Privacy Policy

Last updated: October 2026

1. What We Collect

RunCoach collects the following data when you use the application:

• Account information: Name, email address, and profile picture from Google Sign-In.
• Training data: Running distance, duration, pace, heart rate, cadence, elevation, and perceived effort from manually logged runs or connected activity providers.
• Health-related data: Body weight (if provided for nutrition planning), sleep quality, energy levels, soreness, and stress levels (if provided via daily readiness check-ins). If you connect Intervals.icu and grant wellness access, your watch's overnight heart-rate variability, resting heart rate and sleep duration, used to judge readiness against your own recent baseline.
• Notification devices: If you turn on notifications, the push address your browser gives us for that device, so we can deliver messages to it. Turning notifications off, or signing out on that device, deletes it.
• Training plans: Generated plans including target distances, weekly mileage, and workout schedules.

2. How We Use Your Data

• Generate personalized training plans and nutrition guidance.
• Adapt your training based on logged performance.
• Provide coaching feedback and readiness assessments.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Third-Party Services

• Google Sign-In: We use Google OAuth for authentication. Google receives your sign-in request; we receive your name, email, and profile picture.
• Intervals.icu: If you connect Intervals.icu, we read the activity data you authorise. If you turn on calendar sync, we also create and update planned workouts on your Intervals.icu calendar. You can disconnect at any time, which removes the stored connection credentials.

4. Cookies & Consent

• access_token: An HTTP-only session cookie for authentication. Strictly necessary for the application to function.
• refresh_token: An HTTP-only cookie used to renew your signed-in session.
• anonymous_user_id: Used to associate training plans with your browser session before you sign in. This cookie is only set when you interact with plan generation or API features — not on your first page visit.
• rc_tz: Stores your browser's time zone so “today” and your training week match your local day.
• rc_lang: Stores the language you chose, so the PDF, emails, notifications and watch workouts are written in it too.
• intervals_oauth_state: A short-lived security cookie used while connecting Intervals.icu.

RunCoach does not use analytics or advertising cookies. It uses the cookies above to keep your session and your anonymous plan available. You choose whether to enter health-related details or connect a training account.

5. Data Storage & Security

Sensitive provider credentials are encrypted at rest using Fernet symmetric encryption. Connections to RunCoach are served over HTTPS.

6. Your Rights

• Access: You can view all your data through the application (plans, runs, analytics).
• Deletion: You can delete your account and all associated data at any time. Go to your account settings or send a request to the contact below. Account deletion is permanent and removes all plans, run logs, readiness logs, saved recipes, and provider credentials.
• Intervals.icu disconnect: You can disconnect Intervals.icu at any time, which clears all stored tokens and credentials.

7. Data Retention

Your data is retained as long as your account is active. If you delete your account, all associated data is permanently removed. Inactive accounts (no login for 24 months) may be deleted automatically.

8. Contact

For privacy-related questions or data deletion requests, contact us at the email associated with this project.