Your miles are not the product.

01Introduction

RODEO is operated by 69RODEO (Pty) Ltd (registration number 2024/145923/07), a private company registered in South Africa ("RODEO", "we", "us" or "our"). RODEO builds a single app for the run, the ride and the hike — the crew, the coaching, and the readiness, terrain and weather intelligence around it.

This Privacy Policy explains how we handle personal information when you visit getrodeo.app, join the waitlist, apply to list your crew, contact us, and — once it launches — use the RODEO mobile app and Apple Watch app (together, the "Services").

We are the "responsible party" (under South Africa's Protection of Personal Information Act, "POPIA") and the "controller" (under the GDPR and similar laws) for the personal information described here, unless we say otherwise.

The app is not live yet. Where a section describes the app, it tells you how we will handle information when it launches. We'll update this policy — and tell you — before anything materially changes.

02How we collect personal information

• Directly from you — when you join the waitlist, fill in the crew application, email us, create an account, record an activity or update your profile.
• Automatically — basic technical information your browser or device sends when you use the Services, such as your IP address and device type, plus website usage measured by Google Analytics (see section 4).
• From devices and apps you connect — in the app, from Apple Health, Apple Watch and (later) Garmin and other wearables, and from activity archives you choose to import. We only receive this when you switch the connection on.
• From other people — for example, when a crew member invites you or tags you in a shared activity.

03Personal information we collect

On the website and waitlist (today)

• Waitlist details — your name, email address, the founding member number we assign you, and when you signed up and confirmed.
• Crew applications — crew or club name, city, schedule and meeting point, your name, email and (optionally) Instagram handle. The form opens an email to us from your own mail app; nothing is stored on our servers until you send it.
• Location searches on the events page — the city or address you type, or, if you tap "Use my location" and allow it, your device's approximate coordinates. Coordinates are used in your browser to sort events by distance and are not sent to us. Typed searches pass through our server to a geocoding provider and aren't stored against you.
• Messages — anything you send to info@getrodeo.app.
• Technical and security data — IP address, browser and device information, and a bot-check result, used to keep the waitlist free of spam and abuse.

In the app (at launch)

04Cookies and similar technologies

We keep this lean. The website does not use advertising, retargeting or cross-site tracking cookies, and we don't sell browsing data to ad networks.

• Local storage — after you join the waitlist, your browser remembers your founding number and first name (key rodeo_waitlist_v1) so the site can show it back to you. It stays on your device; clear your browser storage to remove it.
• Cloudflare Turnstile — when you open the waitlist form, Cloudflare runs a privacy-preserving check to confirm you're human. Cloudflare may process your IP address and browser signals for this purpose. See Cloudflare's privacy policy.
• Google Fonts — our typefaces load from Google's servers, which receive your IP address as part of the request. See Google's privacy policy.

• Google Analytics — measures which pages are visited, roughly where visitors are from, and what device they use, so we know what's worth improving. It sets first-party cookies (such as _ga) to recognise returning visitors, and Google processes your IP address to do this. We don't use it for advertising or link it to your waitlist details. You can block these cookies in your browser settings or with Google's opt-out add-on. See how Google uses data from sites that use its services.

If we add other analytics or marketing technologies, we'll update this section first and ask for your consent where the law requires it.

05How we use personal information

We don't use your health data for advertising, and we don't make decisions with legal or similarly significant effects about you based solely on automated processing.

06How we share personal information

We do not sell or rent your personal information, and we don't share it for cross-context behavioural advertising. We share it only as follows:

Service providers (operators)

Companies that process information on our behalf, under contract, only to provide their service to us:

We'll add app-specific providers (for example cloud infrastructure, weather and mapping data) to this list before launch.

Connections you choose

If you connect a third-party service — Apple Health, a wearable, or another fitness platform — we share data with it only as you direct. Their use of it is governed by their own privacy policy.

Legal and safety

We may disclose information if required by law, court order or a valid request from authorities, or where necessary to protect the rights, property or safety of RODEO, our users or the public.

Business changes

If RODEO is involved in a merger, acquisition, financing or sale of assets, personal information may be transferred as part of that deal. We'll require the recipient to honour this policy, and we'll tell you before your information becomes subject to a different one.

Aggregated data

We may share statistics that can't reasonably be used to identify you — for example, "trail running in Cape Town grew 20% this winter".

07What you share through RODEO

RODEO is built around crews, so some sharing is the point — but you decide how much.

• Privacy zones are on by default. The start and end of your routes are blurred so your home and workplace aren't exposed.
• Visibility per activity. Share an activity with your crew, keep it to yourself, or make it public.
• No public heatmap. We don't publish maps built from where our users go.
• Health metrics stay private unless you choose to share them.

Anything you do make visible to others can be seen, saved or reshared by them. Think before sharing live location or routines.

08Coaching, intelligence and AI

RODEO's intelligence features use your activity, location and health data to produce readiness scores, terrain and weather calls, and adaptive training suggestions. Some of these features may use machine learning, including models run by third-party AI providers.

• We only send the minimum data a feature needs.
• We use AI providers under contracts that restrict them from using your personal information to train their own general-purpose models.
• Suggestions are guidance, not instructions — you're always in control of your training.

09Your choices

• Leave the waitlist — email info@getrodeo.app and we'll remove you.
• Device permissions — turn location, Health and notification access on or off in your device settings at any time. Some features won't work without them.
• Connections — disconnect a wearable or Apple Health in the app, and we'll stop receiving new data from it.
• Marketing — unsubscribe using the link in any marketing email.
• Export — export your full archive in standard formats from the app.
• Delete your account — from the app or by emailing us. We'll delete or de-identify your personal information as described in section 12.

10Other sites and services

The Services link to sites we don't run — event organisers, crew pages, Instagram, X and TikTok. We're not responsible for their privacy practices, so check their policies before sharing information with them.

11Health information and medical advice

RODEO is a fitness and training product, not a medical device, and it doesn't diagnose, treat or prevent any condition. Readiness and recovery scores are estimates. Talk to a medical professional before changing your training if you have a health condition, and stop exercising if something feels wrong.

Because health data is special personal information, we process it only with your explicit consent, you can withdraw that consent at any time by disconnecting the source or deleting your data, and we never sell it or use it for advertising.

12Security and retention

Security

We use reasonable technical and organisational measures appropriate to the sensitivity of the data, including encryption in transit, restricted database access, row-level security that blocks public access to waitlist records, secrets kept server-side, bot protection and rate limiting. No system is perfectly secure; if a breach affects your personal information, we'll notify you and the relevant regulator as the law requires.

Retention

• Waitlist — kept until the app launches and you create an account, or until you ask us to remove you — ask us and we'll remove it.
• Rate-limit counters — expire automatically within an hour.
• Account and activity data — kept while your account is active. When you delete your account, we delete or de-identify it within 30 days, except where we must keep something longer to meet legal, tax or accounting obligations or resolve disputes.
• Emails to us — kept as long as needed to deal with your query and any follow-up.

13Children

The Services are not directed at children under 18. We don't knowingly collect personal information from anyone under 18 without the consent of a parent or guardian. If you believe a child has given us personal information, contact us and we'll delete it.

14International transfers

Our waitlist database is hosted in the European Union, and some of our service providers are based in the United States, so your personal information may be processed outside South Africa. When we transfer personal information across borders, we make sure it's protected by laws, binding agreements or corporate rules that provide a level of protection substantially similar to POPIA (and, for European data, the GDPR — for example, through standard contractual clauses).

15Changes to this policy

We'll update this policy as RODEO grows — most notably before the app launches. The date at the top shows when it last changed. If we make a material change, we'll tell you by email or in the app before it takes effect.

16Contact us

For any question, request or complaint about privacy — including to reach our Information Officer — email info@getrodeo.app. We'll respond within 30 days.

69RODEO (Pty) Ltd
Registration number 2024/145923/07
South Africa

17South Africa (POPIA)

If you're in South Africa, POPIA gives you the right to:

• Be told when your personal information is being collected, and when it has been accessed by an unauthorised person.
• Ask whether we hold personal information about you and request a copy of it.
• Ask us to correct, destroy or delete personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained.
• Object to processing on reasonable grounds, and to processing for direct marketing at any time.
• Not receive unsolicited direct marketing by electronic communication unless you've consented or are an existing customer.
• Not be subject to decisions based solely on automated processing that have legal consequences for you.
• Complain to the Information Regulator and institute civil proceedings.

To exercise these rights, email info@getrodeo.app. We may need to verify your identity first.

Direct marketing. We send marketing only with your consent, and every message includes a way to opt out.

Information Regulator. If you're unhappy with how we've handled your information, please talk to us first. You can also contact the Information Regulator (South Africa) at inforegulator.org.za or POPIAComplaints@inforegulator.org.za.

18European Economic Area and UK

If you're in the EEA or the UK, the GDPR or UK GDPR applies. Our legal bases for processing are set out in section 5. You have the right to access, rectify, erase, restrict and port your personal information, to object to processing based on legitimate interests or for direct marketing, and to withdraw consent at any time without affecting processing that happened before.

To exercise your rights, email info@getrodeo.app. You can also complain to your local data protection authority.

19Other regions

Depending on where you live — including US states such as California — you may have additional rights, such as to know what we collect, to delete it, to correct it, and not to be discriminated against for exercising these rights. We don't sell or "share" personal information for targeted advertising as those laws define it. Wherever you are, you can make a request by emailing info@getrodeo.app, and we'll honour it in line with applicable law.