Privacy Policy

Who we are

MythStride is a running game with RPG progression, developed and published by MythStride Studio.

For anything related to privacy and data protection, the official channel is contato@playmythstride.com.

What this policy covers

This policy applies to the MythStride app for Android (com.playmythstride.mythstride), the companion Wear OS app, the playmythstride.com website, and the closed beta list.

External services you choose to connect have their own policies, described in the sharing section and on the Services and integrations page.

Data we process

We process the categories below according to the features you use. Not all of them apply to every player.

• Account and authentication: email, password stored only as a hash, email verification state, an internal account identifier and, if you sign in with Google, your Google account identifier
• Profile: display name, preferred language, and a profile picture you upload
• Running and physical activity: date and time, duration, distance, pace, speed, steps, cadence, GPS route points, and average heart rate when measured
• Game progression: level, experience, quests, achievements, inventory, gold, diamonds, boss and event participation
• Community: friendships, groups, rankings, blocks, and reports you submit
• Authorized integrations: connection tokens and running activities imported when you connect Strava
• Aethron: journey context sent to the model and the narrative messages generated
• Device, connection, and security: technical app and device information, IP address, and security audit records
• Support: the content of the messages you send us
• Beta list: email, optional name, language, and signup source

How we use the data

Each group of data exists for a concrete function of the service.

• Account and authentication: creating and accessing your account, verifying your email, recovering your password, and keeping the session secure
• Profile: identifying you inside the game and the community
• Running and physical activity: calculating distance, duration, pace, and speed, recording your history, and converting eligible activity into progression, quests, and battles
• Location: measuring the run and checking the consistency of the activity
• Heart rate and steps: showing the run in progress and completing the activity record
• Device, connection, and security: authenticating requests, applying usage limits, preventing fraud and abuse, and protecting accounts
• Integrations: importing activities from services you connect
• Aethron: generating narrative content related to your progress
• Community: operating friendships, groups, rankings, blocks, and report review
• Support: answering your requests
• Beta list: managing the list, preventing abuse, and sending invitations and beta notices

Running, physical activity, and heart rate

MythStride is a running and gaming experience. It is not a medical device, it does not diagnose, it does not prescribe treatment, and it does not replace evaluation, monitoring, or advice from health professionals. In an emergency, contact the emergency services in your region.

During a run, the app records duration, distance, pace, and speed and, when available, steps and cadence. Heart rate is measured by the sensor of your Wear OS watch, when you use one, and is sent to the phone during the activity.

When the run ends, the activity data — including the GPS route points and the average heart rate when measured — is sent to MythStride servers to validate the run, calculate progression, and keep your history. It does not stay only on the device.

The MythStride Android app does not read from or write to Health Connect and does not access other health apps installed on your Android device.

Running, physical activity, and heart rate data are not used for advertising and are not sold.

MythStride on Wear OS

The Wear OS app is a companion to the Android app and depends on the paired phone to work. It does not send data directly to our servers.

On the watch, the app requests access to body sensors and heart rate, activity recognition, location, and notifications, used only while a run is in progress.

During the activity, the watch exchanges run commands and session measurements with the paired phone — heart rate, distance, steps, duration, and run state. This exchange happens over the local Google Play Services channel between the two devices.

The phone remains responsible for finishing the run and sending the result to the MythStride server.

Location

Precise location is used during an active run to calculate distance, pace, and route, and to check the consistency of the activity.

While the run is active, tracking continues even with the screen off or the app in the background, through an Android foreground service with a visible notification.

The app does not request background location permission and does not collect location when no run is in progress.

Route points are sent to our servers when the run ends and are used to calculate distance and run integrity checks, including mock-location detection. Location is not used for behavioral advertising.

You can deny or revoke the permission in your Android settings. Without it you cannot record runs with the phone GPS, but the rest of the app remains available.

Aethron and artificial intelligence

Aethron is MythStride's narrative companion and uses a language model to generate messages and reactions related to your journey.

The context sent to the model comes from your account and the game: profile, progress, recent runs, pace, quests, achievements, and narrative memories. Responses may be stored to keep narrative continuity.

The model runs on MythStride's own infrastructure. Your journey context is not sent to an external artificial-intelligence provider and is not used to train third-party models. Automatic profile-image moderation runs on the same infrastructure.

Automatically generated content may be inaccurate and does not replace professional, medical, or emergency advice.

Advertising

The MythStride app includes the Google AdMob SDK, intended for an optional rewarded-ad feature.

In this version the feature is turned off: MythStride does not request or display ads and does not use running, location, heart rate, or any other physical-activity data for advertising.

If advertising is turned on in a later version, this policy and the Google Play Data safety declaration will be updated before that happens.

Items and virtual currency

Gold, diamonds, items, and equipment exist only inside MythStride and are tied to your account.

Real-money purchases are not available in this version. Existing purchase records are handled as described in the retention section.

Who we share data with

We share only what is needed for the functions described below. There is no sharing for targeted advertising.

• Google — Google account sign-in, Google Play services required by the app, and phone-to-watch communication on Wear OS. Handles your Google account identifier when you choose that sign-in, technical device data, and the messages exchanged between phone and watch. https://policies.google.com/privacy
• Strava — an optional integration you enable. Receives your account authorization and returns the imported running activities. https://www.strava.com/legal/privacy
• Resend — sending account emails such as verification, password recovery, deletion links, and beta communications. Handles your email address and the message content. https://resend.com/legal/privacy-policy
• Cloudflare — delivering and protecting traffic between the app and our API. Handles connection data such as IP address. https://www.cloudflare.com/privacypolicy/
• Sentry — technical crash reports from the app, configured to exclude user identifiers and request content. https://sentry.io/privacy/
• GitHub — hosting for this website. Handles connection data from visitors. https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement
• Google AdMob — included in the app for the advertising feature described above, turned off in this version. https://policies.google.com/technologies/ads

We do not sell personal data

We do not sell, rent, or transfer personal data for third parties to use in their own marketing.

Processing outside Brazil

The MythStride API and database run on infrastructure under our control.

Some of the providers listed above operate internationally, and in those cases the information needed for the contracted function may be processed outside Brazil. We share only what the described purpose requires.

Security

We apply technical and organizational measures proportionate to the service: passwords stored only as hashes, traffic protected by HTTPS, short-lived session tokens with renewal, single-use verification tokens stored only as hashes, request rate limits, security audit records, and restricted infrastructure access.

No internet-connected service can guarantee absolute security. If we identify a relevant incident, we will act in accordance with applicable law.

How long we keep data

We keep your account data for as long as the account exists.

When the account is deleted, the data linked to you is removed as described on the account deletion page. Security audit records and purchase records are kept in anonymized form for a limited additional period when needed for security, fraud prevention, and legal obligations.

Support messages are kept for as long as needed to handle and record the request. Beta list data is kept until you ask for removal or until the program ends.

Account and data deletion

You can request deletion of your account at any time through the official deletion page, with email verification and without needing the app installed, or from inside the app under Legal, privacy, and account.

The deletion page describes the verification process, what is removed, and what may be kept.

Your rights

Under Brazil's General Data Protection Law and other applicable rules, you may request confirmation that processing exists, access to your data, correction of incomplete or outdated data, anonymization or deletion of unnecessary data, information about sharing, portability under the applicable regulation, withdrawal of consent for optional features, and deletion of your account.

Inside the app, under Legal, privacy, and account, you can see a summary of your account data and request a copy of it.

To exercise any right, write to contato@playmythstride.com. We may ask for additional information to confirm your identity before acting, in order to protect your account.

Minimum age

MythStride is intended for people aged 18 or older. We do not direct the service to children or teenagers and we do not knowingly collect data from people below that age.

If we identify an account created by someone under 18, it may be closed and the associated data removed.

Changes to this policy

This policy may be updated to reflect changes in the service, new features, or legal requirements. When a change is relevant, we will announce it through MythStride channels before it takes effect. The effective date below always identifies the version in use.

Contact

MythStride Studio — contato@playmythstride.com

Effective date

This version of the Privacy Policy is effective as of September 15, 2026 and replaces previous versions.