Skip to content

Privacy Policy

Last updated: November 5, 2026

RunAI ("we", "us", or "the app") is an AI-powered running coach for iOS, operated by RunAI, Avenida Almirante Reis 54, 1150-019 Lisbon, Portugal. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Account Information: When you sign in with Apple we receive your Apple user identifier and, optionally, your name. We store a display name and profile photo you choose to share. We also store the two-letter country code from your device's region setting to understand regional usage and provide support. This setting may not reflect your physical location.

Health & Fitness Data: With your permission the app reads running workouts, heart rate, VO2max, step count, active energy, biological sex, date of birth, height, and body mass from Apple Health. If you connect a third-party service such as Garmin Connect, we receive the activity and health data you authorise it to share. This data is used solely to personalise your training plan and coaching feedback.

COROS: If you connect a COROS account in the app's settings, you sign in on COROS's own page and allow RunAI access. We never see your COROS password. We receive and store an access token and a refresh token that let RunAI act on your COROS account, your COROS account identifier, and the COROS region your account belongs to (United States and other regions, Europe, or Mainland China). RunAI uses this access to put the planned workouts from your training plan on your COROS calendar: for each day, the workout type, distance or duration, its steps, and the pace or heart rate targets for each step. To keep your COROS calendar up to date without creating copies, we keep a record of each workout we sent: its date, a workout identifier, a fingerprint of its contents, the COROS account it went to, and when it was sent. RunAI also reads your COROS runs to show them in the app and to personalise your coaching: date, sport type, distance, duration, heart rate, calories, the activity name, and from each run's activity file its GPS route, altitude, cadence, speed, laps and pauses. It also reads your COROS profile (date of birth, sex, height and weight), VO2max, daily resting heart rate, sleep (time asleep, sleep stages, bedtime and wake time) and overnight heart rate variability, which fill in what Apple Health does not have for your heart rate zones, Readiness and coaching. These pass through our server without being stored there; the app keeps them on your device and deletes them when you disconnect COROS. Workouts you send to COROS and data stored by COROS are handled by COROS under its own privacy policy, on COROS's servers for your region, which for Mainland China accounts are in China.

Strava: If you connect a Strava account in the app's settings, you sign in on Strava's own page and choose what RunAI may do. We never see your Strava password. We store your Strava athlete identifier, the permissions you approved, and an access token and a refresh token that let RunAI act on your Strava account. If you allow posting, runs you record with RunAI are sent to Strava through our server when they finish, unless you turn this off: start time, duration, distance and, when recorded, GPS route, altitude and heart rate. If you allow reading, RunAI reads your Strava activities to show them in the app and to personalise your coaching: activity name, sport type, date, duration, distance, heart rate, cadence, speed, elevation, calories, splits, pauses and GPS route. These pass through our server without being stored there; the app keeps them on your device and deletes them when you disconnect Strava. Data stored by Strava is handled by Strava under its own privacy policy.

Coarse Location: With your permission the app accesses your approximate GPS location to suggest nearby races. GPS location data is not stored on our servers.

Conversation Data: Messages you exchange with the AI coach are sent to our server to generate responses. Conversations are stored locally on your device.

2. How We Use Your Data

  • Generate personalised training plans and coaching feedback
  • Send your planned workouts to COROS, and read your COROS runs, when you connect COROS
  • Post your runs to Strava, and read your Strava activities, when you connect Strava and allow it
  • Show your profile and training progress on event leaderboards
  • Improve the app experience

We do not sell your data. We do not use your data for advertising or tracking across apps.

3. Artificial Intelligence Transparency Statement

RunAI uses artificial intelligence to generate your training plan, coaching replies, and workout feedback. To do this, your conversation messages, profile, and workout and health data (including data from connected services such as Garmin Connect, your COROS runs, profile, VO2max, resting heart rate, sleep and heart rate variability, and your Strava activities if you allow RunAI to read them) are processed by large language models, primarily Google Gemini, accessed through OpenRouter. This processing is used only to provide coaching to you. We do not sell this data, and we do not use it to train AI models.

AI processing also runs on its own when a new run arrives, to write feedback on it, including a new Strava activity if you allow RunAI to read them. Otherwise it happens only when you use the AI coach, and you agree to it when you start using the coach. You can withdraw your consent at any time by disconnecting connected services, stopping use of the AI coach, or deleting your account from the app's settings.

4. Data Storage & Security

Your training plans and conversations are stored locally on your device. Server-side data (account info, event participation, synced workout summaries) is stored in a PostgreSQL database hosted by Vercel. Authentication tokens are stored in the iOS Keychain. COROS and Strava access and refresh tokens are encrypted before they are stored in our database and are used only by our server to talk to those services on your behalf.

5. Data Retention & Deletion

You can delete your account and all associated server-side data at any time from the app's settings menu. Local data can be removed by deleting the app. When you delete your account, all server-side data (profile, event participation, training logs, workout history) is permanently removed.

COROS: we keep your COROS tokens only while COROS is connected. When you tap Disconnect COROS in the app, we delete your tokens and the connection details, and RunAI stops sending to and reading from COROS. We keep the record of workouts we already sent (described above) so that reconnecting the same COROS account updates those workouts instead of adding copies; it is deleted when you delete your RunAI account. If COROS ends the connection (for example because you removed RunAI's access on the COROS side), we delete the tokens and keep the connection details with a note that the connection ended, so the app can tell you, until you connect again, disconnect, or delete your account. Deleting your RunAI account removes the COROS connection and all records of sent workouts. Workouts already on your COROS calendar stay there until you remove them in the COROS app, and you can remove RunAI's access from your COROS account at any time.

Strava: we keep your Strava tokens only while Strava is connected. Tapping Disconnect Strava in the app, removing RunAI in Strava's settings, or deleting your RunAI account deletes your tokens and the connection, and the app removes any Strava activities it kept on your device. Runs already on Strava stay there until you remove them on Strava.

6. Children's Privacy

RunAI is not directed at children under 13. We do not knowingly collect data from children under 13.

7. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via an app update.

8. Contact

Questions or requests? Email us at support@traingpt.io or write to RunAI, Avenida Almirante Reis 54, 1150-019 Lisbon, Portugal.