Telangana Runners

Privacy policy

Telangana Runners · Last updated 8 October 2026

Telangana Runners is a public charitable trust (Regd. No. 123/2025) organising community running events, the Sunday Morning Run club, the Cardiac Rehab Run, and the Telangana Marathon initiative.

This notice is given under India's Digital Personal Data Protection Act, 2023. It tells you what personal data we collect and why. It tells you how to take back your consent, how to have your details corrected or erased, and how to complain if we get it wrong.

What this policy covers

This policy covers the Telangana Runners mobile app and this website. It also covers our Apple Watch app and MyPhotos, the page that finds your race photos. You register and pay for an event on our ticketing platform. The Cardiac Rehab Run has its own event privacy policy and terms for that registration. Our other services publish their own policies. This policy also covers Telangana Runners Publisher, the tool we use to post our own videos to our own YouTube channels. It is described below.

What we collect

Your account

Your postal address

You can save a postal address under Profile, so we can post you a medal or a T-shirt. It has five parts: house, street, city, state and pincode. We print your name and mobile number on the label from your account. When we book a parcel, we also note the address we booked it to. This lets us see if you move after the parcel was booked.

Having your bib brought to you

For some races you can have your bib brought to your door instead of collecting it. For this we ask for a contact name, a mobile number, your address in words, and a pin on a map. The rider goes to the pin, and the words tell them which door. The map starts where your phone is, if you allow location. You can drag it anywhere, and only the pin you choose is sent to us.

Your event entries

If you have registered for one of our events, we bring that registration into the app so you can see it. This is the event, your category, your registration number and your bib number.

Your runs

When you record a run, we store the GPS points of your route. Each point has a time and an accuracy figure. We also store the distance, time and pace worked out from them. With each run the app also sends the maker, model and system version of the phone that recorded it. This helps us find phones that stop recording.

Your Apple Watch

If you record a run on our Apple Watch app, the watch records your route by GPS in the same way as the phone. The watch also saves the run as a workout in Apple Health, so it shows in your Activity rings. That is the only thing we ask Apple Health for. We never read anything from Apple Health: not your heart rate, not your steps, not your past workouts.

How the app is working

To fix problems, the app sends us a few facts about itself.

Location, and exactly when we use it

We track your location only while you are recording a run. Not before it, not after it, and never in between. The app does not track where you are when you are not running.

Two small uses happen outside a run, and neither tracks you. Before a run, the map is centred on where you are, on your phone only. On the bib delivery map, the pin starts where you are, and only the pin you choose is sent to us.

Recording goes on while the screen is off and while the app is in the background. That is on purpose, and it is the point of the feature. A run that stopped when you put your phone in your pocket would be useless. On Android there is a notification the whole time a recording is in progress, so you can always see it is happening.

You start a recording and you end it. Ending it stops the location collection.

On race morning, your position may also be shown on our live race map while you run. Those live points are deleted 24 hours after the event.

What AntiOxidant needs, stated plainly

AntiOxidant needs the location permission set to While using the app, with Precise location on. Anything less and it does not work at all. Not a rougher route, not a shorter one. Nothing is recorded.

That includes refusing the permission, choosing Only this time, and leaving Precise location off. A position that is only right to within a kilometre cannot measure a run. We would rather say so here than have you find out at the arch on race morning.

Everything else in the app keeps working without it: your entry, your registration number, your bib, the expo venue, your photos and your results.

How long your route is kept

Your routes are kept until you delete the run or your account. They are your running diary, and they stay for as long as you want to look back at them. You can delete an everyday run from the app at any time.

For a race, we keep only the race itself. About a month after the race, once results are settled, we cut your route to the race. The walk to the start and the journey home are removed. If your race run could not be confirmed, we keep the full recording. The Race Director needs it to decide your result.

A copy for research, with your name removed

We keep a copy of each route for research on running and on our courses. We make it about a week after an everyday or virtual run, and about a month after a race. The copy has no name, mobile number, email, account or bib number. It keeps an age band, such as 30 to 39, instead of your date of birth. It keeps the maker of your phone, not its model, and the month of the run, not the date. The first and last 300 metres of every route are removed, so a copy cannot show where a run began or ended. Nothing in the copy points back to you, and it is never used to make any decision about you. It is never sold, and it is never shared with anybody outside Telangana Runners.

If you do not want this, email info@TelanganaRunners.com from the address on your account, or tell us your mobile number. We will stop making copies of your routes and tell you when it is done. Copies already made stay, because nothing in them can be traced back to you.

Photos

You can choose one of your own pictures as the background of a share card for a run. That picture is used on your phone to make the card and is never sent to us. We ask for photo access only when you choose one. We do not look through your photos otherwise.

MyPhotos: finding you in our race photos

The Photos tab opens MyPhotos, our own web page for race photos. You take a selfie there, and we use it to find the photos you are in. To do this, a computer makes a face print from your selfie and compares it with the faces in our race photos. This happens on our own server. Your selfie and its face print are used for that one search and are not saved. To make the search work, we keep a face print of each face in our race photos, with the photos.

What each permission is for

PermissionWhy the app asks
Location, including in the background To record the route, distance and pace of a run, including while the screen is off. Used only during a recording. Also used once to centre a map, and to start the bib delivery pin where you are.
Notifications To show the recording notification while a run is in progress, and to tell you if a recording has a problem. These are created on your phone. We do not send push notifications to your device.
Photos Only to let you pick one of your own pictures for a share card. Asked for at that moment, and the picture stays on your phone.
Camera Only on the MyPhotos page, to take your selfie. The page asks for it when you tap to take one.
Apple Health (Apple Watch) To save your run as a workout. Nothing is read from Apple Health.
Face ID or fingerprint Used by event organisers only, to confirm it is really them before changing an event date. Your phone confirms it; we never see anything.

Who your information goes to

What never leaves our servers

Your runs, your routes and your GPS coordinates stay on our own servers. They are not sent to Strava or to any other running service, to any analytics company, to any advertising company, or to anybody else.

WhatsApp

We send sign-in codes over WhatsApp. We also send messages about your events and your deliveries. So your mobile number is handled by Meta's WhatsApp Business service to deliver them. You can stop event messages at any time by replying STOP.

Google Maps

Maps in the app are drawn by Google Maps, so when you look at a map Google receives the request and the area being displayed.

Payments

The app itself never asks for card or bank details. You pay for an event on our ticketing platform at events.telanganarunners.com. To pay for bib delivery, or to give a donation, the app opens our web page inside the app. Our payment partner Razorpay takes the payment on that page. We do not store card or bank details on our own servers.

The courier

We send parcels and bib deliveries through Shiprocket. To deliver, Shiprocket and its courier get your name, mobile number, email and address. For a bib brought by a rider, they also get your map pin. They use these only to deliver to you.

Event delivery

For an event you have entered, we may share a little information with the people running it. This means the medical team at the run and our timing partner. We may disclose information if required by law. We do not sell your personal information to anybody.

How we analyse it

We look at running data to understand how our runners are doing and how participation is going. All of that analysis happens on our own servers, on our own data. We do not use any outside analytics, crash report or advertising service. No analytics or advertising company receives your information.

How long we keep things

Your rights, and how to use them

Withdrawing your consent, without deleting your account

You can withdraw your consent to location recording and keep your account. Refuse or turn off the location permission on your phone and the app works for everything else: your entries, your results and your certificates all remain. Nothing further is recorded from the moment you turn it off.

You can also write to us at the address below and ask us to stop, and to delete the routes we already hold. We will do it and confirm when it is done. Deleting your account explains exactly what can be removed on its own, without closing your account. Withdrawing consent is meant to be as easy as giving it, and it should never be a choice between all of your data and none of it.

Seeing and correcting your details

You can change your name, email address, gender, t shirt size and emergency contact in the app at any time, under My Details. You can change your postal address under Profile.

Your date of birth is shown there but cannot be changed by you, because it decides which category you are eligible to enter. If it is wrong, write to us and we will correct it.

A copy of what we hold

You may ask us for a summary of the personal data we hold about you, what we are doing with it, and who else has received it.

Erasure

You can delete your account from inside the app or by writing to us. That page explains exactly what is removed and what we are required to keep.

Nominating somebody

You may nominate another person to exercise these rights on your behalf if you die or become unable to act for yourself. Write to us with their name and how to reach them.

If you are unhappy with our answer

Write to the contact below. We will reply within thirty days. If you are still not satisfied, you may complain to the Data Protection Board of India, which was established under the Digital Personal Data Protection Act, 2023.

Under 18s and timing

Anybody can hold an account, whatever their age. What a runner under 18 never gets is AntiOxidant timing.

A runner under 18 can sign in and see their event entry, their registration number, their bib, the expo venue and their photos. All of that is useful, and none of it is tracking.

What they never get is our own AntiOxidant timing: no GPS recording, no route and no certificate. In any distance, in any mode, on any phone, even if they finish first. Age is worked out on the day of the event, not the day of booking.

Section 9(3) of the Digital Personal Data Protection Act, 2023 does not allow tracking or watching the behaviour of children. Recording a run by GPS is tracking. A parent's consent does not lift that rule, so we have not built a way for a parent to agree to it.

The Act allows a few exceptions, set out in the Fourth Schedule to the Digital Personal Data Protection Rules, 2025. They cover healthcare, schools, creches, school transport, and tracking a child's live location for their safety. None of them covers a running event, and we have not relied on any of them.

If their entry carries a chip, the official result from our timing partner still reaches them in the normal way. That is the event's own timing of a race, and it is not ours to hold back.

We ask for a date of birth so that we can apply this rule. We do not use it to refuse anybody an account. Our Google Play listing says the app is for people aged 13 and over. We have not asked Google to stop younger people from installing it.

If something goes wrong

If your personal data is exposed by a breach of our security, we will tell you and we will report it to the Data Protection Board of India, as the Digital Personal Data Protection Act requires.

YouTube, and our publishing tool

We post our own event videos to our own YouTube channels: Telangana Runners, Telangana Marathon, Cardiac Rehab, Cardiac Rehab Foundation and AntiOxidant. We do this with a tool of ours called Telangana Runners Publisher, which uses YouTube API Services.

What it does, and what it does not

It uploads a video we made to the channel it belongs to, with its title and caption. It reads that channel's name and ID, only to make sure a video never goes to the wrong channel. It does not read comments, subscribers, viewing history or any other YouTube data. It never signs in to, or sees, the YouTube or Google account of a runner, an app user or a viewer.

What it keeps

For each of our channels it keeps one sign-in token and the channel ID, on our own server. They are not shared with anybody and are used for nothing except uploading our videos.

Google and YouTube

By watching or interacting with our videos on YouTube you are also covered by the YouTube Terms of Service. How Google handles your data is described in the Google Privacy Policy.

Removing its access

The owner of a channel can remove the tool's access at any time from their Google Account, at myaccount.google.com/connections. The same page is also at security.google.com/settings/security/permissions. When access is removed, we delete the stored token and channel ID for that channel. We also do this within 30 days of a request to info@TelanganaRunners.com.

Changes to this policy

We may update this policy. The date at the top shows when it last changed.

Who to contact about your data

Dr Muralidar Babi
Founder, Telangana Runners
Email: info@TelanganaRunners.com

He is the person responsible for answering questions about how your personal data is handled, for acting on the rights above, and for any complaint.

Telangana Runners
7B, Journalist Colony Road, Film Nagar, Jubilee Hills, Hyderabad 500096
Phone: +91 8688624653