ChallengeRunner
ChallengeRunner is a health and wellness platform for managing and tracking fitness and healthy living challenges across your organization. With ChallengeRunner installed in Slack, participants will easily be able to register for challenges in Slack from the ChallengeRunner tab, join teams, authorize fitness trackers, enter data, view leaderboards, and receive event and leaderboard notifications.Challenges are created by a challenge administrator using the ChallengeRunner.com website. Participant access to the challenge is granted in a variety of ways, however, when using Slack, participants can be automatically included in any challenges created by a challenge administrator for their organization as soon as they create a ChallengeRunner account or open the ChallengeRunner app in Slack.If enabled, various fitness trackers can be used to collect steps, active minutes, and other data. The current list of trackers and apps are as follows: Fitbit, Garmin, Apple Health, Samsung Health, Google Fit, MapMyFitness, Misfit, Omron, Oura, Polar, Strava, Suunto, and Withings. Once a participant adds challenge data into the app, either manually or via fitness tracker, they will appear on the leaderboard.
Permissions
ChallengeRunner will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
ChallengeRunner LLC
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
ChallengeRunner data retention policy is covered in our GDPR Privacy Notice found here:
https://www.challengerunner.com/docs/GDPR-Privacy-Notice.pdf
8. DATA RETENTION
HOW LONG WILL YOU USE MY PERSONAL DATA FOR?
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for,
including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may
retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a
prospect of litigation in respect to our relationship with you, or if required by laws.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the
personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for
which we process your personal data and whether we can achieve those purposes through other means, and the
applicable legal, regulatory, tax, accounting or other requirements.
In some circumstances you can ask us to delete your data: see Your Legal Rights below for further information.
In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for
research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
Data archiving and removal policy
ChallengeRunner data retention policy is covered in our GDPR Privacy Notice found here:
https://www.challengerunner.com/docs/GDPR-Privacy-Notice.pdf
9. YOUR LEGAL RIGHTS
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is
no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal
data where you have successfully exercised your right to object to processing (see below), where we may have
processed your information unlawfully or where we are required to erase your personal data to comply with local
law. Note, however, that we may not always be able to comply with your request of erasure for specific legal
reasons which will be notified to you, if applicable, at the time of your request.
Data storage policy
We follow HIPAA rules with regard to the data in flight and at rest. All data is transmitted using at least TLS 1.2 SSL encryption. At rest, data is encrypted at the field level and the database level.
Data center location(s)
United States
Data hosting details
Data is hosted on AWS RDS servers located in Virginia, US
Data hosting company
AWS
App/service has sub-processors
no
Certifications & compliance
GDPR commitment
Data deletion request procedure
Users may delete their data directly in the system or remove their entire account and all associated data using the Remove Account option in their Profile at ChallengeRunner.com
HIPAA compliant
yes
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Single Sign On (SSO) with the following providers
Any SAML IP
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
security@challengerunner.com
Has a vulnerability disclosure program
no
Has a bug bounty program
no
Requires third party authorization/connections
no
Uses token rotation
no