Privacy Policy

RunYa ("we", "us", "our") is the controller of your personal data as described in this Privacy Policy. We are committed to protecting your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all other applicable data protection laws.

Contact us at: info@runya.co.uk

We collect only what is necessary to provide you with a safe, personalised coaching experience:

• Account data: email address and display name provided at registration.
• Profile data: age, fitness level, running experience, injury history, training goals, available environments, and schedule preferences.
• Health-related data: menstrual cycle phase (optional), life stage (e.g. perimenopause, menopause), symptoms, pelvic floor concerns, HRT status, and energy/sleep/mood check-ins. This constitutes Special Category data under UK GDPR Article 9 and is processed only with your explicit consent.
• Training data: workout sessions, distances, durations, perceived effort, and session feedback.
• Device data: browser type, device type, and usage analytics (anonymised).

We process your data on the following legal grounds:

• Contract (Article 6(1)(b)): to provide the coaching service you signed up for.
• Explicit consent (Article 6(1)(a) and Article 9(2)(a)): for all Special Category health data, including cycle tracking, menopause status, pelvic floor data, and HRT information. You may withdraw this consent at any time.
• Legitimate interests (Article 6(1)(f)): to improve the platform, prevent fraud, and ensure security — where these interests are not overridden by your rights.
• Legal obligation (Article 6(1)(c)): where required by law.

• To generate and adapt your personalised training plan via our AI coaching engine (Vera).
• To provide daily coaching insights, cycle-aware training adjustments, and injury-safe recommendations.
• To send you service-related communications (not marketing without your separate consent).
• To improve and maintain the RunYa platform.

We do not sell your data. We do not use your data for advertising profiles. We do not share your health data with third parties without your explicit consent, except where required by law.

RunYa collects health-related information including menstrual cycle data, menopause status, pelvic floor health, injury history, and HRT usage. This is Special Category data under UK GDPR Article 9.

We collect this data only:

• With your explicit, informed consent, which you give via clear opt-in prompts within the app.
• For the sole purpose of personalising your training and coaching experience.

You may withdraw consent and delete this data at any time via Profile → Delete Account, or by emailing info@runya.co.uk.

RunYa is a coaching tool and is not a medical device or health service. Nothing in the app constitutes medical advice. Always consult a qualified healthcare professional for medical concerns.

We share your data only with:

• Infrastructure providers (hosting, database) under strict data processing agreements and appropriate safeguards.
• AI processing services used to power Vera's coaching insights — data is processed on a per-request basis and is not retained by third-party AI providers to train their models.
• Legal authorities if required by law or court order.

All third-party processors are contractually bound to process your data only on our instructions and in accordance with UK GDPR.

We retain your personal data for as long as your account is active, or as necessary to provide the service. When you delete your account, all personal data — including health data, sessions, check-ins, and training plans — is permanently deleted within 30 days.

Anonymised, aggregated data (e.g. usage statistics with no identifying information) may be retained for product improvement purposes.

You have the following rights, which you can exercise by contacting info@runya.co.uk:

• Right of access — request a copy of your personal data.
• Right to rectification — correct inaccurate data.
• Right to erasure ("right to be forgotten") — request deletion of your data.
• Right to restriction — request we limit how we use your data.
• Right to data portability — receive your data in a machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — withdraw consent for Special Category data at any time, without affecting prior processing.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by phone on 0303 123 1113.

We use only technically necessary cookies to maintain your session and authentication. We do not use advertising or tracking cookies. If we introduce analytics, we will update this policy and seek your consent where required.

We use industry-standard security measures including encryption at rest and in transit, access controls, and regular security reviews. In the event of a data breach that affects your rights, we will notify you and the ICO within the legally required timeframes.

RunYa is not directed at persons under 18. We do not knowingly collect data from anyone under 18. If you believe a child has provided us with personal data, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notice or email at least 14 days before they take effect. Continued use of the service after that date constitutes acceptance of the updated policy.

For any privacy-related questions or to exercise your rights, contact our privacy team at:

info@runya.co.uk