf to run the service, or where required by law;
- we do not use it to develop or train artificial intelligence or machine-learning models;
- we do not store Apple Health data in iCloud;
- we do not use it to make medical or health assessments about you.
Your control. You can stop Apple Health access at any time in the iPhone Settings app (Health > Data Access & Devices > MyFinishLine) or in the Health app, and disconnect Strava or Fitbit in the MyFinishLine app. Workouts already counted stay part of your quest progress until you delete your account (see section 9.1).
2.4. Purchase and Delivery Information
If you purchase a quest or physical rewards, we may collect:
- billing country;
- selected package;
- delivery country;
- shipping address;
- recipient name;
- phone number (where required by the courier);
- order status;
- shipment tracking information.
2.5. Optional Information
Optional information you choose to provide, such as:
- Comments or photos attached to activities
- Feedback through support
- Your friends list and your personal invite link, if you use the Friends feature or invite other players
- Referral information, if you join through an invitation from another player
3. How We Use Your Information
We use your personal data to:
- deliver services and features you request (tracking, challenges, progress reports);
- display your statistics and achievements to you;
- personalize your experience and interface;
- communicate with you (support, updates, account changes);
- improve performance and fix technical issues;
- comply with legal obligations;
- calculate quest progress;
- process purchases and deliveries;
- operate rankings (if enabled);
- prevent fraud and abuse;
- verify referral program eligibility;
- comply with tax and accounting obligations.
We never use personal data outside the defined purposes without your explicit consent. We do not use automated profiling to make decisions about you.
4. Data Sharing and Disclosure
We do not disclose your personal data to third parties except:
- Service providers (hosting, analytics, email delivery, payment providers, logistics partners, shipping carriers, cloud hosting, customer support providers, fraud prevention services) acting on our behalf under confidentiality;
- If required by law or valid legal process.
We do not share your personal or activity data with other MyFinishLine users in a way that reveals private information, including private workout details. This includes data from Strava, Fitbit, Apple Health or other linked providers. If you add other players as friends, they can see the limited information described in Section 5.
5. Data Visibility and Other Users
MyFinishLine does not publicly expose private activity details of users to other users by default.
If you use the Friends feature, the players you add as friends can see your name or nickname, your profile picture, your total distance and your XP. Other players who search for you by name can see only your name or nickname and your profile picture. Your individual workouts, their dates, routes and details, and your data from Strava, Fitbit or Apple Health are never shown to other users.
Rankings and leaderboards display only the information that is intended to be visible within the Platform: name or nickname, profile picture, challenge position and XP.
6. Children's Privacy
We do not knowingly collect or process personal data from children under the age of 16.
Users under the age of majority may only use the Platform with the consent of a parent or legal guardian.
If a minor uses MyFinishLine with consent, privacy settings default to restrictive and no data is used for marketing.
A parent/guardian may review their child's data or request deletion by contacting support.
7. Location and Storage of Your Data
We may store and process your data on secure cloud servers. These may be located in one or more countries to support global operations. We implement technical and organizational safeguards to protect your information from unauthorized access or loss.
Your personal data may be transferred to and processed in countries other than your country of residence, including Hong Kong SAR and countries where our service providers operate.
8. Cookies and Similar Technologies
We use cookies and similar technologies to:
- authenticate users;
- maintain sessions;
- improve security;
- remember preferences;
- analyze platform usage.
9. How Long We Retain Your Data
We retain your personal information:
- as long as your account is active;
- as needed to provide services;
- as required by law or business needs (e.g., tax, legal compliance).
When data retention is no longer necessary, we delete it securely.
If you delete your account, we delete or anonymize your personal data right away, except the records we are legally required to keep. Section 9.1 lists exactly what is deleted and what is kept.
9.1. Deleting Your Account
You can delete your account at any time:
- in the MyFinishLine app: Profile > Delete account;
- on the web: https://app.myfinishlineapp.com/delete-account (sign in first);
- by email to support@myfinishline.app.
Deletion happens right away and cannot be undone.
What we delete:
- your email address and sign-in, including Google sign-in;
- your name and profile photo;
- Strava, Fitbit and Apple Health connections and their access;
- workout titles and the raw data received from trackers;
- your friends list and invite link;
- your survey answers (age and email) and the mailing list subscription.
What we keep:
- orders and payments, with the name, email and shipping address on them, for as long as tax and accounting law requires;
- game statistics that no longer identify you: distance, XP and chapters, linked only to an internal account number.
10. Your Rights
You have rights regarding your personal information, including:
- Access: request a copy of your data.
- Correction: correct inaccurate data.
- Deletion: delete your account and data in the app or on the web, or ask us to do it (see section 9.1).
- Portability: receive your data in a structured format.
- Restriction: restrict processing.
- Withdraw consent: stop consent-based processing.
To exercise your rights, contact us at support@myfinishline.app.
Depending on your jurisdiction, you may also have the right to object to certain processing activities or lodge a complaint with the applicable data protection authority.
11. Security
We protect your data with industry-standard security measures, including encryption and secure access controls. You also must safeguard your account credentials and not share them.
While we implement appropriate security measures, no online service can guarantee absolute security.
12. Third-Party Services and Links
We may use third-party services (e.g., analytics). These services process data on our behalf under strict terms.
On our website (not in the mobile app) we use Meta Pixel to measure our advertising, if you accept marketing cookies, and Yandex Metrica to understand how visitors use the site. The MyFinishLine mobile app does not use any third-party analytics or advertising tools.
If you click external links, those sites have their own privacy policies.
Third-party fitness providers, payment providers, and logistics companies operate under their own privacy policies.
13. Marketing Communications
We may send you newsletters or promotional messages if you've opted in. You can unsubscribe at any time.
Service-related emails (such as activation codes, purchase confirmations, shipping updates, or security notifications) may be sent regardless of marketing preferences.
14. Changes to This Policy
We may update this Privacy Policy to reflect changes in services, legal requirements, or industry standards. We will post the updated policy here and update the effective date.
Where required by law, we will notify users of material changes before they become effective.
15. Google User Data
If you sign in on our website with your Google account ("Sign in with Google"), this section explains what we receive from Google and how we handle it. The MyFinishLine mobile app signs you in with your email and a one-time code and does not use Google sign-in.
What we access
- Your name, email address and profile picture (the basic openid, email and profile scopes).
We do not request access to your Gmail, Google Drive, Contacts, Calendar or any other Google data.
How we use it
- To create your MyFinishLine account and sign you in.
- To show your name and picture in your profile and, if you choose, on challenge leaderboards.
- To send you service emails about your account, purchases and challenge progress.
Sharing
We do not sell Google user data and do not share it with third parties, except with service providers that host our app and send our emails, solely to run the service, or where required by law. We do not use Google user data for advertising, and we do not use it to develop, improve or train generalised AI or machine-learning models.
Storage, retention and deletion
Your Google account details are stored in our secured database for as long as your MyFinishLine account is active. You can disconnect MyFinishLine at any time in your Google Account settings (Security → Third-party apps). You can delete your account and the associated data yourself in the app or on the web, or ask us by emailing support@myfinishline.app (see section 9.1); we handle email requests within 30 days.
Limited Use
MyFinishLine's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
16. Contact Information
If you have questions, concerns, or requests:
Operator: Fortem Group Limited, Hong Kong SAR
Email: support@myfinishline.app