Privacy policy

Runergy Lab · Effective 23 October 2026 · Last updated 28 October 2026

At a glance

Information	Leaves your device?	When, and where to
Profile, plans, logs, runs	Only if you sign in	Backed up to your account on our Cloudflare storage (2.3b)
Health and wellness entries, Apple Health or Health Connect data	Only if you sign in, or allow the coach to see them	Included in your account backup; sent to the AI coach only if you allow it (2.3, 2.6, 5)
Email address	Only if you sign in	Our account service, and Resend to send you the code (2.3b)
Questions to the AI coach	Only when you ask one, after you allow it	Cloudflare Workers AI, or Anthropic with your own key (2.3)
Workouts for your watch	Only when you send them	Garmin Connect (2.4)
Anonymous usage counts and crash reports	Yes, unless you switch it off	Our own server; no names, emails or training data (2.3c)
Advertising or tracking data	Never collected	No ads, no tracking, no data sold

1. Who we are

Runergy Lab is a running-training app, on the web and as a phone app: it builds Jack Daniels VDOT-based training plans, helps you log workouts and shows your progress. In this policy "Runergy Lab", "we" and "us" mean the people who run the Runergy Lab service, and we are the controller of the information described here. You can reach us at hello@runergylab.com about anything in this policy. Your use of Runergy Lab is also covered by the terms of use.

2. What information Runergy Lab handles

2.1 Information you enter or import (stays on your device)

• Profile: first name, surname, date of birth, sex or gender (optional), height, weight, running experience and goals.
• Training: your plans, the workouts you log (distance, time, pace, heart rate, repetitions, effort, notes), race results and the runs you import from files (FIT, TCX, GPX, CSV) or from services you connect.
• Health and wellness (optional): sleep, resting heart rate, heart-rate variability, soreness, injuries or niggles, weight and food entries, and, only if you switch it on, menstrual-cycle information. This is sensitive information. You choose whether to enter any of it, and Runergy Lab works without it.

All of this is stored in your browser on your own device. It is not uploaded to Runergy Lab unless you sign in to back it up (see 2.3b). You can protect a profile with an optional PIN, which encrypts it on the device. If you clear your browser's site data or remove the app from your Home Screen, this information is deleted unless you made a backup.

2.2 Information processed when you use the hosted app

The Runergy Lab website is served by Cloudflare. When your device loads the app, Cloudflare processes technical request data such as your IP address, browser type and the time of the request, to deliver the site and keep it secure. We do not use this to identify you or to build profiles, and we do not use cookies or trackers for analytics or advertising. Runergy Lab uses your browser's storage only to remember your data and settings on your device.

2.3 The AI coach

The AI coach is optional. Where it runs depends on the option you choose in Settings:

Option	What is sent	To whom
Free coach	Your question and a summary of your plan and recent training that the coach needs to answer. Wellness, injury and menstrual-cycle information is included only if you have allowed the coach to see it in Settings.	The Runergy Lab site (a Cloudflare Worker) and on to Cloudflare Workers AI, which runs an open language model to write the answer.
Claude with your own key	The same kind of question and summary, sent straight from your browser using your own API key.	Anthropic, under your own agreement with Anthropic.
A model on your computer	Nothing leaves your computer.	Nobody.

For the free coach, Runergy Lab does not store your questions, the plan summary or the answers. The only thing kept is a daily counter used to limit how many questions each person and the whole site can ask: it is tied to your IP address and the date, holds no content, and expires within 48 hours. Cloudflare and Anthropic process data under their own privacy policies (Cloudflare, Anthropic). The coach can suggest plan changes, but nothing changes in your plan until you approve it. The coach is not a doctor and does not give medical advice.

2.3a Coach ID and push reminders (only if you switch them on)

Coach ID. If you create a coach ID on the Coach page, Runergy Lab keeps a copy of your share snapshot (your plan, what you completed, distances, effort, recent runs and load; never heart rate, how you feel, injuries or recovery data) on our server under that ID, so a coach who has the ID can read it. It is updated while the app is open, expires after 120 days without an update, and is deleted when you stop sharing or make a new ID. Anyone who has the ID can read the snapshot, so give it only to your coach.

Push reminders. If you switch reminders on in a browser or Home Screen app, we keep your device's push address and the wording and times of your next two weeks of reminders (for example the session name and distance), so they can arrive when the app is closed. Nothing else is kept: no plan, logs or name. Switching reminders off deletes it.

2.3b Account and cloud backup (only if you sign in)

If you choose to sign in, we ask for your email address and send a 6-digit code to it. We keep your email address, and a copy of the profiles you choose to back up (your plans, logs, runs and settings, including health entries and runs that came from Garmin or Strava, because they are part of your data), so you can restore them or open them on another device. The sign-in code is stored only as a hash and expires after 10 minutes. The copy is stored on Cloudflare's infrastructure, tied to your email, and is not shared with anyone, not used for advertising, and not sent to the AI coach or a human coach. Email is sent through Resend, which sees your address and the code. You can sign out at any time, and Delete my account and online data (Settings, Account & backup) removes your email, your backups and your sessions from our server immediately. The copy on your own device is not touched.

2.3c Anonymous usage and crash reports (on by default, you can switch it off)

So we can see what works and fix bugs, the app sends small batches of anonymous counts to our own server (not to a third party): how many times simple things happened (the app opened, a page was viewed, a plan was built, a run was logged), the kind of device (for example "ios-app"), the app version, and a random id that is thrown away every day, so nobody can be followed from one day to the next. When the app breaks, we also receive the error message and the top lines of where it happened, with emails, IDs and web-address queries removed. We never receive your name, email, plans, runs, health data or anything you typed. Switch it off in Settings, Health & privacy, and nothing is sent. These counts are kept for up to 120 days.

2.4 Services you choose to connect

• Garmin Connect™. You can import Garmin files yourself, and you can connect your Garmin Connect account so that Runergy Lab sends your planned workouts (runs, bike rides, swims and strength sessions) to it. Connecting uses Garmin's own sign-in: Runergy Lab never sees your Garmin password. After you sign in and agree, Garmin gives Runergy Lab a permission token. What happens next:
  • What we send to Garmin: only the workouts you ask to send: their name, a short description, the planned steps (distances, times, target paces, repeats and recoveries) and the day they are scheduled. We tell you this, and ask you to agree, before you connect. Garmin handles what it receives under its own privacy notice (Garmin Connect privacy notice), as an independent controller.
  • What we keep: Garmin's access and refresh tokens for your connection, stored encrypted on our server, and Garmin's anonymous user identifier for you, so we can honour a disconnect. The workouts themselves are not stored by us: the identifiers Garmin returns are kept on your own device.
  • What we do not do: we do not read your Garmin activities, sleep, heart-rate or other health data through this connection, and we do not sell it or use it for advertising.
  • Disconnecting: press Disconnect under Send to watch, or remove Runergy Lab in your Garmin Connect account settings. Either way the connection ends: when you disconnect in Runergy Lab we ask Garmin to delete the registration and we delete the tokens; when you disconnect at Garmin, Garmin tells us and we delete them. Workouts already in Garmin Connect stay there until you delete them (Runergy Lab can remove the ones it sent).
  • If you later allow more: if Runergy Lab is extended to read data from Garmin, this policy will be updated first, and data that comes from Garmin will not be used to train, test or improve any AI model.
• Intervals.icu and Strava. If you connect these, the data goes between your device and that service under your own account and its terms. The hosted app sends workouts to Intervals.icu only when you press the button to do so.
• Weather. If you turn on the weather forecast for a workout, the place you give is sent to a weather service to get the forecast.

2.5 Garmin activity data

• Today: Runergy Lab does not request, receive or store activity data from Garmin. The only thing the Garmin Connect connection does is send your planned workouts to your Garmin Connect account (Garmin's Training API).
• If this ever changes: reading your Garmin activities would be a separate permission that you give on Garmin's own consent screen, and this policy would be updated first. The only purposes would be to show you your own completed runs, compare them with your plan, adapt your upcoming workouts and give you feedback on them. The data would be tied to your own account (not aggregated or anonymised), it would not be sold, shared for advertising or used to train, test or improve any AI model, Garmin would be named as the source wherever it is shown, and it would be deleted when you disconnect.

2.6 Apple Health and Health Connect (the phone app)

In the iPhone and Android app, you can allow Runergy Lab to read sleep, resting heart rate, heart-rate variability and running workouts from Apple Health or Health Connect. You choose which types to allow, and you can change that at any time in your phone's settings. Runergy Lab only reads this data (it never writes to Health), uses it only to judge your recovery and match your plan to what you ran, and keeps it on your device. It is never used for advertising, marketing or data mining, is never sold, and is never shared with data brokers or information resellers. It leaves your device only in the cases above: in your account backup if you signed in, and to the AI coach if you allowed that.

3. How we use information

• To build and adjust your training plan and show your progress, on your device.
• To sign you in and keep your backup, if you create an account.
• To find and fix bugs and see which features are used, from anonymous counts.
• To answer your questions through the AI coach, only when you ask.
• To send workouts to the watch services you connect, only when you ask.
• To keep the service secure and within fair-use limits.

We do not sell or rent your information, we do not show advertising, and we do not use your information to train AI models.

4. Who we share information with

Only with the service providers named above, and only to the extent needed for the feature you used: Cloudflare (hosting, account backup, anonymous counts and the free coach), Resend (sending your sign-in code), Anthropic (only if you use your own Claude key), and the watch or training service you connect. These providers act on our instructions or, for services you connect yourself, under your own agreement with them. We may also disclose information if the law requires it. Because we do not keep your training data, there is normally nothing for us to disclose.

5. Health information

Health, wellness and menstrual-cycle entries are optional and are kept on your device. They are included in a question to the AI coach only if you have allowed that in Settings (the cycle is off by default and is never included in shared plan files). By entering health information you are asking Runergy Lab to use it to adapt your plan. You can delete it at any time. Runergy Lab is a training tool, not a medical device: if something hurts, persists or worries you, see a qualified professional.

6. How long we keep information, and deleting it

• On your device: until you delete it. In Settings you can export a backup, delete a profile (including everything in it) or clear everything. Clearing your browser's site data for Runergy Lab also removes it.
• On our side:
  • Account: your email and backups are kept until you delete your account, which removes them, and your sign-in sessions, at once. A session lasts up to one year unless you sign out, and a sign-in code expires after 10 minutes.
  • Free-coach daily counters expire within 48 hours.
  • Anonymous usage counts and crash reports are kept for up to 120 days.
  • A coach ID snapshot expires after 120 days without an update; push reminders are removed when you switch them off.
  • If you connect Garmin Connect, the encrypted tokens are kept until you disconnect, Garmin tells us you have disconnected, or three months pass without use, whichever comes first.
  • Cloudflare keeps its own hosting logs under its own policy.
• To ask us to remove anything we might hold, write to hello@runergylab.com.

7. Security

The app is served over HTTPS. Your data stays on your device, you can lock a profile with a PIN that encrypts it, and keys you enter (such as your own Claude key) are kept on your device. Garmin connection tokens are stored encrypted and are used only from our server, never in your browser. If you sign in, your backup is stored on Cloudflare's infrastructure, protected in transit and at rest and reachable only with your signed-in session. It is not end-to-end encrypted, which is what lets you recover it from a new phone with only your email; sign-in codes and session tokens are stored only as hashes. No system is perfectly secure, and anyone with access to your unlocked device and browser can read what is stored there, so use your device's own lock and keep exported backups private.

8. Your rights

Why we may process your information (where the law asks for a basis). Your consent, for health information, the AI coach and, in the phone app, Apple Health or Health Connect: you can withdraw it at any time. Performing our service to you, for your account and backup. Our legitimate interest in keeping the service secure and fixing bugs, for rate limits and anonymous counts, which you can switch off.

Depending on where you live (for example under the GDPR in the European Economic Area and the UK, the LGPD in Brazil, or US state privacy laws) you may have the right to access, correct, delete, export or restrict the use of your personal information, to object to its use, and to withdraw consent at any time. Because your training data is on your own device, you can exercise most of these yourself in the app (view, edit, export, delete). For anything else, or if you think we have handled your information wrongly, contact us at hello@runergylab.com. You also have the right to complain to your local data-protection authority.

9. Children

Runergy Lab is not directed to children under 13 (or under 16 where that is the local age of digital consent). A parent or guardian may keep a profile for a young runner on their own device and is responsible for it. We do not knowingly collect information from children.

10. International processing

Cloudflare operates a global network, so the data described in 2.2 and 2.3 may be processed in countries other than your own. Your training data itself stays on your device.

11. Changes to this policy

If we change how Runergy Lab handles information, we will update this page and the date at the top. If a change is significant, we will say so in the app.

12. Contact

Questions, requests or concerns: hello@runergylab.com