RunPackPrivacy policy
Effective 18 October 2026
RunPack reads health data from Apple Health to work out how recovered you are. That makes what happens to it the most important thing about the app, so this page says exactly what is read, where it goes, and who can see it.
What RunPack reads from Apple Health
Only with your permission, and only these types:
- Sleep — duration, timing and how broken up it was
- Heart rate variability, resting heart rate and breathing rate
- Workouts — type, duration and heart rate, and the route of runs, walks and rides
- Steps and active energy
- Height, weight and date of birth, to normalise effort
Your individual Health records never leave your phone — except the route and stats of runs you choose to share with your crews (see below) — and nothing is written to iCloud. The only thing RunPack writes to Apple Health is a run you record in RunPack (the workout and its route), so it counts in Fitness too.
Location
RunPack uses your location only while you are recording a run, to measure distance and pace and draw the route — including with the screen locked, which shows the blue location indicator. It never tracks you at any other time.
Your morning check-in
The answers you give (hours slept, sleep quality, energy, soreness) stay on your phone. Only the check-in score worked out from them is uploaded, like any other daily score.
What leaves your phone
| What | Goes to | When |
|---|---|---|
| A daily summary — your recovery score and band, training-load figures, hours slept, workout count, and daily averages such as HRV and resting heart rate | RunPack’s server | Only if you sign in. Used to back up your history and to build your group’s board. |
| Coarse bands — recovery band, load and ramp bands, workout count, sleep to the nearest half hour, and whether the reading is partial | Members of each group you join, under the name you choose for that group | Only while you are in that group. Leave and they stop seeing it immediately. |
| The same coarse bands and your chosen group name | Google Gemini, to write the group’s morning briefing | Only if you have turned on AI coaching. Otherwise the briefing leaves you out. |
| Your runs — route, distance, time, pace and climb — and photos you add to them. Never heart rate. Photos are resized and their location data removed on your phone before upload. | RunPack’s server, and members of the crews you’re in | Only if you turn on run sharing. Hide or delete any run or photo at any time; deleting your account deletes them all. |
| Reports you make about a run or photo, and people you block | RunPack’s server | Reports are reviewed within 24 hours to remove content that breaks the rules. |
| Purchases of RunPack Plus — the product, its renewal date and Apple’s transaction id. Payment is handled by Apple; RunPack never sees card details. | RunPack’s server, from Apple | Only if you subscribe. Used to give your crews Plus. |
| Your sign-in identity from Apple or Google | RunPack’s server | Only if you sign in. Used to identify your account and nothing else. |
| A notification token for this phone | RunPack’s server, and Apple to deliver the notification | Only if you turn on the morning notification. The notification says only your group’s name and that its card is ready — never anyone’s readings. Turning it off removes the token. |
Group members never see your recovery score, heart-rate variability, resting heart rate, breathing rate, steps, calories, weight, email address or Apple ID — and see your runs only if you share them.
Who processes it
- Supabase stores account and summary data (United States).
- Railway runs RunPack’s server (United States).
- Apple delivers notifications, if you turn them on, and handles RunPack Plus payments.
- Supabase Storage holds run photos (United States), readable only through short-lived links given to your crews.
- Google Gemini writes group briefings, only for members who have turned on AI coaching. RunPack uses Gemini’s paid service, under which Google does not use the content to train or improve its products.
What RunPack never does
- No advertising, and no data used for advertising or marketing.
- No selling or renting of data, to anyone.
- No tracking across other apps or websites, and no analytics SDKs.
- No use of health data for anything other than the coaching you see in the app.
Your choices
- Use RunPack without an account: scores and history work entirely on your phone.
- Turn AI coaching on or off at any time in Settings.
- Turn the morning notification on or off at any time in Settings.
- Leave any group at any time.
- Turn run sharing on or off in Settings; hide or delete any run or photo.
- Report a run or photo, or block a member, from its menu.
- Delete your account in Settings → Account. This deletes everything RunPack’s server holds about you; groups you were in carry on without you.
- Revoke Health access at any time in the Health app or iOS Settings.
Retention
Server data is kept until you delete your account. Deleting it removes your summaries, group memberships and consent records.
Children
RunPack is not directed at children under 13 and does not knowingly collect their data.
Medical disclaimer
RunPack is not a medical device and does not diagnose, treat or prevent any condition. Talk to a doctor before changing how you train.
Changes and contact
If this policy changes, the app asks for your agreement again before anything is sent under the new terms. Questions: contact support.