1. The short version
Run 42 works without an account: your races, plan, sessions and notes stay on your phone. None of it reaches us unless you choose a feature that shares: Runners, a shared plan or Guess my time. There is no advertising, no third-party analytics and no tracking. Nothing from Strava ever reaches our server.
2. What the app stores on your phone
- your races (name, city, country, date, distance, times) and your first name;
- your training plan and its history (sessions done, notes);
- your experience points (XP), level and badges;
- photos of your medals, if you add them;
- your preferences (language, units, reminders);
- if you join Runners, your account’s secret key, in the phone’s secure storage.
Uninstalling the app deletes this data, except perhaps the secret key on iPhone, which the system may keep in its keychain.
3. Runners (optional)
Joining Runners creates an account with a username and a display name. No email, no password: a secret key kept on your phone proves it is you. Without that key, we cannot give the account back to you.
What everyone can see
Your profile is public, including on a web page at its own address (run42.app/u/…), which we ask search engines not to index:
- your username and display name;
- your drawn runner and what it wears;
- your country, if you choose one;
- your level, XP, title and badges;
- your best time at each distance;
- the names and dates of your past races;
- your next race and goal time;
- whether a record has a scanned medal (yes or no, never the photo).
What your friends also see
How many of this week’s sessions you ticked, as a count.
What the server also keeps to make it work
- your friends, friend requests and the people you blocked;
- your races with friends: name, dates, bet and the results you typed;
- your language, time zone and when you last opened the app;
- your friends’ news (14 days) and declined requests (30 days).
What never leaves your phone
Your routes and maps, the pace of each session, health data, your photos (medal photos too) and anything from Strava.
Races with friends
A race’s page (run42.app/r/…) shows, to anyone who has the link, its name, its rules, the bet and the runners who joined with their results. People who were only invited do not appear there. The loser wears the forfeit on their public profile for a week.
Hiding
With “Hide me”, you disappear from search, ranks and profile pages. Friends then see only your name and runner.
Reports
If you report a runner, what you write, your name and theirs reach us by email and stay on our server so we can act on it. We delete them 90 days after handling the report, even if one of you has deleted their account in the meantime.
Protection from abuse
The server briefly uses your network address to limit abuse. It is not stored with your profile.
4. Plan sharing
You can publish your plan at a public address. In that case the shared plan is sent to our servers so it can be served there. It contains nothing from Strava. You can unshare at any time from the app.
5. Guess my time
If you start this game, your name, your race (name, city, country, date, distance) and later your time are sent to our servers and can be seen by anyone with the link. Friends leave a first name and a time. To count one guess per person, their browser gets a token of which we keep only a fingerprint. You can delete a guess or the whole game from the app.
6. Strava (optional)
If you connect Strava, Run 42 reads your activities through Strava’s official API to show planned against actual. Access tokens and activities stay only on your device. You can revoke access at any time from your Strava account or by signing out inside the app. Strava’s own privacy policy applies to your Strava account itself.
7. City photos
For a race in a city the app hasn’t drawn, Run 42 may ask Wikipedia (Wikimedia Commons) for a photo of that city. Only the city name is sent; no account, no identifier. The photo is cached on your phone.
8. Purchases
Payments go through the App Store (Apple) or Google Play. Run 42 does not receive your name, address, or payment details. Apple’s and Google’s privacy policies apply to those transactions. Purchases are checked through RevenueCat, which receives an anonymous app identifier and the store receipt, never your name or payment details.
9. Ads, analytics, trackers
None. No marketing SDKs. No advertising identifiers. No session tracking. We sell no data.
10. Security
What stays on your phone sits behind its built-in protections (encryption at rest, app sandboxing). What goes to our server travels over an encrypted connection. The server keeps only a fingerprint of your secret key, never the key itself.
11. Legal basis and how long
We handle Runners data to provide the service you asked for by joining, and to protect it from abuse (legitimate interest). Your account stays on the server until you delete it.
12. Your rights
- Delete your account: in the app, Me, What others see, Delete my account. Your profile, friends, requests and race entries are removed from the server. See delete my account.
- Access, correct, take with you, object: write to us. You can also edit your profile in the app.
- Disconnect Strava and delete a shared plan at any time.
- You can complain to the data protection authority of your country (in France, the CNIL).
13. Children
You must be at least 13, or the minimum age in your country, to join Runners. Run 42 is not directed at children, and we do not knowingly collect any data from children under 13.
14. Changes
If this policy changes, the “Last updated” date at the top of this page will be updated. Material changes will be called out in the app’s release notes.
15. Contact
Run 42 is built and run by one person, who is responsible for this data. Questions about privacy? Write to contact@independence.dev.
