Privacy Policy

Summary

• No RunToMax account. No email login. No password.
• Workouts, GPS routes, and heart rate are stored in Apple HealthKit on your device.
• Optional Strava sync uploads your activities to Strava if you connect it.
• Optional AI Coaching (Pro) sends anonymized run statistics to Google Gemini.
• Subscriptions are processed by Apple. We never see your payment information.
• Anonymous product analytics (PostHog, EU cloud) and crash reports help us improve the app. You can opt out in Settings.
• No advertising, no third-party trackers, no IDFA, no push notifications.

Who we are

"RunToMax," "we," "us," and "our" refer to Hidai Bar-Mor, an individual sole developer based in Israel, who develops and operates the RunToMax iPhone and Apple Watch application. Contact: hello@runtomax.com.

Data we process

Health and fitness data (HealthKit)

With your permission, RunToMax reads the following from Apple HealthKit: workouts, workout routes (GPS), heart rate, active energy, distance, steps, running speed, body mass, resting heart rate, stride length, vertical oscillation, ground contact time, heart rate variability (SDNN), sleep, VO₂ Max, and running power. We write workout summaries (run, heart rate, distance, running-form metrics) back into Health.

HealthKit data is encrypted on your device and is never uploaded to a RunToMax server, because we do not operate one. You can revoke HealthKit access at any time in iOS Settings → Privacy & Security → Health.

Location (CoreLocation)

During outdoor runs, RunToMax records precise GPS coordinates, elevation (via the barometer and GPS), and the resulting route polyline. Location is recorded only while you are using the app or actively recording a workout. We do not track location in the background outside of an active workout. Routes are stored in HealthKit as part of the workout.

Profile data you enter

Your first name, avatar photo, max heart rate, resting heart rate, body mass, race goals, shoe inventory, heart-rate zone settings, and unit preferences are stored locally on your device in an iOS App Group (shared between the iPhone app, the Watch app, and widgets). This data is never transmitted to us.

Account and authentication

RunToMax does not provide an account system. There is no Sign in with Apple, no email login, and no RunToMax password.

Strava (optional)

If you choose to connect Strava, RunToMax authenticates with Strava using OAuth (Apple's ASWebAuthenticationSession). Tokens are stored in your iOS Keychain. Once connected, RunToMax can:

• Send to Strava: a GPX file of your run, distance, duration, start time, name, description, and indoor flag, plus segment-effort queries.
• Receive from Strava: your starred segments, segment details, athlete name, and personal records.

You can disconnect Strava at any time in RunToMax Settings, or revoke RunToMax from Strava's My Apps page. Strava's handling of your data is governed by their Privacy Policy.

AI Coaching — Google Gemini (optional, Pro feature)

If you enable AI Coaching, RunToMax sends an aggregated, anonymized summary of your run to the Google Gemini API (generativelanguage.googleapis.com) so the model can generate a coaching note. The summary may include: pace, average and maximum heart rate, cadence, elevation gain, stride length, vertical oscillation, ground contact time, time-in-zone, splits, training readiness/CTL/TSB, summaries of similar past runs, and weather (temperature and humidity) at the start of the run.

We do not send your name, email, raw GPS coordinates, individual heart-rate samples, or any account identifier. RunToMax does not retain Gemini prompts, because RunToMax has no server. Google processes the request under their Gemini API Additional Terms of Service and Privacy Policy. You can disable AI Coaching at any time in Settings.

Weather (Apple WeatherKit)

RunToMax requests temperature, humidity, and wind at the starting coordinate of your run from Apple WeatherKit. This is used to compute your training readiness score and, if AI Coaching is enabled, included in the prompt sent to Gemini. Apple's use of this query is governed by Apple's WeatherKit privacy notice.

Subscriptions and in-app purchases

RunToMax offers Pro (monthly, annual, lifetime) and AI Coaching (monthly, annual) subscriptions through Apple StoreKit. Apple processes your payment, manages your subscription, and shares only a subscription status with the app. We never receive your credit card, billing address, or Apple ID.

If our build includes RevenueCat (a subscription-management library), RevenueCat receives an anonymous app user ID, your purchase receipt, and your entitlement status to validate subscriptions across devices. RevenueCat's practices are governed by their Privacy Policy.

Bluetooth heart-rate strap (optional)

RunToMax can connect to a Bluetooth Low Energy heart-rate monitor (standard GATT 0x180D service) for higher-accuracy heart rate. The strap's name and peripheral UUID are stored locally for auto-reconnect. Heart-rate samples are written to HealthKit. Nothing from the strap is transmitted off your device.

Apple Watch ↔ iPhone bridge

RunToMax uses WatchConnectivity and a shared App Group to move workout data (UUID, times, distance, heart rate, cadence, elevation, splits, post-run findings) from the Watch app to the iPhone app, and then into HealthKit. This communication is on-device only.

Widgets

Quick Start, Weekly Stats, and Last Run widgets read from your local HealthKit and App Group. Widgets do not make network requests.

Product analytics and crash reporting

RunToMax uses PostHog as its product analytics provider, hosted on PostHog's EU cloud (eu.i.posthog.com) so your analytics data is processed within the European Union. PostHog helps us understand how the app is used so we can improve it. PostHog receives:

• Anonymous events describing what happens in the app (for example: "started_run," "opened_coaching," "connected_strava," "subscribed_pro").
• A randomly generated install identifier (not your IDFA, not your Apple ID).
• Device model, operating system version, app version, language, and time zone.
• Approximate location (city or country level) derived by PostHog from your IP address.
• Session start/end and session duration.

We do not send your name, email, raw GPS coordinates, run routes, individual heart-rate samples, or other HealthKit data to PostHog. Event properties are limited to feature-usage signals; we deliberately do not include health or performance metrics in event properties. Autocapture (which would record every tap automatically) is disabled, and session replay is off by default.

PostHog's handling of this data is governed by their Privacy Policy and Data Processing Addendum.

We may also collect crash reports and stability diagnostics (a stack trace, device model, and OS version — no personal content) to fix bugs.

You can opt out of analytics in RunToMax Settings → Privacy → Analytics. Opting out stops further events from being sent from your device.

What we do not collect

• No advertising, no IDFA, no third-party advertising trackers.
• No Firebase Analytics, Crashlytics, Sentry, Amplitude, or TelemetryDeck (unless explicitly disclosed above).
• No push notifications. APNs is not enabled.
• No CloudKit or iCloud sync of RunToMax data today.
• No camera, microphone, contacts, or calendar access.
• No Photos library access beyond letting you pick a single avatar image via the system PhotosPicker (we do not browse or scan your library).

Third-party services we may share data with

• Apple — HealthKit, WeatherKit, StoreKit, WatchConnectivity (privacy).
• Strava — only if you connect it (privacy).
• Google — Gemini API, only if you enable AI Coaching (privacy).
• RevenueCat — subscription validation, only if enabled in the shipped build (privacy).
• PostHog (EU cloud) — anonymous product analytics, opt-out available in Settings (privacy).

Data retention and deletion

Because RunToMax does not store your data on a server, deletion is controlled entirely by you:

• Deleting the RunToMax app removes all RunToMax-specific data (settings, tokens, cached state).
• Workouts, routes, and heart-rate samples remain in Apple Health unless you delete them in the Health app.
• To remove activities you uploaded to Strava, delete them on Strava and revoke RunToMax in your Strava settings.
• To delete analytics data tied to your install ID, contact us at hello@runtomax.com and we will request deletion from PostHog.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict the processing of your personal data, including under the EU/UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and similar laws. Because RunToMax does not maintain user accounts or a server, most of your data already lives on your device under your control. For analytics or third-party data, contact us at hello@runtomax.com and we will respond within a reasonable time.

Children

RunToMax is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact hello@runtomax.com and we will delete it.

International transfers

Apple, Google, Strava, RevenueCat, and PostHog may process data outside your country. PostHog is hosted on its EU cloud for RunToMax. Each provider maintains its own safeguards for international transfers under their respective privacy policies linked above.

Security

Health data and location data are stored by Apple HealthKit, which is encrypted on-device. OAuth tokens are stored in the iOS Keychain. Network requests use HTTPS. No system is perfectly secure; if we become aware of a security incident that affects you, we will notify you as required by law.

Changes to this policy

We may update this Privacy Policy. The "Effective" date at the top reflects the latest version. Material changes will be announced in the app or by email if you've given us one (for example, by joining the waitlist).

Contact

Questions, requests, or concerns: hello@runtomax.com.