Owned & Operated by: YouTooCanRun Sports Management Pvt. Ltd.
3A, Valmiki, Next To Pharmacy College, Behind Kalina Municipal, Sundar Nagar, Kalina, Mumbai – 400098, India
📧 support@youtoocanrun.com    📞 +91-9920142195

YouTooCanRun Sports Management Pvt. Ltd. ("YouTooCanRun") recognizes that the privacy of its users is important. This Privacy Policy explains how information is collected, used, stored, and protected when you use the Banking Stepathon mobile application ("App"), as well as related services offered by YouTooCanRun. By using the Banking Stepathon App, you agree to the collection and use of information in accordance with this Privacy Policy.

1. About Us

App Name: Banking Stepathon
Owned & Operated by: YouTooCanRun Sports Management Pvt. Ltd.
3A, Valmiki, Next To Pharmacy College, Behind Kalina Municipal, Sundar Nagar, Kalina, Mumbai – 400098, India
📧 Email: support@youtoocanrun.com    📞 Phone: +91-9920142195

2. Scope of This Policy

This Privacy Policy applies to all users of the Banking Stepathon App. Access to the App is limited to participants invited by an authorized event organizer associated with YouTooCanRun. Event organizers provide a list of eligible participant email addresses, and registration is permitted only when the email address entered by the user matches an email address in the approved participant list.

3. Information We Collect

a) Personal Information

To participate in the Banking Stepathon challenge, we may collect:

• Name and mobile number or email address (for login and identity verification)
• Profile photo (uploaded for Stepfie and achievement certificates)
• BMI inputs: height, weight, age, and gender — calculated in real-time, not stored on servers
• Photos captured or uploaded at challenge checkpoints

This information is collected strictly for:

• User identification and OTP-based login verification
• Challenge participation and step progress tracking
• Certificate generation and leaderboard display
• Event-related communication and notifications

b) Fitness & Activity Data

Banking Stepathon allows users to optionally connect fitness apps and wearable devices to track step activity automatically. Data collected with explicit user consent:

• Step count (daily and cumulative total)
• Activity date and time
• Sync source (Google Fit, Apple Health, Fitbit, Garmin, or Health Connect)

We expressly do NOT collect:

• GPS route maps or location history
• Heart rate, blood pressure, or any clinical health vitals
• Contacts, messages, or any data unrelated to step tracking
• Health data for advertising, marketing, or data-mining purposes

c) Purpose of Fitness Data Collection

All fitness and activity data is used exclusively for:

• Calculating individual challenge progress and unlocking checkpoints
• Generating personalized achievement certificates
• Updating individual and team leaderboard rankings
• Displaying personal performance summaries within the App

d) Automatically Collected Technical Information

The App may automatically collect limited technical information:

• Device type and operating system version
• App version and anonymous usage logs
• Firebase Cloud Messaging (FCM) token — for push notification delivery only

This information is used solely for App security, performance monitoring, and bug fixing.

4. Legal Basis for Data Processing

We collect and process your data on the following legal bases:

• Contract performance: To provide you access to and functionality of the challenge App
• Consent: For optional fitness app connections and push notifications
• Legitimate interests: For App security, fraud prevention, and performance improvement

5. Data Sharing & Disclosure

YouTooCanRun does not sell your personal data. Data is shared only in the following limited cases:

• With the event organizer solely for event management and aggregate reporting
• With Firebase (Google LLC) — for secure OTP authentication and push notification delivery
• With connected fitness platforms (Google Fit, Apple Health, Fitbit, Garmin, Health Connect) — strictly for step data sync as explicitly authorized by you
• With law enforcement or regulators if required by applicable Indian law

Health and fitness data is expressly NOT shared with any third party for advertising, marketing, or commercial profiling purposes.

6. Cookies & Tracking Technologies

The Banking Stepathon mobile application does not use cookies. Cookies may be used only when you access YouTooCanRun services via the website (www.youtoocanrun.com).

7. Third-Party Links and Services

The App may include YouTube video embeds and links to third-party services such as fitness platforms. We are not responsible for the privacy practices or content of those external services. We encourage you to review their respective privacy policies.

8. Data Security

YouTooCanRun implements appropriate technical and organizational security measures, including:

• End-to-end encrypted data transmission (HTTPS / TLS)
• Secure server infrastructure with restricted, role-based access control
• Secure OAuth 2.0 authorization for all fitness app integrations
• Regular security reviews of third-party service configurations

9. Data Retention & Deletion

• Personal and activity data is retained for the duration of the event and up to 12 months thereafter
• Disconnecting a fitness app immediately stops any further step data sync
• BMI calculation data is processed in real-time and is never stored
• You may request full account and data deletion at any time via Settings → Delete Account within the App
• You may also request deletion by emailing us at support@youtoocanrun.com

Upon receiving a valid deletion request, all personal and activity data will be permanently removed within 30 days, except where retention is required for legal or fraud-prevention purposes (which will be disclosed to you).

10. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Update inaccurate information via the App or by contacting us
• Deletion: Delete your account and associated data via Settings → Delete Account or by contacting us
• Withdraw Consent: Disconnect connected fitness apps at any time via Settings
• Portability: Request your data in a machine-readable format

To exercise any of these rights, contact us at support@youtoocanrun.com or +91-9920142195.

11. Children's Privacy

The Banking Stepathon App is intended for corporate event participants and is not directed at children under 13 years of age. YouTooCanRun does not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it promptly.

12. Legal Disclosure

User information may be disclosed if required by law or in response to valid legal requests from governmental authorities in India. We will notify users to the extent permitted by law when such disclosures are required.

13. Changes to This Privacy Policy

YouTooCanRun may update this Privacy Policy from time to time. Any significant changes will be communicated via the App. Continued use of the App after changes are posted constitutes your acceptance of the updated policy. The effective date at the top of this document reflects when the policy was last updated.

14. Contact Us

For any questions or concerns regarding this Privacy Policy:

📧 support@youtoocanrun.com
📞 +91-9920142195
📍 YouTooCanRun Sports Management Pvt. Ltd., Mumbai, India
🌐 https://www.youtoocanrun.com