Privacy Policy

1. Introduction

This Privacy Policy explains how RunningAI UF (“we,” “us,” or “our”), a student company under Ung Företagsamhet Sverige (not a separate legal entity), collects, uses, and protects your personal information when you use the Running AI service (the “Service”). We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR).

2. Information We Collect

Personal Information

We collect the following personal information directly from you:

• Name / Username: To identify you within the Service
• Email Address: For account creation, authentication, and communication

Running and Health Data

When you use the Service, we may collect health-related data, which under GDPR is classified as a special category of personal data requiring explicit consent:

• Running metrics (pace, distance, duration, heart rate, etc.)
• Training data and workout history
• Performance analysis results
• User-submitted feedback and preferences

We process this health data based on your explicit consent under GDPR Article 9(2)(a). You can withdraw your consent at any time by contacting us at team@runningai.se or deleting your account. Withdrawing consent will limit or prevent access to features that require this data, such as training recommendations and performance analysis.

Location Data

With your permission, we collect and process geolocation data from your device to enable core functionality such as tracking runs and providing location-based features. You can control location permissions in your device settings.

Device and Usage Data

We automatically collect:

• Device information (model, operating system, unique identifiers)
• App usage data and analytics (features used, session duration)
• Technical data (IP address, browser type, app version)

Local Storage

We use local storage on your device to store settings, preferences, and app state data.

3. How We Use Your Information

We use your information for the following purposes:

• Provide the Service: To operate and maintain Running AI, including running analysis, training recommendations, and performance tracking
• Account Management: To create and manage your account, authenticate users, and process subscriptions
• Improve the Service: To analyze usage patterns, measure app performance, and develop new features
• Customer Support: To respond to your questions, requests, and technical issues
• Legal Compliance: To comply with applicable laws and legal obligations
• Security: To protect against fraud, abuse, and security threats

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data based on:

• Contract: Processing necessary to fulfill our Terms of Service
• Explicit Consent (GDPR Art. 9(2)(a)): For health-related data such as heart rate, training metrics, and workout data. You may withdraw consent at any time, which will limit functionality of features dependent on this data.
• Consent: When you give us permission for other processing (e.g., location data, marketing use)
• Legitimate Interest: To improve our Service, ensure security, and conduct analytics (non-health data)
• Legal Obligation: To comply with applicable laws

5. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With third-party service providers who help us operate the Service (e.g., cloud hosting, payment processing, analytics). These providers are contractually obligated to protect your data.
• Apple Health Integration: If you connect Running AI to Apple Health, we may access and import workout data from Apple Health according to your Apple Health permissions and device settings.
• Legal Requirements: When required by law, court order, or government regulation.
• Business Transfers: In connection with a merger, acquisition, or sale of assets (users will be notified).
• With Your Consent: For marketing purposes (e.g., featuring your results), only with your explicit opt-in consent.

6. Data Retention

We retain your personal information according to the following categories:

• Account, Profile, Training and Health Data:Retained until you delete your account or request deletion. Upon account deletion, this data is deleted or de-identified (where possible) within 30 days, except for backup copies which are overwritten on a regular cycle or where legal obligations require retention.
• Support Messages and Communications: Retained for up to 3 years after the last interaction to resolve disputes and improve customer service.
• Payment and Transaction Records: Retained for 7 years as required by Swedish accounting and tax law (Bokföringslagen).
• Analytics and Usage Data: Aggregated or de-identified (where possible) analytics retained for up to 2 years for Service improvement purposes.
• Legal and Fraud Prevention: Data may be retained longer where necessary to comply with legal obligations, resolve disputes, prevent fraud, or enforce our agreements.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request transfer of your data to another service
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw consent where processing is based on consent
• Restrict Processing: Request restriction of processing in certain circumstances

To exercise these rights, contact us at team@runningai.se.

8. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that a user under 13 has provided us with personal data, we will delete the account and associated information. Parents or guardians who believe their child has provided us with personal information may contact us at team@runningai.se to request deletion.

9. Security

We implement industry-standard security measures to protect your personal information, including encryption, secure servers, and access controls. However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. International Data Transfers

Your information may be transferred to and processed by service providers located outside the European Economic Area (EEA), including in the United States, which may not have the same data protection laws as your country of residence.

When we transfer personal data internationally, we ensure appropriate safeguards are in place to protect your data, including Standard Contractual Clauses (SCCs) approved by the European Commission. We only work with service providers who commit to providing adequate protection for your personal data in accordance with GDPR requirements.

11. Cookies and Tracking Technologies

We use analytics to measure app and website usage. We do NOT use:

• Advertising or retargeting cookies
• Facebook Pixel or similar tracking for ads
• Third-party advertising networks

Our analytics are used solely to improve the Service and understand how users interact with our app.

12. Third-Party Services

Running AI may integrate with third-party services such as:

• Apple Health: For importing workout data
• Google Login: For authentication
• Payment Processors: For subscription management

These third parties have their own privacy policies. We are not responsible for their privacy practices.

13. Marketing and Communications

We do not send marketing emails or newsletters. We may send:

• Service-related emails (account notifications, subscription updates)
• Important updates about the Service
• Responses to your support requests

We will only use your content (e.g., run data, testimonials) for marketing purposes with your explicit opt-in consent.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by email at least 30 days before the changes take effect. The updated policy will be effective on the date specified in the notification.

Where material changes affect processing that is based on your consent (such as health data processing), we will seek your renewed consent where required by law. If you do not agree with the updated Privacy Policy, you may delete your account before the changes take effect.

15. Contact

For questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us:

Email: team@runningai.se

Company: RunningAI UF (student company under Ung Företagsamhet Sverige)

Location: Registered in Västerås, Sweden

If you are in the EEA and believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection authority.