Privacy Policy

Introduction

Runsy ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and safeguard your information when you use our mobile application and related services. By using Runsy, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Personal Information

When you create an account, we collect the following personal information:

• Name — provided during sign-up, used to personalize your experience
• Email address — provided during sign-up, used for account identification, service communications, and emails from your coach (see "Email" below)
• Profile photo (optional) — the picture on your Google account if you sign in with Google, or a photo you choose in Settings. We store it and show it in the app; change or remove it in Settings at any time. Without one, the app draws a pattern from your account instead.

Health and Fitness Data

With your explicit permission, we access health and fitness data from Apple HealthKit on your device. This data is read from HealthKit after you grant authorization through the iOS Health permissions prompt. Runs you record with the Runsy app on your Apple Watch, and how hard you rate them, are also sent to us straight from the watch, with the permission you grant in its Health prompt. When you record a run with the Runsy app on your iPhone, it uses your location only while that run is going, to measure its distance and pace and draw its route, and saves the run to Apple Health, from where it reaches us like any other run. We collect:

• Workouts - runs and other sports (for example soccer or cycling): type, distance, duration, pace, route, and heart rate data recorded by Apple Health
• VO2 max measurements - cardiorespiratory fitness estimates from Apple Health
• Resting heart rate - used to gauge recovery and fitness trends
• Body weight - used only if you set a weight goal or to show your weight trend alongside your training
• Other fitness metrics - additional workout and health metrics you choose to share

You may revoke HealthKit access at any time through your device settings (on your Apple Watch as well, for runs you record there). If you revoke access, we will no longer collect new health data, though previously synced data will remain on our servers until you request deletion.

User-Provided Content

During onboarding and app use, you provide additional information directly, including:

• Running goals — your stated training objectives (e.g., race preparation, speed improvement)
• Runner profile — experience level, weekly running frequency, and longest recent run
• Race details — upcoming race name, type, date, and goal time
• Chat messages — conversations with the AI coaching assistant

How We Collect Your Information

We collect information through three methods:

• Directly from you — when you create an account, complete onboarding, set goals, enter race details, or chat with the AI coach
• From Apple HealthKit — after you grant permission, we sync workout data and fitness metrics from your device
• Automatically — we collect your timezone to schedule training plans correctly, and usage, device and diagnostic information through PostHog (see "Analytics, Diagnostics and Session Recording" below), and an Apple Ads attribution token from Apple (see "Apple Ads Attribution" below)

How We Use Your Information

We use the information we collect for the following purposes:

• AI-powered coaching — your workouts, fitness metrics, goals, and profile are used to generate personalized training plans and coaching advice
• Progress tracking — to display your workout history, fitness trends, and performance analytics
• Service improvement — to improve our AI coaching algorithms and overall user experience
• Communications — to send important updates about the service
• Measuring our advertising - to learn which of our Apple Ads campaigns, ad groups and keywords lead to free trials and paid subscriptions (see "Apple Ads Attribution" below)

Third-Party Data Sharing — AI Processing

To provide AI-powered coaching, we share certain user data with our AI providers — Anthropic, PBC (the Claude AI model) and OpenAI, L.L.C. (the ChatGPT / GPT models), accessed through a model gateway. Depending on configuration, your request may be processed by either provider. Specifically, the following data may be sent for processing:

• Workouts and activity data — running history, pace, distance, duration, and heart rate
• Fitness metrics — VO2 max and performance trends
• Your profile — goals, experience level, weekly running frequency, and race targets
• Chat messages — your conversations with the AI coaching assistant, including any photos you attach
• Your voice notes — a voice note you record in the coach chat is turned into text on your iPhone, and the text is sent as your message. If your iPhone can't turn it into text, Runsy sends the recording to OpenAI, through the model gateway, to be transcribed, and your coach answers the text. The recording is kept with your chat so you can play it back.
• Your voice, on a voice call — when you call your coach, the app uses your microphone and streams your speech to OpenAI in real time, directly rather than through the model gateway, so the coach can understand you and answer out loud. Runsy does not record or store the audio. What you and the coach said is saved to your coach chat as text, like a typed conversation. The first call explains this before your microphone is used, and muting stops your audio from being sent.
• Your coach's voice on a run — the lines your coach says during a run that are particular to it (a step's distance and pace, a split time) are sent to OpenAI as text and turned into speech in your coach's voice. Lines every runner hears ("Paused", a pace call) come with the app. Nothing you say is recorded for this.

This data is sent to these providers solely for the purpose of generating personalized training plans, providing coaching advice, and responding to your questions. We do not share your data with these providers for advertising, marketing, or any purpose unrelated to providing the Runsy coaching service.

Before any data is shared, the app presents a dedicated AI privacy disclosure screen during onboarding that clearly identifies what data is shared and which providers it is shared with, and requires your explicit consent ("I Agree and Continue") before any AI request is sent.

Third-Party Data Protection

Anthropic processes your data under its Privacy Policy and Commercial Terms; OpenAI processes your data under its Privacy Policy and Terms of Use. Both providers offer the same or an equal level of data protection as described in this Privacy Policy. Specifically:

• Data sent to these providers via their APIs is not used to train their models
• Data is encrypted in transit using industry-standard TLS encryption
• These providers do not sell or share your personal data with other third parties

Data We Do Not Sell

We do not sell, rent, or trade your personal information or health data to any third party. Data is shared with our AI providers (Anthropic and OpenAI) solely to provide the AI coaching functionality of the app.

HealthKit Data

In compliance with Apple's requirements, data obtained from HealthKit is:

• Used only for providing health and fitness functionality within the app, and to improve your coaching
• Seen by our small team, in our day-to-day reports, only as whether you have run since you signed up, and on which day of your plan. When we review the quality of the coaching, we may also see the workout values your coach used in a request or a reply (see "AI request records" under PostHog below).
• Not used for advertising or marketing purposes
• Not shared with third parties for advertising or marketing
• Not stored in iCloud

Subscriptions and Payments

Runsy Pro is offered as an auto-renewable subscription, billed monthly or yearly, through Apple's In-App Purchase system. Payments are processed entirely by Apple — Runsy does not collect, store, or have access to your credit card or payment information.

When you purchase a subscription, the following data is exchanged with third parties:

• Apple: processes all payments through your Apple ID and handles subscription lifecycle (renewals, cancellations, refunds). Apple's privacy policy applies to all payment data.
• RevenueCat: provides our subscription management infrastructure. RevenueCat receives a pseudonymous user identifier (not your name, email, or health data) and subscription status information to enable cross-device entitlement syncing and receipt validation. See RevenueCat's privacy policy.

No health, fitness, or workout data is ever shared with Apple or RevenueCat. Those third parties only receive subscription-related information required to provide the billing service, plus the Apple Ads attribution described below.

You can manage or cancel your subscription at any time from your Apple ID account settings on your device.

Apple Ads Attribution

We advertise Runsy on the App Store through Apple Ads (formerly Apple Search Ads). To learn which ads lead to subscriptions, the app uses Apple's AdServices framework: it asks Apple for an attribution token and sends that token to RevenueCat, together with the pseudonymous user identifier described above. RevenueCat exchanges the token with Apple. If you installed Runsy after tapping or seeing one of our ads on the App Store, Apple returns details about that ad: the campaign, ad group and keyword, and related details such as the ad and the country or region it ran in. Otherwise Apple returns no ad details.

RevenueCat stores this with your subscription record and includes it in the subscription updates it sends us, so we can see which ad led to a free trial or a paid subscription. We use it only to measure and improve our own advertising.

• The app sends only the attribution token and the pseudonymous user identifier. It does not read your device's advertising identifier (IDFA), and it does not ask for App Tracking Transparency permission.
• The attribution data comes from Apple. We do not combine it with data from other companies' apps or websites, and we do not use it to track you across them or to target ads to you.
• No health, fitness, workout, or coaching data is involved.

Analytics, Diagnostics and Session Recording (PostHog)

We use PostHog, Inc. to understand how people use our website and app, to find and fix bugs and crashes, and to improve Runsy. PostHog processes this data on our behalf as our service provider (data processor); see PostHog's Privacy Policy. The data is stored on PostHog's US cloud (us.i.posthog.com) in the United States. We do not use it for advertising.

On our website (runsy.ai)

Analytics requests from runsy.ai are sent to our own domain (a first-party /ingest address) and forwarded from there to PostHog. We collect:

• Pages and clicks - the pages you view, when you leave a page, and clicks on our App Store buttons, including which page and which button
• Device and browser information - browser, operating system, device type, screen size, and the website or campaign link that referred you
• IP address and approximate location - PostHog receives your IP address and uses it to estimate your approximate location (city and country)
• Page performance - page loading-speed measurements
• Session recordings - a reconstruction of how you use the page (scrolling, mouse movement and clicks) together with technical logs from the page. Anything typed into a form field is masked in your browser before the recording is sent.

PostHog stores a random identifier in a cookie and in your browser's local storage so that visits from the same browser can be grouped together. Website visits are not linked to a Runsy account.

Our website also uses Ahrefs Web Analytics (Ahrefs Pte. Ltd.) to count page views and see which pages and searches bring visitors to runsy.ai. It does not set cookies. It records the page you visit, the site that referred you, and your browser, device type and country. It is not used in the Runsy app. See Ahrefs's privacy policy.

We also use Google Analytics (Google LLC) on our website to measure visits, the pages people read, where visitors come from, and clicks on our App Store buttons. It sets cookies (such as _ga) so visits from the same browser can be counted together. Google receives your IP address to estimate an approximate location. Google Analytics is not used in the Runsy app or in the calculator widgets other websites embed. You can opt out with Google's browser add-on. See how Google uses information from sites that use its services and Google's privacy policy.

In the Runsy app

• App usage events - for example your sign-in method, onboarding steps, paywall views, plan generation, and whether a Health sync succeeded, recorded as counts and status codes rather than your workout values
• App lifecycle and crashes - when the app is installed, updated, opened or moved to the background, and crash reports with technical details
• Device information - device model, iOS version, app version, and your IP address with the approximate location estimated from it
• Your account - after you sign in, these events are linked to your Runsy user ID, and your name and email address are stored on your PostHog profile so our team can recognize your account when reviewing app activity
• Session replay - for a sample of app sessions (currently about 1 in 10), screenshots of the app screens you see and the taps you make. Text fields, images and system pickers are masked, but other text shown on screen, such as your training plan, workout summaries and coach messages, can appear in a recording.

On our servers

• Service events and diagnostics - plan generation, coach chat and workout sync events linked to your Runsy user ID, plus error reports, server logs and performance traces
• AI request records - for each AI coaching request, the model used, timing, token counts and whether it failed, together with the request and the coach's reply: your message to the coach and its answer, and for plan building, the information the plan is built from (your goal, schedule and recent workouts). We use these records only to check and improve the quality of your coaching, never for advertising, and they are not used to train AI models.

Retention and Your Choices

Session recordings, from the website and the app, are deleted automatically after 30 days. To ask us to delete the analytics data linked to your account, contact us at privacy@runsy.ai.

Email (Resend)

We email you about your training and your account: your plan and the week ahead, check-ins when it's been quiet, reminders about your subscription, and, now and then, news about Runsy. We send these through Resend, Inc., our email service provider, which processes them on our behalf (see Resend's Privacy Policy).

• What Resend receives: your email address, your first name, and the email itself, which can include your training plan (your planned sessions, your goal and your race) and what you've told your coach about your schedule.
• A line from your coach: if you've agreed to AI coaching in the app, some emails include a sentence or two your AI coach writes for you from your plan, your goal and what you've told it about your schedule, using the same AI providers as coaching in the app. It never uses Apple Health data, or anything you've told it about an injury or your health.
• Never in an email: Apple Health data. Your workouts, heart rate and other health data are not included in any email we send.
• What we measure: whether an email was delivered, and which links you tap (they pass through our own server first). We don't use tracking pixels to see whether you opened an email.
• Replies: if you reply, your message comes to the Runsy team through Resend.
• Your choice: every email has an unsubscribe link and a page where you choose which emails you get. Billing notices about your subscription are always sent.

Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS/HTTPS) for all API communications
• Encryption at rest for stored data
• Secure token storage using the iOS Keychain for authentication credentials
• Access controls limiting data access to authorized services

Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data, workout history, and coaching data within 30 days. Some data may be retained in anonymized form for service improvement purposes.

Your Rights

You have the right to:

• Access your personal data stored by Runsy
• Delete your account and all associated data
• Revoke HealthKit permissions at any time through iOS Settings
• Export your data in a portable format
• Withdraw consent for data processing by deleting your account

Children's Privacy

Runsy is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page. Your continued use of the app after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at privacy@runsy.ai.