Privacy Policy

Last Updated: January 2, 2025

Introduction

Runaway ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web services (collectively, the "Service").

By using Runaway, you agree to the collection and use of information in accordance with this policy.

Information We Collect

1. Activity Data from Connected Platforms (Strava, Garmin)

When you connect your Strava or Garmin Connect account, we collect:

  • Activity details (distance, duration, pace, elevation)
  • GPS data and route information
  • Heart rate and performance metrics
  • Activity timestamps and locations
  • Activity type and descriptions
  • Training status and recovery metrics (Garmin)
  • Daily summaries and sleep data (Garmin, if enabled)
  • Photos and comments associated with activities

2. Account Information

  • Strava or Garmin profile information (name, profile photo, athlete ID)
  • Email address
  • Authentication tokens

3. Usage Data

  • App usage patterns and feature interactions
  • Device information (device type, operating system, app version)
  • Log data and error reports

4. AI Interaction Data

  • Messages sent to the AI Running Coach
  • Training goals and preferences
  • Generated training journals and analysis results

How We Use Your Information

We use your data to:

  • Provide AI-Powered Insights: Generate personalized training recommendations, performance analysis, and race predictions based on your activity data
  • Generate Training Journals: Create weekly AI-generated summaries of your training progress
  • Personalized Coaching: Power our AI Running Coach to provide context-aware training advice
  • Track Progress: Monitor your running metrics, goals, and achievements over time
  • Improve the Service: Analyze usage patterns to enhance features and user experience
  • Communicate: Send important updates, notifications, and training reminders

How We Share Your Information

Third-Party Services

We share your information with the following third-party service providers:

Anthropic (Claude AI)

Purpose: AI-powered training analysis, coaching, and journal generation

Data Shared: Activity metrics (distance, pace, heart rate), training context, and user messages to the AI coach

Privacy Policy: anthropic.com/privacy

Supabase

Purpose: Database storage, authentication, and real-time data synchronization

Data Shared: All activity data, user profiles, and app-generated content

Privacy Policy: supabase.com/privacy

Strava

Purpose: Activity data synchronization via OAuth integration

Data Shared: Authentication credentials (no activity data sent back to Strava)

Privacy Policy: strava.com/legal/privacy

Garmin Connect

Purpose: Activity and health data synchronization via Garmin Connect API

Data Collected: When you connect your Garmin account, we receive:

  • Activity data (running, cycling, swimming, etc.)
  • GPS routes and elevation data
  • Heart rate, pace, and performance metrics
  • Daily summaries and sleep data (if enabled)
  • Training status and recovery metrics

How We Use Garmin Data: Your Garmin data is used exclusively to:

  • Provide AI-powered training insights and recommendations
  • Track your fitness progress and training load
  • Generate personalized coaching advice
  • Create training journals and performance analysis

Data Retention: Garmin activity data is retained for as long as your account is active. You can disconnect Garmin and request data deletion at any time.

Privacy Policy: garmin.com/privacy/connect

Google Cloud Platform

Purpose: Backend API hosting, push notifications (Firebase)

Data Shared: Application data and device tokens for notifications

Privacy Policy: policies.google.com/privacy

We do NOT:

  • Sell your personal data to third parties
  • Share your data with advertisers
  • Use your data for purposes other than providing our Service

Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Specific retention periods:

  • Activity Data: Retained indefinitely while your account is active
  • AI-Generated Content: Training journals and analysis stored for the lifetime of your account
  • Chat Messages: Conversation history retained to maintain context
  • Log Data: Automatically deleted after 90 days

Your Rights and Choices

You have the right to:

  • Access: Request a copy of your data
  • Correction: Update or correct your information
  • Deletion: Request deletion of your account and all associated data
  • Export: Download your activity data and training history
  • Disconnect: Revoke Strava or Garmin access at any time through Settings
  • Opt-Out: Disable push notifications or specific features

To exercise these rights, contact us at jack@runawayendurance.com

Data Security

We implement industry-standard security measures to protect your data:

  • Encryption in transit (HTTPS/TLS)
  • Encryption at rest for stored data
  • Secure authentication via OAuth 2.0
  • Regular security audits and updates
  • Access controls and monitoring

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Children's Privacy

Runaway is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us.

International Data Transfers

Your data may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using Runaway, you consent to the transfer of your information to the United States and other countries where our service providers operate.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Notice for European Users (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to lodge a complaint with a supervisory authority. To exercise these rights, please contact us at the email address above.

California Privacy Rights (CCPA)

California residents have specific rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to opt-out of the sale of personal information (Note: We do not sell your data)
  • Right to deletion of personal information
  • Right to non-discrimination for exercising your rights