Privacy Policy
Learn how we collect, use, store, and protect your information when you use WONE.
1. Introduction
PRFM Health & Performance Private Limited (“we,” “our,” or “us”) operates the Wone application and related services (collectively, the “Service”). This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.
By using Wone, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please do not use the Service.
2. Information We Collect
2.1 Account Information
When you create a Wone account, we collect:
- Name and email address (via Google Sign-In)
- Profile information you choose to provide
2.2 Gmail Data (Read-Only Access)
With your explicit consent, Wone requests read-only access to your Gmail account to identify race registration and race result notification emails. This access is used solely to extract race identifiers that enable retrieval of official results from public timing platforms.
What we extract from Gmail:
- Race name
- Event date
- Bib number
- Timing platform source
How Gmail data is processed:
Email content is processed transiently in memory. Extracted race identifiers are used to retrieve official race results from public timing platform websites. Once results are retrieved, the email-derived identifiers are discarded. No email content is stored at any point in this process.
What we do NOT do with Gmail data:
- We do not store email content, body text, attachments, or metadata
- We do not send, modify, or delete emails
- We do not access contacts or drafts
- We do not share Gmail data with any third party
- We do not use Gmail data for advertising purposes
- We do not use Gmail data for model training of any kind
- No human review of email content occurs
2.3 Race Results and Athletic Data
We store official race results retrieved from public timing platforms, associated with your athletic profile. This data includes:
- Race name and event date
- Finish time and placement
- Category and age group (if available)
- Timing platform source for verification
2.4 Third-Party Integrations
If you connect third-party services (such as Strava), we collect performance data as permitted by those platforms and in accordance with their respective terms of service. You may disconnect these integrations at any time.
2.5 Usage Data
We automatically collect standard usage data including device type, operating system, browser type, IP address, and interaction patterns within the app. This data is used solely to maintain and improve the Service.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To create and maintain your verified athletic profile
- To retrieve official race results from public timing platforms
- To provide club coordination and race history features
- To communicate with you about your account and the Service
- To maintain, protect, and improve the Service
- To detect and prevent fraud or misuse
4. Google API Services: Limited Use Disclosure
Wone’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- Gmail data is used solely to identify race participation details for the user
- Gmail data is processed transiently and is not persisted
- Gmail data is not sold, shared with third parties, or used for advertising
- Gmail data is not used for model training or any purpose unrelated to race identification
- No Gmail content is transferred to any third-party service or API
5. Data Storage and Security
Official race results and account information are stored in Wone’s secure backend infrastructure. We implement the following security measures:
- Data encrypted in transit using HTTPS/TLS
- Data encrypted at rest
- Access controls limiting data access to authorized personnel only
- Regular security reviews of our infrastructure and practices
While we implement commercially reasonable security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.
6. Data Sharing
We do not sell your personal information. We may share limited information in the following circumstances:
- Club Affiliations: If you are a member of a running club on Wone, your public athletic profile (race results, club membership) may be visible to other club members and club administrators, as part of the coordination features of the Service.
- Service Providers: We may engage trusted service providers who assist in operating the Service (hosting, analytics). These providers are contractually obligated to protect your data and use it only for the purposes we specify.
- Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
7. Your Rights and Choices
7.1 Account Deletion
You may delete your account at any time from within the app. Upon account deletion, all associated race results, profile data, and any stored information are permanently removed from our systems.
7.2 Revoke Gmail Access
You may revoke Wone’s Gmail access at any time through:
- The Wone app settings (Disconnect Gmail)
- Your Google Account permissions page (myaccount.google.com/permissions)
7.3 Data Portability
You may request a copy of your data by contacting us at the email address provided below.
7.4 Corrections
You may update or correct your profile information at any time within the app. If you believe any race result data is inaccurate, you may contact us for correction.
8. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. Upon account deletion, all personal data and race results are permanently deleted within 30 days. We may retain anonymized, aggregated data that cannot be used to identify you for analytical purposes.
9. Children’s Privacy
The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the app and updating the effective date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: tech@prfm.co
Address: No 48, Church St Haridevpur, Shanthala Nagar, Mahatma Gandhi Road, Bengaluru Urban, Karnataka