This Policy explains what data the "Your Territory" mobile app (the App) collects, why it is processed, who it is shared with, how long it is kept and how you can manage it.
The data controller is the developer of the App (we, the Operator). Contact for any request regarding personal data: support@sit30.net.
Processing is carried out in accordance with Russian Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" and, for users in the European Union, with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
By installing and using the App you confirm that you have read this Policy. If you do not agree with it, please do not use the App.
Your account is created through the shared SIT 30 service account and is used across our other apps. Sign-up and sign-in involve:
This is the core data of the App: the game does not work without it. While a walk is being recorded, the App stores and sends to the server:
Coordinates are collected only while a walk is actively being recorded after you tap "Start", and collection continues when the App is in the background or the screen is locked, which is why the "Location - Always" permission is required. The App does not track your movements between walks and does not collect coordinates in the background while no recording is running.
Coordinates are also used on a one-off basis, without being stored as a track, when you search for competitions near you, when you create an arena (the centre and radius you choose) and when you tap a cell on the map (the coordinates of the cell you are asking about).
Through the system motion sensors (Core Motion) the App receives:
The App does not connect to Apple Health and neither reads nor writes any health data.
On every launch the App sends to the server:
As with any network request, the server learns the IP address of your connection, which is recorded in technical logs.
If you create a competition or take part in one, the following is processed: the competition name, the coordinates of the arena centre and its radius, the type (open or closed), the invite code, the list of members, their roles and statuses (owner, member, banned), and the calculated area and leaderboard positions.
If the App crashes or hits an error, we receive a crash report through the Firebase Crashlytics service. A report contains:
The report is produced at the moment of the crash and sent the next time the App starts. It contains no coordinates, tracks, walk contents, email address or name.
This data is used solely to find and fix errors. We do not use it for profiling, advertising or assessing your behaviour.
To understand which features people use and which go unnoticed, we collect anonymised product analytics through the Firebase Analytics service. The following is sent:
Analytics never receives: coordinates, tracks or walk geometry, competition names, invite codes, email addresses or player names. Error texts are not included in events either - only short technical labels such as "network" or "http_500".
We use this data solely to improve the App. The advertising identifier (IDFA) is not collected: the App links the build of Analytics that has no support for it, so no system tracking prompt is shown and the data is not combined with information from other apps and websites.
The App does not collect or request: payment data, card or account numbers (there are no purchases in the App), phone numbers, postal addresses, identity document details, date of birth, gender, height, weight or any other biometric or health data, the contents of your address book, photos and videos from your device, or data from other apps.
We do not use advertising networks, advertising identifiers (IDFA) or trackers. The App shows no advertising, shares nothing with data brokers and does not track you in the sense of Apple's rules. The third-party services that receive data are limited to crash diagnostics (section 2.6) and product analytics (section 2.7).
| Data | Purpose | GDPR legal basis |
|---|---|---|
| Email, password, login, name, avatar | Creating an account, signing in, identifying you in competitions | Performance of a contract, Art. 6(1)(b) |
| Coordinates, route points, geometry, timestamps | Recording a walk, calculating area, claiming cells, drawing territory on the map | Consent, Art. 6(1)(a); performance of a contract, Art. 6(1)(b) |
| Steps, distance, duration | Walk metrics and statistics | Performance of a contract, Art. 6(1)(b) |
| Accuracy and speed of points | Protection against cheating and falsified results, fair play | Legitimate interests, Art. 6(1)(f) |
| Push token, device model, OS and App version | Delivering notifications about captured and lost territory, compatibility diagnostics | Consent (notifications), Art. 6(1)(a); legitimate interests, Art. 6(1)(f) |
| Competition and membership data | Running leaderboards, moderating the list of members | Performance of a contract, Art. 6(1)(b) |
| IP address, request logs | Security, protection against abuse, incident investigation | Legitimate interests, Art. 6(1)(f) |
| Crash reports | Finding and fixing errors, App stability | Legitimate interests, Art. 6(1)(f) |
| Usage events, walk metrics, screens opened | Understanding which features are used, improving the App | Legitimate interests, Art. 6(1)(f) |
You give consent for location processing in the iOS system dialog and can withdraw it at any time in your device settings. After withdrawal, recording new walks becomes impossible; data already saved remains until you delete it yourself.
The App is social by nature, so it is important to understand the limits of visibility.
Visible to the other members of a competition you have joined:
Visible to no one but you:
Please note: other members see 50 x 50 metre cells, not the precise line of your route. Even so, regular walks from home form a recognisable pattern, so join competitions whose arenas cover your home deliberately. There is no feature for hiding start and finish points in the current version.
Open competitions are visible in the catalogue to every user of the App who is near the arena; closed ones are available by invite code only.
The App can be used in local mode, without creating an account. In this mode your walks and claimed territories are stored only in your device's memory, nothing is sent to the server, and competitions and leaderboards are unavailable. Such data is erased when you delete the App and cannot be restored by us, because we never had it.
We do not sell your data, do not share it with advertising networks or data brokers, and do not use it to train artificial intelligence systems.
Data is shared only with the following service providers, and only to the extent needed for the corresponding feature to work:
| Recipient | Function | Data shared |
|---|---|---|
| Google LLC (Firebase Cloud Messaging) | Delivery of push notifications | Device token, notification text |
| Google LLC (Firebase Crashlytics) | App crash diagnostics | Stack trace, device model, OS and App version, anonymous installation identifier |
| Google LLC (Firebase Analytics) | Product usage analytics | Action events, numeric walk metrics, names of screens opened, device model, OS and App version, language, country by IP, app instance identifier |
| Apple Inc. (MapKit) | Map display | Coordinates of the visible map region |
Maps are rendered by the operating system, and requests to the mapping service are processed by Apple under its own privacy policy.
Data may also be disclosed upon a duly reasoned request from competent public authorities, where such a request is made in the manner prescribed by law.
The servers holding the App's data are physically located in the Russian Federation. This satisfies the data localisation requirement of Part 5, Article 18 of Federal Law No. 152-FZ for databases of Russian citizens.
Retention periods:
| Category | Period |
|---|---|
| Account data | While the account is active |
| Walks, tracks and claimed territories | Indefinitely, until you delete them yourself or delete your account |
| Data of competitions you created | While the competition exists |
| Push notification token | Until notifications are disabled or the account is deleted |
| Technical logs with IP addresses | No longer than 12 months |
| Crash reports | 90 days on the Firebase Crashlytics side |
| Product analytics events | Per the Firebase Analytics retention setting: between 2 and 14 months. Anonymised aggregate reports are kept longer |
The in-game influence of claimed cells weakens over time under the rules of the game (full strength for up to six months, half strength from six months to a year, no influence counted after a year). This is a game mechanic, not deletion of data: the records of your walks remain in your history until you delete them.
For users in the European Union: your data is transferred to and stored in the Russian Federation, for which the European Commission has not adopted an adequacy decision. The transfer is made on the basis of your explicit consent under Art. 49(1)(a) GDPR, which you give by creating an account and starting to record walks. Data is transmitted over a secure HTTPS connection.
The push notification token, crash reports and product analytics events are additionally processed by Google infrastructure, whose servers are located in the United States among other countries.
If you do not agree to such a transfer, you can use the App in local mode without registering, or stop using it.
We apply the following protective measures:
No system can guarantee absolute protection of data.
You have the right to:
Some of these rights work directly in the App: an individual walk can be deleted by swiping in the "My walks" section (deleting it also removes the related claims from every competition it counted towards), location and notifications can be turned off in the system settings, and your player name can be changed in your profile.
For any other request, write to support@sit30.net from the email address you used to register. We will reply within 30 days. To protect your data we may ask for additional proof of identity.
To delete your account and the data associated with it, send a request to support@sit30.net from the address you used to register. Your account, walks, tracks and claimed territories will be deleted within 30 days of the request being confirmed.
Exceptions that remain after deletion:
Deleting the App from your device does not by itself delete your server account.
The App is not intended for children under 14, or, for users in the European Union, under 16 without the consent of a parent or legal guardian. We do not knowingly collect data from such users. If you become aware that a child has provided us with data without the appropriate consent, write to support@sit30.net and we will delete it.
We may update this Policy. The current version is always available at the permanent address listed on the App's App Store page. We recommend opening it from time to time to stay aware of the current terms of data processing. By continuing to use the App, you accept the version of the Policy then in force.
For any question about the processing of personal data, to exercise your rights and to withdraw consent: support@sit30.net.