Privacy Policy

1. Who we are

RunStrong is a personalized running training platform operated by GeeksOnFeet. We build training plans, track progress, and provide performance tools for runners of all levels. You can contact us at [email protected] for any privacy-related questions.

2. Information we collect

We collect only what is needed to provide the service:

• Account information: your email address, used for account creation, authentication, and service communications.
• Training plan data: race goals, target distances, training preferences, and plan configurations you provide.
• Dietary data: food photos and meal descriptions you upload voluntarily for nutrition tracking features.
• Connected device data: if you connect a Garmin device, we retrieve activity data from Garmin Connect with your explicit authorization (see Section 5 below).

3. How we use your information

• To generate and deliver your personalized training plans.
• To analyze your training history and provide performance insights.
• To improve the quality and accuracy of our recommendations.
• To send you updates about your plans and service-related communications.
• To troubleshoot technical issues and maintain service reliability.

We do not use your data for advertising, and we do not sell it to any third party.

3A. AI usage

RunStrong uses internally operated AI-assisted systems and tools in limited parts of the service. These systems are used to support specific product workflows and internal operations, not to replace all coaching or planning decisions.

• Nutrition and food logging features: food photos, meal descriptions, and related inputs may be processed by AI-assisted systems to extract structured meal facts, generate nutrition estimates, classify foods, and support deterministic scoring or review workflows.
• Internal operations and content assistance: certain internal tools may use AI assistance to draft, summarize, or structure operational content such as dish metadata, admin workflows, or support material.
• Human oversight: where AI-assisted tools are used in a user-facing workflow, the output may be reviewed, corrected, or overridden by RunStrong logic or by authorized team members before it is relied upon operationally.

We use these AI-assisted systems only to operate, improve, and support the RunStrong service for your account and our internal workflows. They do not change your ownership of your personal data, and they do not change the data-sharing commitments described in this Privacy Policy.

4. Information sharing

We do not sell, rent, or trade your personal information. We share data only with the following parties, and only as necessary to operate the service:

• Payment processors: to handle subscription billing securely. Payment details are never stored on our servers.
• Email delivery services: to send transactional and plan-related emails.
• Cloud infrastructure providers: our hosting and storage infrastructure providers store your data on our behalf under strict data processing agreements.

We may disclose information if required by law or to protect the rights, safety, or property of our users or the public.

5. Garmin Connect integration

RunStrong integrates with Garmin Connect via the Garmin Connect Developer Program API. The following applies to all data accessed through this integration:

What data we access

With your explicit authorization via Garmin's OAuth flow, we access the following data from Garmin Connect:

• Activity summaries: type, date, duration, distance, elevation, and timing.
• Biometric signals: heart rate (average and maximum), cadence, speed, and power (where recorded by your device).
• GPS and route data contained in activity files.
• Raw activity files in FIT format for detailed lap and sample analysis.

Why we access this data

We use Garmin activity data solely to enhance your training plan experience — for example, to detect training load, identify recovery patterns, and provide pace and performance context. We do not use Garmin data for advertising or share it with third parties beyond the infrastructure providers listed in Section 4.

Revoking access

You can disconnect your Garmin account at any time from your RunStrong profile settings. Disconnecting stops any further data retrieval. To request deletion of all previously synced Garmin data from our systems, contact us at [email protected].

Data retention for Garmin data

Garmin activity data is retained for as long as your RunStrong account is active. If you delete your account, all associated Garmin data is removed within 30 days.

6. Data security

We implement industry-standard security measures including encrypted storage, access controls, and HTTPS for all data in transit. Access to your data is restricted to authorized personnel and automated systems that require it to operate the service. We do not store payment card details on our servers.

7. Data retention

We retain your data for as long as your account remains active. You can request account deletion at any time by contacting us. Following a deletion request, your personal data is removed within 30 days, except where retention is required by law.

8. Your rights

You have the right to:

• Request a copy of the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Withdraw consent for third-party integrations (such as Garmin Connect) at any time.

To exercise any of these rights, contact us at [email protected].

9. Cookies and analytics

We use session cookies required for authentication. We do not use third-party advertising cookies or behavioral tracking technologies.

10. Changes to this policy

We may update this policy from time to time. If changes are material, we will notify you by email or by posting a notice on the app. Continued use of the service after updates constitutes acceptance of the revised policy.