Privacy statement

Who is responsible?

Runvex is made by Jeremy Cordes from Enschede, Netherlands. We are the data controller under the General Data Protection Regulation (GDPR). Questions about your data? Email Jeremycordes31@gmail.com.

Which data do we use?

• Account: your email address and password. Your password is only stored encrypted (hashed); nobody can read it, not even us.
• Profile: your first name (if you fill it in), date of birth, language, time zone and the kind of work schedule you have.
• Training: your sports and level per sport, your goal (description, race, date and distances), how much time you have per day, your planned trainings and the coach's explanation for them, whether you did or skipped a training, how hard it felt (1-10) with any note you add, and your pool and swim equipment.
• AI coaches: your messages to the coaches and their replies and proposals, and per AI request the number of tokens and the cost, so we can keep a weekly limit.
• Technical data: your IP address and browser details end up in the log files of our hosting and database, for security and fixing problems.

We don't collect location, heart rate, sleep or other health measurements. If we add that later, we'll ask for your explicit consent first.

Why, and on what legal basis?

• To make the app work (account, intake, week planning, trainings): necessary for our agreement with you (Art. 6(1)(b) GDPR).
• Your date of birth: to check that you are at least 16 and to match your training to your age (agreement).
• Emails such as the confirmation of your account (agreement).
• Sending your trainings to your watch: only when you connect it yourself, based on your consent, which you can withdraw at any time (Art. 6(1)(a) GDPR).
• Security, preventing abuse and the AI coach's daily limit: our legitimate interest in a safe and affordable app (Art. 6(1)(f) GDPR).

The AI coach

When you tap ‘Plan my week’, we send a summary to Claude, Anthropic's AI model: your sports and levels, your work schedule, your available time per day, your goal, your trainings of this week and last week and how many of them you did or skipped with the average effort (without your notes). We don't send your name, email address or date of birth. Anthropic doesn't use this data to train its models.

Every plan from the coach is first checked against fixed training rules. If that fails, Runvex makes the plan itself, without AI.

Who do we share data with?

We never sell your data. We work with these service providers (processors), who may only use your data on our behalf:

• SupabaseDatabase and login · EU (Ireland)
• VercelHosting the app · US / EU
• ResendSending emails · US
• AnthropicAI coach (week planning) · US
• intervals.icuTrainings to your watch (only when you connect) · Possibly outside the EU

Data outside the EU

Some service providers are outside the European Union, mainly in the United States. For those we use the safeguards the GDPR requires, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.

How long do we keep your data?

As long as your account exists. You can delete your account yourself in Profile → Delete account: your account and all your data are erased right away. If that doesn't work, email Jeremycordes31@gmail.com and we'll do it within a month. Data may stay in automatic backups for a short while until they are overwritten. Technical log files are deleted automatically after a short time by our service providers.

Cookies

We only use cookies the app needs to work: one to keep you logged in and one that remembers your language for a year. We don't use cookies for advertising or tracking, and no analytics services.

Security

• All connections are encrypted (HTTPS).
• In the database, every user can only reach their own data (Row Level Security).
• Secret keys are only on the server, never in the app on your phone or in your browser.

Your rights

You may view, correct or delete your data. You may also ask us to process less (restriction), object, get your data in a common file format (portability) and withdraw your consent. Email Jeremycordes31@gmail.com; we'll respond within a month. You can also change much of your data yourself in your profile.

Not happy with how we handle your data? You can file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl), or with the authority in your own country.

Minimum age

Runvex is meant for people aged 16 and over.

Changes

When the app changes, we update this statement. The date at the top shows when that last happened. For big changes, we'll let you know in the app.