Privacy Policy

runyo respects your privacy. This privacy policy explains what data we collect, why, and how we handle it. We keep it short and clear.

1. Who we are

runyo is a personal training app for runners, built in Utrecht, the Netherlands. Questions about this policy? Email us at [email protected].

2. What data we collect

We only collect what is needed to make the app work:

• Email address - via the waitlist, so we can let you know when runyo goes live.
• Google account details - name and email address via Google OAuth, so you can sign in to the app. We do not store passwords.
• Training plan - the schema you import or create. We store it in our own backend so the app keeps working across your devices.
• Notification settings - times and preferences for Telegram notifications, so the bot knows when to send you a message.

3. What we use your data for

• To let you know when runyo is publicly available (waitlist).
• To give you access to the app via Google OAuth.
• To send daily training notifications via Telegram, if you set that up.
• We do not sell data to third parties. We do not use your data for advertising.

4. How long we keep your data

• Waitlist email addresses are kept until runyo goes live and we have informed everyone, or as soon as you unsubscribe.
• App settings are kept as long as you have an account. You can delete your data at any time by contacting us at [email protected].

5. Scopes we use via Google OAuth

When you sign in with Google, we request access to:

• Basic profile details (name, email address) - for identification.

That is the only access we request. Exporting your training plan happens server-side: we save it as a Google Sheet in our own Google Drive (see subprocessors) and never touch your Google account. We never request more access than is needed for the app to work.

6. Your rights (GDPR)

You have the right to:

• Request access to the data we keep about you.
• Have incorrect data corrected.
• Have your data deleted.
• Object to processing.

Email us at [email protected] and we will respond within 30 days.

7. Subprocessors

To run runyo we rely on a small number of carefully chosen third parties (subprocessors) that process data on our behalf:

• Formspree (USA) - processes your email address when you sign up for the waitlist.
• Cloudflare / GitHub Pages - hosting of this website.
• Netcup (Germany) - hosting of the backend and the bot.
• Telegram - delivery of training notifications (only if you set this up).
• Anthropic (USA) - processes your imported training plan to read it in automatically.
• Google (USA) - stores your exported training plan as a Google Sheet in our Drive (only if you use the export).

We have data processing agreements in place with these parties. Where data is transferred outside the EEA, this is covered by appropriate safeguards such as the EU Standard Contractual Clauses (SCCs).

8. Cookies and tracking

runyo uses no tracking cookies and no advertising networks. We do not use third-party analytics services that follow your behavior across websites.

9. Changes

If we change this policy, we update the date at the top of this page. For significant changes, we will notify you by email.