1. Information We Collect

a. Information You Provide Directly

• Account and registration information: name, email address, phone number, mailing address, date of birth, and emergency contact information.

• Challenge/race registration details: distance selected, assigned surah, and apparel size.

• Store purchases: billing address, shipping address, and payment confirmation. Full payment card numbers are handled directly by our payment processor and are not stored by ONE14.

• Newsletter sign-up: first name, last name, and email address.

• App account information: Your name (shown as your display name), email address, sign-in method, optional profile photo, weekly commitment and training goal, preferred reciter and distance unit, notification and reminder preferences, Qur’an listening progress (surahs and ayahs heard, and khatm progress), your QARDIO sessions (see Sections 1(b), 1(e) and 1(f)), and any posts, reactions and duas you send in the community feed.

• Any content you voluntarily share in community spaces, including our WhatsApp group(s) and other linked community channels.

b. Information Collected Automatically

• Session details: for each QARDIO session, the start and end time, your device’s time-zone offset, duration, pauses, distance, activity type, and what you listened to (surahs, ayahs, reciter and playback speed).

• Technical information attached to each session, so we can investigate distance and audio problems: device model, operating system version, App version, the location permission and tracking mode used, whether battery optimisation or low-power mode was on, GPS signal-quality statistics (accuracy and gaps between location readings — not your coordinates), step-counter figures (see Section 1(f)) and App performance measurements.

• Crash and error reports, collected through Firebase Crashlytics (Google): the state of the App and your device when a crash, error or unexpected shutdown happened, linked to your account ID so we can investigate problems. On Android, this includes the reason the system gives for the App closing.

• Push notification tokens, for App users who enable notifications.

• Your IP address (which can indicate your approximate location) and basic device information, which our service providers receive when the App connects to them (see Section 3).

• Diagnostic logs you choose to send. The App can keep a detailed GPS log on your device, which may include your location during sessions. It stays on your device unless you choose to export it and send it to us.

• Cookies and similar technologies on the Website (see Section 9).

c. Information From Third Parties

Our payment processor provides us confirmation of successful transactions.

If you sign in with Google, Google shares your name, email address and profile picture with us. If you sign in with Apple, Apple shares your email address (or a private relay address, if you choose to hide yours) and, the first time you sign in, your name. For Sign in with Apple, we also keep an Apple-issued token on our servers so we can revoke ONE14’s access when you delete your account.

If you connect Strava, Strava shares the information described in Section 3.

d. Children’s Information

Family and youth participation options, including the Kids Fun Run, may involve information about children under 13, provided directly by a parent or legal guardian at the time of registration. See Section 7 (Children’s Privacy) for more detail.

e. Location and Route Information (App)

• Precise location during sessions. When you start a movement session (such as a walk or run) and allow location access, the App uses your device's GPS location to measure your distance and show your route. Location is used only while a session you started is running — including while your screen is locked or you are using another app, so your distance keeps counting — and stops when you end the session. On Android, a notification is shown for as long as location is in use. Sessions that don't involve moving from place to place (for example yoga or strength) do not use location. If you allow only approximate location, the App uses that instead.

• Your route. For each movement session, the App records your route: the path you took, with the time and elevation of each point. Each route is first saved on your device, where the App keeps a limited number of recent routes.

• Saving routes to your account is your choice. Before your first movement session, the App asks where to keep your routes. If you choose “Save my routes to my ONE14 account”, the route of each session you complete after that is uploaded and stored with the session, so it is available on any device you sign in to. If you choose “Keep on this device”, or have not chosen yet, your routes are not uploaded to ONE14. You can change your choice at any time in Settings; switching to “Keep on this device” also stops the upload of sessions that have not been uploaded yet.

• Who can see your route. A route saved to your account is visible only to you unless you choose to share it: on a community post, only if you choose to show your route on posts, and with Strava, only if you connect Strava and leave “Include route map” on (see Section 3).

• Maps. Maps in the App are provided by Google Maps. While a map is shown, Google receives the information needed to display it, which can include your IP address and your location (see Section 3).

• We do not sell your location, use it for advertising, or collect it outside a session you started.

f. Motion and Step Information (App)

• With your permission (Motion & Fitness on iPhone, Physical activity on Android), the App reads your phone's step counter during movement sessions. It uses it to keep counting your distance where GPS is weak or interrupted — for example under bridges, in tunnels or between tall buildings — or if the App is closed during a session. The step counts the App used for a session, together with the step-based distance, stride length and cadence (steps per minute) it calculated from them, are saved with that session in your ONE14 account so that we can check and improve distance accuracy. The App reads your step counter only for the time of your sessions. It does not read health records and does not connect to Apple Health or Google Fit. If you decline, sessions still work using GPS alone.

2. How We Use Information

• To register participants and manage event logistics, including safety at in-person events (e.g., use of emergency contact information).

• To operate App features: Qur’an audio playback, movement challenge tracking, and the community feed.

• To process store orders, payments, and shipping.

• To communicate with you: event updates, receipts, and community announcements.

• To maintain and improve the Website and App.

• To comply with legal, tax, and nonprofit record keeping obligations.

3. How We Share Information

• Service providers who help us operate the Services, under their own privacy terms: Google Firebase (sign-in, database, file storage, server functions, push notifications, crash reporting, and App Check, which verifies that requests come from our genuine App), Google Maps (maps in the App), the providers of the Qur’an recitations the App streams (their servers receive your IP address and the recitation requested), Tally (our feedback form, if you choose to use it), website hosting, payment processing and email delivery. Google Maps is subject to the Google Privacy Policy at https://policies.google.com/privacy.

• Event partners or venues where necessary for logistics, permits, or on-site medical support.

• Community spaces you choose to join, such as WhatsApp groups — content shared there is visible to other members and is subject to that platform’s own privacy practices, not this Policy.

• Other ONE14 QARDIO members, when you use the community feed. Sharing is always your choice. When you share a session, manually or automatically if you turn on auto-sharing, every signed-in member can see your display name, profile photo and the session summary (activity type, date, duration, distance, surah and ayah range, reciter, ayahs heard and points). If you choose to show your route on posts, the post also shows the map of that session’s route, including where it starts and ends. Other members can see your name and photo on MashaAllah reactions you send; a dua you send is visible only to the post’s author. Your profile photo is stored at a web address that anyone who has the link can open. If you signed in with Google, your Google profile picture is used as your profile photo unless you upload a different one. You can remove a post, along with its map, at any time. Turning off “Show my route on posts” applies to future posts only.

• Strava, only if you choose to connect your ONE14 QARDIO account to it. Connecting is optional, and you can disconnect at any time in the App. While connected, your sessions are sent to your Strava account either automatically or only when you tap “Share to Strava”, depending on the setting you choose. We send the activity type, start time and time zone, duration, distance, and an activity title and description that name the surah(s), ayah range, number of ayahs heard and reciter. If your routes are saved to your ONE14 account and “Include route map” is on, we also send your route: the GPS path with the time and elevation of each point. With “Include route map” off, Strava receives distance and time only. Who can see your activities on Strava is controlled by your Strava privacy settings, not by ONE14. When you connect, Strava shares your Strava athlete ID, name and profile photo, the permissions you granted, and credentials that let us upload on your behalf; after each upload, Strava tells us the new activity’s ID. We use this only to show your connection in the App, upload your sessions and link to them. Your Strava credentials are kept on our servers and are never sent to the App. When you disconnect, or delete your ONE14 account, we revoke our access at Strava and delete those credentials. Activities already on Strava stay in your Strava account until you delete them there. Strava’s handling of this data is governed by Strava’s own Terms of Service and Privacy Policy.

• As required by law, or to protect the safety of participants, staff, or the public.

We do not sell your personal information.

4. Data Retention

We retain personal information for as long as needed to operate the Services and fulfill the purposes described above, and to meet legal, tax, and nonprofit recordkeeping requirements.

Account Deletion. You can delete your ONE14 QARDIO account at any time in the App (Profile), or by submitting a request at www.one14.one/delete-account. Deleting your account in the App takes effect immediately. It permanently removes your sign-in account and profile; your profile photo; all your sessions and their routes, including the routes stored on the device you delete from; your Qur’an listening and khatm progress; your preferences; your community posts (and their maps), and the reactions and duas you sent; and the notifications in your inbox. If you connected Strava, we revoke ONE14’s access to your Strava account and delete our Strava credentials. If you signed in with Apple, we revoke ONE14’s Sign in with Apple authorization.

A few things are not removed by deleting your account. Activities already uploaded to Strava stay in your Strava account until you delete them there. Reports you made about other members’ content, and reports made about you, are kept as moderation and safety records. Crash and error reports expire within 90 days. Remaining copies in our service providers’ backup systems are removed on those providers’ schedules (for example, Firebase Authentication removes deleted accounts from its backups within 180 days). Routes kept on another device you used may stay on that device until you uninstall the App there. Separate records tied to event registrations or store purchases are retained as described above.

App Data. Your QARDIO sessions (including the technical information attached to them), routes saved to your account, Qur’an listening and khatm progress, and community posts are kept for as long as your account exists, so that your history and progress stay available to you. You can delete an individual session at any time, which also deletes its route and any community post of it. You can also delete your account (see Account Deletion). Routes kept only on your device are stored there in a limited number, with the oldest removed automatically. Like other App data on your phone, they may be included in your phone’s own backups (such as iCloud or Google backup) if you use them. Crash and error reports are kept by Firebase Crashlytics for 90 days.

5. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your Choices and Rights

• Location and routes: You can deny or turn off location access in your device settings, and you can choose whether your routes are saved to your account, or change that choice at any time in Settings. Switching to “Keep on this device” stops future uploads; to remove routes already saved to your account, delete those sessions or your account.

• Step counter: You can deny or turn off Motion & Fitness (iPhone) or Physical activity (Android) access in your device settings.

• Community: You choose whether to share each session and whether posts show your route, and you can remove any post, block members and report content.

• Strava: You can turn off automatic upload or route maps, or disconnect Strava, at any time in the App.

• Notifications and marketing: You can turn off notifications in the App or in your device settings, and stop marketing emails in the App or by using the unsubscribe link in those emails.

• Update or correct your account information within the App or by contacting us.

• Delete your account, which permanently removes the associated personal information as described in Section 4, in the App or at www.one14.one/delete-account.

• Depending on where you live, you may have additional rights: to access, correct or delete your data, or receive a copy of it; to object to or restrict certain processing; and to withdraw your consent at any time (this does not affect processing that took place before you withdrew it). You may also have the right to complain to your local data protection authority. To make a request, contact app@one14.one.

7. Children’s Privacy

The Website and App are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13 through the App without verifiable parental consent. Where children under 13 participate in in-person events such as the Kids Fun Run, registration information is provided by, and consent is obtained from, a parent or legal guardian on the child’s behalf. If we learn that a child under 13 has provided personal information directly without parental consent, we will take steps to delete it. Parents or guardians who believe their child has provided information without consent may contact us at app@one14.one (for issues arising through the App) or onefourteenrace@gmail.com (for issues arising through event registration, such as the Kids Fun Run).

Users under 18 may use the App only with the permission of a parent or legal guardian, who agrees to our Terms on their behalf. We encourage younger users not to include route maps on community posts.

8. International Participants

ONE14 challenges include both in-person events held in various locations and virtual challenges open to participants around the world. If you participate from outside the United States, or take part in a virtual challenge from anywhere in the world, your information may be transferred to and processed in the United States or other countries where we or our service providers operate.

9. Cookies and Tracking Technologies

Our Website may use cookies and similar technologies for functionality, analytics, and security. You can control cookies through your browser settings; disabling them may affect some Website features.

10. Third-Party Links and Services

Our Website and community resources link to third-party platforms, including WhatsApp, Strava, Tarteel, Instagram, Facebook, and YouTube. These platforms have their own privacy practices, which we do not control, and this Policy does not apply to them.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The Effective Date above reflects the date of the most recent revision. We will communicate material changes through the Website, App, or email where appropriate.

12. Contact Us

For questions about the ONE14 QARDIO app or this Privacy Policy: app@one14.one

For questions about ONE14 challenges, races, or events: onefourteenrace@gmail.com