Runiva

Legal

Privacy Policy

Effective date: May 18, 2026

1. Who we are

Runiva ("we", "us", or "our") operates the Runiva mobile application and website at runiva.app. We are the data controller responsible for your personal information under applicable privacy law.

If you have questions or concerns about this policy or our practices with regard to your personal information, please contact us at legal@voscey.com.

2. What information we collect

Information you provide to us

  • Account data: name, email address, and password (stored as a bcrypt hash).
  • Runner profile: optional fitness details you enter (age, weight, heart-rate zones, training background). These are stored locally on your device by default and only sent to our servers when used to generate a training plan.
  • Run data: GPS coordinates, distance, duration, pace, and heart rate for runs you log.
  • Plan data: race goals, training preferences, and workout completion records.

Information collected automatically

  • Device data: device type, OS version, and app version for crash reporting.
  • Location: GPS coordinates during active runs and for loop route generation from your start point. We do not track your location in the background except during an active workout.
  • Push token: an Expo push notification token to deliver run reminders (stored until you disable notifications or uninstall the app).
  • Error and crash data: sent to Sentry to help us fix bugs. No personally identifiable data is included.

Information from third parties

  • Apple HealthKit: if you grant permission, we read sleep, resting heart rate, and HRV data from HealthKit to support recovery tracking. We do not write workout data to HealthKit. We will never use HealthKit data for advertising, marketing, or share it with third parties for any purpose other than providing the Runiva service to you.
  • Garmin / Strava: completed activity data from connected accounts if you authorise the integration.
  • RevenueCat: subscription status and purchase events for Pro plan management.

3. How we use your information

  • To create and manage your account.
  • To generate personalised training plans and adaptive coaching notes using AI (Google Gemini).
  • To generate loop running routes based on your GPS location and workout distance.
  • To send run reminder push notifications (you can disable these in your device settings or in the app).
  • To process subscription payments via RevenueCat and Apple/Google in-app purchase systems.
  • To diagnose bugs and improve the product via aggregated, anonymised crash data.
  • To comply with legal obligations.

We do not sell your personal data to third parties. We do not use your data for advertising.

4. Lawful basis for processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data on the following legal bases:

  • Performance of a contract: processing your account data, run data, and plan data is necessary to provide the Runiva service you have signed up for.
  • Consent: accessing HealthKit data, sending push notifications, and processing optional runner profile details. You may withdraw consent at any time via your device settings or by contacting us.
  • Legitimate interests: collecting anonymised crash and error data to maintain service quality and security. These interests do not override your privacy rights.
  • Legal obligation: where we are required to process or retain data to comply with applicable law.

5. Data sharing

We share data only with the service providers necessary to operate Runiva:

  • Google: Gemini API for AI coaching notes and training adaptations, and Google Maps for map display on Android.
  • Resend: email delivery for password reset links.
  • RevenueCat: subscription management.
  • Sentry: anonymised crash and error reports.
  • Expo: push notification delivery.

All providers are contractually required to process data only on our behalf and in accordance with our instructions.

6. International data transfers

Our service providers — including Google, Sentry, Expo, RevenueCat, and Resend — are based in the United States. When we transfer personal data from the EEA to these providers, we do so under Standard Contractual Clauses (SCCs) approved by the European Commission, or under another recognised transfer mechanism, to ensure your data receives an adequate level of protection.

By using Runiva, you acknowledge that your data may be transferred to and processed in countries outside your country of residence.

7. Cookies and similar technologies

The Runiva mobile app does not use cookies. The Runiva marketing website (runiva.app) uses only technically necessary cookies required to serve the site. We do not use advertising cookies, third-party tracking pixels, or cross-site analytics.

8. Data retention

We retain your account and run data for as long as your account is active. If you delete your account, all your personal data — including runs, plans, and profile information — is permanently deleted within 30 days. Anonymised, aggregated usage statistics may be retained indefinitely.

9. Your rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate personal data.
  • Request deletion of your personal data (you can do this directly in the app under Profile → Delete account).
  • Object to or restrict certain processing.
  • Data portability — receive a copy of your data in JSON format.
  • Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
  • Lodge a complaint with your national data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

California residents (CCPA)

If you are a California resident, you have the right to: know what personal information we collect and how it is used; request deletion of your personal information; and non-discrimination for exercising your privacy rights. We do not sell personal information. To exercise your rights, contact us at legal@voscey.com.

To exercise any of these rights, email legal@voscey.com. We will respond within 30 days.

10. Children

Runiva is not intended for children under 13 (or under 16 in jurisdictions where a higher age threshold applies under local law, including certain EU member states). We do not knowingly collect personal information from children below the applicable age. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

11. Security

We use industry-standard security measures including bcrypt password hashing, HTTPS-only communication, and JWT authentication. No method of transmission over the internet is 100% secure — we cannot guarantee absolute security but we take every reasonable precaution to protect your data.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. If changes are material, we will notify you via email or an in-app notice at least 14 days before the changes take effect. Continued use of Runiva after the effective date constitutes acceptance of the updated policy.

13. Company information & Contact

Runiva is a service provided by Voscey. For privacy-related questions, requests, or complaints, contact us using the details below:

  • Company Name: Voscey
  • Registered Address: Herenweg 146, 3648CN Wilnis, The Netherlands
  • Chamber of Commerce (KVK): 99994070
  • VAT ID (BTW): NL005423874B69
  • Email: legal@voscey.com
Start free