Ruckaroo Consumer Health Data Privacy Policy
Effective date: October 1, 2026. Last updated: October 11, 2026. This policy is published under the Washington My Health My Data Act and applies to everyone who uses Ruckaroo, wherever you live. It explains the health-related data Ruckaroo collects, why, who receives it, and how to control it. Our full privacy notice is at ruckaroo.app/privacy-policy.html; where the two overlap, this page is the more specific one for health data.
Ruckaroo is operated by Cincy Labs LLC, Ohio, United States. Contact: privacy@ruckaroo.app.
1. What consumer health data we collect
We collect the following only after you give explicit health consent in the app (first launch, or Settings → Privacy Choices → Health data):
- Heart-rate samples synced from a connected watch (Apple Watch, Wear OS, Garmin) during a ruck, and the averages, maxima and zones we derive from them.
- Step counts during rucks and for step challenges.
- Your maximum heart rate, if you enter it.
- Calorie estimates reported by your device, which we blend with our own estimate.
Messages you send to the AI coach may also contain health information if you choose to include it. They are stored encrypted and are covered by the same consent.
We do not collect health conditions, dietary restrictions, biometric identifiers, reproductive or sexual health information, or precise location for the purpose of inferring health. GPS trails of your rucks are location data collected to show your route, not to infer health.
2. Where it comes from
From your own devices: HealthKit on iPhone and Apple Watch, Health Services on Wear OS, and the Garmin Connect IQ companion. Raw HealthKit and Health Services data stays on your phone; only the ruck metrics and heart-rate samples you sync are sent to us. Step and heart-rate data from Garmin arrives through your own Garmin account.
3. Why we use it
To score your rucks, estimate calories, show heart-rate zones, run step challenges, and personalise coaching from the AI coach. Nothing else. We do not use health data for advertising, and we do not sell it.
4. Who receives it
| Recipient | What | Why |
|---|---|---|
| Amazon Web Services (United States) | All of it, stored in our systems | Hosting and storage |
| MongoDB Atlas (United States) | All of it, stored in our database | Primary database |
| OpenAI (United States) | Heart-rate averages, maxima and zones of your last 10 rucks, and anything health-related you type to the coach | AI coaching, only with your health consent |
| Strava (United States) | Heart-rate samples and averages of a ruck you choose to send, only if you have given health consent and linked your own Strava account | Sending your ruck to Strava at your request |
No one else receives your health data. We do not share it with affiliates, advertisers, data brokers or partners. Sending a ruck to Strava happens only when you ask for it. The full list of companies that process any Ruckaroo data is at ruckaroo.app/sub-processors.
5. How long we keep it
Heart-rate samples, step counts and device calories stay with the ruck they belong to for as long as you have an account. Coach conversations are deleted three years after their last message. Everything is deleted with your account.
6. Your rights and how to use them
- Withdraw consent at any time in Settings → Privacy Choices → Health data. Your phone stops sending health data, new rucks are saved without it, and we remove it from your past rucks (calories are recalculated without heart rate). The rucks themselves stay.
- See and export your health data: Settings → Download my data gives you a ZIP including every ruck with its heart-rate and step data.
- Delete it: withdraw consent (deletes the health data only) or delete your account (Settings → Delete Account, deletes everything after a 7-day grace period).
- Ask us anything about it at privacy@ruckaroo.app. We answer within 45 days.
Appeals. If we decline a request, we will say why in writing. You can appeal by replying to that email or writing to privacy@ruckaroo.app with "Appeal" in the subject line; we answer appeals within 45 days. If we deny your appeal, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint.
7. No geofencing
We do not use geofencing around any facility that provides health care services.
8. Changes
We will tell you in the app before material changes to this policy take effect.