Privacy Policy

1. Who We Are

RunnersDNA is operated by BobCreativeCopySRL SRL, a company registered in Romania (CUI: RO39386811), with registered address at Strada Lungă nr. 139, 500050, Brașov, Romania.

Contact: privacy@runnersdna.app

2. What This Policy Covers

This Privacy Policy explains how RunnersDNA collects, uses, stores, and protects your personal data when you use our platform at runnersdna.app. It applies to all users of our web and mobile application.

By using RunnersDNA, you agree to the practices described in this policy.

3. Data We Collect

3.1 Data You Provide Directly

• Name, email address, and password (during account registration)
• Age, weight, and running experience (during onboarding)
• Goal races and training preferences

3.2 Data From Connected Platforms

Strava (via OAuth connection)
When you connect your Strava account, we access:

• Running activity history (pace, heart rate, distance, elevation, moving time)
• Activity routes and GPS data
• Gear information
• Personal records and race history

We access only the data necessary to compute your performance profile. We do not post to Strava on your behalf.

Intervals.icu (your watch)
Your watch reaches RunnersDNA through Intervals.icu: you link your Garmin, COROS, Suunto, Polar or Wahoo device to your own Intervals.icu account, and connect that account to RunnersDNA with your personal Intervals.icu API key (or, where offered, through Intervals.icu's own authorization screen). RunnersDNA does not connect to your watch maker directly. When you connect Intervals.icu, we read:

• Recovery data your watch records: sleep duration, sleep score and heart rate during sleep, HRV, resting heart rate, SpO2, VO2 Max, respiration rate, daily steps and weight (only what your device and your Intervals.icu settings provide)
• Your Intervals.icu athlete profile (name and identifier) and your running settings

And, only on your behalf, we write:

• Planned workouts and race plans, made by your coach or by you, to your Intervals.icu calendar, from where Intervals.icu sends them to your watch; when a workout is deleted in RunnersDNA, we remove it from that calendar too
• Your running threshold pace in your Intervals.icu running settings, estimated from your race results, so pace targets reach your watch correctly

We do not read or change anything else in your Intervals.icu account. Your API key is stored on our servers and used only for the calls described above. You can disconnect at any time (see section 9).

Garmin Connect (file upload)
If you choose to export a health summary file from Garmin Connect and upload it, we extract recovery metrics from it (such as sleep, HRV and resting heart rate). The raw file is deleted after processing.

3.3 Third-Party Data

Weather data: We enrich your activity history with historical weather conditions (temperature, precipitation) using public weather APIs, to provide context for your performance data.

3.4 Automatically Collected Data

• IP address and device type (for security and analytics)
• Session data and usage logs
• Error reports (via Sentry, anonymized)

4. How We Use Your Data

We use your data exclusively to provide and improve the RunnersDNA service.

We do not use your data for advertising. We do not sell your data to third parties. We do not use your raw activity data to train machine learning models.

Your activity data (from Strava) and your watch data (through Intervals.icu) are processed by our computation engine to produce numerical performance scores. Only these computed outputs — never your raw activity or health data — are passed to AI inference systems for interpretation and narrative generation.

5. Data Storage and Security

• All data is stored on servers within the European Union.
• Database: PostgreSQL, hosted on Railway (EU region).
• Data in transit is encrypted using TLS 1.2 or higher.
• Access to production data is restricted to authorized team members only.
• Passwords are hashed using bcrypt and are never stored in plain text.
• We perform regular security reviews and apply security patches promptly.

6. Data Sharing

6.1 Your Club and Your Coach

If you join a running club on RunnersDNA (for example at threshold.runnersdna.app), the club's members can see your name, your profile photo and your club activity, such as club rankings and the club feed. In the club's settings you choose whether your club card is shown to other members, and, separately, whether the club may name you or use photos of you outside the club (for example in a results poster on social media). Being named outside the club is off until you turn it on.

If you are linked to a coach, that coach can see your activities, your training calendar, your evolution report and your recovery data (sleep, HRV, resting heart rate and the other data listed under Intervals.icu above), so they can plan your training. You are linked to a coach when you accept an invitation that names them (the invitation page tells you who your coach will be before you accept) or when you add your coach yourself under Account → My coach. The club's administrator can also see the recovery data of club members. Apart from these people, your recovery data is visible only to you.

You can end the link with your coach at any time from Account → My coach; the coach loses access immediately.

6.2 Service Providers

We share data only with the following categories of processors, strictly to operate the platform:

For processors outside the EU, we rely on Standard Contractual Clauses (SCCs) as the legal transfer mechanism under GDPR Article 46.

7. Data Retention

When you delete your account, all personal data is permanently deleted within 30 days, except where retention is required by law.

8. Your Rights Under GDPR

As a data subject under EU/Romanian law, you have the following rights:

• Right of access: Request a copy of all personal data we hold about you.
• Right to rectification: Request correction of inaccurate data.
• Right to erasure: Request deletion of your personal data.
• Right to restriction: Request that we limit processing of your data.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interest.
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at privacy@runnersdna.app. We will respond within 30 days.

You also have the right to lodge a complaint with the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) at anspdcp.ro.

9. Connected Platform Permissions

Strava: You can revoke RunnersDNA's access to your Strava data at any time from Strava Settings → My Apps. Revoking access will stop new data from syncing. Existing computed data in your profile will remain until you delete your account.

Intervals.icu: You can disconnect at any time from Account → Watch sync → Disconnect in RunnersDNA. You can also cut access from Intervals.icu itself by clearing or regenerating your API key in Intervals.icu → Settings → Developer Settings. Either way, new data stops syncing and RunnersDNA can no longer write to your Intervals.icu calendar. Existing data in your profile will remain until you delete your account.

10. Children's Privacy

RunnersDNA is not intended for users under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us at privacy@runnersdna.app and we will delete it promptly.

11. Cookies and Tracking

RunnersDNA uses only essential cookies required for authentication and session management. We do not use third-party advertising cookies or tracking pixels. You can control cookie preferences through your browser settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or through a banner in the application at least 14 days before the changes take effect.

Continued use of RunnersDNA after the effective date of changes constitutes acceptance of the updated policy.

13. Contact

BobCreativeCopySRL SRL
Email: privacy@runnersdna.app
Website: runnersdna.app