Privacy Policy
Scorch · Last updated 4 August 2026
Scorch is a GPS territory game and training tracker. It records where you run, walk or ride, because that is the product. This page says exactly what is collected, where it goes, and what you can switch off. If anything here is unclear, write to razanians313@gmail.com.
What is collected
| Data | Why | Where it is stored |
|---|---|---|
| Precise location, during an active session only | To draw your route, measure distance, and calculate the territory a closed loop encloses | Our database (Supabase, EU region) |
| Email address | To sign you in and recover your account | Our database |
| Username, and optionally a bio, city, country and profile photo | Shown on the map and in standings | Our database |
| Session records: distance, duration, pace, splits, elevation, activity type | Your history, personal records and standings | Our database |
| Territory polygons | The game itself — what you hold and what rivals can take | Our database |
| Step count and motion | Cadence and to improve distance accuracy | Your device only |
| Body metrics: height, weight, age, sex | Estimating calories, stride and heart-rate zones | Your device only. Never uploaded. Reinstalling the app loses them. |
| Photos you choose | Your profile picture, or a photo you stamp with run stats | Profile photos: our database. Run photos: your device unless you share them. |
| Push token, if you enable notifications | To tell you when someone takes your ground | Our database |
Location, specifically
- Location is recorded only while a session you started is running. There is no background collection outside a session.
- Background location permission exists for one reason: a run tracker has to keep recording while the phone is locked in a pocket. If it stopped, your run and your territory would be lost.
- A visible notification is shown for the whole time a session is recording.
- Stop the session and location collection stops with it.
What other people can see
Your territory is drawn on a public map, along with your username, your chosen colour and, if you allow it, your profile photo. Your standings position is public unless you hide it.
Because loops usually start and finish at your front door, Scorch offers a privacy zone: pick a centre and a radius, and that circle is cut out of your territory on everyone else's map. Your own view is never clipped, and your standings total is never reduced — only the shape others see. You will find it in Settings, and we recommend setting it before your first run from home.
You can also hide yourself from standings entirely, and turn off showing your photo on the map.
Who else receives anything
Scorch has no advertising, no analytics profile, no tracking across other apps or websites, and nothing is ever sold. Data reaches only these parties:
| Service | What it receives | What for |
|---|---|---|
| Supabase (database and sign-in, EU region) | Everything in the table above marked "our database" | Storing your account and your game |
| Open-Meteo | Your coordinates rounded to about 100 m. No account, no identifier, not linked to you. | The temperature shown on a run photo sticker |
| Photon (Komoot) | Text you type into place search, and your approximate position to rank nearby results. No account, no identifier. | Searching for places on the world map |
| Sentry (only if crash reporting is enabled in this build) | Crash diagnostics. All coordinates, routes, territory shapes and photo references are stripped on the device before anything is sent. | Finding and fixing crashes |
Your rights
Scorch is built and operated from Germany, and the GDPR applies.
- Access and portability — export any session as a GPX file from the summary screen.
- Correction — edit your profile at any time.
- Erasure — Settings → Delete account. This removes your sign-in record, and your profile, sessions and territories are deleted with it. It is immediate and cannot be undone.
- Objection and restriction — write to us at the address above.
- Complaint — you may complain to your local data protection authority.
How long data is kept
Your account data is kept until you delete your account, at which point it is removed. Deleted territory does not linger: it is either taken over by another player or removed with your account.
Children
Scorch is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will remove it.
Security
Traffic is encrypted in transit. Database access is protected by row-level security, so one account cannot read another's private data. No system is perfect, and we will not claim otherwise.
Changes
If this policy changes materially, the date at the top changes and the app will tell you.