Privacy policy

Last updated 28 September 2026

runair connects runners who run in the same neighborhood. To do that it needs to know a little about you — a name, a neighborhood, how fast you usually run — and, during a duel, how far you've run. This page says exactly what we collect, why, who can see it, and how to have it deleted.

The short version. No email, phone number or password. Other runners never see where you are. Your location is used to suggest a neighborhood (rounded to about a kilometre, not stored) and to measure a duel (whose GPS track is kept with its result). No ads, no analytics, no tracking, nothing sold. You can delete your account in the app, at any time.

Who we are

runair — the iPhone app and this website, runair.app — is run by Lukasz Kolodziejczyk, Wrocław, Poland, who is the controller of your personal data. Write to support@runair.app about anything on this page.

What we collect, and why

Your account

A device identifier — a random ID the app creates the first time it opens. It's how runair recognises your phone; we don't ask for an email address, a phone number or a password.
A sign-in token — kept in your phone's Keychain. We store only a one-way hash of it, never the token itself.

Your profile

Display name, the neighborhood you pick, and, if you choose one, your usual easy pace (a band such as 5:00–5:30 min/km).
Whether you're listed on Nearby — the "Hide me from Nearby" switch.
When you were last active, shown to other runners as a hint such as "active 2h ago".

Location

To suggest your neighborhood, the app sends your location rounded to two decimal places — about a kilometre. We use it to order the list of neighborhoods and don't store it. If you don't allow location, you pick your neighborhood yourself.
During a duel, the app uses precise GPS to measure how far you've run, including while the screen is off, and only while the race is on. While you race, it sends your distance and elapsed time so your opponent can see them, and the duel's GPS track, during the race and at the finish. We keep the track with the result to check that results are plausible — for example, that nobody finished a 5 km duel on a bike.
Meeting places. When you host a run, the meeting place you write — and a map pin, if you add one — is published to the runners in your neighborhood. It's a place you choose, never your own position.

Duels and runs

Duels: who you raced, the distance you agreed, your distance and time, the result, and the change to your rating.
Runs together: the runs you host (type, day and time, meeting place, pace, number of places, note) and the runs you join.

The camera

The app uses the camera only to scan another runner's duel code. Nothing it sees is stored or sent to us, and you can type the code instead.

This website

runair.app sets no cookies, runs no analytics and loads nothing from other sites. Like every website, the servers that deliver it — and the app's API — see technical data such as your IP address and the pages or endpoints requested; our hosting provider may keep this in short-lived logs to operate and secure the service.

Email

If you write to support@runair.app, we receive your message and your email address, and use them only to reply.

Who can see what

Runners in your neighborhood see you on Nearby — your display name, pace band, rating, duel record and last-active hint — unless you hide from Nearby.
Any runner can open your profile from a leaderboard, a duel or a run: your name, neighborhood, pace band, rating, duel record and recent duels. Leaderboards show your name, rating and record once you've completed a duel.
Your opponent sees your distance live during a duel, and both of you see the result.
Runs you host or join show your name on the run's roster to runners in its neighborhood.
Nobody — not other runners, not advertisers — sees your location or your duel's GPS track. We don't sell or share your data, and we don't use it for advertising.

Where it's kept

runair's server and database are hosted by Railway Corporation (USA) in its Amsterdam, Netherlands region, with continuous backups in Railway's object storage in the same region. Email to support@runair.app is forwarded by our domain registrar, Porkbun, to a mailbox at Google. These providers process data on our behalf to run the service.

Legal basis

We process your data to provide runair to you — your profile, discovery, duels and runs are the service (Art. 6(1)(b) GDPR). Keeping duel tracks to check results, keeping backups and keeping the service secure are in our legitimate interest in running fair races on a reliable service (Art. 6(1)(f) GDPR). Location and camera access are always your choice, asked for by iOS and revocable in Settings at any time.

How long we keep it

Your data is kept for as long as you have a runair account. To delete your account, open Profile in the app and tap Delete account at the bottom. It happens straight away, and your phone is signed out.

What deleting removes: your display name, neighborhood, pace and Nearby setting, your device identifier and sign-in token, the GPS tracks of your duels, and the notes on runs you hosted. You also leave the leaderboards.

What stays, without your name: duels and runs involve other runners, so their history doesn't change when you leave. Your past duels stay in your opponents' history — the distance, the times and the rating change, which their own ratings are built on — and runs that already took place keep their roster. In both, you appear only as "Deleted runner", with no profile, and nothing links that back to you. A race you're in when you delete counts as given up; runs you host that haven't happened yet are cancelled, and you leave the ones you've joined.

Deleted data disappears from our live database at once. Copies in our backups are overwritten on a rolling basis and are gone within four weeks.

Your rights

You can edit your name, neighborhood, pace and Nearby visibility in the app at any time. You also have the right to access a copy of your data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. You can delete your account in the app yourself, as described above. To use any of the other rights — or to delete an account you can no longer reach, for example on a lost phone — email support@runair.app with your display name and neighborhood. runair accounts have no email or password, so we may ask a question only the account's owner can answer before we act.

You can also complain to a data protection authority — in Poland, the President of the Personal Data Protection Office (UODO), or the authority where you live.

Security

Everything between the app, this website and our server is encrypted (HTTPS). Sign-in tokens are stored only as hashes, and access to the servers is limited to the operator.

Children

runair isn't meant for children under 16, and we don't knowingly collect their data. If you think a child has an account, tell us and we'll delete it.

Changes

If we change this policy, we'll publish the new version here with a new date.