1. Who we are
CreateRunPlan ("we", "us") is an adaptive running coach at createrunplan.com and in our apps (the "Service"). We are the controller of the personal data described here. Questions or requests: support@createrunplan.com.
2. What we collect
2.1 Your account
Name, email address and profile picture from the sign-in you choose (email link, Google, Apple or X). With Sign in with Apple, Apple shares your name (the first time, if you choose to) and your email address, or a private relay address that forwards to it if you choose to hide yours. Strava sign-in has been removed, and we have deleted the Strava athlete IDs and sign-in tokens we held. If you signed in only with Strava, email support@createrunplan.com to get access back or to have your account deleted.
2.2 What you tell your coach
- Your goal and race (distance, date, target time), how you run now (weekly time, longest run, recent results), the days and time you can train, units and time zone.
- Optional preferences: birth year (for age-based rules), the rhythm of easier weeks, walk breaks.
- Your training log: which runs you did, skipped (and why, for example tired, sore or ill), how they felt, times for time trials and races, and weekly check-ins (including a niggle or an injury).
2.3 Health data
Some of this is health data under the GDPR: injuries, illness, pain, heart rate, and the heart rate in runs you import. We process it only with your explicit consent (GDPR article 9(2)(a)), and only to coach you:
- Injuries, illness and how runs feel: you agree when you start coaching. Without it the coach can't adapt safely, so it's needed to use the coach.
- Heart rate and imported runs: we ask separately, the first time you import runs or enter your heart rate. You can withdraw at any time, on the website in Account, Your data, or in the app in Settings, Account: we then delete your imported runs and heart-rate settings. Runs they logged in your plan stay logged.
We never use health data for advertising, never sell it, and never send it to analytics or advertising services.
2.4 Runs you import
When you import an export from Apple Health, Garmin or a FIT, GPX or TCX file, your browser reads the file on your device. Only each run's start time, duration, distance and average and maximum heart rate are sent to us. Routes, GPS points and everything else in the file stay on your device.
2.5 Apple Health
If you connect Apple Health in our iPhone app, the app reads your running workouts, each run's start time, duration, distance and heart rate, to log your runs. When a run has no distance of its own, it reads your walking and running distance during that run instead. It reads nothing else from Health, never writes to Health, and syncs when you open the app. These runs are health data, so we ask for your consent first, and we never use them for advertising or sell them. You can stop syncing in the app, in Settings, Import runs, and take away its access in your iPhone's Settings, Health, Data Access & Devices. Runs it brought in are deleted like other imported runs: when you withdraw consent or delete your account.
2.6 Emails, notifications and your calendar
If you turn reminders on, we email you on run days and on Sunday evenings, and keep a short record of what we sent (for 14 days) so each goes out once. Links in those emails let you stop reminder emails, and log a run while your trial or subscription is active, without signing in. If you turn on notifications in the iPhone app, we store a notification token for your iPhone (an address for the app on that phone) and send the same reminders through Expo's push service and Apple Push Notification service. We only do this when you turn notifications on, and the token is deleted when you turn them off, sign out of the app or delete your account. If you turn the calendar feed on, we create a private link your calendar app reads; anyone with the link can see your planned runs, so you can turn it off or replace it at any time. Reminders stop when your trial or subscription ends, and start again if you subscribe. After it ends, the calendar feed keeps showing runs already planned in the last four weeks, but no new ones.
2.7 Payments
Stripe processes payments. We don't see or store card details. We keep your Stripe customer and subscription IDs, plan, status and billing dates, a note of the billing emails we send you, and any refund request you send. If you subscribe in the app, Apple or Google processes the payment and RevenueCat tells us what you have bought. We keep the store's product and transaction IDs, plan, status and billing dates.
2.8 Messages
If you contact us, we keep your name, email address and message.
2.9 Usage and device data
With your consent (see our Cookie Policy), analytics record pages viewed and actions such as starting a trial or opening checkout, with browser and device details. Our servers also log IP addresses and requests to keep the Service secure. Separately, our servers record a few account events (trial started, checkout opened, subscription started, scheduled or ended, and which coach feature a runner tried after their trial or subscription ended) in PostHog to understand which plans work for runners, based on our legitimate interest. They contain no health data.
3. How we use it, and why we're allowed to
- Coaching you (planning and adapting your weeks, paces, heart-rate ranges, history, reminders and your calendar feed): to provide the Service you signed up for (GDPR article 6(1)(b)), and for health data, your explicit consent.
- Your coach's notes: during your trial and while you're subscribed, the facts behind your week (for example "an easier week after a niggle") are sent to Anthropic's Claude to be reworded in plain language. Your name and email are not sent, and Anthropic doesn't use this data to train its models.
- Billing: to run your subscription and meet tax and accounting duties (articles 6(1)(b) and 6(1)(c)).
- Emails about your account (sign-in links, trial ending, payments): to provide the Service.
- Analytics and advertising measurement: only with your consent (article 6(1)(a)), which you can change in the cookie settings.
- Security and abuse prevention: our legitimate interest in keeping the Service safe (article 6(1)(f)).
4. Who processes it for us
These providers process data on our behalf, under contracts that limit them to that purpose:
- OVHcloud: hosts our servers and database.
- Stripe: payments and subscriptions.
- RevenueCat, with Apple and Google Play: subscriptions bought in the app.
- Anthropic: rewords your coach's weekly notes (see section 3).
- Our email provider: delivers sign-in links, reminders and account emails.
- Expo and Apple: deliver reminders to your iPhone as notifications, if you turn them on.
- PostHog (EU) and Google Analytics: product and traffic analytics, with your consent.
- Google Ads: measures sign-ups and purchases from ads, only with marketing consent. You can opt out of personalised ads at adssettings.google.com.
- Google, Apple and X: when you sign in with them.
We don't sell personal data.
5. International transfers
Some providers (such as Stripe, RevenueCat, Anthropic, Expo and Google) may process data outside the European Economic Area, including in the United States. Where they do, transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
6. Security
Data is stored in a PostgreSQL database on our own servers, sent over encrypted connections, and sign-in tokens are encrypted at rest. Access is limited to what running the Service needs. No system is perfectly secure, but we work to protect your data and will tell you and the authorities about a breach as the law requires.
7. Cookies and browser storage
We use cookies to keep you signed in and, with your consent, for analytics and advertising measurement. Your browser also stores small items such as your cookie choices and form drafts. Details and controls are in our Cookie Policy.
8. How long we keep it
- Your account, plan and training history: while your account exists.
- Imported runs and heart-rate settings: until you withdraw consent or delete your account.
- Records of reminders sent: 14 days.
- Your iPhone's notification token: until you turn notifications off, sign out of the app or delete your account.
- Billing records: 10 years after the end of the year of the payment, as tax law requires, even after you delete your account. They're the invoices for payments on the website, which Stripe keeps for us: your name and email address, what you paid and when. We never hold card numbers: Stripe does. Payments in the app are billed by Apple or Google, which keep their own records.
- Notes of the billing emails we sent you (which email, when, and the payment it was about): kept with the billing records, for the same time. Deleting your account takes your email address and the link to your account out of them.
When you delete your account (on the website in Account, Delete account, or in the app in Settings, Account), a subscription on the website is cancelled first, then your account and everything linked to it are deleted from our live systems. If Stripe can't confirm the cancellation, we keep the account so a subscription is never left without one; try again or contact us. We also delete your customer record at Stripe, with the card saved on it, and ask RevenueCat to delete yours there. A subscription bought in the app is billed by Apple or Google, which we can't cancel for you: cancel it in the App Store or Google Play. How to delete your account has the steps.
9. Your rights
Under the GDPR and similar laws you can:
- Get a copy of your data: download it yourself, on the website in Account, Your data, or in the app in Settings, Account (a JSON file you can take to another service).
- Correct it: most of it in your coach settings and profile, or ask us.
- Delete it: delete your account yourself, in the app or on the website, or ask us (how to delete your account). Billing records stay for the time in section 8, because the law requires us to keep them.
- Withdraw consent for health data, analytics or marketing at any time. Withdrawing doesn't affect what we did before.
- Object to or restrict processing based on our legitimate interests.
- Complain to the data protection authority where you live or work.
For anything else, email support@createrunplan.com. We reply within one month.
10. Children
The coach is for runners aged 13 and over, and it applies extra limits for runners under 18. In some countries a parent or guardian must agree for a teenager under 16; if that's your country, please use the Service with their agreement. If you think a child under 13 has given us personal data, contact us and we'll delete it.
11. Changes
If we change this policy, we'll update the date at the top, and for important changes we'll tell you by email or in the app before they apply.