Skip to main content
Back to Runbo

Legal

Runbo Privacy Policy

Last updated: October 1, 2026

Runbo is operated by an individual developer in the United States under the Runbo and Pervychine Mobile names. This policy explains what the Runbo iOS app and runbo.app access, how that information is used, and the choices you have.

Website privacy

  • When you contact Runbo through this website, your name, email address, and message are sent securely to our support inbox and used only to answer your request.
  • Runbo.app does not use advertising cookies or website analytics. Essential locale preferences may be stored in your browser.

Data the iOS App Reads

  • Health data you authorize through Apple HealthKit: training load samples, workouts and workout routes, quantity samples such as resting heart rate, respiratory rate, oxygen saturation and VO2 max, overnight heart rate, sleep sessions, heart-rate zone thresholds, and workout effort scores on iOS 18 and watchOS 10 or later. Runbo only reads the types you authorize in Apple’s Health permissions dialog, and you can revoke access at any time in the Apple Health app.
  • Device preferences and profile values, such as accent color, distance and temperature units, manual heart-rate thresholds, onboarding status, and Health permission status. They are stored in UserDefaults on your device.
  • Metrics Runbo derives on your device from those inputs: daily training load, focus balance, rolling averages, suggested focus, workout suggestions from your recent history, vitals summaries (temperature, overnight heart rate, sleep, blood oxygen) with outlier detection, race pace predictions when VO2 max or pace estimates are available, and heat adaptation from recent outdoor-run duration and weather exposure.

Local Processing and Storage

  • Metrics are calculated on your device, and free Readiness summaries always stay local. Online AI never sends full Health histories, raw samples, routes, record IDs or previous Coach replies. HealthKit source samples remain in HealthKit; local caches contain only the limited identifiers and summaries needed for continuity. Questions, recent context and, if you set one up, your training profile go through Cloudflare and Runbo to Google Gemini. The first request for each question contains no Health data; if Gemini asks to read data, only the values Runbo calculated on your iPhone for those reads (totals, summaries, dates and app guidance) are sent next.
  • Derived metrics are cached or kept on your device when continuity is needed. Heat-adaptation workout contributions are kept for up to 42 days and contain no coordinates or raw hourly weather. Preferences are stored in UserDefaults on your device.
  • If you export a structured workout, Runbo sends it through WorkoutKit to Apple’s Workout app, and Apple’s workout scheduler manages it on your paired Apple Watch. Runbo removes previously scheduled Runbo workouts that have already passed to keep the list clean.

Weather Data

  • For eligible outdoor workouts, Runbo may use the temperature and humidity stored with the HealthKit workout. When those are unavailable and the workout has a route, Runbo sends an approximate start coordinate and the workout time directly to Apple WeatherKit to request historical weather. Runbo does not operate an intermediary weather server.
  • Hourly WeatherKit responses are reduced on your device into a heat-exposure contribution. Runbo does not keep hourly temperature, humidity or workout coordinates in its heat-adaptation history, and start-weather observations use a bounded on-device cache that removes expired entries. When Apple Weather data contributes to an estimate, Runbo shows the Apple Weather credit and legal link and notes that the data was modified.

Apple Intelligence Readiness Coaching

  • When available and turned on in Settings, Runbo can use on-device Apple Intelligence to write a short summary of your existing Readiness factors. It runs entirely on your device, and no readiness data is sent to a Runbo server for this feature.
  • The summary is not kept as a score or guidance source, and it does not change your Readiness score or training guidance.

Ask Coach Online AI (Optional, Runbo Pro)

  • Online AI is off by default. Nothing is sent unless you turn it on in Settings and confirm. When it is on, each Ask Coach question sends the following to Runbo’s server: the text you typed; up to two of your previous Ask Coach messages; a short, value-free summary of the conversation’s current topic (for example, “running workouts this week”); today’s date and weekday; your language; whether a completed workout or workout suggestion is open; Apple’s signed proof of your Runbo Pro purchase, so the server can confirm access; and an App Attest key identifier and a signature proving that the request comes from Runbo on your device. Requests also include your distance units and the list of data types Runbo can read. If you set up a training profile, it is included too: your goal race (distance, date and target time), training and long-run days, experience level and any notes you write.
  • Runbo’s server is reached at runbo.app, which is served through Cloudflare. Cloudflare terminates the encrypted (TLS) connection and forwards each request to Runbo’s server, so it processes Online AI requests as a service provider.
  • App Attest is an Apple service. After you turn on Online AI, Runbo creates a key on your device, Apple confirms that it belongs to a genuine copy of Runbo, and Runbo’s server registers it. Each request is then signed with that key, so the server can reject requests that do not come from Runbo on a real Apple device.
  • Questions, recent context and, if you set one up, your training profile go through Cloudflare and Runbo to Google Gemini. The first request for each question contains no Health data; if Gemini asks to read data, only the values Runbo calculated on your iPhone for those reads (totals, summaries, dates and app guidance) are sent next.
  • Metrics are calculated on your device, and free Readiness summaries always stay local. Online AI never sends full Health histories, raw samples, routes, record IDs or previous Coach replies. HealthKit source samples remain in HealthKit; local caches contain only the limited identifiers and summaries needed for continuity. Gemini writes online replies first. On server failure, timeout, reply limit or invalid output, Apple Intelligence takes over when available; other devices show structured local facts. Daily and monthly limits apply to all generated online replies.

Online AI Storage and Retention

  • Runbo does not durably store or log question text, context, Health facts or replies. Replies may be cached in server memory for up to 30 minutes for retries. Content-free usage records enforce interpretation, daily and monthly reply limits and spending limits. App Attest security records expire after 180 days without use. Access logs may contain IP addresses, times and routes for security.
  • Cloudflare processes requests in transit. Google does not use paid API data to train models, but may retain it for limited abuse and security monitoring. Provider retention is governed by their terms; zero retention is not promised.
  • Online AI device record: for each device that uses Online AI, Runbo’s server stores the App Attest public key and key identifier, a counter that prevents requests from being replayed, a hashed purchase identifier used to limit how many devices can use one purchase, and the last time the key was used. The record contains no question text and no Health data, and it is deleted after 180 days without use. On your iPhone, the key identifier is kept in the Keychain for this device only; it is not synced or transferred to another device.
  • Purchase checks: when configured, Runbo’s server asks Apple’s App Store Server API about twice a day whether a purchase used for Online AI has been refunded or revoked, and stops answering Online AI requests for it if so.

Connected Assistants (Optional, Runbo Pro)

  • Connected Assistants lets you share selected Runbo summaries with an AI assistant you connect, such as ChatGPT, Claude, Grok or another assistant that supports remote MCP. Nothing is shared until you approve that specific assistant on your iPhone. Online AI consent does not authorize this feature.
  • You approve each assistant on your iPhone with Face ID or your device passcode, choose the categories it can read, and can change or disconnect it in Settings → Connected Assistants. Runbo shows the requesting assistant's name and a code to match with your browser; names Runbo cannot confirm are labeled unverified, so approve only a request you started yourself. Activity/workouts and Runbo insights are initially selected; sleep and vitals require selection. No email, password, Sign in with Apple or recovery account is created. Separate device-bound App Attest credentials authenticate your iPhone. Apple-signed purchase evidence confirms Pro access, including verified billing grace, and the server checks refund, renewal and expiry status. If device credentials are lost, pair again.
  • Only summaries in the selected categories are exported: daily steps and workout summaries; Runbo training load, focus, readiness, Energy, Stress and guidance; resolved sleep and naps; or numeric vital summaries including HRV SDNN and recorded VO₂ max estimates. Available history is limited to today and the previous 89 calendar days in your timezone. Runbo does not export routes, raw sensor samples, HealthKit record identifiers, clinical records, body measurements, profile notes or conversations through this feature. Assistants cannot write to Health or change Runbo through this connection.
  • An encrypted, temporary copy of the approved summaries is held on Runbo's connection service and supplied to the assistant you approved. The connection service is separate from Online AI. Infrastructure providers, including the TLS proxy when used, process requests in transit. The authorization browser receives no Health values. Connection credentials and stored exports are encrypted; exported snapshots are excluded from backups, payload logs and HTTP caches. Reading a snapshot or uploading an unchanged copy does not extend its lifetime. Snapshots are automatically deleted after seven days without a successful data refresh. Older records carry freshness notices; expired current-state values are withheld. Actual availability may be shorter or incomplete.
  • Disconnect immediately stops uploads from your iPhone. Server access is revoked and the stored export deleted when the server acknowledges the request. If the phone is offline, Runbo shows deletion as pending until it succeeds. Reducing consent removes access to deselected categories. Management and deletion remain available after Pro expires. OAuth credentials require pairing again after 30 days of inactivity or 90 days overall; separately approved bot tokens expire after 30 days. Abandoned exported data still expires after seven days.
  • The assistant provider's terms, privacy settings and retention rules apply to information it receives, including whether it may use your conversations to train its models. Review those settings before connecting. Disconnecting Runbo cannot remove copies or conversations already held by that provider. Runbo cannot promise that a general-purpose assistant has a special Health-data agreement or prevents model training.

Website Support Requests

  • If you contact support through runbo.app, we collect the name, email address, and message you submit. Please do not include sensitive health information unless it is necessary for your support request.
  • Support messages are sent to the Runbo operator by email using AWS Simple Email Service and the operator’s email provider. They are used to respond to you, troubleshoot issues, and maintain the app.
  • Support messages are kept only as long as reasonably needed for support, records, security, and legal purposes, then deleted or de-identified when they are no longer needed.

How We Use Information

  • To calculate training load trends, focus areas, recovery signals, vitals insights, heat adaptation and suggested workouts on your device, and to export structured workouts to Apple’s Workout app when you ask.
  • To remember display and unit preferences and keep the app experience consistent.
  • Questions, recent context and, if you set one up, your training profile go through Cloudflare and Runbo to Google Gemini. The first request for each question contains no Health data; if Gemini asks to read data, only the values Runbo calculated on your iPhone for those reads (totals, summaries, dates and app guidance) are sent next. Metrics are calculated on your device, and free Readiness summaries always stay local. Online AI never sends full Health histories, raw samples, routes, record IDs or previous Coach replies. HealthKit source samples remain in HealthKit; local caches contain only the limited identifiers and summaries needed for continuity.
  • To respond to support requests and understand whether a reported issue has been resolved.
  • To comply with legal obligations, enforce safety and security, and protect the app and its users.

What We Do Not Do

  • We do not sell personal information or share it for cross-context behavioral advertising.
  • We do not use HealthKit data for advertising, marketing, data brokerage, or unrelated profiling.
  • Metrics are calculated on your device, and free Readiness summaries always stay local. Online AI never sends full Health histories, raw samples, routes, record IDs or previous Coach replies. HealthKit source samples remain in HealthKit; local caches contain only the limited identifiers and summaries needed for continuity.

Optional creator attribution

  • If you enter a creator code, Runbo checks that code with Runbo. If you open a runbo.app/c/CODE link, Runbo counts the visit and does not store your IP address. When a code is confirmed, Runbo saves it as creator_id and sends creator_id to RevenueCat and to Runbo so a purchase can be credited to that creator. This is not used to track you across other companies' apps or websites.
  • That report does not include HealthKit or training data, your name, your email address, or an advertising identifier. Apple processes the purchase. A free trial or free offer earns the creator no commission.
  • Creator attribution is optional. Runbo does not read the clipboard or use a device fingerprint to assign a creator. You can use Runbo without a creator code.

Your Choices and Rights

  • You can grant or revoke Runbo’s Health access any time in the Apple Health app under Profile, Apps, Runbo.
  • Online AI is off by default. Renewed explicit consent in Training Preferences is required before sending needed Health facts. You can turn it off at any time; no Coach requests are sent while it is off. Online AI is for adults 18 and older. By enabling, you confirm you are 18+. Gemini writes online replies first. On server failure, timeout, reply limit or invalid output, Apple Intelligence takes over when available; other devices show structured local facts. Daily and monthly limits apply to all generated online replies.
  • Deleting Runbo removes local app preferences. iOS may keep the Online AI App Attest key identifier in the Keychain after the app is deleted; no other app can read it, and Runbo registers a new key if the old one no longer works. The matching device record on Runbo’s server is deleted after 180 days without use. Health data remains in HealthKit until you delete it in the Apple Health app.
  • You can cancel scheduled workouts on your Apple Watch in the Workout app under Plans, or rely on Runbo’s cleanup when you send new workouts.
  • You can request access, correction, deletion, or a copy of support-request information by using the support channel on runbo.app.
  • Depending on where you live, you may have additional privacy rights under local law. We will honor applicable rights that apply to Runbo.

Children’s Privacy

  • Runbo is not intended for children under 13, and we do not knowingly collect personal information from children. If you believe a child provided information, contact support so it can be deleted. Online AI is only for adults 18 and older; enabling it confirms you are 18+.

International Users

  • Runbo is operated from the United States. If you contact support from outside the United States, your support information may be processed in the United States and by service providers used for email delivery. If you use Online AI, your requests are processed by Runbo’s server and the service providers named above, which may be located in the United States or other countries.
  • Nothing in this policy limits privacy rights that cannot be waived under the laws that apply where you live.

Changes to This Policy

  • We may update this policy as features or legal requirements change. Updated versions will be posted with a new effective date.
  • Where required by law, we will provide additional notice or request consent. Continued use of Runbo after an update means you accept the revised policy.

Contact

  • For privacy questions or rights requests, use the support channel on runbo.app and include that your request is privacy-related.

Runbo is designed so your training data stays local, under your control, and separate from the support information you choose to send.

Back to home