Privacy Policy
Last updated: 2026-10-03
Runara is a workout companion for iPhone and Apple Watch built by Manuel Fegerl (sole developer). This policy describes exactly what information the app and this website handle and what they do with it. The short version: the Runara app collects no data. Nothing about your use of the app, your workouts, your settings, or your location ever leaves your devices, except for the backup to your own private iCloud (which you can switch off) and where you explicitly cause it to.
What we don't do
- We have no accounts and no Runara cloud for your data. The app's only contact with a Runara server is fetching a screen set when you import one (see below).
- We don't use third-party analytics in the app (no Firebase, Mixpanel, Sentry, Amplitude, or similar).
- We don't use advertising SDKs and we don't request the IDFA.
- We don't share data with anyone.
- We don't sync your data through any cloud service of ours. The only cloud copy is the iCloud backup described below, which lives in your own private iCloud and which we cannot read.
- We have no login system.
What the app does on your device
Apple Health (HealthKit)
With your permission, Runara reads heart-rate samples, resting heart rate,
heart rate variability (HRV), recent workout types, and workout routes for
older workouts displayed in History. With your permission, it writes finished
workouts (HKWorkout), the route polyline of each outdoor workout
(HKWorkoutRoute), per-segment events with distance metadata
(HKWorkoutEvent), and heart-rate, distance, and active-energy samples for
each workout.
Heart rate variability and resting heart rate are read only on your iPhone, to compute the readiness verdict next to your training load. The Apple Watch app never reads HRV, and the result stays on your devices.
All HealthKit data lives in Apple Health on your device. Runara never copies, exports, or transmits it. Apple Health itself stores this data on-device; if you turn on Health in your iCloud settings, Apple may sync your Health database across your own devices using iCloud's end-to-end encryption. That is Apple's feature, controlled entirely by you, and something Runara neither enables, configures, nor relies on. Runara itself has no cloud.
Location
Runara requests "When in Use" location permission. Location is read only while a workout is actively running and is used only to record the workout's route into Apple Health. The app does not run location updates in the background outside an active workout, and it never transmits location data anywhere. (Showing a map does request the map area on screen from the map service; see Maps below.)
Local settings storage
Your screen layouts, favorite workout types, interval plans, and preferences are stored on your iPhone using Apple's SwiftData framework, protected by iOS's filesystem encryption. They are copied to your paired Apple Watch via Apple's WatchConnectivity framework, a direct device-to-device channel, and never traverse any third-party server.
iCloud backup
So your setup survives a reinstall or a new iPhone, Runara backs up your configuration (screens, settings, interval plans, routes, and trophies) to your own private iCloud: the private CloudKit database of your iCloud account, which only you can access. We cannot read it, and it contains no Apple Health data. The backup is on while you're signed in to iCloud; you can switch it off or delete the backup at any time in the app's Settings.
Importing screen sets from runara.me
When you scan a runara.me QR code, open a runara.me share link, type a share code, or paste a share link, the app sends that share code to runara.me and receives the screen set stored under it. The request carries nothing else from your device: no workouts, settings, location, or identifiers. As with any web request, our server sees your IP address; it is used only for rate limiting and held in memory for at most one hour. The app never uploads your screens to runara.me; sharing a design happens on the website (see below).
If you scan a code with the scanner inside the app, Runara asks for camera access. The camera image is analysed on your iPhone only to find the QR code; it is never stored or transmitted.
During onboarding, the app checks whether your clipboard holds a link (iOS reports only whether one is there, without revealing it). The clipboard's contents are read only if you tap Paste.
Maps
Runara draws maps from one of two sources, chosen in Settings. Map requests reveal the map area being shown or downloaded, and your IP address, to whoever serves the map; they never include your workouts, an account, or an identifier.
- Apple Maps: maps and offline exports use Apple's map service. Whenever an Apple map is shown online (in the app, or on your watch outside your downloaded regions while it has a connection), Apple receives the requests for that area, as with any app that shows Apple Maps. Apple's privacy policy applies.
- OpenStreetMap (OSM Outdoor): map data is served from our own map storage at OVH in Germany, and terrain elevation (for hillshading and the 3D flyover) from Mapterhorn's public download server. Both are contacted only while the app shows, exports, or flies over an OSM map.
Regions you download are saved as files in the app and transferred to your watch via WatchConnectivity, so workouts inside them need no connection.
This website
This marketing website is separate from the app and processes a limited amount of data, only as described here. See the GDPR page for your rights and the legal basis for each.
- Analytics: We use Google Analytics, loaded only after you accept the cookie banner. If you reject or ignore the banner, no analytics cookies are set and no analytics data is sent. IP anonymization is enabled. On share pages, analytics never receives the share code or the design.
- Screen designer and share codes: Designing watch screens on this website happens in your browser; the design is kept in the page address, which is not sent to our server. Only when you choose Create share code is the design sent to our server and stored under a random code: the set and screen names you typed, the layout and widget choices, when it was created, and how often it has been opened. No name, email, or IP address is stored with it. Anyone with the code or link can view and import the set, so please don't put personal information in the names. Share pages are not indexed by search engines. Share codes don't expire; to have one deleted, send us the code through the contact form.
- Contact form: If you send a message, the name, email, and message you enter are transmitted to our email provider (Resend) and delivered to us by email so we can reply. Form submissions are protected from spam by Cloudflare Turnstile.
- Server logs and abuse prevention: Our server keeps minimal operational logs that may include a truncated form of your IP address for security and abuse prevention. We never log message contents or full email addresses. To limit abuse of share codes, logins, and the contact form, your IP address is also held in memory for at most one hour; it is not written to disk.
Children
Runara does not target or knowingly collect data from children under 13. The app collects no data from anyone.
Changes to this policy
If we change this policy, the "Last updated" date will change and the new policy will be posted at the same URL.
Contact
Questions? Reach us through the contact form.