Ruckaroo sub-processors
Last updated: 2026-10-11. These are the companies that process personal data on our behalf to run Ruckaroo. We update this page before adding a new one. Questions: privacy@ruckaroo.app.
| Company | What they do for us | What they receive | Where |
|---|---|---|---|
| Amazon Web Services | Hosting, media storage, sign-in, account emails, secrets, and AI moderation and insights (Bedrock) | All app data; photos; sign-in credentials | United States |
| MongoDB Atlas | Primary database | All app data; AI coach messages are encrypted at the field level | United States |
| OpenAI | AI coach chat, photo captions, and trail-hazard photo screening | Coach messages and conversation history; your display name, age, gender, BMI, fitness level, goals, pack load and nutrition preference; your last 10 rucks, and their heart-rate averages and zones only if you have given health consent. Never your email or account identifier | United States |
| Google Firebase (Crashlytics) | Crash reporting | Device information and crash traces tagged with your account id, only with your crash-reporting consent; unsent reports are discarded if consent is off | United States |
| Meta (Facebook) | Measuring which ads led to app installs | Advertising identifier and app-install events, only with your ad-measurement consent (and, on iOS, the system tracking permission) | United States |
| Singular | Measuring app installs from ads and creator links; referral links | Advertising identifier, device identifiers and app events, only with your ad-measurement consent; referral short links carry the inviting user's id and display name | United States |
| Mixpanel | Product analytics | Usage events and device information, identified by your account id, only with your analytics consent | United States (EU servers for EEA/UK users, IP-based location off) |
| OneSignal | Push notifications | Push token and your account id. Account and social pushes go to everyone; streak, near-miss and challenge reminders only with your marketing consent | United States |
| RevenueCat | Subscription management | Your account id, email, and purchase receipts | United States |
| Superwall | Subscription offer screens | Your account id and device information (after sign-in); no email | United States |
| Sentry | Backend error tracking | Error events and request metadata; no emails, request bodies or account identifiers; a salted pseudonym of the account may appear in error messages | United States |
| Open-Meteo | Weather for calorie estimates | Start coordinates and time of a ruck; no identifiers | Germany |
| OpenStreetMap public tile servers | Map tiles | Map viewport requests (your IP address and the map area shown) | Various (OpenStreetMap Foundation) |
| Garmin | Connect IQ watch companion | Ruck telemetry synced through your own Garmin account, under Garmin's terms | Per your Garmin account |
| Strava (only if you link it) | Sending a ruck to your Strava account at your request | Route, time, distance, title, calories and, with health consent, heart-rate data of each ruck you choose to send; Strava's own privacy policy applies. We never read your Strava activities | United States |
All companies outside the EU/UK are engaged under the EU Standard Contractual Clauses and the UK International Data Transfer Addendum. Our self-hosted location database (MaxMind GeoLite2) runs inside our own infrastructure and receives nothing. We do not share trail-hazard reports with outside partners today; if we start, this page and the privacy notice change first.
Removed
| Company | Removed | Note |
|---|---|---|
| TikTok | 2026-07-04 | SDK removed; no data has flowed since |
| Customer.io | 2026-07-04 | Removed; was never enabled in production |
| Stadia Maps | 2026-07-07 | Never activated; no data flowed |