Privacy Policy

Runvia is a running and fitness tracker for iPhone and Apple Watch, with optional social features. This policy explains what information Runvia handles, where it is kept, who can see it, and what you can do about it.

"Runvia", "we" and "us" mean the Runvia developer, Yağız Ada Umur, an individual developer based in Türkiye. We are responsible ("data controller", "veri sorumlusu") for the personal data described here. Our contact details are in section 20.

The short version

• Runvia has no servers of its own and no sign-up — no password and no email address. It uses Apple's services: your device, Apple Health, iCloud (CloudKit, which also holds your optional Runvia Social profile), Apple Maps, Apple Weather and the App Store.
• No ads, no tracking, no analytics. Runvia contains no advertising, analytics or other third-party code, and it does not track you across apps or websites.
• Your workouts are stored on your iPhone and Apple Watch. They leave your devices only when you post them to Runvia Social, share or export them, or as part of your own device backups (details below).
• Health data stays on your devices and in Apple Health. It is never sent to us, never put in iCloud by Runvia, never posted, and never shared with third parties or used for advertising.
• Runvia Social is optional. If you join, your profile and the workouts you choose to post are public to everyone who uses Runvia. Routes are trimmed on your device before posting.
• You can delete everything from inside the app (Settings › Data › Delete Account).

1. What stays on your iPhone and Apple Watch

Runvia stores the following on your device, in the app's own storage:

• Workouts you record: activity type, times, distance, pace or speed, route (GPS points), elevation, steps and cadence, splits and laps, the weather at the start, estimated calories, title and notes.
• Workouts you import from Apple Health (recorded by other apps), if you choose to import them, together with a heart-rate summary read from Apple Health.
• Shoes you add, including any photo you pick for them.
• Your profile for calculations: name, weight, height, birth year and, if you enter it, your maximum heart rate, used to estimate calories and heart-rate zones.
• Reminders, goals and settings.

We cannot see any of this. It is not uploaded to us or to anyone else.

Apple Watch. The Runvia watch app records workouts on its own. When a workout is finished, the watch sends it directly to your paired iPhone using Apple's device-to-device connection (not iCloud). Your iPhone sends your settings (including the weight, birth year and maximum heart rate from your profile, used for calories and heart-rate zones) and your Runvia Pro status to the watch the same way, together with a short summary of this week's and last week's workouts for the watch face's "This Week" complication: for each workout only its type, start time, distance and duration (workouts imported from Apple Health included), plus the hour of the day you usually start a workout, if there is one. The summary contains no route, no heart rate and no calories. It goes only from your iPhone to your own watch, never through iCloud. The watch keeps only the latest summary, in Runvia's own storage on the watch, and excludes it from backups.

During a workout, your iPhone and Apple Watch exchange live numbers directly so that each can show them: distance, pace, time and, from the watch, the heart rate it measures (for a workout the watch records, also calories and cadence). This goes device to device, never through iCloud. When your iPhone records the workout, it shows the heart rate it receives from the watch but does not store it.

Widgets and Live Activities show your current or recent workouts on your own Lock Screen, Home Screen and watch face, using data already on that device (on the watch face, the summary above and the workouts the watch recorded itself).

Device backups. The workouts Runvia records (on your iPhone or Apple Watch), shoes, your profile, reminders and settings are included in the backups of your iPhone that you make with iCloud Backup or on your computer, so you can restore them on a new device. Those backups are made and protected by Apple under your Apple Account.

Everything that comes from Apple Health is kept in a separate part of Runvia's storage that is excluded from these backups: workouts imported from other apps, heart-rate summaries, and calories (measured by Apple Watch or estimated with a weight that may come from Apple Health). Apple Health backs up its own data under your control. After you restore a backup, Runvia reads heart rate and calories from Apple Health again when it needs them, and offers the workouts of other apps for import again; the titles, notes and shoes you gave imported workouts are kept (they contain nothing from Apple Health) and come back when you import them again.

2. Location

Runvia uses your location only while you record an outdoor workout, and while the Record screen is open before you start: there it looks for a GPS signal for up to 10 minutes at a time, so that your workout starts with a good signal and the screen can show the map and the weather. Location is used to measure distance, pace or speed and elevation and to draw your route. For the weather and the area's name, Apple's services receive only your position rounded to about 1 km (section 5).

Runvia stops using location when you leave the Record screen, when Runvia goes to the background, when those 10 minutes are up, and as soon as a workout ends. Only a workout that is recording keeps location on in the background; Runvia never tracks you in the background otherwise. On Apple Watch, location is used only from the moment you pick an outdoor workout until it ends.

Runvia asks for location permission ("While Using the App") the first time you start an outdoor workout. Indoor workouts and the rest of the app work without it.

3. Motion and fitness sensors

With your permission, Runvia uses your device's motion sensors (step counter and barometer) to count steps, measure cadence and treadmill distance, and measure elevation. This is processed on your device and stored with your workouts.

4. Apple Health

Connecting Apple Health is optional, and you choose exactly what Runvia may access in Apple's permission screen. You can change this at any time in the Health app or in iOS Settings.

Runvia saves to Apple Health: your workouts with their route, distance (walking/running or cycling), elevation gain and loss, pauses, laps and splits, and estimated active calories (you can turn calories off in Runvia's settings). Outdoor workouts recorded on iPhone also get the weather at the start — the temperature and humidity from Apple Weather (section 5) — when Runvia has it. The Apple Watch app also saves the heart rate your watch measures during a workout.

Runvia reads from Apple Health:

• your weight, to estimate the calories you burn;
• your heart rate, to show it with your workouts (average, maximum, zones, chart);
• workouts and their routes: Runvia's own (so a workout is never saved twice) and, if you choose to import them, workouts recorded by other apps, with the distance those apps recorded (walking/running or cycling distance);
• on iPhone, the calories your Apple Watch measured for the workouts it recorded, to show them with those workouts (kept out of device backups, see section 1);
• on Apple Watch, heart rate and active calories while you record, to show them live, and your heart rate while your iPhone records a workout, to show it on your iPhone (section 1).

How Health data is protected:

• It stays on your devices (your iPhone and your Apple Watch) and in Apple Health.
• It is never sent to us, never stored in iCloud or CloudKit by Runvia (public or private), and never included in social posts.
• It is never shared with third parties, never sold, and never used for advertising, marketing or data mining.
• It leaves your device only in a share image or export file you create yourself (see section 8).

Runvia works without Apple Health: your workouts are then kept only in Runvia.

5. Apple Maps, place names and weather

These features use Apple services, which handle the data under Apple's Privacy Policy:

• Maps are drawn by Apple Maps (MapKit) on your own workouts, while you record, and on the privacy-zone and New ground maps. To show a map, your device loads map data for the area shown from Apple. Elsewhere (posts, Home, share images) Runvia draws the route's shape itself, without loading any map.
• Place names. When you first open a workout Runvia recorded, its start point, rounded to about 1 km, is sent to Apple's geocoding service to look up a short place name (for example "Kadıköy, İstanbul"). The name is then saved with the workout. The exact start is never sent, and workouts imported from Apple Health are never sent at all.
• Weather. For outdoor workouts, your approximate position, rounded to about 1 km, is sent to Apple WeatherKit to get the current conditions. Runvia receives only the conditions (such as temperature, feels-like temperature, humidity, wind and sky), which it saves with the workout.

We do not receive the locations sent to these services.

6. Runvia Social (optional)

Runvia Social lets you post workouts, follow people, cheer and comment on workouts, join crews and take part in quests. Nothing is shared until you choose to join.

How it works

Social uses Apple's iCloud (CloudKit) and your device's iCloud account. There is no separate sign-in. Runvia identifies you only by an anonymous identifier that Apple's CloudKit gives your iCloud account for this app. Runvia never sees your Apple Account name, email address or contacts. If you are not signed in to iCloud, Social is unavailable and everything else still works. To join, you confirm that you are at least 13 years old (section 14), together with the community rules; the app records which version of the rules you accepted and when, in your private iCloud database.

Your social data is stored by Apple on its servers in Runvia's iCloud container:

• Public database — everything other Runvia users can see (below).
• Your private iCloud database — only you can read it, and we cannot see it: your social settings, your accepted terms version, your block list and your privacy zones (the zone coordinates are stored in CloudKit's encrypted fields).

What is public

Once you join, the following can be seen by anyone who uses Runvia. There are no private profiles or followers-only posts.

• Your profile: the display name and @username you choose, and a photo and bio if you add them. Profile photos are re-encoded on your device, which removes hidden metadata such as the photo's location. Your profile also shows which version of the community rules you accepted and when you last posted.
• Workouts you choose to post. A post contains only: the activity type, start time (to the minute), duration and moving time, distance and whether it was measured by GPS, estimated from your steps or entered by you from a treadmill, pace (worked out from these), elevation gain, the title and caption you write, the crews you belong to (so your crews' feeds show it), and — if you include the map — a simplified, privacy-trimmed route and a short place name. Only if you switch it on for that post, it also shows how many new squares the workout explored ("+12 new squares": a number only, never which squares or where, counted only among workouts Runvia recorded; the squares you explore stay on your device).
• Your activity on Social: who you follow, who follows you, your cheers and comments, the crews you are in, your quest entries, and your position in the standings (which are calculated from posted workouts).
• Crews you create: the crew's name, description ("about"), place and tags; who the crew's admins are; and removals — when an owner or admin removes someone from a crew, a record naming the removed member, the crew and who removed them (and whether the removal was later lifted) is stored in the public database and can be read like the rest of this list.
• Moderation decisions: if a moderator hides a post, comment, profile or crew, or suspends an account, a record in the public database names the item or account it concerns, its owner, and a short reason code (for example "spam"). The app uses these records to hide the content on everyone's device. Other people see the content disappear or the account shown as "Removed account"; the app does not display the reason, but the record can technically be read like the rest of this list.

Never posted: heart rate, calories or any other health data, steps, cadence, splits, laps, pauses, weather, shoes, notes, the full route, per-point times, or your other workouts. Workouts imported from Apple Health can never be posted.

Route privacy

Before a route leaves your device, Runvia:

• hides the start and finish of every route (on by default; you can change how much is hidden or turn it off in Settings › Social),
• removes everything inside your privacy zones (circles you set, for example around your home; Runvia may suggest one where the workouts it recorded often start or end — never from workouts imported from Apple Health — but adds nothing unless you accept),
• simplifies the route and leaves out the route entirely if too little would remain.

Share images are trimmed the same way by default. If a route is too short to keep anything once its start and finish are hidden, you can choose to show its start and finish on that one image; your privacy zones stay hidden either way. Even so, a public route shows where you were active, so post and share with care.

Notifications from Social

If you allow notifications, you can be told about new cheers, comments and followers. These are delivered by Apple (through iCloud and Apple's push notification service). The notification text is generic and never contains names or messages; details appear inside the app.

Reports, blocking and moderation

• You can report any post, comment, profile or crew. A report records who filed it, which post, comment, profile or crew it concerns and whose it is, the reason you pick, an optional note, a short excerpt of the reported text as you saw it, and your app version and language. Reports are visible only to Runvia's moderators and to you, the person who filed the report (you can read your own reports). People who don't use Runvia Social can report content by email (section 20).
• You can block anyone. Your block list is stored in your private iCloud database. To make blocks work on other users' devices, Runvia also stores a marker in the public database that cannot be listed or searched; the person you blocked can tell they are blocked when they try to interact with you. Please note: because posts are public, a blocked person can still view your public posts.
• Moderators (the Runvia developer and anyone the developer appoints) review reports and can hide content and suspend accounts. They work in Apple's CloudKit tools and can see public content and reports — never your private iCloud database or your health data. Their decisions are stored as the public moderation records described above. We also keep a short private moderation log (dates, record identifiers and actions, without copies of content).
• Text filter. To keep the community safe, names, usernames, bios, titles, captions, comments and crew texts are checked on your device against lists of offensive words, and links, email addresses and phone numbers are not allowed. This check happens on your device; nothing is sent anywhere for it.
• If the law requires it, we may keep and pass on information about illegal content to the authorities.

7. Notifications

• Reminders, gear alerts, milestone alerts (new records, streaks, New ground levels) and the weekly recap are scheduled on your device by iOS. Nothing is sent anywhere.
• Social notifications are described in section 6.

Runvia never asks for notification permission at launch. It asks only when you choose a notification feature:

• when you turn on a reminder, a gear alert or a milestone alert in Settings;
• when you tap Continue on Home's "Get a Weekly Recap?" card (offered once, after your second saved workout);
• after your first social action, or when you tap Turn On Notifications in Settings › Notifications.

You can turn notifications off at any time in iOS Settings.

8. Sharing and exports

Share images and GPX, TCX and CSV export files are created on your device. They leave your device only when you share or save them yourself, and then go wherever you choose to send them (another app, a message, a file). Heart rate is included only if you switch it on for that image or file; on a share image, calories appear only if you switch them on, and the weather appears unless you switch it off. TCX and CSV files always include the workout's calories (for Apple Watch workouts, as measured by your watch), and CSV files include the weather. A photo you choose as the background of a share image is used only to make that image.

9. Runvia Pro (subscriptions)

Runvia Pro is sold and billed by Apple through the App Store. We never receive your name, email address or payment details. The app checks your subscription status on your device using Apple's StoreKit. Apple's privacy policy applies to your purchases.

10. What we do not do

• No advertising and no ad identifiers.
• No tracking across other companies' apps or websites, and no data brokers.
• No analytics or crash-reporting SDKs, and no third-party code of any kind in the app.
• We do not sell or rent personal data.

If you have chosen in your iPhone's settings to share analytics with app developers, Apple may give us anonymous crash reports and app usage statistics. You control this in iOS Settings › Privacy & Security › Analytics & Improvements.

11. How long data is kept

• On your devices: until you delete it (single workouts and shoes can be deleted at any time), delete your account in the app, or delete the app.
• In Apple Health: under your control in the Health app. Runvia does not delete Health data.
• Runvia Social: your profile, posts and activity stay public until you delete them or your social profile.
• Reports and moderation records: reports are deleted no later than 90 days after they are resolved. Records that keep a removal or suspension in place are kept while it applies, and deleted no later than 90 days after it is lifted.
• Emails you send us are kept as long as needed to answer you and handle any follow-up.

12. Deleting your data

Delete Social Profile (Settings › Social) removes your public profile, username, posts, comments, cheers, follows, crew memberships and crews you created, quest entries, reports you filed, block markers, notification subscriptions, and your private social data (settings, privacy zones, block list). Your workouts stay on your device.

Delete Account (Settings › Data › Delete Account) does all of the above and removes everything Runvia stored on your iPhone: workouts, shoes and their photos, profile, reminders, settings, caches and exports. The app confirms success only after everything has been deleted (it needs an internet connection for the iCloud part).

What may remain:

• Workouts already saved to Apple Health stay there; you can delete them in the Health app.
• Cheers, comments and follows that other people left on your posts or profile are their own records. We cannot delete them for you, but they become invisible once your posts and profile are gone.
• Reports other people filed about you (which may include an excerpt of the reported text) and moderation records about you or your content stay for the periods in section 11.
• Crew-removal records that a crew's owner or admin created about you belong to them; we can remove them for you if you email us.
• If another account created a record in your name to interfere with you (for example a profile under your user ID after you left Social, or the marker of one of your blocks), that record is not yours to delete. The app reports it to our moderators automatically, and that report stays until a moderator has removed the record; like every report, it is deleted no later than 90 days after it is resolved.
• Apple's CloudKit keeps an empty system record for your iCloud account in Runvia's container; Runvia stores nothing in it.
• Copies in your device backups remain until those backups are replaced or deleted.
• Anything you shared or exported is wherever you sent it.

Deleting the Runvia app removes its data from that device. On Apple Watch, deleting the watch app removes the workouts still on the watch.

13. Security

Runvia relies on Apple's security: data on your device is protected by iOS and watchOS data protection, and data in iCloud is encrypted in transit and stored by Apple. Privacy-zone coordinates use CloudKit's encrypted fields. No system is perfectly secure, but because we run no servers of our own, there is no separate Runvia database that could be breached.

14. Children

Runvia is not directed at children under 13. You must be at least 13 years old (or the minimum age required in your country, if higher) to use Runvia Social; the app asks you to confirm this when you join (Social does not ask for your birth date). Where the law requires it, Runvia also asks Apple for your age range when you join Social; it is used only to check the minimum age, and it is never stored or uploaded. If you are under 13, or a parent has turned on communication limits in Screen Time, Runvia Social is not available. Tracking without Social is available at any age allowed by Runvia's App Store age rating. If we learn that a child under 13 (or under the minimum age in their country) has created a social profile, we will remove it. Parents can contact us at the address below.

15. Your rights (including GDPR and KVKK)

Depending on where you live — for example under the EU/UK General Data Protection Regulation (GDPR) or Türkiye's Personal Data Protection Law No. 6698 (KVKK) — you have the right to:

• access your personal data and get a copy of it,
• correct it,
• delete it,
• restrict or object to how it is used,
• receive it in a portable format,
• withdraw consent at any time (this does not affect what happened before), and
• complain to a data protection authority — for example your local authority in the EU/UK, or the Personal Data Protection Authority (KVKK) in Türkiye.

Most of these you can do yourself in the app: edit or delete your profile and posts, export workouts as GPX, TCX or CSV, change permissions in iOS Settings, and delete your account. Because most of your data never reaches us, we may not hold anything to give you beyond what the app already shows. If you want a copy of your public Runvia Social data (profile, posts, comments), email us and we will send it. For anything else, email us — we will reply within 30 days, free of charge.

Legal bases (GDPR). We process personal data to provide the features you ask for (performance of a contract); with your consent where the system asks for it (location, motion, Apple Health, notifications, photos you choose); for our legitimate interest in keeping Runvia Social safe (moderation, reports, spam prevention); and where the law requires it. Health data is processed only on your device, with your explicit permission, to provide the features you use.

International transfers. Social data is stored by Apple in iCloud and may be processed on Apple's servers outside your country, including in the United States. Apple provides this service under its own terms and safeguards. By joining Runvia Social you choose to publish your profile and posts through this service.

16. If you live in Türkiye (KVKK notice)

This section is our information notice under Article 10 of the Personal Data Protection Law No. 6698 (KVKK). The rest of this policy explains each point in detail.

• Data controller: Yağız Ada Umur, 17200 Çanakkale, Türkiye, yadaumur@gmail.com.
• How data is collected: electronically, through the app: what you enter, what your device's sensors measure while you record, and what you choose to post to Runvia Social. Data that stays on your device (sections 1–5) is not collected by us at all.
• Purposes: to provide the features you use (recording, history, Runvia Social), to keep Runvia Social safe (reports, moderation, preventing abuse), to answer your messages, and to meet legal obligations.
• Legal grounds (KVKK Article 5): performance of the contract with you (Article 5/2-c); data you have made public yourself, such as your public profile and posts (Article 5/2-d); our legitimate interest in keeping Runvia Social safe (Article 5/2-f); and legal obligations (Article 5/2-ç). Health data is special category data (Article 6). Runvia handles it only on your device, with the permission you give in Apple's Health screen, and it never reaches us.
• Transfers: Runvia Social data is stored by Apple (iCloud/CloudKit) on servers that may be outside Türkiye, including in the United States, only so that Runvia Social can work (section 15). We may also pass information to authorities when the law requires it. We do not transfer personal data to anyone else.
• Your rights (KVKK Article 11): to learn whether your personal data is processed and to get information about it; to learn the purpose and whether it is used for that purpose; to know the third parties in Türkiye or abroad it is transferred to; to have it corrected if it is incomplete or wrong; to have it deleted or destroyed under Article 7; to ask that third parties it was transferred to are told of a correction or deletion; to object to a result against you that comes only from automated analysis; and to claim compensation if you suffer damage from unlawful processing.
• How to apply: send your request by email to yadaumur@gmail.com. We may ask you to confirm that the request is yours. We answer free of charge within 30 days. If we reject your request, answer late or you are not satisfied, you can complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) within 30 days of our answer, and in any case within 60 days of your request.

17. If you live in the United States

• We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information to infer characteristics about you.
• Consumer health data: Washington, Nevada and some other states have special rules for health data. Our Consumer Health Data Privacy Policy explains how they apply to Runvia.
• Wherever you live in the US, you can ask us to access, correct or delete your personal data by email, and we will not treat you differently for doing so.

18. This website

This website (runvia.magalar.com) uses no cookies, analytics, advertising or third-party content, and it does not track you. If you choose a language, or close the language suggestion, your browser remembers that choice in its own local storage so the site opens the way you left it; this stays in your browser and you can clear it in your browser's settings.

Like any website, the server that hosts this site processes your IP address and basic details of each request (such as the page requested, the time and your browser type) to deliver the pages and keep the site secure. Our hosting provider may keep these server logs for a short time for security. We do not use them to identify or profile you. Our legal basis is our legitimate interest in running a secure website (GDPR Article 6(1)(f); KVKK Article 5/2-f).

19. Changes to this policy

If this policy changes, the new version will be posted on this page and in the app with a new effective date. If a change significantly affects how your data is handled, we will also tell you before it takes effect, in the app or in the notes of the App Store update that brings the change.

20. Contact

Questions, requests or complaints about privacy, and reports of illegal content (also from people who don't use Runvia):

Email: yadaumur@gmail.com
Developer (data controller): Yağız Ada Umur, 17200 Çanakkale, Türkiye

Please note that emails are handled by our email provider (Google), under its own privacy policy.