PM Running Co Step Challenge Privacy Policy

About This Policy

The PM Running Co Step Challenge (the “Challenge”) is operated by Enduring Labs, Inc. (“we,” “us,” or “our”), the company behind Mason. This policy explains what information we collect when you sign up for the Challenge on thisismason.com and when you use the PM Running Co Step Challenge app on iPhone or Android, how we use it, and the choices you have.

This policy applies only to the Challenge and its app. Our property management platform is covered by a separate Mason Privacy Policy. If you are both a Mason customer and a Challenge participant, both apply to their respective services.

Information We Collect

Registration information. When you sign up, we collect your name, email address, company, and NARPM state chapter. If you create an account in the app, we also store the display name you choose to appear under on the leaderboard.

Step and activity data. With your permission, the app reads your daily step count, and may read walking and running distance and active time, from Apple Health and your device’s motion sensors on iPhone, or from Health Connect and your device’s activity sensors on Android. We use this to calculate your Challenge totals. The app does not write any data back to Apple Health or Health Connect.

Device and app information. We collect your device model, operating system version, app version, general region, and diagnostic information such as crash reports. If you enable notifications, we store a push notification token for your device.

Usage information. We collect information about how you use the app and the Challenge sign-up page, such as screens viewed and features used, so we can fix problems and improve the experience.

We do not collect your precise location, your contacts, your photos, or your health records beyond the step and activity data described above. We do not collect or use advertising identifiers, including the Apple Advertising Identifier (IDFA) or the Android Advertising ID.

How We Use Your Information

We use the information we collect to register you for the Challenge; to calculate your step totals and your position on the leaderboard; to send you Challenge updates, standings, and reminders; to coordinate the 5K and prizes at the NARPM Annual Convention; to respond to your questions; to diagnose crashes and improve the app; and to protect against fraud, abuse, and unauthorized access.

We may send you occasional email about Mason. You can unsubscribe from those messages at any time using the link in the email without affecting your participation in the Challenge.

Health and Activity Data

To count your steps, the app asks for access to health and activity data on your phone: through Apple Health and the Motion & Fitness sensors on iPhone, and through Health Connect and the physical activity sensors on Android. This access is entirely optional and you control it. We commit to the following on both platforms:

We read only the data categories you authorize, and only for as long as you authorize them. We use health and activity data solely to calculate your step totals, your standing in the Challenge, and the summaries we show you in the app. We never use it for advertising, marketing, or targeting of any kind. We never sell, rent, or trade it, and we never disclose it to data brokers or to any third party for their own purposes. We do not use it for data mining beyond operating the Challenge, and we do not transfer it to any service that would use it to build advertising or credit profiles. We do not store health data in iCloud or in any other consumer cloud-backup service.

On iPhone, you can review or revoke the app’s access at any time in Settings under Privacy & Security → Health, and under Privacy & Security → Motion & Fitness.

On Android, you can review or revoke the app’s access at any time in the Health Connect settings on your device, and under Settings → Apps → PM Running Co Step Challenge → Permissions → Physical activity. Health Connect also lets you see exactly which data types the app has read and remove its access entirely.

Revoking access stops any further collection. Step totals already recorded for the Challenge remain on the leaderboard unless you ask us to remove them or delete your account.

The Leaderboard and What Other Participants See

The Challenge is a friendly competition, so some of your information is visible to other participants by design. Other participants can see your display name, your company and state chapter, your step totals for the Challenge period, and your rank. They cannot see your email address, your device information, or any Health data other than the step totals that make up your score.

You control how you appear. You can change your display name at any time in the app, including to initials or a nickname, and you can hide yourself from the public leaderboard in the app’s settings. Hiding yourself means your steps still count toward prizes and organizer standings but your entry is not shown to other participants.

We may publish aggregate or anonymized results, such as total steps logged across all participants, in Challenge recaps and marketing. We will not identify you by name in those materials without your permission, except to announce prize winners, which we will confirm with you first.

How We Share Information

We do not sell, rent, or trade your personal information. We share it only in these circumstances:

With other participants, as described in the leaderboard section above.

With service providers who help us operate the Challenge, including cloud hosting, product analytics, crash reporting, email delivery, push notification delivery, and internal team notifications. These providers act on our instructions, may use the information only to provide services to us, and are contractually required to protect it with privacy and security practices at least as protective as those described in this policy.

When required by law, if we receive a valid legal request, or where we believe disclosure is necessary to protect the rights, safety, or property of participants, the public, or us.

In a business transfer, if we are involved in a merger, acquisition, or sale of assets, in which case we will notify you before your information becomes subject to a different privacy policy.

The app does not track you across other companies’ apps or websites, and we do not share your information with advertising networks.

Data Retention and Deletion

We keep your registration information and Challenge results for as long as your account is active and for up to twelve (12) months after the Challenge ends, so we can publish final results, handle prize fulfillment, and answer questions. Diagnostic and crash data is retained for up to ninety (90) days. After these periods we delete the information or irreversibly anonymize it so it can no longer be linked to you.

You can delete your account and your data at any time from within the app, under Settings → Delete Account, or by emailing us at hello@thisismason.com. You do not need to have the app installed to request deletion — the email address above works whether or not you still have it on your phone. Deleting your account removes your registration information, your step data, and your leaderboard entry. We complete deletion requests within thirty (30) days, except where we are required to retain records by law. Aggregate statistics that cannot identify you may remain.

Your Choices and Rights

You can revoke health and activity access in your phone’s settings as described above, turn off push notifications in your phone’s settings or in the app, change your display name, hide yourself from the leaderboard, unsubscribe from marketing email, and delete your account.

Depending on where you live, you may also have the right to access the personal information we hold about you, correct it, delete it, receive a portable copy, withdraw consent, or object to certain processing. California residents have additional rights under the CCPA, including the right not to be discriminated against for exercising them; we do not sell or share personal information as those terms are defined under California law. Residents of the European Economic Area and the United Kingdom have additional rights under the GDPR. To exercise any of these rights, email hello@thisismason.com. We respond within thirty (30) days.

Children’s Privacy

The Challenge is intended for property management professionals and is not directed to children. The app is not intended for anyone under 18, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, email hello@thisismason.com and we will delete it.

Security

We protect your information with encryption in transit (TLS 1.2+) and at rest (AES-256), access controls based on least privilege, and monitoring and logging of access to production systems. Our infrastructure runs on SOC 2 compliant cloud providers. No system is perfectly secure, but we work to protect your information and will notify you and any applicable regulator without undue delay if a breach affects your personal information.

International Users

We operate in the United States and process and store information there. If you participate from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. Where required, we use appropriate safeguards for these transfers.

Changes to This Policy

We may update this policy from time to time. When we do, we will revise the effective date above, and if the changes are material we will notify you in the app or by email before they take effect. Continuing to use the app after a change means you accept the updated policy.

Contact Us

For questions about this policy or your information, contact us at: