RunWrap

Privacy Policy

Last updated: April 9, 2026

RunWrap ("we", "us", "our") operates RunWrap (runwrap.app), a reflection tool for runners, and theindex (index.runwrap.app), a race results and analytics platform for Indian running events. This policy explains what data we collect, why, and how we handle it across both services.

1. What we collect

Account information

When you sign in with Google, we receive your name and email address from your Google account via our authentication provider (Stytch). We do not receive or store your Google password.

Fitness data

When you connect a fitness platform (such as Strava), we fetch your running activities for the training period you specify. This includes activity names, dates, distances, durations, pace, heart rate, elevation, GPS start coordinates, laps, best efforts, and activity streams (pace, heart rate, altitude over time). We store this data so you don't need to re-fetch it for each wrap.

Content you create

The reflections, notes, and edits you write in your wraps are stored in our database. Your content belongs to you.

Usage data

We use PostHog for product analytics. This includes pageviews, feature usage events (e.g. creating a wrap, connecting a data source), and session recordings of how you interact with the app. Session recordings capture clicks, scrolling, and page navigation — we do not record passwords or sensitive form inputs. We use this data solely to understand how the product is used and to improve it.

Error data

We use Sentry for error monitoring. When something goes wrong, Sentry captures the error details, your user ID, and basic browser information so we can diagnose and fix issues.

Race results data (theindex)

We collect race results from publicly available timing company websites in India. This data includes runner names, bib numbers, finish times, rankings, split times, gender, age category, and city of origin as published by race timing providers. This data is publicly available on the original timing company websites — we aggregate it into a single searchable platform.

We display this data on public race and result pages on index.runwrap.app. Individual result pages may show a runner's name, finish time, rankings, pace, and split information.

We do not collect results from private or non-public sources. We do not contact runners or collect their personal information directly through the scraping process.

Claiming results (theindex)

When you claim a race result on theindex, we link your RunWrap account to that scraped result. Claimed results appear on your public athlete profile at index.runwrap.app/athlete/your-name. Your profile displays your name, claimed race results, finish times, rankings, and a brief auto-generated journey narrative.

2. How we use your data

  • To authenticate you and manage your account
  • To fetch, process, and display your running data in wraps
  • To provide AI-assisted text polishing (via Anthropic's Claude API — your text is sent to Anthropic for processing and is subject to Anthropic's privacy policy)
  • To generate insights and analysis from your training data
  • To improve the product based on aggregate usage patterns
  • To diagnose and fix errors

2a. How we use race results data

We use publicly collected race results data to:

  • Display searchable race results and event analytics on theindex
  • Generate aggregate race statistics (finish time distributions, demographics, pacing analysis)
  • Enable runners to find and claim their results
  • Create athlete profiles for users who claim results
  • Generate brief AI-powered journey narratives for athlete profiles (using Anthropic's Claude API)
  • Provide benchmark comparisons in RunWrap race reports (e.g., "faster than 77% of finishers")

We do not use race results data to:

  • Contact runners who have not signed up
  • Sell individual runner data to third parties
  • Build advertising profiles
  • Make decisions that affect individuals based on their race performance

3. What we do not do

  • We do not sell your personal data
  • We do not share your data with advertisers
  • We do not use your data to train AI models
  • We do not access your fitness data beyond what you authorize
  • We do not display race results from private or non-public sources
  • We do not prevent any runner from requesting removal of their name from theindex

4. Third-party services

We use the following third-party services that process your data:

  • Google — authentication (via OAuth)
  • Stytch — session management and identity verification
  • Strava — fitness data (only with your explicit connection)
  • Anthropic — AI text polishing (only when you use the polish feature)
  • PostHog — product analytics and session replay
  • Sentry — error monitoring
  • Hetzner — server hosting (Germany/EU)
  • Timing companies (Sports Timing Solutions, iFinish, MySamay, and others) — source of publicly available race results data displayed on theindex. We access only publicly available result pages.

5. Data storage and security

Your data is stored in a PostgreSQL database on a server hosted by Hetzner. Third-party access and refresh tokens are encrypted at rest.

Race results data collected from timing companies is stored in a separate database schema from user account data. Scraped data is treated as a read-only archive. Your account data (claims, connections, profile) is stored separately and can be deleted independently.

6. Cookies

We use a single session cookie (runwrap_stytch_session) to keep you logged in across runwrap.app and index.runwrap.app. It is HTTP-only, secure, and expires after 30 days. PostHog and Sentry may set additional cookies for analytics and error tracking.

7. Public sharing

When you share a wrap, it becomes accessible via a unique URL. Shared wraps display your athlete name, race name, race date, training data, and any reflections you've written. You can control what you write before sharing. Shared wraps do not expose your email address or account details.

7a. Public race results and name removal

Race result pages on theindex display runner names and finish data as published by timing companies. This data is already publicly available on the original timing company websites.

If you want your name removed from theindex:

  • Email us at help@runwrap.app with your name and the race(s) you want removed from
  • We will replace your name with "Runner" on the affected result pages within 14 days
  • Removal from theindex does not affect the original timing company's website

If you are a registered user with claimed results, you can unclaim any result at any time from your athlete profile. Unclaimed results revert to their original scraped state.

8. Data deletion

You can disconnect any linked fitness platform from your account at any time in Settings, which removes the stored connection tokens. To delete your account and all associated data, contact us at help@runwrap.app. We will delete your data within 30 days of the request.

For theindex specifically: name removal requests (see section 7a) remove your name from public display but retain the anonymized result for aggregate statistics (finish time distributions, demographic breakdowns). To request complete deletion of a scraped result, contact us at help@runwrap.app.

9. Changes to this policy

We may update this policy from time to time. If we make significant changes, we'll notify you through the app. Your continued use of RunWrap after changes constitutes acceptance.

10. Contact

Questions about this policy? Email us at help@runwrap.app.