Privacy Policy
Last Updated: August 17, 2026
Runima ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our fitness tracking and analysis application.
Information We Collect
Account Information
- Email address — Used for account creation and authentication
- Name — Optional, for personalization
- Password — Securely hashed and stored for account security
Training Profile
- Maximum heart rate — For personalized training zone calculations
- Resting heart rate — For fitness baseline metrics
- Lactate threshold heart rate — For advanced training analysis
Activity Data
When you upload files exported from Garmin Connect, we collect:
- Activity type and sport
- Date and time
- Distance, duration, and pace
- Heart rate (average and maximum)
- Cadence and stride length
- Elevation metrics
- Steps count
- Training Stress Score
- Body Battery drain
- Lap times and elapsed time
- Calories burned
Daily Health Metrics
- Sleep data — Score, duration, quality, sleep need, bedtime, wake time
- Recovery metrics — Resting heart rate, HRV, Body Battery level, weight
- Physiological data — Pulse oximetry (SpO2), respiration rate
- Performance data — VO2max estimates
Feedback
Messages you submit through our contact form.
How We Use Your Information
We use your information solely to:
- Provide and maintain your account
- Analyze your training data and present insights
- Display personalized dashboards and charts
- Calculate training zones and performance metrics
- Track your progress over time
- Improve our service based on feedback
AI-Generated Insights
AI summaries are off by default. If you opt in, you can choose either Runima's self-hosted model, which runs on infrastructure we control, or a third-party top-tier Qwen model provided through QwenCloud. QwenCloud is the preselected option when enabling AI, but you must confirm the choice before any AI summary is requested.
The same categories of prompt data are used with either provider. The difference is where they are processed: on Runima-controlled infrastructure for the self-hosted model, or by QwenCloud (if explicitly selected). Only fields available for the requested summary are included.
Data included in AI prompts
Depending on which AI summary you request, Runima may include the following data. This list reflects the fields used by our current AI prompt builders.
Activity stories
Activity date and type; distance and duration; average and best pace; average and maximum heart rate; dominant heart-rate zone; cadence; stride length; elevation gain and loss; workout classification; lap number, distance, duration, pace, heart rate, and cadence; Training Stress Score; cardiac efficiency; running economy; heart-rate intensity; cardiac decoupling; CTL, ATL, TSB, ACWR, load changes and their calculated labels; VO2max; HRV; sleep duration and quality; Body Battery and recovery labels; and the type, severity, and unresolved status of an active injury.
Readiness summaries
Readiness score and status; whether a hard workout is supported; CTL, ATL, TSB, ACWR and their changes and calculated labels; VO2max and its trend; HRV and its trend; resting heart rate; sleep duration and score; Body Battery; weekly, 30-day, and 90-day training narratives; health and performance trends; race-time outlook; automated insights; training-risk level and reasons; active flags; and Runima’s deterministic summary and recommendation.
Health and recovery summaries
Recovery score and status; sleep duration, score, consistency, debt, and their trends; HRV, resting heart rate, Body Battery, pulse oximetry, respiration rate, and their trends and calculated labels; deterministic sleep, heart-rate, and physiological summaries; automated recovery insights; training-risk level and reasons; active recovery flags; and Runima’s deterministic summary and recommendation.
Training-load summaries
Fatigue score and status; whether a hard workout is supported; CTL, ATL, TSB, ACWR, their trends, and their calculated labels; deterministic training-load context; next-week directive and headline; trailing four-week distance baseline; recommended weekly distance range and long-run cap; reasons for those limits; training-risk level and reasons; active fatigue flags; and Runima’s deterministic summary and recommendation.
Performance summaries
Performance score and status; CTL and TSB with their changes and calculated labels; VO2max and its changes; cardiac efficiency; aerobic cost ratio; cardiac decoupling; stride length; average and best pace and their changes; deterministic highlights, efficiency, speed, fitness, and running-mechanics summaries, which may include run count, total distance, longest run, and cadence; training-risk level and reasons; active performance flags; and Runima’s deterministic summary and recommendation.
Prompts can therefore contain health-related and potentially sensitive data, including heart-rate and HRV measurements, sleep data, pulse oximetry, respiration, recovery data, training-risk assessments, and active injury details. They can also contain Runima-generated classifications, flags, risk explanations, race estimates, and training recommendations derived from your imported data.
Data not included in AI prompts
We do not intentionally include your name, email address, password, account ID, authentication credentials, contact details, or support messages. We do not send raw second-by-second activity streams or raw daily records. An activity story may include the summarized lap fields listed above when lap data is available.
With self-hosted processing, prompt data is not disclosed to a third-party AI provider. With QwenCloud, the prompt is transmitted to and processed by QwenCloud. Its handling is governed by their privacy policy . You can disable AI or change providers in AI Insights settings. AI-generated narration stored by Runima is retained and deleted like your other analytics data.
Analytics
We use PostHog to understand how the application is used and improve the product. Analytics events are sent through our own domain and processed by PostHog (US region) acting as our data processor — never sold or shared with advertisers.
- Page views and navigation patterns
- Feature interactions (which tools and dashboards you use)
- Session duration and general usage frequency
You are identified by your account ID — your email address is never sent to the analytics system. Analytics data is stored in browser localStorage (not a cookie) and is cleared when you sign out.
Data Sharing and Third Parties
We do not sell or rent your personal information or share it with advertisers. We disclose information to service providers only as needed to operate Runima, including PostHog for product analytics and, only when you opt in and select it, QwenCloud for AI narration. The AI disclosure is limited to the calculated training and health facts described above.
Data Security
We implement industry-standard security measures to protect your information:
- Passwords are securely hashed using modern encryption
- Database access is restricted and encrypted
- Secure HTTPS connections for all data transmission
- Session management with automatic expiration
Your Rights
Right to Access
You can request a complete copy of all data we have collected about you at any time.
Right to Deletion
You can request deletion of your account and all associated data at any time. Your account, activities, metrics, and feedback will be permanently removed. This action is irreversible.
Right to Portability
You can export your data in a machine-readable format.
To exercise any of these rights, contact us through the contact form or at [email protected].
Data Retention
We retain your data for as long as your account is active. If you delete your account, all associated data is permanently removed from our systems.
Data Source
All fitness and health data is collected only when you explicitly upload files exported from the Garmin Connect website. We do not automatically sync or collect data from your Garmin device or account. You have complete control over what data you choose to import into Runima.
Age Requirement
Our service is intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If you are under 18, please do not use this service.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy.
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us through the contact form in the application.