Privacy policy
- WeRun has no account. Your plan, runs and health notes are stored on your phone.
- Data only leaves your phone when you use a feature that needs it, and this page lists every one.
- If you connect Garmin through WeRun, your new Garmin data passes through our server and is deleted as soon as your phone collects it, and after 14 days at most.
- We don't sell your data, share it for advertising, or use it to train artificial intelligence.
- You can delete everything at any time: in the app, Settings, Erase everything; and for our server, by disconnecting Garmin.
1. Who we are
WeRun is made by TrenForgeApps, Crestwood, Illinois, USA ("we"). For anything about your data, email hello@werunapp.app.
2. What WeRun keeps on your phone
Everything below is stored in the app's private storage on your device. We can't see it.
| Data | Why |
|---|---|
| Your training plan, goal, training days, paces and settings | To build and adapt your plan. |
| Your runs and rides: time, distance, pace, route (GPS), heart rate, cadence, laps, elevation, weather and your ratings | To review each run, show charts and records, and adjust your plan. |
| Health and wellness figures you bring in: heart rate zones, overnight HRV, sleep, Body Battery, VO2 max, age, body weight | To set heart rate zones, check recovery and size food advice. |
| Optional notes: menstrual cycle and symptoms, pre-run food and drink, aches and pains, shoes, experiments | For the cycle, fuel, niggle and experiment features. Only if you choose to log them. |
| Keys you add for your own accounts (Garmin personal key, Strava) | To connect to those services for you. Never included in backups. |
Backups are files you create and save yourself. They contain your plan, run summaries and notes, and are stored wherever you choose.
3. When data leaves your phone
Only when you use these features:
| Feature | What is sent, and to whom |
|---|---|
| Connect with Garmin (our server) | When you connect, Garmin asks your permission on its own page. Garmin then sends the data you allowed (new activities and their files, and if you allow it, health and women's health summaries) to the WeRun connection server, which holds it until your phone collects it. The server also keeps the access token Garmin gives it, to download activity files. See section 4. |
| Connect with COROS, Polar or Suunto (our server, when available) | The same as Garmin: the watch maker asks your permission on its own page, then sends your new workouts (summaries and files) to the WeRun connection server, which holds them until your phone collects them. The server keeps the access token needed to fetch them. See section 4. |
| Garmin personal key (advanced) | Your phone talks to Garmin directly with the key you created. Nothing passes through us. |
| Health Connect (Android) | Read on your phone only, with your permission. Nothing is sent to us. |
| Sending workouts to a watch | Workout steps go from your phone to your watch over Bluetooth, through the Garmin Connect app (Garmin watches) or Google's Wear OS service (Samsung and Pixel watches). Runs recorded on a WeRun watch app come back the same way. |
| Strava | If you connect your own Strava API app, runs you choose (or runs WeRun records, if you turn that on) are uploaded from your phone to Strava. Strava's privacy policy applies there. |
| Weather and best time to run | The approximate location of the town you saved (rounded to about 10 km) and the dates of your runs are sent to Open-Meteo to get temperature, humidity and forecasts. Your route is never sent. |
| Maps behind routes | To draw the map, your phone downloads map pictures of the area of a run from OpenStreetMap's servers, which see that area and your IP address. You can turn maps off in Settings. |
| Fonts | The app loads its typeface from Google Fonts, which sees your IP address. |
| Calendar (optional) | If you allow it, the start and end of busy events today are read on your phone to suggest a time to run. Titles, places and people are never read, and nothing is sent. |
| Location and step counter while recording | Used on your phone to record the route, distance and cadence of a run. Not sent anywhere. |
| Sharing | When you share a run picture, a review or a workout code, it goes where you send it. A workout code holds the workout and your 5K time, nothing else. |
4. The WeRun connection server
Garmin, COROS, Polar and Suunto deliver data to app makers' servers rather than to phones, so WeRun runs a small server, hosted by Cloudflare, Inc. It:
- stores, for each connected phone, a random device code and a scrambled (hashed) copy of its secret, so only your phone can collect your data;
- stores your user number at each connected service and the access tokens needed to fetch your activity files;
- holds data the service sends until your phone collects it, then deletes it. Anything not collected is deleted after 14 days;
- deletes everything about you within 24 hours when you disconnect a service in WeRun, or when you remove WeRun's access in your account with that service;
- does not analyse, combine, sell or share your data, and keeps no other logs about you beyond the hosting provider's short-lived technical logs.
Data is encrypted in transit (HTTPS). Garmin is a trademark of Garmin Ltd. or its subsidiaries; Garmin device-sourced data is shown in WeRun with Garmin attribution. COROS, Polar and Suunto are trademarks of their owners, and their data is shown with attribution to them and the device it came from. Insights from any watch's data are for fitness and performance purposes only, not medical advice.
5. Health data
Much of what WeRun handles is health data, including heart rate, sleep and, if you choose to log it, your menstrual cycle. We use it only to provide the features you use, on your phone, with your consent. Cycle and symptom notes are never sent to our server. You can turn cycle tracking off at any time, which deletes that data from the app.
6. What we don't do
- No selling or renting of your data, and no "sharing" of it for advertising.
- No artificial intelligence: WeRun's coaching, reviews and insights are written rules that run on your phone. Your data is not used to train or feed AI systems.
- No analytics or tracking tools in the app.
- WeRun doesn't show ads today. If that changes, we'll update this policy and ask for any consent the law requires before collecting anything for ads.
7. How long we keep things
On your phone: until you delete it (a single run, a note, or Settings, Erase everything) or uninstall the app. On our server: until your phone collects it, and never more than 14 days; connection details until you disconnect.
8. Your rights
Wherever you live, you can ask us what we hold about you, to correct it, to delete it, or for a copy. Because almost everything is on your phone, you can do most of this yourself in the app. For the server, disconnect Garmin, or email us and we'll respond within 30 days. If you're in the EU or UK, we rely on your consent to process health data, and you can withdraw it at any time; you can also complain to your data protection authority. If you're in California, we don't sell or share personal information as those terms are defined there.
9. Children
WeRun is not intended for children under 13 (under 16 in the EU and UK) without a parent's permission.
10. Security
Data on your phone is protected by Android's app storage. Keys you enter are kept out of backups. Our server stores only what it needs, uses HTTPS, and stores device secrets only in hashed form.
11. Changes
If we change this policy, we'll update the date above and, for important changes, tell you in the app.