Privacy Policy

Last updated: December 30, 2025

At NavRun, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information.

Information We Collect

When you use NavRun, we collect:

• Account Information: Email address and username when you create an account
• Fitness Data: Running activities, routes, pace, distance, heart rate, and other workout metrics synced from Strava
• Preferences: Your training preferences, goals, and settings
• Location Data: GPS routes from your activities (only when synced from Strava)

How We Use Your Information

We use your information solely to:

• Display your running activities and statistics
• Generate personalized AI-powered training plans
• Provide weather forecasts for your planned runs and races
• Create analytics and insights about your training
• Improve the NavRun service

Data Sharing

Your data may only be shared in these limited circumstances:

• Service Providers: We use trusted services (like AI providers for training plan generation) that process data on our behalf under strict confidentiality agreements
• Legal Requirements: If required by law or to protect our rights

Data Security

We implement industry-standard security measures to protect your data:

• Encrypted data transmission (HTTPS)
• Secure database storage
• OAuth 2.0 for Strava integration (we never see your Strava password)
• Regular security reviews

Third-Party Integrations

Strava: When you connect your Strava account, we access your activity data through Strava's official API. You can disconnect Strava at any time from your preferences, which will stop future data syncing.

Your Rights

You have the right to:

• Access: View all data we have about you
• Delete: Request deletion of your account and all associated data
• Disconnect: Revoke Strava access at any time
• Export: Download your data in standard formats

Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete all your personal data within 30 days, except where we're legally required to retain it.

Cookies

We use essential cookies only for:

• Keeping you logged in
• Security (CSRF protection)

We do not use tracking or advertising cookies.

Children's Privacy

NavRun is not intended for users under 13 years of age. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or through the app.

Contact Us

If you have questions about this privacy policy or your data, please contact us at:

[email protected]

---