How it worksThe scienceToolsLog inJoin the waiting list
Privacy

Privacy Policy

Last updated: 7 October 2026

Improva Labs ApS (CVR 46606558), based in Denmark, operates Runsei (“we”, “us”). We are the data controller for the personal data described here. This policy explains what we collect, why, and the rights you have under the EU General Data Protection Regulation (GDPR).

Data we collect

  • Account details — your email and, if you sign in with Google or Apple, your name and profile photo.
  • Onboarding & profile — the running goals, experience, availability, sex and year of birth you share so we can coach you.
  • Training data — your plans, planned and completed workouts, laps and splits, personal bests, training zones, and progress.
  • Health & recovery data — heart rate during and after your runs, and, if you connect a source that carries it, your sleep, heart-rate variability (HRV), resting heart rate and body mass. Any injuries or physical constraints you tell us about, the pauses you set in your training with the reason you give for each (holiday, illness, injury or other), and how you say you feel in the morning check-in, are part of this too. This is health data, and we treat it as the sensitive category it is.
  • Location data from your runs — the GPS route of a run, where the source you connected provides one. We use it to draw the map, to read terrain and grade, and to look up the weather you ran in. We never track your location in the background.
  • The place you usually run — optional. If you type a town or city, we save its name and its position on the map to look up the weather and the height above sea level for your planned runs. In the phone app you can instead tap “Use my approximate location”: only then does the app ask your phone, once, and the position is rounded to about 11 km (a town, not a street) on your phone before we see it, and our own server looks up the nearest town on a list it keeps, so no other company sees it; we save that town’s name and height above sea level. We never ask in the background, we never track you, and the app works the same without it.
  • Coach conversations — the messages you exchange with the AI coach, including any voice notes (transcribed to text) and images or PDFs you attach. These often mention your health and your life.
  • Connected services — if you connect Strava, Suunto,Garmin, COROS, Apple Health or Health Connect, the activity and health data you authorise us to import, and the access tokens needed to keep importing it. Every connection is optional and reversible in the app.
  • Which screens you open — which screens of the app you open, with the day, to see which parts of the app are used. No content: nothing you type and nothing about your runs.
  • Technical data — basic device and usage information needed to run and secure the service, and diagnostic reports when something goes wrong.

How we use it

  • To provide the service: build and adapt your plan, answer you as a coach, and track your training.
  • To personalise coaching to you.
  • To keep the service secure and working, and to fix problems.

Legal bases

We process your data to perform our contract with you (providing the app), on your consent (e.g. connecting Strava, Apple Health or Health Connect, and recording voice notes), and on our legitimate interests in operating and improving a secure service. You can withdraw consent at any time.

Health data — including your sleep, HRV, resting heart rate, any injuries you tell us about, and an illness or injury you give as the reason for a pause — is a special category under Article 9 of the GDPR. We process it on your explicit consent, which you give by connecting a health source or by entering the data yourself, and only to coach you. You can withdraw it by disconnecting the source or deleting the data, both of which you can do yourself in the app.

AI processing

The coaching and transcription features send the relevant content (your messages, voice notes and attachments, and the training context needed to answer) to trusted AI providers — Anthropic (the coach) and OpenAI (voice transcription and read-aloud) — acting as our processors. Under their API terms this content is not used to train their models. We send only what is needed to produce your result.

When a question needs something we don’t hold — a race’s course profile, a recent result — the coach can run a web search, which Anthropic performs on its own side. Only the search query leaves; your training data does not travel with it, and the answer cites what it used. Web search is off entirely in EU-only mode.

Who we share it with

We do not sell your data. We share it with the processors that run the service:

  • Supabase — database, authentication and file storage (EU region).
  • Vercel — application hosting (EU region, Dublin), and the visitor measurement on this website described under How we measure this website below.
  • Anthropic, OpenAI and Mistral — the AI features above (Mistral is EU-based).
  • Resend — sending you email: sign-in links, account notices and anything you asked to be told about (EU region).
  • Expo — delivering push notifications to your phone, if you turn them on. A notification carries only a short line of text and the screen to open.
  • Sentry — error monitoring, so we find out a screen broke without you having to tell us. We deliberately strip request contents, your identity and your IP before anything is sent, so an error report carries the fault and not the runner.
  • Open-Meteo — the weather on your runs and planned sessions. It receives a coordinate and a time, never your identity.
  • OpenFreeMap — the map tiles for a run’s route, and only if you keep maps on (see below).
  • Suunto, Garmin and COROS — watch platforms, only when you connect them (each opens to runners in turn). We read the activities and, where the platform provides them, sleep and heart-rate data you authorise; disconnecting stops it and deletes the access token we stored for it. Activities already imported stay in your Runsei history until you delete them or your account. Garmin is not connected directly today: Garmin data reaches us only through Apple Health or Health Connect, and disconnecting those stops it. Deleting your account removes the tokens and everything imported.
  • Strava, Apple Health and Health Connect — only when you connect them. Apple Health and Health Connect are stores on your own phone; connecting them lets Runsei read from them, and disconnecting stops it.

Credits. The list of towns we use to name the nearest town comes from GeoNames (towns over 15,000 people), licensed under Creative Commons Attribution 4.0. We adapted the data: we kept only the towns over 15,000 people and reduced each to its name, country, position (to three decimals), height and population. GeoNames is not a processor: it receives nothing from you.

Some of these processors — Anthropic, OpenAI, Expo and Sentry among them — may process data outside the EU/EEA. Where that happens we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, and the data is not used to train anyone’s models. EU-only mode (below) removes the AI providers from that list.

How we measure this website

We count visits to runsei.com — this marketing site — so we know whether anyone is finding it. It uses Vercel Web Analytics, the same company that already hosts the site, so no new company receives anything.

There are no cookies, and the measurement stores nothing on your device. No cookie banner, because there is nothing to ask you about. Visits are counted using a short-lived value derived from the request itself, which is discarded after 24 hours, and there is no identifier that could follow you to another website.

The one thing a free tool keeps on your device

The pace-guessing game on our pace calculator remembers your score and the guesses you made, so coming back does not start you from nothing. It is kept in your own browser’s storage on your own device: it is not a cookie, it is never sent to us or to anyone else, it cannot identify you, and clearing your browser data removes it. Nothing else on this website stores anything on your device, and none of the tools need an account.

Each visit records only: the page, the referring link, filtered query parameters, an approximate location from your connection (country, region, city), your device type, operating system and browser, and the time. That is the whole list.

We cannot see who you are from it, and it is not joined to your Runsei account. The app itself — runsei.app — carries no third-party analytics; this measurement is only on the public website, and signing in is not tracked. The one thing the app counts is which screens you open (see Data we collect), which is kept with your account and removed with it.

Keeping your data in the EU

Your data is stored in the EU whichever mode you choose, and our own application servers run in the EU too (Dublin). If you’d rather your AI processing stayed in the EU as well, set AI data processing to EU-only. People who live in the EU or EEA are offered the choice when they create an account, and it is under Settings → Data & privacy afterwards; it is not offered to people who live elsewhere.

In EU-only mode the coach runs on an EU AI provider (Mistral), and the four features that depend on non-EU services are turned off rather than quietly re-routed: voice notes (speech-to-text), read-aloud (text-to-speech), the coach’s web search, and the route map. Both modes are fully GDPR-compliant. EU-only stops the AI providers processing your data outside the EU; as noted above, Expo (push notifications) and Sentry (error monitoring) may still do so in either mode. You can change it in the web app and in the phone apps.

How long we keep it

We keep your data while your account is active. Deleting your account is scheduled, not instant: your account keeps working normally for 14 days so you can change your mind, and after that your personal data is deleted permanently. Encrypted database backups roll off within 30 days, and we keep only what a legal obligation requires us to. The full detail — what goes, what stays, and how to delete individual runs or connections without closing your account — is on our account deletion page.

Your rights

Under the GDPR you can:

  • access, correct, or delete your data;
  • receive a copy in a portable format;
  • object to or restrict certain processing, and withdraw consent;
  • lodge a complaint with the Danish Data Protection Agency (Datatilsynet).

Most of this you can do yourself without asking us: Settings → Data & privacy → Export my data downloads everything Runsei holds about you as a single file, and Profile → Data hub disconnects any source and revokes the token behind it. For anything else, email privacy@runsei.com.

Security

We use industry-standard measures to protect your data, including encryption in transit and access controls. No system is perfectly secure, but we work to keep your data safe.

Children

Runsei is not intended for anyone under 16. We do not knowingly collect data from children.

Changes

We may update this policy as the product evolves. We’ll change the date above and, for material changes, let you know in the app.

Contact

Improva Labs ApS — privacy@runsei.com.