Privacy Policy

Personal Information We Collect

Information you provide directly: When you join Run4Why as a coaching client, we collect personal information including your name, email address, and coaching intake information such as your running history, fitness goals, race schedule, training preferences, and relevant health context. We also collect the content of your conversations with Coach Tommy, our AI coaching assistant, and any training notes, effort ratings, or injury flags you add to your training log.

Information from connected services: If you choose to connect your Strava account to Run4Why, we receive your running activity data — including distance, duration, pace, heart rate, and elevation — via the Strava API. This data is synced to your private coaching profile and is visible only to you and your coach. We access only your own Strava data and never data belonging to other Strava athletes. Your Strava data is never shared with other Run4Why users or third parties. You may disconnect Strava at any time from your Profile page.

Information collected automatically: When you visit our website, we may automatically collect certain technical information including your web browser type, IP address, and how you interact with the site. This information is used solely to maintain website security and understand general usage patterns, and is not used to identify individual users.

Why Do We Process Your Data?

We process your personal data to:

• Deliver personalized AI-assisted run coaching through Coach Tommy
• Generate and refine training plans based on your goals and recent activity
• Enable your coach to monitor your progress and provide timely guidance
• Communicate coaching updates, plan changes, and check-in reminders
• Maintain the security and performance of our platform

We process only the data necessary to provide these services. We do not sell your personal data, use it for advertising, or use it to train AI models.

Third-Party Service Providers

To operate Run4Why, we work with the following trusted service providers who process data on our behalf:

• Supabase — secure database hosting and user authentication
• Vercel — application hosting and infrastructure
• Anthropic — AI infrastructure powering Coach Tommy. Conversation data is processed by Anthropic to generate coaching responses. See Anthropic's Privacy Policy.
• Strava — activity data integration, subject to the Strava API Agreement
• Stripe — payment processing for coaching subscriptions. See Stripe's Privacy Policy.

All service providers are required to protect your data and use it only for the specific services they provide to us.

Your Rights

If you are a European resident, you have the following rights related to your personal data:

• The right to be informed
• The right of access
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to data portability
• The right to object
• Rights in relation to automated decision-making and profiling

If you would like to exercise any of these rights, please contact us using the information below.

Additionally, if you are a European resident, please note that your information may be transferred outside of Europe, including to the United States, where our services are hosted.

Links to Other Websites

Our website may contain links to third-party websites such as Strava, which are not owned or controlled by us. We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies.

Information Security

We protect your personal data using industry-standard safeguards, including encrypted data transmission (HTTPS), row-level database security, and token-based authentication. We maintain reasonable administrative, technical, and physical protections against unauthorized access, use, modification, or disclosure. However, no data transmission over the Internet can be guaranteed to be 100% secure.

Data Retention

We retain your personal information and coaching history for as long as your account is active or as needed to provide coaching services. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law.

Legal Disclosure

We will disclose information we collect if required by law, such as to comply with a subpoena or similar legal process, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.