Have2Run Privacy Policy

1. Introduction

Thank you for using Have2Run! We provide AI coaching and training management services to help you achieve your running goals.

This Privacy Policy explains what information Have2Run collects, how we use it, and how we protect it. Your privacy is very important to us.

2. Data We Collect

2.1 Health & Fitness Data

Data Types:

• Workout data (running sessions)
• Distance
• Heart Rate
• Active Calories Burned
• Steps

Source: Read from your smartwatch via HealthKit (iOS) or Health Connect (Android) with READ-only permissions.

Purpose: Automatically complete training sessions, predict race times, track progress, and personalize AI coaching.

Control: You can enable or disable watch sync in Settings at any time.

2.2 Profile Information

Data Types:

• Name
• Email address
• Height, weight
• Personal Best (PB) times
• Time preference (AM/PM)

Source: You provide this information during sign-up or in profile settings.

Purpose: Generate personalized training plans, predict race times, and customize AI coaching.

2.3 Training Data

Data Types:

• Training session records (date, distance, pace, notes)
• Training schedules and goals
• Workout images (when you upload screenshots)
• Conversations with AI coach

Source: You create this data or our AI coach generates it for you.

Purpose: Manage your training, provide AI coaching, track and analyze progress.

2.4 Authentication Data

Data Types:

• Email/password (for email sign-up)
• Social login information (Google, Apple, Kakao): name, email, profile picture

Managed by: Supabase Auth

Purpose: Account authentication and management.

2.5 AI Coaching Data

Data Types:

• Conversations with AI coach
• Training context (current goals, progress, etc.)

Processed by: Google Gemini AI, OpenRouter (fallback AI provider)

Purpose: Provide personalized training advice and conversational coaching.

2.6 Usage & Diagnostics Data

Data Types:

• App usage patterns (screen views, feature usage)
• Crash reports (error logs, stack traces)
• Performance data (app loading time, response speed)

Processed by: Google Firebase (Analytics, Crashlytics)

Purpose: Improve the app, fix bugs, and optimize performance.

Anonymization: Analytics data is collected in a non-identifiable form.

2.7 Device Information

Data Types:

• Platform (iOS/Android)
• App version
• Device model
• Network connection status

Purpose: Ensure feature compatibility and debugging.

3. How We Use Your Data

We use the collected information only for the following purposes:

• Personalized training: Our AI coach creates training plans tailored to your goals and current fitness level.
• Race time prediction: We analyze your training data to predict your performance in upcoming races.
• Progress tracking: We visualize your training progress with statistics and graphs.
• App improvement: We analyze usage patterns to provide a better user experience.
• Customer support: We respond to your inquiries and resolve technical issues.

What We Don't Do:

• ❌ We do NOT use your data for marketing or advertising.
• ❌ We do NOT sell or rent your data to third parties.
• ❌ We do NOT share health data for marketing purposes.

4. Third-Party Services

We use the following third-party services to provide app functionality. Each service follows its own privacy policy, and we require them to provide equal or greater protection.

5. Data Storage & Security

Security Measures:

• Encryption in transit: All data is encrypted via HTTPS during transmission.
• Access control: Supabase Row Level Security (RLS) policies restrict data access.
• App authentication: Firebase App Check protects API calls.

Retention Period:

• We retain your data while your account is active.
• Health data is stored only in your account and is not shared externally.
• When you delete your account, all data is permanently deleted.

6. Your Rights

Under privacy laws, you have the following rights:

• Access: You can view your personal information (in-app profile page).
• Correction: You can correct or update incorrect information.
• Deletion: You can delete your account, which permanently deletes all data. (Settings > Account Management)
• Withdraw consent: You can disable features like watch sync at any time.
• Data portability: You have the right to move your data to another service.

To exercise these rights, please contact us using the information below.

7. Data Retention & Deletion

• Active accounts: We retain your data while you use the app.
• Account deletion: Upon deletion request, all data is immediately and permanently deleted.
• Health sync data: If you disable watch sync, we stop collecting new data. Existing data will be deleted when you delete your account.

8. Children's Privacy

Have2Run is not intended for children under the age of 14. We do not knowingly collect personal information from children under 14. If we discover such information, we will delete it immediately.

9. Changes to This Policy

This Privacy Policy may be updated due to changes in laws or our services.

• Significant changes: We will notify you via in-app notification and email in advance.
• Minor changes: We will update this page and revise the "Last Updated" date.

Changes will take effect 7 days after notification.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: privacy@have2run.com

11. GitHub Pages Hosting Notice

This privacy policy page is hosted on GitHub Pages. GitHub may collect visitor IP addresses for security purposes. For more information, see the GitHub Privacy Statement.