1. Who we are
Muubit ("we", "the app") is a run-to-earn application that rewards real physical activity with rBTC (Bitcoin on the Rootstock network). This policy describes how we collect, use, and protect information from users of our Android mobile application.
2. Information we collect
| Data | Why we collect it | How long |
|---|---|---|
| GPS location (foreground + background) | To record your running route and calculate distance accurately, including when the screen is locked | Used for validation only — not persistently stored |
| RSK wallet address | To send your rBTC rewards to the correct wallet | Stored with your activity records |
| Activity data (distance, time, speed, calories) | To calculate rewards and display your history | Stored while your account is active |
| Fraud alerts (abnormal speed events) | To detect and prevent abuse of the reward system | Stored with your wallet address |
| Device IP address | For fraud prevention and rate limiting | Not persistently stored |
| Device advertising identifiers (GAID) | Used by Google AdMob to serve rewarded video ads | Managed by Google per their privacy policy |
3. What we do NOT collect
We do not collect your real name, email address, phone number, or any government-issued ID. Muubit does not require account registration. Your wallet is generated locally on your device — we never have access to your private key or seed phrase. We do not sell your data to third parties.
4. Background location
Muubit requests background location permission so your run continues to be tracked accurately when you lock your screen. This permission is used exclusively during an active running session. We do not access your location at any other time. You can revoke this permission at any time in your device settings.
5. How we use your information
• Calculate the distance covered and send rBTC rewards to your wallet
• Detect and prevent fraud (abnormal speeds, GPS manipulation)
• Display your run history and statistics within the app
• Show rewarded video ads through Google AdMob
• Improve app performance and user experience
6. Blockchain and transparency
Rewards are sent in rBTC via the Rootstock (RSK) network, a public Bitcoin sidechain. Transactions are permanently and publicly visible on the block explorer. Your wallet address is public by blockchain design, but it is not linked to your real identity unless you choose to make that connection public.
rBTC is the native token of the Rootstock network and may have value on exchanges. Muubit is not responsible for fluctuations in the value of rBTC.
7. Advertising — Google AdMob
Muubit uses Google AdMob to show rewarded video ads. AdMob may collect device identifiers (GAID on Android) and usage data to personalize ads, in accordance with Google's Privacy Policy.
You can opt out of personalized ads in your device settings: Android → Settings → Google → Ads → Opt out of Ads Personalization.
8. Cookies and tracking technologies
The mobile app does not use cookies. However, Google AdMob may use device advertising identifiers (GAID on Android) to measure ad performance.
9. Third-party services
• Rootstock (RSK) Network — public Bitcoin sidechain for rBTC transactions
• Railway — backend infrastructure provider
• Supabase — community activity data storage
• Google AdMob — rewarded video advertising
• CoinGecko API — BTC/USD price feed (no personal data sent)
10. Security
Your wallet's private key is stored encrypted in the operating system's secure storage (Android Keystore). All communication between the app and our servers uses HTTPS. However, no system is 100% secure — we recommend never sharing your private key with anyone.
11. Data retention
We retain activity records and reward history while the service is active. If you request deletion of your data, we will remove it from our servers within 30 days. Blockchain transactions are permanent and immutable by the nature of the technology and cannot be deleted.
12. Your rights
13. EU users (GDPR)
If you reside in the European Economic Area, the legal bases for processing your data are: performance of contract (sending your rewards), legitimate interest (fraud prevention), and consent (personalized ads). You have the right to lodge a complaint with your country's data protection authority.
14. Children
Muubit is not directed at children under 13. We do not knowingly collect data from children. If you are a parent or guardian and believe your child used the app, contact us and we will delete the associated records.
15. Changes to this policy
We may update this policy as the service evolves. We will notify you of significant changes within the app. The "last updated" date indicates when this was last revised.
16. Contact
Questions, data deletion requests, or any privacy matter:
privacy@muubit.com