Privacy Policy

The short version

Your training data stays on your device. There is no account, no login, and no database of users anywhere. Only two kinds of things ever reach our server: the words you type into a search box, and — only if you agree to it and then choose to talk to the in-app coach — your message together with enough of your recent training and overnight health figures to answer it. You can speak to the coach instead of typing; no recording of your voice is ever kept or sent to us. Neither your searches nor your messages are kept on our side. All we keep is a few counters for the coach's monthly allowance and any message packs you buy, and those contain nothing about you. Everything below is the long version.

1. Who We Are

Run Well ("we", "us", "our") makes a running app for iPhone and Apple Watch, including an optional AI coach you can talk to inside the app.

This policy covers that app. There used to be a separate companion website with its own accounts and its own stored plans; it was retired in August 2026 and no longer exists. What remains online is this document, our terms, and the small set of server functions the app itself calls.

2. Where Your Data Lives

The app has no account and no login. Your training data — runs, plans, routes and journal entries — is stored on your device, and if you have iCloud enabled, in your own private iCloud storage.

That storage is yours, not ours. It counts against your iCloud quota, it syncs between your own devices, and we have no ability to read it. We do not operate a database of users' training data. There is nothing on our side to breach, subpoena, sell or lose.

The same is true of the Apple Watch app: it records your workout, saves it to your own Health store, and exchanges routes and today's session directly with your iPhone over Apple's device-to-device link. None of that passes through a server of ours.

3. Apple Health

If you grant permission, the app reads the following from Apple Health:

• Running and walking workouts — distance, duration, date, heart rate
• Resting heart rate, heart rate variability and respiratory rate
• Sleep
• VO₂ max
• Body mass
• Date of birth

These are used to log your runs, estimate your training paces, work out how recovered you are, and judge whether today's session still suits you. Nothing else.

Health data is never sold, never used for advertising or marketing, and never used to build a profile of you. It is not shared with data brokers, and it is never disclosed to anyone for their own purposes.

It stays on your device and in your own iCloud, with one exception you control: if you use the in-app coach, a small number of these figures are sent with your message so the coach can answer questions about them. Section 4 lists exactly which, and what happens to them. If you never open the coach, no Health data leaves your device at all.

The iPhone app only ever reads from Apple Health and never writes to it. The Apple Watch app writes the workout it just recorded — to your own Health store on your own device.

You can withdraw access at any time in iOS Settings under Privacy & Security → Health → Run Well. The app keeps working with whatever it still has.

4. The AI Coach

The app has an optional coach you can talk to. It doesn't decide anything on its own: your plan, your paces, your readiness score, your race-readiness estimate and every suggestion the app makes are produced by formulas running on your own device — deterministic, the same inputs always producing the same answer, whether or not you ever open the coach. The coach's only job is conversation: understanding what you're asking and phrasing an answer using numbers your device already worked out.

You are asked first. The coach does not send anything until you have seen exactly what would be sent, who it goes to, and agreed to it. That happens in the app, the first time you open the Coach tab, and you can withdraw it at any time in Profile — the coach stops working and everything else carries on. Nothing below happens to someone who never agrees.

When you send the coach a message, that message and enough of your recent training to answer it are sent through our server to Anthropic, which runs the language model that writes the reply. Anthropic processes it on our behalf, only to generate that reply.

Anthropic is bound to protect it to the same standard we are. They act as our processor. Our agreement with them names your content expressly as confidential and makes that duty mutual — it binds each of us to guard the other's information in the same manner we guard our own, and with no less than reasonable care. Under it they may use your data only to produce that reply, and are prohibited from using it to train their models. Anthropic deletes it within 30 days, and holds it longer only where their own safety systems flag a message or the law requires it. Our server never stores it at all.

What's sent: your message, the recent messages in that conversation, your first name, your age as a number, your experience level, your body weight, recent run distances and dates, your weekly mileage, your training paces, your plan and goal race, your readiness score, and — for a run you finished earlier the same day, when available — the temperature and elevation gain for that run.

Including these overnight figures from Apple Health, each alongside your own baseline for it, so the coach can answer a direct question about them: last night's sleep hours, heart rate variability, resting heart rate and respiratory rate. If you are part-way through a run, your current heart rate is sent too. These accompany every message rather than only the ones that ask about them — the coach is instructed not to raise them unless you do, but the figures themselves travel with each message either way, and we would rather tell you that than describe only the coach's manners.

What's never sent: your date of birth, your location, your saved routes, or your email address. The temperature and elevation figures above are derived from your location and Apple Health at the moment they're computed, but the coordinates themselves are never part of what's sent — only the resulting numbers.

The coach can also search the web for general running knowledge it isn't already confident it knows correctly — what a specific workout or term means, for example — the same way you might search it yourself. When it does, only the search terms are sent, generated from the conversation; nothing about you personally accompanies a search, and it is never used to look anything up about you.

You can talk to the coach out loud instead of typing. When you do, your iPhone turns your speech into text and that text is then treated exactly like a message you typed — everything above applies to it and nothing more.

The conversion itself is your iPhone's, not ours. On phones that support it the recognition happens entirely on the device and the audio never leaves it. On a phone that doesn't, iOS sends the audio to Apple's speech recognition service, which is Apple's processing under Apple's privacy policy rather than ours — the screen tells you which of the two is happening while you are using it. Either way we never receive, store or have any access to a recording of your voice, and neither does Anthropic: what reaches our server is text, the same as if you had used the keyboard.

Nothing is recorded to a file at any point, the microphone is on only while the talk screen is open and listening, and iOS shows its own recording indicator throughout. When the coach reads a reply back to you, that uses a voice already installed on your iPhone and sends nothing anywhere.

You can delete a conversation at any time from inside the coach, which also clears what it remembers about you between conversations. If you never open the coach, none of this happens — nothing in this section runs on its own.

5. Location

The app uses your location while you are using it, for two things: fetching local weather so it can adjust pace targets for heat and humidity, and centring the map when you draw a route.

Weather comes from Apple's WeatherKit and route snapping from Apple Maps; both are handled by Apple under Apple's own privacy terms. Your coordinates are never sent to our servers and are never stored by us. The routes you draw stay on your device.

6. What Actually Reaches Our Server

Four things:

• Gear search. When you search the shop, the keyword and any filters go to our server, which asks our retail partner's catalogue and returns the results.
• Race search. When you look for races, the zip code, radius, distance and date range you entered go to our server, which asks the race directory and returns the results.
• The coach, if you use it — see section 4 for exactly what that sends and to whom.
• Message packs, if you buy one: Apple's signed record of that purchase, so our server can confirm it with Apple's signature before adding the messages.

Speaking to the coach rather than typing adds nothing to this list: the speech-to-text conversion happens on your iPhone or through Apple, and only the resulting text reaches us — see section 4.

The first two are answered and forgotten: nothing is attached to you, there's no account to attach it to, and nothing is kept in a form we could go back and look up later. The coach is different only in that your message passes through our server on its way to Anthropic to generate a reply — our own server doesn't store it either. Your conversation history lives on your device, like everything else the app knows about you, and you can delete it at any time.

What our server does keep is a few counters that make the coach's allowance and limits work. None of them contains anything you've said, your training or Health data, your name, or your Apple ID. They're kept against a random ID the app creates when it's installed, which isn't linked to you or to any account:

• Coach messages used this month. Your subscription includes a number of coach messages each month, and the server counts how many this installation has used so it can apply that. A free trial is counted separately, from the day the trial started. The count starts again each month.
• Message packs. If you buy extra coach messages, the server keeps how many you have left, plus Apple's transaction ID for each pack so the same purchase can't be credited twice. Apple handles the payment itself. We never receive your name, Apple ID, or payment details.
• Request limits. To stop the coach being overwhelmed, the server counts requests from this installation in the current hour and the current day. Older versions of the app that don't send an installation ID are counted by network address instead. These counts reset on their own.

Deleting and reinstalling the app creates a new random ID. Unused pack messages stay with the installation they were bought on.

7. Service Providers

• Apple — iCloud storage for your own data, plus weather, maps, and speech recognition on phones that cannot do it on-device
• Netlify — hosts the search endpoints and the coach endpoint
• Anthropic — the language model behind the in-app coach, only if you use it and only after you have agreed; bound by contract to protect your data to the same standard we are held to, to use it only to answer you, never to train on it, and to delete it within 30 days
• RunSignup — the race directory behind race search
• Impact.com — the catalogue behind gear search

They process only what is described above, only to perform that function. We do not sell your personal data, rent it, or share it with anyone for their own marketing or advertising.

8. Affiliate Links

We earn a commission when you buy gear through links in the app, and this is disclosed wherever products appear. Following such a link takes you to the retailer's own site, where their privacy policy applies. We share no health or training data with retailers — a click identifies the referral, not you.

9. Analytics and Tracking

There are none. The app contains no analytics SDK, no advertising SDK, no crash-reporting service and no third-party SDK of any kind. We do not track you across apps or websites, and we collect no usage statistics. We genuinely do not know how many times you have opened the app or which screens you use.

10. Retention and Deletion

Your data is on your device and in your own iCloud, so you control it directly and no request to us is necessary.

Deleting the app removes the local copy. Deleting Run Well's data in iOS Settings → your name → iCloud → Manage Storage removes the synced copy. Once both are gone, it is gone — we hold no backup, because we never held a copy.

Coach conversations are stored on your device the same way, and can be deleted from inside the coach at any time, which also clears what it remembers about you.

The counters in section 6 hold nothing about you. The monthly message count starts again each month, and the request counts reset within a day. A message-pack balance and the transaction IDs that stop a purchase being credited twice are kept while the pack can still be used. None of these is linked to you, so nothing on our side could identify them as yours.

11. Children's Privacy

Run Well is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has provided us with personal information, email us and we will delete it.

12. Your Rights

You have the right to access, correct, delete, or obtain a copy of any personal data we hold about you, and to object to how we use it. Connecticut residents have these rights under the Connecticut Data Privacy Act, and residents of other states and countries may have similar rights under their own laws. We honour these requests regardless of where you live.

In practice there is little to request: beyond the counters described in section 6, which aren't linked to you, we hold no personal data about you, and what passes through our server — a search, or a message to the coach — is processed and not retained on our side. Your data is already in your hands, on your own devices. If you'd like anything clarified or deleted, email us and we will look into it and respond within 45 days.

13. Changes to This Policy

We may update this policy from time to time. The date at the top shows when it last changed. If a change materially affects how we handle your data, we will make that clear in the app rather than relying on you to notice.

14. Contact

Questions or requests about your data? Email us at runwell.support@gmail.com.