Ongrit Company (“Ongrit,” “we,” or “us”) processes data only as needed to provide the Runner 1 app and runner1.ongrit.space website. This Policy explains what is processed, why, when another provider is involved, and the choices available to you.
1. Who is responsible
- Service: Runner 1
- Data controller: Ongrit Company
- Privacy contact: hello@ongrit.space
Runner 1 does not require a separate account or ask you to enter a name or phone number. If you email us, we process your email address and the content of your request.
2. Data we process and why
Apple Health and running data
With your HealthKit permission, Runner 1 can read the fields supplied by the recording app, which may include workout date and time, distance, duration, pace, splits, heart rate, cadence, calories, and elevation. We use this information to display workout history and provide statistics, daily running suggestions, live feedback, and workout analysis.
At your request, completed workouts may be saved to Apple Health through HealthKit. Runner 1 does not arbitrarily delete or alter original records in Apple Health.
Location and weather
With location permission, Runner 1 uses your current and in-run location to provide weather and air-quality information and to record distance and route.
When the app displays a background map, map-tile coordinates for the visible area and IP and connection information are sent to CARTO. Tile coordinates may indicate the approximate area being viewed. Runner 1 does not send your full running route, heart rate, or Apple Health data to CARTO; route lines and markers are drawn over the map on your device.
Settings you provide
Birth year, weekly and monthly goals, distance unit, language, coaching style, and recent run settings are stored on your device. They are used to tailor targets and presentation. Birth year is stored using the device’s secure storage.
AI and voice features
When you use an AI or online voice feature, the running, health, and settings information needed for that feature is first sent to a Firebase backend in the United States (us-central1). After validating the request, the backend sends information needed for text generation to Anthropic and sends server-approved coaching text and voice settings to OpenAI. Location and route data, permanent workout IDs, and raw heart-rate time series are not sent to the AI providers. This information is used only for running suggestions, coaching, workout analysis, and voice guidance, not for advertising or marketing.
To protect backend calls, Firebase processes a random anonymous user ID, app and device integrity material, and connection information. The ID contains neither your name nor Apple ID, but it can distinguish requests from the same app installation and is therefore not treated as fully anonymous information.
Subscription and purchase information
We process product identifiers, displayed prices, trial availability, purchase and restore outcomes, and current subscription entitlement. When you request a Plus AI feature, Apple-signed current transaction and renewal proofs are sent to the Firebase backend to verify access. We do not keep those signed proofs or the entitlement decision in a member database, but may briefly retain an irreversible fingerprint of the transaction identifier to prevent clear duplicate or anomalous requests. Apple handles payment details and your Apple ID; we do not receive your card number.
App usage and diagnostics
We may process feature usage, app and operating-system versions, device information, errors, and crash information to improve service quality and respond to technical issues. We do not use this information for advertising or user tracking.
Some earlier app versions may have included workout summaries in analytics. The latest version does not newly collect detailed workout records for analytics purposes.
Website usage
We may process website visit, access, browser, and device information to operate the website and understand its use. If you email us, we process your address and message.
3. Service providers and international processing
When you use the relevant feature, the following providers may process the information needed to deliver it outside your country over an encrypted connection. Information is deleted or aggregated after the period needed for the stated purpose or the period set by us or the provider’s policy.
| Recipient | Information transferred | Purpose | Processing location and retention |
|---|---|---|---|
| Anthropic | Running, health, and settings information needed for AI features, and generated output | Running suggestions, coaching, and workout analysis | United States / generally up to 30 days for the standard API; longer retention may apply for policy enforcement or legal obligations |
| OpenAI | Coaching text to be converted to speech and voice settings | Voice guidance | United States and other service regions / API inputs and outputs generally for up to 30 days |
| Google Firebase | Anonymous user ID, app-integrity and connection information, AI and voice requests, Apple-signed subscription proofs, feature usage, app, device, and error information | Authentication and app verification; AI and voice routing and subscription checks in US us-central1; short-lived duplicate and anomaly prevention; usage analytics and crash diagnostics | Authentication in the United States; AI backend and request-coordination store in US us-central1; analytics, diagnostics, and other services on global infrastructure / request and response content and subscription proofs are not retained in our storage; authentication records, short-lived coordination data, and technical logs follow our configuration or the provider’s policy |
| Sentry | App, device, and error information | Error and performance diagnostics | United States, Germany, and other regions / configured retention period |
| OpenMeteo GmbH | Location and connection information | Weather and air-quality information | Switzerland / API logs for up to 90 days |
| CARTO and OpenStreetMap | Map-tile coordinates for the visible area, IP address, and connection information | Background maps in the app | Global infrastructure, including the United States / period set by each provider’s policy |
| Google Analytics and Vercel | Website visit, access, browser, and device information | Website analytics and hosting | Global infrastructure, including the United States / configured period or provider policy |
You may choose not to use AI, weather, online maps, or online speech features if you do not want the processing required for those features. Those briefings, analyses, weather details, background maps, or voice features may then be unavailable.
4. Storage and retention
- Settings, caches, and AI results stored on your device may remain until you change or remove them or delete the app.
- Apple Health data is managed through Apple Health and your permission settings.
- We do not maintain a separate Runner 1 member database containing your workout history. After a request is processed, the Firebase backend does not retain AI or voice request content, prompts, generated results, audio files, or Apple-signed subscription proofs in our database or file storage.
- Firebase may retain anonymous authentication records and irreversible fingerprints of the user, feature, and request with an expiry time to prevent duplicate or anomalous requests. This coordination data is scheduled for deletion after a short expiry period.
- Anthropic and OpenAI may generally retain standard API inputs and outputs for up to 30 days. Longer retention may apply in limited cases such as policy enforcement or legal obligations.
- Analytics and diagnostic data is retained under our configured retention period or the provider’s policy, then deleted or aggregated.
- Support emails are retained as needed to respond and handle disputes, then deleted unless law requires longer retention.
We may keep limited information longer when required by law or necessary to address security incidents or legal claims.
5. Your choices and rights
- Withdraw HealthKit or location permission in iOS Settings or the Health app.
- Change language, units, goals, and coaching style in Runner 1 settings.
- Delete on-device app data by deleting the app. Apple Health originals and App Store subscriptions must be managed separately.
- Manage or cancel subscriptions in your App Store account settings.
- Email hello@ongrit.space to request access, correction, deletion, restriction, or another right available under applicable law. Because Runner 1 has no account, we may ask for details such as app version, approximate event time, or device information to locate relevant records.
Withdrawing consent may make some features unavailable but does not affect processing that was lawful before withdrawal.
6. Security
We use HTTPS for network transmission and operating-system secure storage for sensitive settings kept on your device, along with other reasonable safeguards. No transmission or storage method can guarantee absolute security.
7. Children
Runner 1 does not offer account registration that asks children to submit personal details directly. Minors should use the service only with a parent or guardian’s consent and supervision. A parent or guardian may contact us about a child’s information.
8. Changes to this Policy
We may update this Policy as the service or law changes. We will provide reasonable advance notice of material changes through the app, website, or another appropriate channel. The “Last updated” date above identifies the current version.