Summary: Krilyx ("we", "us", or "our") respects your privacy. Krilyx is a sports networking app for runners and cyclists, and we collect only the information necessary to run it: activity pings, meetup map points, events, clubs, squads and the connections between people. We do not sell your personal data or use third-party advertising networks.
1. Age Eligibility Requirement
Krilyx is intended strictly for users who are at least 16 years of age. We do not knowingly collect or solicit personal information from children under 16. If we learn that we have collected personal data from anyone under 16 years of age, we will delete that information immediately.
2. Information We Collect
To operate Krilyx and enable core social and activity features, we collect the following categories of information:
A. Account & Registration Information
- Phone Number: Collected for secure account creation, authentication, and sign-in via SMS One-Time Passwords (OTP).
- Profile Data: Display Name, Gender, City, Date of Birth, and Profile Avatar.
- Full Name: Your first and last name, given once at sign-up, shown to people you meet and not changeable afterwards. Optional one-line bio and usual running pace / riding speed (you can hide your pace).
- Reliability Record: After a plan, people can answer “How did it go?”. The answers form a “shows up” percentage on your profile that other users can see.
- Alliance Code: A unique 5-digit identifier (e.g.,
ALLY-12345) generated for your profile to allow trusted connections with other users.
- Your Agreement: The date and version of the Terms & Conditions, Privacy Policy and Community Guidelines you accepted when you signed up, and, if you host an event or a club, when you last accepted the Host Rules. This record is kept in your private account details, which only you and the Krilyx team can see, and is used as proof of your agreement.
B. Geolocation Data
- Precise Location Coordinates: Latitude and longitude coordinates that you manually select on the map for activity starting points, midpoints, destination points, event locations, or saved favorite spots.
- Note: Krilyx does not continuously track your location in the background when the app is closed or inactive. Location coordinates are strictly logged when you pick points or create activity pings within the app.
- Approximate Location (optional): If you allow it, the app reads your approximate location on your phone only, to show how far pings and events are from you. It is never sent to our servers or stored. Krilyx never asks for precise or background location.
C. Activity & Performance Data
- Activity Pings: Sport type (e.g., Running, Cycling), target distance (km), duration (minutes), speed/pace preferences, and activity level parameters.
D. Communications & Social Interactions
- Direct Messages: Text content, timestamps, and read statuses of one-on-one messages exchanged between users who have joined or responded to the same Activity Ping, as well as messages exchanged with confirmed Allies.
- Squad Group Participation: Squad affiliations and group participation (being a member of a social or event squad within the app). Note: Being a member of a squad is purely a free social/group feature and does not involve any paid memberships or subscriptions.
- Event Registrations: When registering for an athletic event, we collect your Name, Email Address, and Emergency Contact Name/Phone Number for event organization and safety.
- User Feedback: Any text or diagnostic comments voluntarily submitted through our feedback feature.
- Group Chats: Messages in squad chats and in the chat of an activity you joined, visible to the members of that squad or activity.
- Events You Register For: Your name, your verified phone number and your answers to the organiser’s questions are shared with that event’s organiser. “Contact Organiser” messages are visible only to you and the organiser. If you organise an event, your contact number is shown only to people who registered.
- Clubs: Clubs you join, your role, the club runs and rides you join and your check-ins, visible to members of that club.
- Reports: If you report something, we keep a copy of what was reported, your reason and who reported it, visible only to the Krilyx team. The person you report is never told who reported them. Content reported by several people may be hidden automatically until reviewed, and the team may remove content or accounts that break the Terms.
- Blocked People: If you block someone, we save their account ID and name in a private list so that the block works on all your devices. Only you can see this list (Settings > Blocked People) and the blocked person is never told. Deleting your account deletes this list.
- Photos: Cover photos organisers add to events and clubs, resized and stripped of hidden data (such as location) before upload.
E. Technical & Device Data
- Basic device metadata (such as device model and operating system version) used for app stability, local preference persistence, and security verification via Firebase App Check.
- Crash & Diagnostic Reports: When the app crashes or hits an error, technical details (error trace, app version, device model, OS version) are sent to Firebase Crashlytics so we can fix the problem.
- App Usage Analytics: We use Google Analytics for Firebase to understand how the app is used, such as how often features (sending a ping, asking to join, registering for an event) are used and how long a session lasts. Events are not tied to your name, phone number or location. We also keep simple usage counters (for example number of pings sent and time used per day) in a separate record visible only to the Krilyx team.
- Notifications: A notification token for your device, so we can send you pings, requests, messages and event reminders. You can switch each kind off in Settings.
3. How We Use Your Information
We process your data strictly to fulfill app functionality, including:
- Creating and managing your user account and profile.
- Displaying your activity pings and chosen meetup locations to other users or your Allies on interactive maps.
- Facilitating direct messaging and Squad coordination.
- Managing athletic event registrations and emergency contact accessibility for event hosts.
- Maintaining security, preventing fraud, and verifying API requests via Firebase App Check.
- Keeping the community safe: reviewing reports and acting on content or accounts that break the Terms & Conditions.
4. Third-Party Service Providers
We share information with trusted infrastructure service providers strictly for app functionality:
- Google Firebase (Cloud Firestore & Authentication): Secures your login and stores your profile, activity pings, messages, and squad data under strict database security rules.
- Mapbox: Provides interactive map visualization, map tile rendering, and geocoding services for selected coordinates.
- Google Firebase (Analytics & Crashlytics): Provides anonymous usage statistics and crash reports used only to improve the app's stability and features.
- Google Firebase (Cloud Storage, Cloud Functions & Cloud Messaging): Stores event and club cover photos, runs server tasks (ticket checks, hiding reported content, reminders) and delivers notifications.
We do not share your personal data with third-party advertisers, data brokers, or marketing networks.
We may disclose information if the law, a court or a government authority requires it, or where it is needed to protect the safety or rights of our users, the public or Krilyx, or to investigate and act on a breach of our Terms & Conditions or Community Guidelines (for example impersonation, harassment, fraud or a threat to someone’s safety). This can include giving information to the police or other authorities that are legally entitled to ask for it.
5. Data Storage, Retention & Security
Your data is transmitted securely using industry-standard HTTPS / TLS encryption in transit. Information is stored in Cloud Firestore servers governed by strict rule-based access controls ensuring users can only read and write data they are authorized to access. Your account data is stored in Google Cloud data centres in India; event and club cover photos are stored in the United States. Cover photos of past events are deleted 30 days after the event.
We retain your personal data for as long as your account remains active or as necessary to provide you with app services.
Accounts we remove. If we remove an account for breaking our Terms & Conditions or Community Guidelines, we may keep the account details and the records of the matter (such as reports and the content concerned) for as long as the law requires and as we need to deal with complaints, disputes and legal claims. This does not apply when you delete your own account (see section 6), except where the law requires us to keep something.
6. Account & Data Deletion
You have full control over your personal data:
- In-App Deletion: You can delete your account and profile data directly within the app settings.
- Web Request: You may also request complete account and data deletion by sending an email to playoutalpha@gmail.com with the subject line "Account Deletion Request". Upon request verification, all your profile data, pings, and messages will be permanently removed from our active databases.
7. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Effective Date". We encourage you to review this Privacy Policy periodically.
8. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: