Privacy Policy

    Last updated: October 28, 2026

    1. Introduction

    This Privacy Policy describes how Anew Run LLC, a company formed under the laws of the State of Delaware, USA ("Anew", "we", "us"), collects, uses and shares your information when you use our iOS mobile application ("the App"). Anew Run LLC is the controller of your personal data.

    By using the App you accept the processing described here.

    2. Data We Collect

    2.1 Data you provide to us

    • Name, date of birth, sex
    • Preferred language and units, time zone
    • Running goals (target race, target time, motivation)
    • Training history, injuries, weekly availability
    • Conversations with Coach Luis (text and, optionally, voice notes)
    • Contact information for support
    • Optionally, a face-cropped photo or an adventurer portrait for your avatar
    • Optional self-described gender, separate from sex in your training profile

    2.1.b Voice notes (opt-in)

    If you choose to send a voice note to Coach Luis, we require your explicit consent to use the microphone. Audio is transcribed to text using Apple's Speech Recognition framework, which may run on-device or, when on-device recognition is not available, send audio to Apple's Speech Recognition Services under Apple's own terms. We do not store raw audio: once transcription completes, only the resulting text is saved as part of your conversation history and is processed identically to any text message. You can disable voice notes at any time from Settings > Privacy > Microphone.

    2.1.c Photo and adventurer portrait (optional)

    You can use initials, a face photo or a generated portrait as your avatar. Your iPhone detects only the face rectangle and prepares a 512-pixel square crop locally, without the original file's EXIF metadata or GPS location. We do not upload the original photo or use this process to identify people or extract facial attributes.

    Choosing a photo only prepares an on-device preview. If you choose to keep your photo, we save that crop in Anew's private storage. To create a portrait, you must press the creation button and separately consent to sending the crop to OpenAI. The generated portrait becomes your avatar only after you review and approve it. You can keep your photo or use initials without sending the crop to OpenAI.

    You describe your optional gender yourself: we do not infer it from sex or the photo. It is stored separately and is not sent to OpenAI or used by the training engine.

    2.2 Health and activity data

    With your explicit consent, we access data from:

    • Apple HealthKit: resting heart rate, VO2 max, running sessions, weight, menstrual cycle (if shared).
    • Garmin Connect: training metrics, sleep, HRV, menstrual cycle (if you use Women's Health).
    • Whoop: recovery, strain, sleep.

    2.3 Technical data

    • Device identifiers, model, iOS version
    • App usage logs, product events, crash reports
    • IP address (used solely for security and aggregated analytics)

    2.4 Payment data

    Subscriptions are processed by Apple. We do not receive or store card data. We only receive from Apple the subscription status and an anonymous transaction identifier.

    3. How We Use Your Data

    • Generate personalized training plans using our AI model
    • Operate Coach Luis and tailor its responses to your context
    • Create and display your optional avatar; generate a portrait with OpenAI only when you request it and consent to sending the crop
    • Adjust your plan based on your progress and wearable metrics
    • Send training-relevant notifications
    • Technical support
    • Improve the product through aggregated analytics
    • Comply with legal obligations

    4. HealthKit Data (Special Notice)

    Data obtained from Apple HealthKit:

    • Is NOT sold to third parties.
    • Is NOT used for advertising or marketing purposes.
    • Is NOT shared with data brokers.
    • Is used exclusively to generate and adapt your training plan within the App.
    • Is stored encrypted on our infrastructure.
    • You can revoke access at any time from Settings > Health on your iPhone.

    This handling complies with the Apple HealthKit Terms and the App Store Review Guidelines.

    5. Third Parties We Share Data With

    We share data only with the following processors, under contract and for the purposes indicated. We do not sell your personal data to third parties.

    • Supabase Inc. — Database hosting, authentication and storage. Servers in USA and European Union.
    • Anthropic PBC — Provider of the Claude language model, used for Coach Luis and plan generation. Servers in USA.
    • Apple Inc. — Subscription payment processing, HealthKit access, App distribution, and voice note transcription via the Speech Recognition framework (on-device when supported; otherwise via Apple's servers). Servers in USA.
    • RevenueCat, Inc. — Manages your Anew Pro subscription and in-app purchases. Receives your Anew user ID (a random code, not your name or email), the purchase and subscription history reported by the App Store (product, price, currency, storefront country, and start, renewal and expiration dates) and the app and device technical data (version, language, country) needed to validate your purchases. If you came to Anew from an Apple Search Ads ad, it also receives the attribution token described below. Servers in USA.
    • Apple Inc. (Apple Search Ads attribution) — Once per install, the App gets an attribution token from Apple (AdServices framework) and sends it to RevenueCat, which asks Apple whether you came from an Apple Search Ads ad and, if so, from which campaign, ad group and keyword. We use it only to measure which campaigns work. It does not use the advertising identifier (IDFA), does not track you across other companies' apps or websites, and does not require Apple's tracking permission (ATT).
    • Garmin Ltd. — Garmin wearable integration, only if you connect your account. Servers in USA.
    • Whoop Inc. — Whoop wearable integration, only if you connect your account. Servers in USA.
    • PostHog Inc. — Product analytics and events. Servers in USA and EU.
    • Functional Software, Inc. (Sentry) — App crash and performance reports. Receives the technical record of the error (where the code failed and the preceding steps inside the App), the App version, the device model and operating system, the address of failed requests (it carries identifiers, not the content of your messages) and your Anew user ID, so we can find your crash if you write to us. It is configured not to send personal data such as your IP address automatically, and it takes no screenshots. Servers in USA.
    • Resend — Transactional email delivery (confirmations, support). Servers in USA.
    • OpenAI, L.L.C. — Creates numeric representations (embeddings) of your messages to Coach Luis and of what Luis remembers about you, to find the relevant memories in each conversation. If you request an adventurer portrait and accept its specific consent, the Images API receives the face crop and style instructions to create it. We do not add your name, email, location coordinates or optional gender to that request. OpenAI does not use API data to train models by default. Servers in USA.
    • TypeSafe AI, Inc., via Vercel Inc. (AI Gateway) — A decision model that reviews your recent messages to Coach Luis and your weekly volume to detect signals such as persistent pain or burnout. Processed with zero data retention and not used to train models. Servers in USA.

    Note on Coach Luis

    Prompts sent to Anthropic contain the necessary context of your training (goals, recent history, aggregated metrics) but do not include your full name, email or direct identifiers. Anthropic processes the data under its own API terms and does not use it to train its models.

    What we send to Anthropic, and their protections. When you use Coach Luis or generate/adapt a plan, we send Anthropic only the data needed to coach you: the text messages and transcribed voice notes you send Coach Luis, and your training profile — age, sex, running experience, weekly volume, resting heart rate, injuries, goals and race details, and your stated running motivations. We do not send your name, email address, or precise location. Anthropic acts as our data processor under its Commercial Terms of Service and does not use your data to train its models, providing the same or equal protection of your personal data as required by our agreement with them and by applicable law. You consent to this transfer in-app, before any data is sent, and you can withdraw consent by contacting privacy@anew.run.

    Note on voice notes

    When you send a voice note, raw audio never reaches Anew's servers. Transcription happens on your device or, if your device does not support on-device recognition, through Apple's Speech Recognition Services. Only the transcribed text is sent to Anthropic for Coach Luis to respond. Raw audio is discarded immediately after transcription.

    Note on OpenAI and optional portraits

    Anew's deletion does not itself delete the provider's copies. OpenAI lists a default retention period of up to 30 days for abuse-monitoring logs, with exceptions. Anew does not promise immediate deletion by OpenAI or Zero Data Retention. See OpenAI's data controls.

    6. International Transfers

    Your data may be transferred and processed outside your country of residence, including the USA and EU. In such cases we apply appropriate safeguards (EU Standard Contractual Clauses where applicable).

    7. Data Retention

    • Account data: as long as your account remains active.
    • Training data and Coach Luis conversations: up to 36 months from last activity, unless you request earlier deletion.
    • Technical logs and crash reports: up to 90 days.
    • Billing data: as long as required by applicable tax law.
    • Portrait-generation crops: we delete our temporary copies when processing finishes, fails or is cancelled; scheduled cleanup retries any remaining files.
    • Unapproved portraits: expire after 24 hours and are deleted by scheduled cleanup.
    • A photo you keep or an approved portrait: stays in private storage until you replace it, delete it in the App or delete your account. You can use initials and delete your photo and portrait; deletion also cancels pending creation without deleting your frame choice or optional gender.

    Upon account deletion, your data is erased within a maximum of 30 days, except where legal retention obligations apply.

    8. Your Rights

    Depending on your jurisdiction, you may have the right to:

    • Access your personal data
    • Rectify inaccuracies
    • Request deletion
    • Object to or restrict processing
    • Portability (receive data in a structured, readable format)
    • Withdraw consent at any time
    • Not be subject to automated decisions with legal effects

    Users in the European Union and United Kingdom: GDPR and UK GDPR rights apply. You may lodge a complaint with your country's supervisory authority.

    Users in California, USA: CCPA / CPRA rights apply, including the right to know what data we collect, request deletion, and not be discriminated against for exercising your rights. We do not sell or share personal data under the CCPA.

    Users in Mexico: ARCO rights apply under LFPDPPP. You may lodge a complaint with INAI.

    To exercise any right, email privacy@anew.run. We will respond within a maximum of 30 days.

    9. Minors

    The App is intended for users aged 13 and older. Users aged 13 to 17 require consent from a parent or legal guardian. We do not knowingly collect data from children under 13. If you become aware that we have collected data from a child under 13, contact us for deletion.

    10. Security

    We implement reasonable technical and organizational measures:

    • Encryption in transit (TLS 1.2+)
    • Encryption at rest in the database
    • Role-based access control (Row Level Security)
    • Secure authentication (JWT)
    • Periodic access reviews

    No system is 100% secure. In the event of a breach with high risk to your rights, we will notify the competent authorities within 72 hours and affected users where appropriate.

    11. Cookies and Similar Technologies

    The iOS App does not use cookies. Our website anew.run uses cookies according to our separate Cookie Policy.

    12. Changes to This Policy

    We may update this policy. Material changes will be notified via the App or by email at least 15 days before taking effect. The "Last updated" date will always reflect the current version.

    13. Contact

    Privacy and rights requests: privacy@anew.run

    General support: support@anew.run

    Data controller:
    Anew Run LLC
    Delaware, United States of America