SOOM Privacy Policy

1. Data the app uses

Rows marked «when signed in» leave your device only if you are signed in. Without an account, none of this leaves your device.

2. Location

• We request «While Using the App» only. We never request Always-On location.
• Collection starts when you start a run and stops the moment you end it.
• If you are not signed in, routes stay on your device and never leave it.
• If you are signed in, the route of a saved run — one point per second — is compressed and backed up to your own account.

3. Apple Health

• Write: with your permission, finished runs are saved to the Health app.
• Read: heart rate and energy are read only to display them during a run.
• Health data stays inside Apple's HealthKit and is never sent to SOOM servers, signed in or not.
• Denying these permissions does not limit any feature of the app.

4. Accounts and backup

An account is optional. Running, measuring, saving and reading your history all work without signing in, and nothing is locked.

• Signing in stores your email address and display name as account details, and issues one identifier (uid) per user.
• What gets backed up is your runs and route files. Health data and step counts are not backed up.
• Backups are stored with Google LLC's Firebase (Authentication, Cloud Firestore, Cloud Storage), and access is restricted to your own account. No other user can read them, and the company does not read them in the ordinary course of operating the service.
• Signing out leaves the runs on your device and simply stops further uploads.
• See the Data deletion page for how to remove your account and its backups.

5. Purchases and subscriptions

Apple handles all payment for SOOM+.

• SOOM never receives or stores card numbers, payment methods, or billing addresses.
• Subscription status is checked on your device using the receipt Apple issues, and that check stays on the device. No purchase history is sent to SOOM.
• Managing, cancelling, and refunding a subscription follow your App Store account settings and Apple's policies.

For the free trial (three weeks from your first finish), a single start date is stored on your device and in your own iCloud key-value store, so that changing devices does not restart the trial. It is never sent to SOOM. That store is operated by Apple inside your own iCloud account.

6. What we never collect

• Phone numbers, addresses, dates of birth, or any identity information not listed in the table above
• Advertising identifiers (IDFA) or device advertising identifiers
• Usage analytics and crash logs — the app bundles no analytics SDK
• Contacts, photos, or the microphone
• Payment details such as card numbers — Apple handles these; SOOM never sees them

An account is optional, and if you never sign in, nothing in the table above is sent to a server.

7. Third parties and processors

We do not sell your personal data or provide it to third parties. We do engage the processors below, only as far as running the service requires.

The backup database (Cloud Firestore) is stored in the asia-northeast3 (Seoul) region. The Cloud Storage bucket holding route files follows the location configured for the Firebase project.

The app bundles no advertising SDK and no analytics SDK.

8. Sharing a run

After a run you can generate a «receipt» image to share.

• It contains only distance, time, pace, and the gap — no map and no coordinates.
• Whether and with whom to share is entirely your choice.
• SOOM does not store or view shared images.

9. Retention and deletion

• On-device data: deleting the app removes the data it stored.
• Server backups: Me › Delete all runs in the app also deletes the runs and route files backed up to the server.
• Account: deleting your account removes the authentication record together with the runs and route files held on the server.
• Apple Health: workouts written to the Health app can be deleted there.
• Support email: kept while we handle your enquiry; deleted within seven business days of a deletion request.

See the Data deletion page for the full steps.

10. Apple Watch

Runs recorded standalone on the watch are stored there and handed to your iPhone when they reconnect — between your own devices only, never through a server.

If you are signed in, however, the iPhone that received the run then backs it up to your own account.

11. Your rights

You may access, correct, delete, or halt the processing of your personal data.

• Access and correction: your runs are visible and editable in the app's history screen at any time.
• Deletion: handled directly in the app, by deleting runs or your account (Data deletion).
• Halting processing: signing out stops any further transmission to a server.

For anything the app cannot handle, write to manager@x-ti.org and we will act and reply within seven business days. You may also exercise these rights through a legal representative.

12. Children

SOOM is not directed at children under 14 and does not knowingly collect their data. If we learn that a user is under 14, we delete the account and its data without delay.

13. Privacy officer and contact

• Responsible party: XTI Co.,Ltd. (주식회사 엑스티아이)
• Email: manager@x-ti.org

In Korea, privacy complaints may also be raised with:

• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• Korea Internet & Security Agency privacy centre: 118 (privacy.kisa.or.kr)
• National Police Agency cybercrime bureau: 182 (ecrm.police.go.kr)

14. Changes

If this policy changes, it is posted on this page with a new effective date. Significant changes are announced in the app from seven days before they take effect.

15. Contact

XTI Corp · manager@x-ti.org