Privacy policy.

1. Who we are

twekes is a running app for iPhone and Android, the website twekes.com and the partner portal at twekes.com/partners (together, the "Service").

The Service is provided by Marc Tanas, an individual, Bitar Street, Msaytbeh, Beirut, Lebanon ("twekes", "we", "us"). We decide why and how your personal data is used, so we are its controller.

• Contact for anything in this policy, including your rights and deleting your account: info@twekes.com.
• Where twekes is offered: worldwide, except the European Union, the other EEA countries (Iceland, Liechtenstein and Norway), the United Kingdom and Switzerland. twekes is not offered or directed to people in those countries.

2. The short version

• Your health and fitness data is yours. It is used to run features for you. It is never used for advertising and never sold.
• Your Turf is visible only to you. You appear on leaderboards only if you switch that on. Your routes, exact location, home pin and date of birth are never shown to other runners.
• Moments are for members. People without an account see no Moments. A Moment you share with "Everyone" can be seen by anyone signed in to twekes.
• Ask twekes uses Anthropic's AI only after you agree. It never receives your exact location, your routes or your Strava runs.
• No ads, no ad tracking, no third-party analytics.
• Wherever you live, you have rights over your data (section 16).
• You can delete your account in the app, or by email from twekes.com/delete-account.

3. What we collect and why

3.1 Your account and how you sign in

Sign in with Apple (iPhone). You can create an account or sign in with your Apple Account instead of a password. Apple confirms who you are to us. We never receive your Apple Account password. From Apple we receive:

• an identifier for your Apple Account, which Apple makes unique to twekes;
• your email address, which may be an Apple private relay address if you choose "Hide My Email". Apple forwards our emails to your real address, and we never see it;
• your name, only the first time you authorise twekes and only if you choose to share it. We keep it with your sign-in record and use it as your display name if your new account does not have one yet. You can change your display name at any time;
• a token from Apple, which we store encrypted. We use it only to withdraw twekes's access to your Apple Account when you delete your twekes account or disconnect Apple.

We receive no contacts, payment details or other data from your Apple Account.

• Same email, same account. If Apple shares an email address that is already the confirmed email of a twekes account, you are signed in to that account and keep everything in it. A "Hide My Email" address is unique to twekes, so it matches no other account and creates a new one. We never merge two accounts automatically; email info@twekes.com if you have two.
• Managing sign-in methods. In Privacy & settings → Sign-in methods you can connect Apple to your account or disconnect it, as long as your account keeps a way to sign in. Your email and password stay connected. When you disconnect Apple, we withdraw twekes's access at Apple.
• When you delete your account, we delete your sign-in methods and withdraw twekes's access to your Apple Account (section 15).

3.2 Your profile

Optional fields: profile photo, city, area, bio, run types, other sports, interests, preferred run areas, date of birth, and a home pin on the map. You decide what to fill in.

The athletes directory. Runners are listed in the athletes directory by default, so other people can find you by name or handle in search. Today you cannot switch this off in the app. Ask us through Send feedback or at info@twekes.com and we will remove you.

We use your home pin to suggest after-run places near you when your live location is not available.

3.3 Location

twekes uses your phone's location only while you are using the app. It never tracks you in the background. It does not ask for "Always" location, and background location is blocked in the Android app. You can refuse or withdraw location permission in your phone's settings at any time. The map then starts from a default city, and you can move it yourself.

When we ask. Explore asks once, the first time you open it. Other screens ask only when you tap something that needs your location.

How we use it, and how precisely:

Pins you place yourself:

• Meeting point of a community run you post. Signed-in runners see the exact point; people without an account see only an approximate area.
• Meeting point of a club session. Everyone sees the exact point.
• Home pin. Never shown.

The "Use my location" switch (Privacy & settings, off by default) lets the app use your live position to sort nearby clubs and places, and to tailor Ask twekes. When it is off, those lists use your home pin if you set one. It does not stop the screens in the table above from using your rounded location while your phone allows location. To stop all location use, withdraw the permission in your phone's settings.

Other location data:

• Your country. When your phone allows location, the app uses it to work out which country's content to show. If your phone's location cannot tell us your country, the app asks ipapi.co and, failing that, ipwho.is. Both see your IP address and return an approximate location. We use only the country, to pick the content you see.
• Place names. Your phone turns coordinates into place names using Apple's or Google's built-in location service.
• Map images. The map is drawn from OpenFreeMap tiles. Some screens (venue and spot details, the location picker) use Google Maps, or OpenStreetMap tiles loaded through unpkg.com where Google Maps is not used. These services receive your IP address and the area of the map you are viewing.
• Routes from your watch or apps: see section 4.

3.4 Runs and activities

We store runs you log by hand and the workouts synced from the services you connect (sections 4 and 5). For each one: the type of activity, date and time, distance, duration and pace, the app or device that recorded it, and, where the source provides them, heart rate, calories, elevation and the route. Strava routes are not stored.

What we use runs for:

• My Running: your history, weekly stats, readiness check, race predictions and the Sunday recap. Race predictions and readiness are estimates calculated from your recent runs, and the app labels them "Estimates, not medical advice."
• Your Turf: the areas you have covered, as coarse hexagons of roughly 350 m, from the GPS routes of your runs and of walks and hikes your watch or health app sends. Only you can see your Turf. It uses Garmin, COROS, Apple Health and Health Connect, never Strava. The first and last 400 m of each route are left out.
• Leaderboards and your runner page, only if you switch this on (section 6).
• Ask twekes, as a short summary, only if you agree (section 7).

Only runs count as runs. Other workouts your watch or health app sends (for example strength training, cycling or walks) are stored with your activities but do not appear in your runs, stats or leaderboards.

Deleting runs. You can delete a run you logged by hand: open it in My Running and tap Delete run. A synced run shows where it came from and cannot be deleted in the app, because the next sync would bring it back. To have synced runs removed, ask us at info@twekes.com.

Public runs. In Privacy & settings you can choose whether new synced runs are private (the default) or public, and how much detail a public run shares: distance and time, or at "Full details" also pace, heart rate, climb and energy. No screen in the app shows other runners' individual runs today, but other signed-in twekes accounts can still retrieve the details of runs you made public, with your name and handle, from our database. Routes are never included. Keep runs private if you do not want this.

3.5 Moments, photos, videos and sound

Moments are photos and short videos, with sound if you allow the microphone. A Moment has:

• a caption;
• an optional area tag;
• optionally, your run's distance, time and pace (you choose each one);
• an audience: Everyone, Followers or a Club;
• a format: view once, 24 hours, a Post that stays on your profile, or an Event album.

Who sees a Moment. Moments are for people signed in to twekes.

• A Moment shared with Everyone can be seen by anyone signed in to twekes: in Community, in the Area Pulse of the area where it was tagged, and on your profile.
• A Moment shared with Followers or a Club is seen only by that audience.
• People without an account see no Moments anywhere in the app or on twekes.com. At most they see how many there are.
• Views. The person who posted a Moment can see who viewed it.
• Our website and promotion: see section 10.

Location metadata. When you upload a Moment, our server removes the location and other metadata embedded in the file. Photos are re-encoded; video location data is stripped.

Other photos. Your profile photo, club photos, business cover photos and screenshots attached to feedback are stored in storage that is reachable by anyone who has the exact link. For these photos, the current app re-encodes the image on your phone before upload, which normally drops embedded metadata such as location. Videos, and photos uploaded from older app versions, are stored as they were uploaded.

Camera, microphone and library.

• The camera is used for Moments, for scanning perk QR codes at partner venues and for business cover photos.
• The microphone records only while you record a video.
• When you pick photos or videos from your library, twekes receives only the items you pick.

3.6 Messages

Direct messages, club chats and run chats (text only) are stored so that the people in the conversation can see them. Our moderators can read a message when it is reported to them.

3.7 Clubs, runs and sessions

• Clubs you join, follow or manage.
• Runs and sessions you sign up for. Who can see that you are going: section 9.
• Community runs you post, with their meeting point, notes and your name as host.
• Club managers: the sessions you schedule and confirm. A confirmation shows whether it was made by the club or by twekes.

3.8 Ask twekes

See section 7.

3.9 Support, feedback and requests

• What you send through Send feedback (your message and any screenshot), emails to info@twekes.com, and our replies.
• Report answer reports about Ask twekes (section 7).
• Requests for an expert we do not list yet.
• Claims. If you claim a club, place or expert profile, the evidence and contact details you give us.

3.10 Safety and moderation

• Reports you make or that others make about content or accounts, including a short excerpt of the reported content.
• Moderators' decisions, and any suspension on your account (end date and reason).
• Blocks. Who you blocked, so that we can hide their content and messages from you and yours from them.
• Automated word filter. Before you post a Moment, comment, Shout, reply, message, community run or profile text, it is checked against a list of prohibited words. A match stops the post; we do not store the blocked text.
• Report alerts. When something is reported, our moderators get an email with the excerpt and the reporter's note.

3.11 Diagnostics

We do not use third-party analytics or crash-reporting tools. The app itself sends us two things:

• Crash reports:
  • the error and where in the code it happened;
  • the screen you were on;
  • your phone's operating system, and the app version and update;
  • your account ID if you are signed in.
• Performance diagnostics (signed-in runners only, a few times after each launch):
  • how long the app's requests to our servers take;
  • the address of each request, without any query string and with IDs masked;
  • your phone's operating system and the app version.

We use both only to find and fix bugs and slow screens. How long we keep them: section 14.

3.12 Device and notifications

Push token. We store a push notification token for your phone so we can send you notifications.

• The app asks signed-in runners after a short explanation.
• If your phone already allows twekes notifications, we also keep a token while you are not signed in, so the phone can receive general announcements.
• On Android, Google's push service uses a Firebase installation identifier.
• You can switch notifications off in your phone's settings.

What notifications contain:

• Direct messages, replies to your Shouts and new messages in run chats: only the sender's name (for example "Name messaged you"), never the message text.
• Other notifications: club and run updates, follows and sign-ups (with names), your run summaries (for example "Nice run · 8 km"), messages about your business listing, and announcements from our team.
• We do not notify you about replies or run-chat messages from runners you blocked, or them about yours.

Notifications are delivered through Expo and through Apple's or Google's push services.

App updates. The app checks Expo's update service for new versions. This sends your app version, platform, a random install identifier and your IP address to Expo.

3.13 Partners, experts and club managers

Listing data. If you list a business, an expert profile or a club, we collect what you enter: name, category, address and map pin, opening hours, perks, description, photos, Instagram handle, and contact details (phone, email, website).

Partner sign-up and portal.

• The partner portal sign-up asks for the business name, your name, your email and a password.
• In the portal, a partner sees each member of its loyalty programme: display name, handle, stamps, rewards, visits and the date of the last stamp. Partners never see where you were when you collected a stamp.

Emails to partners. We email partners about their listing (approved, or changes requested) through our email provider, Resend.

Club Instagram. A club that connects its Instagram account lets us store an access token and show its recent posts.

3.14 The website

• Hosting. twekes.com is hosted by IONOS, which keeps server logs (IP address, pages requested, browser type) for the period its own terms set.
• Fonts. Pages load fonts from Google Fonts, so your browser sends your IP address to Google.
• Local storage. The partner portal and our admin panel keep you signed in using your browser's local storage. This is strictly necessary and is not used for tracking. We use no advertising or analytics cookies.
• Website photos. Our team chooses and uploads every photo on twekes.com. Today they are photos from the twekes team's own Moments, without recognisable faces. Members' Moments: section 10.
• Pre-launch waitlist. If you joined our waitlist before launch, we hold your email address, name and city. How long: section 14.

3.15 What we do not collect

• Your contacts or address book.
• Payment card details.
• Your calendar: "Add to calendar" opens your phone's own calendar screen, and nothing is sent to us.
• Your reminders.
• Advertising identifiers.

4. Health and fitness data from your watch and phone

Connecting a watch or a health app is optional. You choose what to connect in Profile → Privacy & settings → Connected devices. Because this data can reveal information about your health, we treat all of it as health data, and we use it only with your explicit consent, which you give when you connect a source and grant its permissions (section 13).

4.1 Sources, what we read and what we keep

ROOK (ROOK Motion) is the service provider that syncs wearable data for us. ROOK identifies you with your twekes account ID and processes the data on our behalf. Under ROOK's terms, ROOK may also use aggregated, de-identified data for its own analytics and product improvement.

4.2 How we use it

• For you: your runs, weekly stats, readiness check, race predictions and Sunday recap.
• Your Turf: from Garmin, COROS, Apple Health and Health Connect routes; visible only to you.
• Leaderboards and your runner page: your distance, number of runs and average pace, only if you switch this on (section 6).
• Ask twekes: if you agree, a summary of your recent runs, without heart rate, routes or locations (section 7).

4.3 What we never do with it

• We never use health or fitness data for advertising, marketing or data mining.
• We never sell it, and never give it to data brokers, insurers, employers, lenders or advertising platforms.
• We never use it to decide on credit, insurance or employment.
• We never store it in iCloud.
• We share it outside twekes only in three ways:
  • with ROOK, our syncing provider;
  • with Anthropic, as the Ask twekes summary, only if you agree;
  • with other runners, as leaderboard and runner-page totals, only if you switch that on.
• Only our administrators can see runners' run records in our admin tools, and we look at your health or fitness data only when you ask us for help with it, to keep the Service secure, or when the law requires it.

4.4 Apple Health (HealthKit)

• twekes reads only these Apple Health types: workouts, workout routes, walking and running distance, active energy, and heart rate. It never writes data to Apple Health.
• Data from Apple Health is used only to provide the health and fitness features described in this policy.
• It is not used for advertising, marketing or use-based data mining, and it is not sold.
• It is disclosed to third parties only:
  • with your permission;
  • to provide the fitness features you use (ROOK for syncing; Anthropic for the Ask twekes summary, only after you agree);
  • as the law requires.
• It is not stored in iCloud.
• You can change what twekes may read at any time on your iPhone: Settings → Health → Data Access & Devices → twekes.

4.5 Health Connect

• twekes requests read access to these Health Connect types only: exercise sessions, distance, heart rate, elevation gained, active calories burned and total calories burned. It also requests permission to read in the background, so new workouts sync without opening the app.
• We use this data only to show your runs, your weekly stats, your readiness check, race predictions and your Turf, and, with your consent, for leaderboards and Ask twekes as described above.
• twekes's use of data received from Health Connect follows the Health Connect Permissions policy, including its Limited Use requirements.
• We transfer Health Connect data only:
  • to ROOK, for syncing, which you agree to when you connect;
  • to Anthropic, as the Ask twekes summary, with your consent;
  • for security, to comply with the law, or as part of a merger or acquisition.
• It is never used for advertising, never sold, and never used for credit or lending decisions.
• People at twekes do not read it except:
  • with your consent;
  • for security;
  • to comply with the law;
  • when it is aggregated for operations.
• You can change permissions at any time in Settings → Health Connect → App permissions → twekes.

4.6 Your controls

• Change permissions in Apple Health or Health Connect at any time.
• Disconnect a source in Connected devices.
  • For Garmin and the other brands connected through ROOK, new data stops and we also withdraw the authorisation at ROOK.
  • For Apple Health and Health Connect, the app stops syncing when you use it. Syncing that the phone already scheduled in the background can continue until you sign out, so to stop it straight away also remove twekes's access in Apple Health or Health Connect (sections 4.4 and 4.5).
  • Workouts already imported stay in your history, until you delete your account or ask us to remove them (section 3.4).
• Delete your account to delete all of it (section 15). We withdraw the authorisations at ROOK for every source you connected, including Apple Health and Health Connect, and the app removes your account from the ROOK software on that phone. If data for a deleted account still reaches us, we do not store it. ROOK keeps the data it holds under its own terms; it has no self-service deletion, and under its terms it deletes that data when we ask. You can ask us at info@twekes.com to make that request.

5. Strava

Connecting Strava is optional. twekes is not developed, sponsored or endorsed by Strava.

• Permission we ask Strava for: `activity:read_all`. This lets twekes read all your Strava activities, including activities you have set to "Only You" and the parts of routes inside your privacy zones.
• What we import: your runs from the last 90 days when you connect, then new runs whenever you open the app (at most every 10 minutes): date and time, distance, moving time, pace and the activity title. We also store your Strava athlete ID and the tokens Strava gives us.
• Routes: we do not store Strava routes, and Strava runs never appear on your Turf.
• Who sees it:
  • You, in My Running and in your weekly stats and Sunday recap.
  • Nobody else, unless you attach a Strava run's distance, time or pace to a Moment yourself. Strava runs do not count toward leaderboards, your runner page or the community totals in the Sunday recap.
• AI: Strava data is never sent to Anthropic or any other AI service.
• Disconnecting Strava in twekes deletes your Strava tokens. The runs already imported stay in your history until you delete your account, and twekes's access at Strava is not withdrawn by disconnecting. To withdraw it, remove twekes at strava.com/settings/apps.
• Deleting your twekes account deletes everything we imported from Strava and withdraws twekes's access to your Strava account.
• Strava's own use of data: Strava may collect and use information about how you and twekes use Strava's services through Strava's API ("Usage Data"), as described in Strava's Privacy Policy: strava.com/legal/privacy. Strava's terms and privacy policy govern your Strava account.

6. Turf, leaderboards and what is public

• Turf is personal.
  • Your Turf is shown only to you.
  • It is never shown to other runners or to people without an account.
  • It never uses Strava.
• Leaderboards are opt-in. You appear on the weekly leaderboard, and your runner page shows your running totals, only if you switch on "Show my runs on leaderboards" in Privacy & settings. The app asks once, and closing the question counts as "no". The switch is off until you choose.
• When it is on, other signed-in runners see:
  • your name, handle and photo;
  • your weekly distance and number of runs on the leaderboard;
  • your distance and runs over the last 30 days, your total distance since you joined, and your average pace on your runner page.

These totals never include Strava runs. Other runners never see your routes, starts or finishes. People without an account do not see leaderboards or your stats.

• When it is off, only you see your totals.
• Sunday recap. The recap can show the total distance run in your city that week. It counts only runners who switched on leaderboards, never Strava runs, and names nobody.
• If you used twekes before October 2026: sharing used to be on by default. It was switched off for everyone in October 2026 until each runner chooses.

7. Ask twekes (AI)

Ask twekes is an AI assistant. It answers questions about running where you are, using published twekes listings (clubs, sessions, runs, places to run, after-run places, races, experts and areas). It is provided by Anthropic, using Anthropic's Claude models; Anthropic processes the data on our behalf.

• Your agreement first.
  • The app asks for your agreement before you use Ask twekes for the first time.
  • You can withdraw it at any time in Privacy & settings → Ask twekes. Regular search keeps working without it.

What we send to Anthropic:

• your question;
• your city and country, and whether your location is available (never your coordinates);
• up to the last 10 messages of the same conversation;
• the published listings our server finds to answer you. Listings carry facts such as names, times and distances rounded to whole kilometres, never internal IDs, coordinates or anyone's contact details. When relevant, this can include:
  • the name, handle and city of runners listed in the athletes directory;
  • for signed-in runners, the host's name and the meeting point of community runs.
• only if you are signed in and agreed: a summary of your recent training (below).

Your training summary covers:

• distances, times, paces and run counts for the last 7, 30 and 90 days;
• days since your last run, and your longest run in the last 30 days;
• the date, distance, pace and city of your last five runs;
• races you said you are interested in;
• your display name, city, run types, interests and other sports.

It excludes Strava runs, heart rate, routes, exact locations, your home pin and area.

Not sent: your email, your account ID, your messages, your exact location, your routes, your Strava data.

On our servers. If "Use my location" is on, the app sends your position with the question, so that we can rank nearby results. We do not pass it to Anthropic. We do not store your question; our logs record only its length, the number of results and timings.

At Anthropic. Anthropic keeps and deletes this data under its own published terms. At the time of writing, Anthropic's commercial terms say that it may not train its models on this content, and Anthropic states that it deletes API inputs and outputs within 30 days, unless they are flagged for a breach of its usage policy (then up to 2 years) or the law requires it to keep them longer.

On your phone. Your Ask twekes conversations (the 20 most recent) are stored only on your phone. They are removed when you sign out or delete your account.

Answers can be wrong. Check times, places and advice before you rely on them.

Report answer.

• If an answer is wrong or inappropriate, tap Report answer.
• We receive your reason, the answer (up to 1,000 characters) and a one-way code made from your question, not the question itself.
• The report is linked to your account if you are signed in.

Without an account, Ask twekes receives only your question, your city and the listings; there is no personal summary.

Fair-use limits apply per minute and per day.

We do not use AI anywhere else to personalise twekes or to make decisions about you.

8. How we order what you see

Some lists (for example Moments, "near you" results and suggestions) are ordered by simple rules:

• how close something is;
• who you follow and your clubs;
• how recent and popular it is;
• a daily shuffle.

We do not build advertising profiles. We make no decisions based solely on automated processing that have legal or similarly significant effects on you. The automated word filter (section 3.10) only stops a post from being published, and you can contact us if you think it was wrong.

9. What other people can see

10. Moments on our website and in our own promotion

Today, every photo on twekes.com is chosen and uploaded by our team, and they are photos from the twekes team's own Moments.

We may also show your Moments shared with Everyone, or a still image from them:

• on twekes.com;
• in our app-store listings;
• on twekes's own social-media accounts;
• in presentations and press material about twekes.

The Terms describe this licence in full.

• Never covered: Moments for followers or a club; view-once and 24-hour Moments; messages; your runs and health data.
• We do not sell Moments or license them to anyone else, and we never use them in paid advertising without asking you first.
• People in the picture. We avoid using Moments in which another person can be identified, unless they agreed.
• How it gets there. A member of our team picks a Moment and uploads a copy to our website by hand. That copy is stored in public website storage, separately from the Moment.
• To opt out, email info@twekes.com at any time, or delete the Moment. We then stop new uses and remove the copy from twekes.com and our own social-media accounts within 14 days.

11. Who we share data with

We share personal data only as described in this policy. Our service providers ("processors") handle it on our instructions, to provide the Service.

We may also disclose data:

• to comply with the law or a valid request from a public authority, or to protect the safety of people using twekes;
• if twekes is transferred to a company or person who takes over the Service: they take over your data under the protections in this policy, and we will tell you before that happens.

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

12. Where your data is processed

We run twekes from the address in section 1. Our providers process data in the European Union (for example, our servers run at Render in Frankfurt, Germany), in the United States and in other countries. So your data may be processed outside the country where you live.

Where the law of your country requires safeguards for sending your data abroad, we rely on the safeguards our providers offer under their own terms, such as standard contractual clauses. You can ask us about them at info@twekes.com.

13. Legal bases

If the data protection law of your country requires a legal basis for each use of your personal data, these are ours.

You can withdraw consent at any time. This does not affect what we did before you withdrew it. Where we rely on legitimate interests, you can ask us how we balanced them against your rights.

14. How long we keep data

15. Deleting your account

How to delete it:

• In the app: Profile → Privacy & settings → Delete account, then confirm twice. Your account is deleted straight away.
• Without the app: email info@twekes.com from your account's email address with the subject "Delete my twekes account". We delete it within 30 days. Details are at twekes.com/delete-account.

If you use Sign in with Apple: when we hold the Apple token from your sign-in, you need to do nothing more. Otherwise the app asks you to confirm with Apple once. If you skip that, we still delete your account, and the app tells you how to remove twekes from "Sign in with Apple" in your Apple Account settings.

What happens:

• We delete:
  • your account, sign-in methods and profile;
  • your runs, activities, Turf and raw wearable data;
  • your Moments and their files;
  • your Shouts, replies, comments and messages (in every conversation);
  • your follows, club memberships, sign-ups, perk stamps and saved items;
  • your expert profile, feedback and requests;
  • your notifications;
  • notifications about your messages, replies and follows in other people's inboxes;
  • your push tokens, your files, and your diagnostics.
• We withdraw twekes's access at Apple (Sign in with Apple), at Strava, and at ROOK for every source you connected.
• On your phone, the app removes your account from the ROOK software and clears its stored data, including your Ask twekes conversations.
• We send you a confirmation email to your account's address (or your Apple relay address).

What we keep afterwards, and for how long, is in section 14 and on the deletion page. Three points to know:

• Older notifications in other people's inboxes. A few older notifications can stay there with your name but no message text, for example "(your name) is coming to your run", or a reply you sent to their Shout before 13 October 2026. They are deleted within 90 days of being sent (section 14).
• Your health app. Apple Health and Health Connect permissions live on your phone. Remove twekes there yourself.
• Accounts run by our team are deleted by our team on request.

16. Your rights

Wherever you live, you can ask us about your data. Depending on the law of your country, you have the right to:

• access the personal data we hold about you and get a copy;
• correct it;
• delete it (section 15);
• restrict how we use it;
• object to uses based on our legitimate interests (for example the athletes directory, crash reports or, if we use them, Moments on our website);
• data portability: receive the data you gave us in a machine-readable format;
• withdraw consent at any time, for example by disconnecting a source, switching off leaderboards or Ask twekes, or changing your phone's permissions;
• not be subject to decisions based solely on automated processing that have legal or similarly significant effects (we make none: section 8);
• complain to the data protection authority of your country, where one exists. We would appreciate the chance to sort it out with you first.

How to use your rights.

• Most data you can change yourself in the app: Edit profile, Privacy & settings, Sign-in methods, Connected devices, Delete account.
• There is no export button in the app. For a copy of your data or any other request, email info@twekes.com from your account's email address, with the subject "My data".
• We may ask you to confirm your identity.
• We reply within one month. If a request is complex or we receive many, we may need up to two more months, and we will tell you why within the first month.
• Using these rights is free.

17. Children

twekes is for people aged 16 and over. You confirm your age when you create an account, whichever way you sign up. We do not knowingly collect personal data from anyone under 16. If we learn that an account belongs to someone under 16, we delete it. If you think a child is using twekes, tell us at info@twekes.com.

18. Security

We protect your data with:

• encryption in transit (HTTPS/TLS for all traffic between the app, the website and our servers);
• access rules in our database, so that each person can read only what they are allowed to;
• private storage with short-lived links for Moments;
• encrypted storage of Apple sign-in tokens;
• rate limits;
• signed webhooks from our wearable provider;
• restricted staff access to our admin tools.

No system is completely secure, and we cannot guarantee that your data will never be accessed without permission. If a breach affects your personal data, we will tell you and the authorities when the law requires it.

19. Changes to this policy

We update this policy when the Service or the law changes. If we make a material change, we will tell you in the app or by email at least 14 days before it takes effect, and where the change needs it, we will ask for your agreement again. A change needed for legal or safety reasons, or one that only concerns a new feature, can take effect sooner. The version and date at the top show which version applies.

20. Contact

Marc Tanas (twekes), Bitar Street, Msaytbeh, Beirut, Lebanon. Email: info@twekes.com.