RUN B RUN app privacy policy

1. Who we are

RUN B RUN is provided by JTV BV, Max Euwesingel 19, 2406 LR Alphen aan den Rijn, the Netherlands (Chamber of Commerce no. 42052740). JTV BV is the controller for the processing of personal data described in this policy. Contact: info@runbrun.com.

2. Minimum age

RUN B RUN is intended for people aged 16 and over. If you are under 16, please do not use the app. If we learn that an account belongs to someone under 16, we will delete that account and its data.

3. Data on your own phone

You can use RUN B RUN without an account. In that case your runs, settings, progress and RUN LEVEL are stored only on your phone. Your Home name and profile photo always stay on your phone and are never sent to our servers. If you delete the app, this local data is deleted too.

4. Account and profile

If you create an account, we process:

• your email address and an internal user ID;
• the sign-in method you choose (email and password, Sign in with Apple or Sign in with Google);
• your Social display name and friend code, if you use Social;
• your language, app preferences, training goals and training preferences.

With Sign in with Apple you can hide your email address, in which case we only receive a relay address from Apple. We never see your password: our authentication provider stores it in encrypted form.

5. Running data

During and after a run, the app processes things like:

• start and end time, duration, distance, pace and speed;
• your GPS route and GPS quality data;
• an estimated calorie burn;
• the effort level you enter yourself;
• RUN LEVEL, the Meetbasis and the data they are based on;
• milestones and progress.

If you have an account, your runs, including the GPS route, are also stored in our cloud, so you can see them on another device and keep them when you switch phones.

6. Location

To record your run, RUN B RUN asks for access to your precise location, including while the app runs in the background during a run. We use location only to record your route, calculate distance and pace, plan routes and show where you ran. We do not use your location for advertising and do not track you outside a run. You manage location access in your phone's settings.

7. Apple Health and Health Connect

If you allow it, RUN B RUN reads data from Apple Health (HealthKit) on iPhone or from Health Connect on Android. This lets the app make your RUN LEVEL more accurate and import runs you did with a watch and no phone. The app only reads:

• Apple Health: workouts, workout routes, heart rate, steps and walking + running distance;
• Health Connect: exercise sessions, heart rate, distance and steps.

RUN B RUN never writes data to Apple Health or Health Connect. We use this health data only for RUN B RUN's running and fitness features. It is not used for advertising or marketing, and it is not sold or shared with data brokers. You can withdraw access at any time in your phone's settings.

8. Social

Social is optional. If you use it, we process your friends and friend requests, invitations, challenges, B vs B duels, encouragements and your Social settings. Friends see your display name and, for your synced runs, the distance, time, pace and date, plus limited feed activity. Your GPS routes, heart rate, RUN LEVEL, email address and Home photo are not shared as friend data.

9. Run & Meet

Run & Meet is off by default. If you and a friend both turn it on, our server compares your saved runs to see whether your routes crossed. Your friend only sees that you crossed paths and when, never your coordinates or route. A crossing can still reveal something about where and when you ran. If you turn Run & Meet off, new crossings are no longer shown; we cannot take back crossings that were already shown.

10. Routes

If you create, save or share a route, we process the route points (start, end and waypoints), distance, estimated duration, route name and, if used, a share code. If you share a route with a code, anyone with that code can see the route points. A copy someone has already received stays with them.

11. AI coaching

AI coaching is optional and only turns on after you give consent. For an AI feature, we send only the data that feature needs to an AI provider (see section 14), such as:

• summaries of recent runs: date, distance, duration, pace, effort and estimated calories;
• if available: average heart rate, cadence and steps;
• your RUN LEVEL and underlying scores;
• your training goals and preferences;
• questions and route requests you type yourself.

Your raw GPS route, name, email address and photo are not sent to the AI provider. For AI route suggestions, the starting point and requested distance go to OpenRouteService, not to the AI provider. AI answers are stored temporarily so the same question is not sent again each time. You can turn AI coaching off in Account → AI Coach; normal run recording keeps working.

12. Reporting, blocking and moderation

If you report a user or content, we store the report, the reported content and the context needed to review it. A RUN B RUN administrator reviews the report. Reports are private: the reported person does not see who reported them. We record blocks, restrictions and moderation decisions to keep the community safe and prevent repeated abuse.

13. Purposes and legal bases

We use your data to manage your account, record runs, calculate your progress and RUN LEVEL, create routes, provide Social and AI coaching if you choose them, prevent abuse, keep the app secure and reliable, investigate errors and provide support. We do this on these legal bases:

• performance of our agreement with you: account, runs, cloud storage, routes and Social;
• your explicit consent: location, Apple Health, Health Connect, AI coaching and Run & Meet;
• legitimate interest: security, abuse prevention, moderation, error analysis and improving the app;
• legal obligations.

Running and heart rate data can be health data. We process it only with your explicit consent. You can withdraw consent at any time; this applies from then on and does not affect processing that already took place.

14. Service providers

For some features we use specialised service providers. They process data on our behalf and only for the feature listed:

• Supabase: accounts and sign-in, database, cloud storage of runs and routes, Social and server functions. Our data is hosted in the Ireland (EU) region.
• Groq: the default AI provider for AI coaching. We have enabled Zero Data Retention with Groq: inputs and outputs of AI requests are not stored, only usage data without that content. According to Groq, it does not use customer data to train models. Processing may take place in the United States.
• Anthropic: a backup AI provider, used only if Groq is unavailable. According to Anthropic, it does not use API data to train models and by default deletes inputs and outputs within 30 days, unless longer retention is needed for safety or legal reasons. Processing takes place in the United States.
• OpenRouteService (HeiGIT, Germany): route calculation. We send only coordinates and route parameters, no account data.
• Resend: sending emails for confirming your account and resetting your password. For this, Resend processes your email address and the content of that email.
• Apple and Google: if you choose Sign in with Apple or Google, they process your sign-in under their own privacy policies. Apple Health and Health Connect are also provided by Apple and Google.
• Expo (650 Industries, United States): delivering app updates, which involves technical data such as IP address, app version and device type.

We do not sell your data and do not use it for advertising. The app contains no third-party advertising or analytics tools.

15. Transfers outside the EEA

Some service providers, such as Groq, Anthropic, Resend and Expo, or their subprocessors may process data outside the European Economic Area, mainly in the United States. In that case we rely on the safeguards required by data protection law, such as the EU-US Data Privacy Framework where the provider is certified under it, or the European Commission's standard contractual clauses.

16. Retention

We keep data no longer than necessary:

• account, profile, run, route and Social data: as long as your account exists, or until you delete it yourself;
• technical logs and AI usage data: up to 13 months, for security, error analysis, abuse prevention and usage limits;
• temporarily stored AI answers: until they expire or your account is deleted;
• reports and moderation decisions: as long as needed to handle the report and prevent repeated abuse, and up to 13 months after it is resolved;
• a record that your account was deleted, without your running data: as long as needed to show the deletion was carried out.

Service providers may apply shorter or longer technical periods for their own security or backup systems. Backups are overwritten within their usual cycle.

17. Deleting your account

You can delete your account in the app via Account → Privacy & Account → Delete account. If you use Sign in with Apple, we also revoke the link with your Apple ID. Your account and the linked data on our servers are then deleted: runs, routes, profile, friendships and Social content. We cannot always take back what others have already received from you, such as a copied route. Local data on other phones that are offline is removed only once that phone reconnects or you delete the app there. If deleting in the app does not work, email info@runbrun.com.

18. Security

We take appropriate technical and organisational measures to protect your data. For example, your session is stored securely on your phone, data is sent encrypted, and on the server each user can only access their own data. No system is completely secure. If a data breach puts you at risk, we will report it as required by law.

19. Your rights

You have the right to access, correct or delete your data, to restrict processing, to data portability, to object to processing based on legitimate interest, and to withdraw consent. In the app, you can export or delete your data under Account → Privacy & Account. For other requests, email info@runbrun.com. We respond within one month. If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the supervisory authority in your country.

20. Changes

We update this policy when the app, our service providers or the law change. We will let you know about important changes in the app or in another appropriate way. The date of the latest change is always shown at the top.