Privacy Statement

How Riina uses activity data

This page describes the current activity-data handling reflected in the related Riina application codebase. It focuses on workout, route, profile, social, and analytics data that users sync, upload, or share through the product.

Effective date: March 23, 2026 Based on current Riina project behavior

What activity data Riina collects

  • Workout records imported from Apple HealthKit and Android Health Connect.
  • Heart-rate samples, workout start and end times, calories burned, activity type, distance, speed, steps, elevation gain, and extended workout metrics.
  • GPS route points when route data is included with a workout.
  • Health-profile values such as resting heart rate, max heart rate, ventilatory thresholds, weight, height, age, and gender.
  • Workout photos and videos, profile pictures, post content, comments, reactions, team chat messages, and related timestamps.

How Riina uses that data

  • To sync and store workouts, display workout history and details, and calculate training and game statistics.
  • To calculate heart-rate zones and personalize scoring using health-profile values.
  • To power social and game features such as public or friends-only workout posts, reactions, comments, leaderboards, notifications, and live game views.
  • To support account features such as profile pictures, biometric sign-in preferences, and app notifications.

Analytics and product improvement

The mobile app includes an internal analytics system that records app session and screen-view events. The code hashes the user ID with SHA-256 and stores only a shortened hash for analytics tracking. Users can disable analytics from the app settings.

Machine learning and AI processing

  • Riina sends heart-rate workout samples, resting heart rate, max heart rate, and activity type to a separate ML classification service to classify workouts.
  • Riina also sends game-summary context to Anthropic's Claude API to generate game commentary. That prompt can include usernames, team rosters, standings, MVP and LVP information, top scorers, and workout-based point totals.

How activity data may be disclosed to other users

  • Workout posts support public, friends, and private visibility states in the application.
  • If a workout is shared, other users may be able to see workout details, media, comments, reactions, and game-related performance information tied to that workout.
  • GPS route data can be included with shared workouts. Users can disable future route sharing in settings, and the code notes that existing shared routes remain visible. Users can also hide route data on a workout post while preserving the underlying route data.
  • Other authenticated users can access another user's health profile for certain workout-zone fields. The code and tests indicate that resting heart rate, max heart rate, and threshold values may be visible, while age, height, and weight are redacted.
  • The backend media download handler currently allows any authenticated user to access stored media files.

Controls available to users

  • Disable analytics tracking in settings.
  • Disable location sharing for future shared workouts.
  • Hide route data on workout posts.
  • Use workout and post visibility settings such as public, friends, or private where supported.
  • Enable or disable biometric authentication on the device.
  • Request deletion of your account and associated data via the account deletion page.

Security and storage notes

The codebase stores application data in PostgreSQL and media in object storage using signed upload and download URLs. This page does not add commitments beyond the current implementation and should be updated when data flows or access rules change.

Important implementation note

This statement is intentionally grounded in the current Riina project rather than generic policy language. If the application changes, especially around media access, route visibility, analytics, or third-party AI processing, this page should be revised to match the new behavior before release.