Privacy Policy
Last updated: March 4, 2026
This Privacy Policy explains how Tapable ("Tapable", "we", "us", or "our") collects, uses, and shares information when you use the Runfa.st mobile application and related services (collectively, the "Service").
1. Scope
This policy applies to information processed through the Service, including information you provide directly, information collected automatically through your device, and information received from integrated platforms such as Apple Health.
2. Information We Collect
Depending on how you use the Service, we may collect:
- Account Information: Email address and authentication details via our identity provider (Clerk), along with account identifiers needed to keep you signed in.
- Profile and Training Data: Running goals, targets, plan preferences, run notes, and coaching inputs you choose to provide.
- Run Activity Data: Time, pace, distance, route, elevation, splits, and related workout metrics generated when recording runs.
- Location Data: Foreground and, if you grant permission, background GPS data while an activity is being tracked.
- Health Data: With permission, selected Apple HealthKit data (such as steps and walking/running distance) to show progress in the app.
- Device and Diagnostic Data: App version, OS version, device type, crash logs, and similar technical data used for reliability and support.
- Usage Data: Information about how features are used (for example, viewed screens and feature interactions) to improve product quality.
- Telegram Integration Data (Optional): If you connect Telegram, your Telegram user/chat identifier, messages you send to the Runfa.st bot, and related delivery metadata required to provide chat-based coaching.
3. How We Use Information
We use your information to:
- Provide core functionality, including run tracking, progress history, goals, and AI-assisted coaching.
- Operate accounts, authenticate users, and protect against unauthorized access or abuse.
- Maintain, debug, and improve app performance, stability, and feature quality.
- Personalize coaching outputs and training recommendations based on your activity data.
- Enable optional coaching conversations through Telegram when you choose to connect your account.
- Send service communications such as important updates, security notices, and policy changes.
- Comply with legal obligations and enforce our terms and policies.
4. Legal Bases (Where Applicable)
Where privacy laws require a legal basis, we generally process personal information to perform our contract with you, based on your consent (for permissions like location, HealthKit, AI data sharing, and Telegram integration), for legitimate interests in operating and improving the Service, and to comply with legal obligations.
5. Sharing and Disclosure
We do not sell your personal information. We may disclose information in limited situations:
- Service Providers: Trusted providers that support authentication, hosting, analytics, AI functionality, and operations, subject to contractual confidentiality and security obligations.
- Messaging Platform You Connect: If you choose to connect Telegram, we share required message and routing data with Telegram to deliver messages between you and your coach.
- Legal Compliance: When required by law, court order, or valid legal process.
- Protection of Rights: To investigate, prevent, or address fraud, security issues, or harm to users, Tapable, or others.
- Business Transfers: In connection with a merger, acquisition, financing, or sale of assets, subject to applicable confidentiality protections.
6. AI Services (Microsoft Azure OpenAI Service)
To provide AI coaching features in Runfa.st, we use Microsoft Azure OpenAI Service (Microsoft Corporation) as a third-party service provider.
When you use AI features, we may send:
- Data Sent: Coaching prompts and questions you submit, selected training context needed to generate a response (such as recent run metrics, target event date, and plan status), and a pseudonymous account/request identifier.
- Provider: Microsoft Azure OpenAI Service.
- Purpose: To generate AI coaching responses, training suggestions, and related in-app guidance requested by you.
- Protections: Data is encrypted in transit, access is restricted, and we require this provider to maintain privacy and security protections that are the same as or stronger than those described in this policy. AI data is used to operate the Service, not for advertising.
Before personal data is sent to this AI provider, we ask for your permission in-app. If you do not grant permission, AI features that require third-party AI processing remain disabled. You may withdraw permission at any time in app settings.
7. Telegram Integration (Optional)
You can optionally connect your Runfa.st coach to your Telegram chat by selecting the connect action in the app and linking your Telegram account. If you do not connect Telegram, no Telegram chat data is shared.
When you use Telegram integration, we may process and share:
- Data Sent: Telegram user/chat identifier, your bot messages, coach responses, and minimal account-linking metadata required to map your app account to your Telegram conversation.
- Provider: Telegram (messaging platform provider).
- Purpose: To let you communicate with your Runfa.st coach through Telegram and receive coaching replies in chat.
- Protections: Data is encrypted in transit where supported, access is limited to authorized systems, and we apply safeguards designed to provide privacy and security protections that are the same as or stronger than those described in this policy.
Messages sent through Telegram to your coach may be forwarded to Microsoft Azure OpenAI Service to generate AI responses, consistent with Section 6. Telegram is a separate third-party platform with its own terms and privacy practices.
8. Apple HealthKit Information
HealthKit data is used only to provide fitness features inside Runfa.st. We do not use HealthKit data for advertising, marketing profiling, or data broker activities. We do not write data to HealthKit unless explicitly stated in-app.
9. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes in this policy, including account operation, legal compliance, dispute resolution, and enforcement of agreements. If you request account deletion, we will delete or de-identify personal data within a reasonable period, except where retention is legally required.
10. Your Choices and Rights
Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can also:
- Revoke location or Health permissions from your device settings.
- Disconnect Telegram integration in app settings and stop Telegram-based coaching at any time.
- Delete your account directly in-app using the "Delete Account" button.
- Opt out of non-essential communications where available.
We may need to verify your identity before fulfilling privacy requests.
11. Security
We use reasonable administrative, technical, and organizational safeguards, including encryption in transit and controlled access to production systems. No method of storage or transmission is fully secure, and we cannot guarantee absolute security.
12. International Transfers
Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border data transfers.
13. Children's Privacy
The Service is not directed to children under 9 (or the minimum age required in your jurisdiction). If we learn we have collected personal information from a child without proper authorization, we will take steps to delete it.
14. Changes to This Policy
We may update this Privacy Policy periodically. The "Last updated" date reflects the latest revision. If changes are material, we will provide additional notice in-app or on our website where appropriate.
15. Contact Us
If you have questions or requests regarding this Privacy Policy, contact us at: