PRIVACY POLICY & TERMS OF SERVICE – RUNVIA

Effective Date: January 21, 2026
Last Updated: February 11, 2026

Runvia (“the App”) is an AI-powered running assistant that provides training insights and performance analysis.

By accessing or using Runvia, you agree to this Privacy Policy and Terms of Service.

PART I – PRIVACY POLICY

1. Data Controller (GDPR)

For the purposes of Regulation (EU) 2016/679 (GDPR), the Data Controller is:

Runvia – Independent Developer
Email: fabio.barbieri@runvia.it

The Data Controller determines the purposes and means of processing personal data described in this document.

2. Overview of Data Processing

Runvia follows a Privacy-by-Design approach.
We process only the minimum data necessary to:

• Provide AI-powered training insights

• Maintain secure authentication

• Improve app performance and stability

Data processing depends on how you use the App:

• If you connect Strava → activity data and authentication tokens are processed.

• If you manually input data → inputs are processed to generate AI responses.

• Firebase Analytics collects limited technical usage data.

3. Strava API Integration

3.1 Data Accessed (with OAuth Authorization)

• Strava Athlete ID

• Activity data (distance, duration, pace)

• Heart rate (if available)

• GPS coordinates of activities (if available)

We do NOT access:

• Strava passwords

• Private messages

• Payment information

3.2 Purpose of Processing

Strava data is used exclusively to:

• Generate AI-powered coaching insights

• Analyze performance

• Track progress

3.3 Token Storage

To maintain secure connection:

• Athlete ID

• Access Token

• Refresh Token

are stored securely using Supabase infrastructure.

Tokens are stored solely to maintain API functionality and are never sold or shared.

3.4 No Commercial Exploitation

Runvia does not sell, rent, monetize, or share user data with advertisers or data brokers.

4. Google Gemini AI Processing

When generating coaching insights:

• Selected running metrics are transmitted to Google Gemini API.

• Data is encrypted via HTTPS/TLS.

• Data is processed under Google’s API Terms.

• Runvia does not use this data to train public AI models.

5. Firebase Analytics

Runvia uses Firebase Analytics (Google LLC) to improve stability and user experience.

5.1 Data Collected

• Device identifiers (App Instance ID)

• Device model and OS version

• App version

• Usage statistics (screen views, feature usage)

• Crash logs and diagnostics

No name, email, or direct identity data is collected.

5.2 Purpose

• Performance optimization

• Feature improvement

• Crash monitoring

• Security and abuse prevention

5.3 Legal Basis (EEA Users)

• Contractual necessity (core functionality)

• Consent (analytics where required)

• Legitimate interest (security and stability)

5.4 International Transfers

Google and Firebase may process data outside the EU.
Such transfers rely on Standard Contractual Clauses (SCCs) or adequacy decisions.

6. Data Retention & Deletion

Users may:

• Disconnect Strava via the App or Strava dashboard

• Request deletion via email

Upon disconnection or deletion request:

• All stored authentication tokens are permanently deleted.

Analytics data is retained according to Firebase retention settings.

7. User Rights (GDPR)

EEA users have the right to:

• Access

• Rectification

• Erasure

• Restriction of processing

• Data portability

• Withdraw consent

• Lodge a complaint with a supervisory authority

8. No Background Tracking

Runvia does NOT:

• Track real-time location

• Access health sensors directly

• Access files, photos, or media

GPS data is only processed if retrieved from Strava activities uploaded by the user.

9. Data Security

We implement:

• HTTPS encryption

• Secure token storage

• Restricted infrastructure access

No system guarantees absolute security.

10. Children’s Privacy

Runvia is not intended for children under 13 years of age.
We do not knowingly collect personal data from minors.

PART II – TERMS OF SERVICE

11. Medical Disclaimer

Runvia is not a medical provider.

The App provides informational AI-generated training suggestions only.

Always consult a licensed healthcare professional before starting a new exercise program.

12. Assumption of Risk

Running involves inherent physical risks.

You voluntarily assume full responsibility for:

• Injuries

• Health complications

• Training decisions

AI-generated plans may contain errors or unrealistic suggestions.

13. Limitation of Liability

To the maximum extent permitted by law, the developer shall not be liable for:

• Personal injury

• Health damages

• Loss of data

• Indirect or consequential damages

• API service interruptions (Strava, Google, Firebase)

14. Indemnification

You agree to defend, indemnify, and hold harmless the developer of Runvia, its service providers, and partners from and against any claims, damages, liabilities, losses, or expenses (including legal fees) arising from:

• Your use or misuse of the App

• Reliance on AI-generated training advice

• Athletic injuries

• Violation of these Terms

• Violation of third-party terms (including Strava)

This obligation survives termination.

15. Strava Branding & Independence

Runvia is an independent application and is not affiliated with, endorsed by, or sponsored by Strava.

Where required, Strava data is displayed with appropriate attribution.

16. Governing Law & Jurisdiction

This Agreement shall be governed by and interpreted in accordance with the laws of the developer’s country of residence, without regard to conflict of law principles.

Any disputes arising from use of the App shall be subject to the competent courts of the developer’s jurisdiction, unless otherwise required by mandatory consumer protection laws.

17. Modifications

We may update this Policy periodically.
Continued use of the App constitutes acceptance of updated terms.

🇮🇹 VERSIONE ITALIANA UFFICIALE

INFORMATIVA PRIVACY E TERMINI DI SERVIZIO – RUNVIA

(Data e contenuti coerenti con la versione inglese)

Titolare del Trattamento

Runvia – Sviluppatore indipendente
Email: fabio.barbieri@runvia.it

Dati trattati

• Dati attività Strava (previa autorizzazione)

• Token OAuth (conservati su Supabase)

• Dati tecnici e di utilizzo tramite Firebase Analytics

• Input manuali inviati a Google Gemini

Nessuna vendita di dati.

Finalità

• Funzionamento dell’App

• Generazione consigli AI

• Miglioramento performance e stabilità

Diritti GDPR

Accesso, rettifica, cancellazione, limitazione, portabilità, revoca del consenso.

Disclaimer Medico

Runvia non fornisce consulenza medica.
L’utente si assume ogni rischio connesso all’attività sportiva.

Limitazione di Responsabilità

Lo sviluppatore non è responsabile per:

• Infortuni

• Danni alla salute

• Interruzioni servizi terzi

• Danni indiretti

Clausola di Manleva

L’utente accetta di manlevare lo sviluppatore da qualsiasi richiesta o danno derivante dall’uso dell’App.

Legge Applicabile

Il presente accordo è regolato dalla legge dello Stato di residenza dello sviluppatore, salvo norme imperative a tutela del consumatore.