Trust and data protection
Your data, explained simply.
Which data we use, why, who can see it and how you can control it. Without having to read a legal text.
GDPRGDPR compliantThis English text is a courtesy translation. In case of any discrepancy, the Italian version prevails.
Which data and why
We collect only what is needed to personalize your path. Some data is optional.
Profile
RequiredName, email and onboarding answers, to create your account and your plan.
Workouts
RequiredCompleted sessions and feedback, to adapt the plan over time.
Conversations with Alfred
If you use the chatTo answer your questions and remember the context.
Health-related data
OptionalFor example any physical limitations, only with explicit consent.
Wearables
OptionalHeart rate, HRV and other metrics, if you connect a device.
Video
OptionalOnly if you use movement analysis.
Who can see what
In the channel for companies, the company receives only the number and percentage of activated licenses (Corporate contract v2.0, art. 14 and Annex B).
| Data | You | Your coach | Your company |
|---|---|---|---|
| Profile | Yes | Name and goal, if you follow them | No |
| Workouts and progress | Yes | If you choose to share them | No |
| Health-related data | Yes | If you choose to share it | No |
| Wearable data | Yes | If you choose to share it | No |
| Movement videos | Yes | If you choose to share them | No |
| Conversations with Alfred | Yes | No | No |
| Geolocation | Yes | No | No |
| License activation | Yes | — | Only overall number and % |
The coach column applies only if you use Runtheons with a professional you chose yourself.
Your choices
Separate consents
We ask for a separate consent for each use that requires it, such as health-related data or videos.
Withdraw whenever you want
You can withdraw a consent from the settings. Some features that use that data will stop working.
Disconnect devices
You can disconnect a wearable at any time.
How we protect data
- Limited access: only authorized members of the team can access the data, and only when needed.
- Encrypted data while it travels between the app, the website and our servers, and also when it is stored.
- Servers in Europe: your data stays in Europe.
- Never sold: we use your data only to run the service.
- Limited retention: we keep data only for as long as needed for the service and for legal obligations.
- Incident management: in the event of a data breach we follow the notification procedures required by the GDPR.
Cloud and artificial intelligence providers
To run the service and Alfred, we rely on cloud infrastructure providers and artificial intelligence model providers, bound by data processing agreements.
The up-to-date list of providers and purposes is in the privacy policy.
Your rights.
You can request access, rectification, erasure, restriction and portability of your data, or object to the processing.
Write to hello@runtheons.com with “Privacy” in the subject line. Data controller: Runtheons S.R.L., Via Desenzano 1, 25087 Salò (BS), Italy.
Contact the privacy officer