Privacy policy
The short version: we use your running and heart-rate data to plan your next run, and for nothing else. We don't sell it, we don't advertise with it, and we don't use it to train AI models. You can delete everything at any time.
Who we are
Run Planner (the "Service") is operated by Solvy ("we", "us"), based in the United Kingdom. We are the data controller for the personal data described here. Contact us at hello@solvy.dev.
What we collect
| Data | Where it comes from | Why |
|---|---|---|
| Name, email address, sign-in provider ID | Google or Apple sign-in | To create and secure your account |
| Running activities: start time, duration, distance, and time series of heart rate, speed, cadence and elevation | Garmin Connect, with your permission | To estimate your fitness and plan sessions |
| Daily resting heart rate | Garmin Connect, with your permission | To set your heart-rate zones |
| Summaries of other activities (type, duration, average heart rate) | Garmin Connect, with your permission | So cycling, hiking and gym work count towards your fatigue |
| Feedback you give after a run: how hard it felt, and any joint pain (0–10) | You, in the app | To make the next session easier or harder |
| Planned workouts | Generated by the Service | To send to your watch and compare against what you ran |
| Server logs: IP address, time, request path | Your device | Security and troubleshooting |
Heart rate, resting heart rate and pain scores are health data, which UK law treats as a special category. We only process them with your explicit consent (see Legal basis).
We do not use your location. Activity files from Garmin can contain GPS coordinates. We don't need them, so we discard them when an activity is processed and don't store your routes.
Data from Garmin
When you connect your Garmin account, you authorise Run Planner through Garmin's own consent screen to read the data above and to add workouts to your Garmin Connect calendar. Garmin's handling of your data is covered by Garmin's privacy policy.
- We use Garmin data only to provide the Service to you.
- We never sell it, share it with advertisers or data brokers, or use it to train or improve AI or machine-learning models.
- We never show your data to other users.
- You can revoke access at any time, either in the app or from the connected-apps settings in your Garmin Connect account. When access is revoked we stop collecting immediately and delete the Garmin data we hold within 30 days.
How we use your data
- To calculate your training profile: heart-rate zones, threshold pace, fitness and fatigue.
- To choose, size and explain each planned session.
- To send planned workouts to Garmin Connect so they reach your watch.
- To keep the Service secure and working, and to fix problems.
- To contact you about your account or important changes. We send no marketing.
Planning is automated. It decides what kind of run to suggest, but it has no legal or similarly significant effect on you. You're always free to ignore, skip or change a session.
Legal basis (UK GDPR)
- Contract: account data and planned workouts, to provide the Service you signed up for.
- Explicit consent: health data (heart rate, resting heart rate, pain scores). You give consent when you connect Garmin and when you choose to report pain. You can withdraw it at any time by disconnecting Garmin or deleting your account. Withdrawing consent doesn't affect processing that already happened.
- Legitimate interests: server logs and security monitoring.
Who we share it with
We don't sell personal data. We share only what's needed with:
- Garmin, to read your activities and deliver workouts to your calendar.
- Google or Apple, only to sign you in.
- Our hosting provider, which runs the server and database on our behalf under a data-processing agreement. If data is stored outside the UK, we rely on UK adequacy regulations or the UK International Data Transfer Addendum.
- Authorities, only where the law requires it.
How long we keep it
- Account and training data: until you delete your account.
- Garmin data: until you disconnect Garmin or delete your account, then deleted within 30 days.
- Server logs: 30 days.
- Backups: overwritten on a rolling 30-day cycle, so deleted data leaves backups within 30 days.
Security
All traffic uses HTTPS. Garmin access tokens are stored encrypted, and the database isn't exposed to the internet. Access is limited to the people who run the Service. No system is perfectly secure, but if a breach affects you we'll tell you and the ICO as the law requires.
Your rights
Under UK data protection law you can:
- get a copy of your data (we can export it as JSON);
- correct inaccurate data;
- have your data deleted (how to delete your data);
- restrict or object to processing;
- withdraw consent at any time.
Email hello@solvy.dev from the address on your account and we'll respond within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office.
Cookies and tracking
This website sets no cookies and runs no analytics or advertising trackers. Fonts are served from our own server, so loading a page doesn't send your IP address to a third party. The app stores only a sign-in token on your device.
Children
The Service isn't intended for anyone under 16, and we don't knowingly collect data from children.
Changes to this policy
If we change this policy we'll update the date at the top. For significant changes, we'll tell you in the app or by email before they take effect.
Contact
Solvy · hello@solvy.dev · solvy.dev