This Privacy Policy (“Policy”) describes how we collect, share, and use your personal information, as well as how to exercise your privacy rights and choices.
- Scope
This Policy applies to Runna’s platform, including the related mobile applications, products, websites, technology, software, and services (collectively, “Services”). Please also read our Terms and Conditions (“Terms”), which set out the terms governing the Services. As used in this Policy, the words “Runna,” “us,” “our,” or “we” means The Run Buddy Limited trading as Runna, which is a Strava company. Under this Policy, Runna acts as a data controller or “business” for the personal information we process. This means we decide how to collect and process personal information.
For individuals in the United States, please also refer to our Notice For Individuals Residing In Certain US States below and the Consumer Health Data Policy.
- Information We Collect
- Information You Provide
Account Information: We collect account information such as your name, email address, date of birth, gender, username, and password.
Profile Information: We collect information you provide about yourself, such as your profile photo, fitness goals, and level of experience.
Support Information: We collect the information you provide in connection with requests for support.
- Information From Using the Services
Content You Share: We collect content you share through the Services, such as photos, posts, comments, and messages.
Activity Data: We collect Activity Data directly or through third-party integrations you configure. “Activity Data” is information about the activities and workouts you record or upload to Runna, such as date, time, distance, speed, pace, cadence, calories, perceived exertion, power, and geolocation information. Activity Data can also include health data, such as heart rate, if you choose to provide it.
Location Information: We collect or infer location information when you sign up for and use the Services. For our core features to function (e.g., GPS activity tracking), you must grant us permission through your device to track your device’s precise location. You can stop sharing precise location at any time with your device settings.
Usage Information: We collect and infer information from your use of the Services, such as your participation in communities and Runna Spaces, participation in partner events (e.g., a parkrun), information related to races that you have entered, and actions you take such as clicking links, logging in, subscribing, your preferences, or viewing others’ activities.
Performance Metrics: We generate metrics from your information to help you analyze your performance, such as your Best Efforts and Runna Score.
Device Information: We collect technical information from the browser, computer, or mobile device used to access the Services. This includes device and network information (such as IP address), log files, and analytics information.
Cookies, Analytics, and Third-Party Technologies: We collect and use information through cookies and similar technologies. Please see the Cookies and Similar Tracking Technologies section below.
Payment Information: If you make a payment on Runna, we collect information about your purchase. We do not collect your payment card information. Instead, we use Payment Card Industry compliant third-party payment services.
- Information From Other Sources
Connected Devices and Apps: We collect information (including Activity Data) from devices and apps you choose to connect to Runna, such as your Garmin device. If we collect health information from these integrations (such as heart rate), we will not sell or use it for advertising or other similar purposes; we do not disclose it to third parties without your prior consent; and we will only use it for the specific purposes described in this Policy.
Third-Party Accounts: You can sign up and log in to the Services using accounts with other businesses, such as Google or Apple (“Third-Party Accounts”). If you access the Services through Third-Party Accounts, we will collect information such as your name, email address, profile information, and preferences. To control the information we receive from Third-Party Accounts, you must use the privacy controls in your Third-Party Account.
Service Providers: We may collect information through our service providers, such as when we collect your feedback through surveys and questionnaires or when you make a purchase through the Runna Store.
Other Users’ Information: We may collect information about you from other Runna users, such as when they comment on your activities.
Corporate Affiliates: We may collect information about you from our parent company, Strava, and its affiliates.
- How We Use Your Information
- To Provide the Services
Create and Update Your Account: We process information, such as your Account Information and Profile Information, to create and update your account.
Process Your Subscription: We process information to manage your subscription, including using your Location Information to determine your country pricing.
Record Your Activities and Analyze Your Performance: We process your Activity Data and other information to help you record and analyze your performance. For example, we may compare your past efforts or help you set goals for training.
Enable GPS-Based Activities: We use your Location Information to enable GPS-based activity tracking and certain map-related features, such as visualizing your routes.
Customize Your Experience: We use information to personalize your experience. For example, we may prepare individualized training plans for you based on your goals and preferences.
Interact with Other Users: We facilitate interactions with other users, such as participating in communities, participating in Runna Spaces or events, and commenting on other users’ activities on the platform.
Provide AI Features: We use and develop machine learning (“ML”) or artificial intelligence (including large language models) (“AI”) to provide features designed to enhance your training and improve the Services (“AI Features”). Our AI Features include, for example, protecting the integrity and security of our Services and users (such as moderating images uploaded by users to our community) and providing personalized training insights. Depending on your privacy controls and sharing permissions, we also may use personal information such as Activity Data for AI Features, for example, to provide you with training analysis and recommendations.
Visualize Your Activities: We use information to visualize your activities, such as visualizations from your training log or performance metrics.
Share Insights: We help users find new ways and places to be active, and understand how others are engaging in activities. For example, we allow users to join Spaces and share insights related to their runs with other users in that Space. We may also share aggregated or deidentified information, such as usage or demographics, for public and internal insights.
Contact You About the Services: We may contact you about material changes to our Terms, when investigating alleged violations of our Terms, or with customer support messages.
- To Assist You with a Request
We use information to provide support in response to your requests and comments. Depending on your request, this may require us to access your account (for example, to troubleshoot or replicate a reported issue).
- To Analyze and Improve Our Services
Analytics: We use information to measure traffic and usage trends, understand how visitors interact with our Services, and make improvements. This may include the use of cookies and other tracking technologies, as described in the Cookies and Similar Tracking Technologies section.
Services Improvement: We use information to analyze, develop, troubleshoot, increase functionality, and otherwise improve the Services.
- To Provide You with Sponsored Content, Marketing, and Advertising
Sponsored Content: We use information to display content sponsored by third parties like brands or event partners, such as races and partner rewards and discounts.
Marketing and Promotions: We use information to send you content about our Services and suggest or offer you promotions, trial offers, features, or activities.
Targeted Advertising: We advertise our Services through third parties, and may use cookies and other tracking technologies to support targeted advertising and serve relevant ads (see Cookies and Similar Tracking Technologies).
- To Protect You, Others, and the Services
We aim to protect users, enforce our Terms, and promote safety. We use automated tools for these purposes. For example, we seek to detect misuse and bad actors, and to remove content that violates our Terms, such as hate speech or spam. You can learn how to report violating content here. We reserve the right to review accounts and user actions to ensure compliance with our Terms, and we can suspend or terminate accounts as a result. We may also process your data when we believe it is necessary to prevent serious harm.
- To Manage Legal and Regulatory Obligations
We may use information to manage or respond to demands or obligations related to the law, government entities, or other regulatory bodies with respect to the Services.
- How We Share Your Infomation
We may share your information as follows:
- Information Visible to Others
Your information may be visible to other Runna users. Subject to your privacy controls, your information, including parts of your profile, username, photos, information and content you share (including location, such as where you run), Spaces you belong to on Runna, your Activity Data, the devices you use, and comments you give and receive may be viewable on Runna.
- Service Providers
We may share your information with third parties to support, improve, promote, and secure the Services; process payments; fulfill orders; host the Services; and communicate with you. These service providers only have access to the information necessary to perform specified functions on our behalf. We require them to protect and secure your information.
- Third-Party Services
You can choose to share your information and content with third-party apps, plugins, or websites that integrate with the Services, as well as with third parties who work with Runna to offer an integrated feature, such as a tracking device. Information you provide to these third parties is subject to their terms and policies.
If you choose to use a Third-Party Account to log in to Runna, we share only the information necessary for login and security purposes. You can also share your information (including Activity Data) via text, email, or on social media applications like Instagram. Activities you share to other social networks may be viewable on those platforms, and may include your Location Information.
- Partners
We may disclose information to marketing partners such as those sponsoring or organizing an event that you participate in, when you agree or direct us to share such information. The Runna Store is hosted by Shopify and when you make a purchase through the Runna Store, you may choose to share your information with Shopify subject to its terms and privacy policy. We may also disclose information to third-party advertising networks to promote our Services (with your consent, where required). We may also disclose information through the use of cookies and similar technologies, as explained in the Cookies and Similar Tracking Technologies section below. You can opt out of us sharing your personal information for third-party targeted advertising through the options described in Your Privacy Rights and jurisdiction-specific sections below.
We do not share text messaging opt-in data and consent with third parties.
- Corporate Affiliates, Subsidiaries, and Acquirers of Our Business or Assets
We share information with our parent company, Strava, and its affiliates who process that information under their own Privacy Policies.
If Runna becomes involved in a business combination, acquisition, securities offering, bankruptcy, reorganization, dissolution, or other similar transaction, we may share or transfer your information in connection with such transaction.
- Legal Requirements and Prevention of Harm
We may preserve and share your information with third parties, including law enforcement, public or governmental agencies, or private litigants, within or outside your country of residence, if we determine that the law compels or reasonably requires such disclosure. This may include responding to court orders, warrants, subpoenas, or other legal or regulatory process, or disclosures that are otherwise permitted by law.
We may also retain, preserve or disclose your information if we determine it is reasonably necessary or appropriate to: (1) prevent death, serious bodily injury, or other significant harm; (2) address issues of national security or other issues of public importance; (3) prevent or detect violations of our Terms or fraud or abuse of Runna or its users; or (4) protect our operations or our property or other legal rights, including in connection with actual or potential litigation.
- Cookies and Similar Tracking Technologies
We collect, use, and disclose information through the use of cookies, SDKs, Google Analytics, and other third-party tracking technologies for security and authentication, to understand and improve your experience, perform analytics, inform and serve relevant ads, understand how you interact with ads, and allow you to navigate and use our Services. Specific to Google Analytics, you can find more information in Google’s explanation at “How Google uses information from sites or apps that use our services”. Learn more about how we use cookies and manage your preferences by visiting our Cookie Policy.
- Your Privacy Rights and Choices
Below are privacy rights that may be available to you under applicable laws depending on where you live and subject to potential limitations and exceptions. If you need further assistance exercising your rights, please use the Contact Us information below.
Access and Portability: You may have the right to know, and request access to, the personal information we collect, use, share, or otherwise process about you. You can access much of your information by logging into your account. If you want to port (move) your data, please Contact Us.
Rectify or Correct: You may have the right to correct inaccurate information.
Restrict or Delete: You have the right to restrict or delete personal information. You can restrict or delete much of your information through your account, such as to delete content, like photos you have posted, delete individual activities, or delete your account. To delete your account, follow the instructions provided here. Once deleted, we cannot reinstate your data, including your account and activities. We do not have control over content you have shared directly or publicly with others, such as photos on other social media platforms, or that others may have copied.
Revoke Consent: To the extent we rely on your consent to engage in certain processing, you have the right to withdraw that consent at any time. Please note that the withdrawal of your consent will not affect processing done previously based on that consent.
Automated Decision-Making: We sometimes use AI features and automated decision-making to analyze your personal information, as described above. But we do not use these technologies for decisions that have legal or similarly significant effects on you.
- Children's Privacy
Our Services are not intended for, nor directed to, children under 18 years of age, and we do not knowingly collect personal information from anybody under 18 years of age. If you are under 18 years of age, do not use the Services.
- Additional Important Privacy Information
- How We Protect Information
We implement measures to manage your information securely and consistently with this Policy. We maintain administrative, technical, and physical safeguards in accordance with appropriate industry standards that are designed to protect against unauthorized use, disclosure, or access to personal information.
- Retention of Information
We retain information as long as needed to provide the Services, subject to our legal obligations. We generally keep information associated with your account until you delete it or we no longer need the information to provide the Services. In making these determinations, we consider the amount, nature, and sensitivity of the personal information, the purposes for which we process it, whether we can achieve those purposes through other means, and applicable legal requirements.
- Notice for Individuals in the EEA, UK, Switzerland, Brazil and Other Regions
Below is additional information in accordance with data protection laws in the European Economic Area (“EEA”), the United Kingdom (“UK”), Switzerland, Brazil, and other relevant jurisdictions.
Data Subject Rights: Please see Your Privacy Rights and Choices above for a list of rights we provide to you, as well as how to exercise them. In addition, you have the right to object to, and seek restriction of, our processing of your personal information based on our legitimate interests. In such cases, we will cease processing your information unless we have compelling legitimate grounds to continue processing or where necessary for legal reasons. You can also object to processing of your information for direct marketing by turning off email newsletters at any time by changing your notification settings in your profile. You may also have the right to complain to your local data protection supervisory authority.
Lead Supervisory Authority: Runna’s lead supervisory authority in the EEA is the Data Protection Commission of Ireland, and the Information Commissioner’s Office in the UK.
Getting in Touch: Please see the Contact Us section below for our Data Protection Officer and Data Protection Representative. If you have any questions or requests about your legal rights, you can also contact our Data Protection Officer at dpo@runna.com.
Legal Bases: Certain data protection laws require us to identify a valid legal reason (called a “legal basis”) before we collect, use, share or otherwise process your personal information. Common legal bases include:
- Contract: When processing personal information is necessary to perform our contract with you (our Terms) or to take steps at your request before entering into a contract.
- Consent: When you’ve given us permission to use your information for a specific reason. You have the right to withdraw your consent at any time.
- Legitimate interests: When we use your information in ways that are expected and that do not unfairly affect your rights.
- Legal obligation: When we’re required to process your information by law.
If you want to learn the specific legal basis for each purpose, click on “Learn More”.
Cross Border Data Transfers: We predominantly process your information in the UK and EEA. However, we will transfer your information outside the UK and EEA to certain third parties disclosed in How We Share Your Information. Your information will be transferred to, processed, and stored in the United States.
Whenever we transfer personal information internationally, we use legal mechanisms, such as Standard Contractual Clauses, to ensure the protection of your personal information, in accordance with applicable data protection law. If you have further questions about this or would like to request copies of the applicable safeguards used to transfer your information internationally, please Contact Us.
- Notice For Individuals Residing In Certain US States
Residents of certain US states, such as California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, and other states to the extent they enact similar privacy laws, may have additional rights under your corresponding state laws (collectively, “US State Privacy Laws”).
Categories of Personal Information Shared and the Categories of Third Parties to Whom it was Shared: Our Policy describes how we collect, use, and disclose your personal information.
The table in the Learn More link below describes the categories of information we have disclosed to third parties for business purposes in the last twelve months, and the categories of those third parties.
Data Subject Rights: Only you or someone legally authorized to act on your behalf may make a request related to your personal information. Please see Your Privacy Rights and Choices for a list of rights we provide to you, as well as how to exercise them. We describe below additional rights that may be available to you under US State Privacy Laws.
- Opt Out of Sharing for Targeted Advertising: You have the right to opt out of sharing your personal information for targeted advertising. You can click the “Do Not Share My Personal Information” link on the website footer or broadcast an Opt-Out Preference Signal, such as the Global Privacy Control. Note that Do Not Track (DNT) is a privacy preference you can set in browsers, but we do not currently process DNT signals.
- Limit Use of Sensitive Personal Information: We do not use or disclose sensitive personal information for purposes other than with your consent to provide the Services, or as otherwise permitted by law.
- Non-Discrimination: We will not discriminate against you for exercising any of your US State Privacy Law rights.
- Appeal: You may have the right to appeal our decision regarding a request related to your privacy rights.
Authorized Agents: You may appoint an authorized agent to exercise any of your privacy rights on your behalf. To verify that your authorized agent acts on your behalf, we will ask for proof from your agent and may require that you also verify your identity.
- Privacy Policy Updates
Runna reserves the right to modify this Policy at any time. If we make changes to this Policy, we will post the revised policy and its effective date on our website. If we make changes we deem to be material, we will provide prominent, advance notice. If you object to any changes to this Policy, you should stop using the Services and delete your account.
- Contact Us
If you have questions about our privacy practices, this Policy, or would like to contact us or our Data Protection Officer, you can do so by the email or addresses below.
Data Protection Representative
Instant EU GDPR Representative Ltd.
Office 2, 12A Lower Main Street, Lucan Co. Dublin K78 X5P8 Ireland
contact@gdprlocal.com
+35315549700
The Run Buddy Limited
71-75 Shelton Street, London WC2H 9JQ, United Kingdom
Attention: Legal
dpo@runna.com
