Privacy Policy

Last updated: March 30, 2026

This Privacy Policy describes how Femrun ("we," "us," or "our") collects, uses, stores, and protects your personal data when you use our mobile application, website, and related services (collectively, the "Service"). We are committed to protecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable data protection laws.

1. Data Controller

The data controller responsible for your personal data is Femrun, registered in the Republic of Lithuania. For any data protection inquiries, you may contact us at contact@femrun.com.

2. Information We Collect

We collect the following categories of personal data:

a) Information you provide directly:

• Account details: name, email address, profile photo;

• Onboarding information: fitness goals, running experience level, preferred schedule, physical attributes (such as weight, if provided), and training challenges;

• Activity data: logged runs (distance, duration, pace), check-in responses, and workout completions;

• Community content: squad messages, feed posts, comments, and reactions.

b) Information collected automatically:

• Device information: device type, operating system version, unique device identifiers;

• Usage data: app interactions, feature usage patterns, session duration;

• Location data: only if you explicitly grant location permissions for run tracking (you can revoke this at any time through your device settings);

• Crash reports and performance data to help us improve the Service.

c) Information from third parties:

• If you connect third-party fitness services (such as Apple Health or Strava), we may receive activity data you choose to share.

d) Apple HealthKit Data:

If you choose to connect Apple Health, we may read and write the following data types: workouts, distance, steps, heart rate, active energy burned, and body mass. We handle HealthKit data with the following commitments:

• HealthKit data is used solely to provide and improve your personalized coaching experience within Femrun;

• HealthKit data is never sold to advertising platforms, data brokers, or information resellers;

• HealthKit data is not used for advertising, marketing, or other use-based data mining purposes;

• HealthKit data is not shared with third parties for purposes unrelated to providing health or fitness services directly to the user, except as required by law;

• HealthKit data is stored securely and access is limited to the functionality necessary to deliver your coaching experience;

• You can disconnect Apple Health at any time through the app settings, which will stop further data collection from HealthKit.

3. How We Use Your Data

We process your personal data for the following purposes and legal bases:

• To provide the Service (contractual necessity): creating and managing your account, generating personalized training plans, delivering AI-powered coaching messages and recommendations, enabling squad and community features;

• To improve the Service (legitimate interest): analyzing usage patterns, identifying bugs, improving AI coaching quality, and developing new features;

• To communicate with you (contractual necessity / legitimate interest): sending service-related notifications such as training reminders, check-ins, and squad updates;

• To send marketing communications (consent): promotional content and newsletters — only with your explicit opt-in consent, which you can withdraw at any time;

• To ensure safety and security (legitimate interest): detecting fraud, preventing abuse, and protecting the integrity of the Service;

• To comply with legal obligations (legal obligation): responding to lawful requests from authorities and fulfilling regulatory requirements.

4. AI-Powered Processing

Femrun uses artificial intelligence to provide personalized coaching. This means:

• Your onboarding data, activity history, and check-in responses are processed by AI systems to generate training plans, coaching messages, and recommendations tailored to you;

• This processing is necessary for the performance of our contract with you (providing the coaching service you signed up for);

• No solely automated decisions with legal or similarly significant effects are made about you — AI coaching suggestions are guidance, not binding decisions;

• You may contact us at any time to request human review of any AI-generated recommendation or to ask questions about how AI is used in the Service.

5. Data Sharing

We do not sell your personal data. We may share your data with the following categories of recipients:

• Service providers: cloud hosting, analytics, push notification services, and email delivery providers that process data on our behalf under data processing agreements;

• AI service providers: third-party AI platforms used to generate coaching content, which process your data under strict contractual data protection obligations;

• App Stores: Apple and Google process subscription and payment data in accordance with their own privacy policies;

• Other users: information you choose to share publicly in squads, activity feeds, or comments is visible to other members of your squad or the Femrun community;

• Legal authorities: when required by law, regulation, or valid legal process.

We do not share HealthKit data with any third party for advertising, marketing, or data brokerage purposes.

6. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, where some of our service providers are located. When such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or reliance on an adequacy decision.

7. Data Retention

• We retain your personal data for as long as your account is active and as needed to provide the Service.

• If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain certain data for legal or regulatory purposes (such as financial records, which may be retained for up to 10 years).

• Anonymized and aggregated data that cannot identify you may be retained indefinitely for analytical and research purposes.

8. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access: request a copy of the personal data we hold about you;

• Right to rectification: request correction of inaccurate or incomplete data;

• Right to erasure: request deletion of your personal data ("right to be forgotten");

• Right to restriction: request that we limit how we process your data;

• Right to data portability: receive your data in a structured, commonly used, machine-readable format;

• Right to object: object to processing based on legitimate interests, including profiling;

• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing;

• Right to lodge a complaint: you have the right to file a complaint with the State Data Protection Inspectorate of the Republic of Lithuania (ada.lt) or your local supervisory authority.

To exercise any of these rights, contact us at contact@femrun.com. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including encryption of data in transit and at rest, secure authentication mechanisms, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16 without appropriate consent, we will take steps to delete that information promptly.

11. Cookies and Tracking (Website)

Our website uses cookies and similar technologies to improve your browsing experience and analyze site traffic. You can manage your cookie preferences through your browser settings. Essential cookies required for the website to function cannot be disabled. For analytics and marketing cookies, we obtain your consent before placing them.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. If we make material changes, we will notify you through the app or by email before the changes take effect. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at contact@femrun.com.