Privacy Policy

Last updated: May 18, 2026

1. Who we are

RunLog ("we", "us", "our") is a running training platform operated from Istanbul, Turkey. We help runners track their training, generate personalized plans, and improve performance.

Contact: privacy@runlog.app

2. Data we collect

• Account data: Name, email address, password (hashed)
• Strava data: Run activities, GPS data, heart rate, pace, elevation — imported via Strava's official API with your explicit permission
• Training data: Training plans, session completions, coach notes generated for your runs
• Payment data: Transaction records processed by Iyzico. We do not store card numbers.
• Usage data: Log files, session data, and cookies for app functionality

3. How we use your data

• To provide and improve the RunLog service
• To generate personalized training plans and coaching notes using AI
• To calculate rankings and leaderboards (name and performance data only)
• To send weekly training digests (with your consent, opt-out available)
• To process payments and manage subscriptions

4. AI-generated content

RunLog uses Anthropic's Claude AI to generate training plans and coaching notes. Your run data is sent to Anthropic's API for this purpose. Anthropic's privacy policy applies to this processing. We do not share personally identifiable information beyond what is necessary for generation.

5. Strava integration

By connecting your Strava account, you authorize RunLog to read your activity data. You can disconnect Strava at any time from your Settings page, which will revoke our access token.

6. Data sharing

We do not sell your personal data. We share data only with:

• Anthropic — for AI coaching note and plan generation
• Iyzico — for payment processing
• Strava — for activity data (only what you authorize)

7. Data retention

We retain your data for as long as your account is active. You can request deletion of your account and all associated data by emailing privacy@runlog.app. We will process deletion requests within 30 days.

8. Your rights

Under Turkish KVKK and EU GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion ("right to be forgotten")
• Object to processing
• Data portability

To exercise these rights, contact privacy@runlog.app.

9. Security

We use industry-standard security practices including encrypted passwords, HTTPS, and secure token storage. Strava access tokens are encrypted at rest.

10. Changes

We may update this policy. We will notify registered users by email for material changes.