Privacy policy

Who we are

RunPilot is the controller of the personal data described in this policy. Questions about this policy or your data: privacy@runpilot.app.

If you are in the UK, you can also complain to the Information Commissioner’s Office at ico.org.uk. Please contact us first so we can try to put it right.

If you use the contact page, we email your name, email address, and message to RunPilot and keep that message in the inbox so we can reply. It is not added to your RunPilot account.

Account

• Email address and password. Passwords are handled by Supabase Auth and stored in hashed form. RunPilot does not keep its own copy of your password.
• Profile details you set, such as a display name, home region, and route preferences (for example, avoiding A-roads).
• A sign-in session. On the website this is a cookie. On iPhone the session is stored in the Keychain on that device.
• An anonymous website session, before you create an account, so a route generated in that browser can be kept if you later sign up.

Routes

• The description you type, including free text. If you mention how you feel or what kind of effort you want, we use that only to shape the loop and the coach note, and we store it with the run.
• The start point: a precise location from your device, or a UK postcode you enter.
• The loops we generate: the path, distance, duration, elevation, road exposure, scores, and coach note.
• Favourites, and the last plan saved in your browser.

RunPilot does not connect to Apple Health or HealthKit.

Location

On the website, location is used when you ask RunPilot to start a loop from where you are. You can enter a postcode instead.

On iPhone, RunPilot asks for location while you use the app so it can start a loop near you and show where you are on the line. If you allow Always, the app can keep following the loop while the phone is locked. That live position is processed on the phone to show progress, distance remaining, and whether you have left the route. We do not upload that live trace.

You can turn location off in your browser or in iOS Settings. Without a start location or a postcode, RunPilot cannot plan a loop from where you are.

Payments

• Website subscriptions are processed by Stripe. We store a Stripe customer id, subscription id, and plan status so we can apply your plan. We do not store your card number.
• iPhone subscriptions are processed by Apple. We store the product, original transaction id, and expiry so we know whether Premium is active. Apple handles the payment. Cancel an Apple subscription in your Apple ID subscriptions. The terms of use describe the subscription.

Sharing a run

If you create a share link, anyone with that link can view that run until you revoke the link or delete your account. The link is unguessable. Revoke it when you no longer want it to work.

If you export a GPX file, or open the loop in Apple Maps or Google Maps, those apps receive the route coordinates under their own terms.

Why we use it

• Contract. To create your account, generate and store routes, keep favourites and share links, apply quotas, and run your subscription.
• Contract and your permission. To use location when you ask for a loop from where you are, and on iPhone to follow the line.
• Legitimate interests. To keep the service secure, limit abuse, and fix faults. We balance this against your rights.
• Consent. For optional website analytics. You can refuse or withdraw that consent.
• Legal obligation. Where payment providers must keep transaction records.

We do not sell personal data. The iPhone app does not track you across other companies’ apps or websites, and it does not use advertising identifiers.

Who else processes data

We use these providers to run RunPilot. They process data only so we can provide the service.

• Supabase — accounts and the database.
• Vercel — hosting the website, and Web Analytics if you opt in.
• OpenAI — turning your description into a route plan, and writing the coach note from that plan and the route facts. We do not use your data to train our own models.
• OpenRouteService — calculating the path from your start point.
• OpenTopoData — elevation along a route.
• postcodes.io — turning a UK postcode into coordinates.
• OpenFreeMap and OpenStreetMap — map tiles on the website. A tile request can reveal the map area and includes an IP address under those services’ own policies.
• Apple — maps on iPhone, and in-app purchases.
• Stripe — website subscriptions.
• YMove — stretch and exercise videos. We request the catalogue. We do not send your email address for that.
• Google — only if you choose to open the loop in Google Maps.

Some of these providers process data outside the United Kingdom, including in the United States and the European Economic Area. Where UK GDPR requires a transfer safeguard, we rely on that provider’s UK transfer terms, such as the International Data Transfer Agreement or the Addendum to the EU standard contractual clauses.

How long we keep it

• Account and route data stay until you delete the account, or until we no longer need them to provide RunPilot.
• Deleting the account removes your profile, generated runs, favourites, and share links. A Stripe subscription is cancelled as part of deletion. An Apple subscription continues until you cancel it with Apple.
• The anonymous website session and the last plan in your browser stay until you sign in, clear site data, or the session ends.
• Stripe and Apple may keep payment records after your RunPilot account is gone, under their own legal duties.
• Optional analytics is kept for the period Vercel Web Analytics uses.

Your rights

If UK GDPR applies to you, you can ask us to give you a copy of your personal data, correct it, delete it, or restrict it. You can object to processing based on legitimate interests. Where the basis is contract or consent, you can ask for data you provided in a portable form. You can withdraw analytics consent at any time. Withdrawing consent does not affect processing that already happened.

On iPhone, delete your account from the account area in the app. Change location permission in iOS Settings. On the website, change analytics consent from Cookie settings in the footer.

Children

RunPilot is not directed at children under 13, and we do not knowingly create accounts for them. If you believe a child has given us personal data, email us and we will delete it.

Cookies

Essential cookies keep you signed in and remember an anonymous session and your cookie choice. Analytics cookies load only if you opt in. Details are in the Cookie policy.

Changes

We will post updates on this page and change the date at the top. If a change materially affects how we use your data, we will also give notice in the product where that is practical.