Privacy Police

Runergy

Version 1.0 – Horw, June 2026

Valid from: 1 June 2026

The protection of your personal data is of great importance to us. This privacy policy explains what personal data the Runergy running app (referred to as the ’App’) collects, how it is processed, and what rights you have as a data subject.

We act in accordance with the revised Swiss Data Protection Act (revDPA / nDPA, in force since 1 September 2023) and the implementing provisions based on it.

1. Data Controller

As a sole trader, the owner named above is the data controller responsible for the processing of your personal data in connection with the Runergy app.

2. Principles of data processing

We process your personal data in accordance with the following principles:

• Lawfulness: We process data only on a valid legal basis.
• Purpose limitation: Data is used only for the specified purposes and is not used for other purposes without good reason.
• Data minimisation: We collect only the data that is actually necessary for the specific purpose.
• Accuracy: We take appropriate measures to correct or delete inaccurate data.
• Storage limitation: Data is only retained for as long as required by the purpose or as prescribed by law.
• Data security: We protect your data through appropriate technical and organisational measures.

3. What data we collect

3.1 Data that you actively provide to us

The following data is processed when you register for and use the app:

• Surname and Name
• Email adress
• Password (stored in encrypted form)
• Year of birth (for age-appropriate training planning)
• Gender
• Fitness Level
• Physical measurements such as height and weight (optional, for training calculations)
• Content from contact or support enquiries

3.2 Data generated whilst using the app

The following data is collected automatically whilst using the app:

• GPS and location data (only whilst a run is being recorded)
• Training and activity data (distance, pace, duration, elevation profile, heart rate if connected)
• Training history and progress data
• Device information (operating system, app version, device type)
• Usage behaviour within the app (e.g. functions accessed, error messages)

3.3 Automatically recorded technical data

When you access our services, technical access data is collected:

• IP address (anonymised)
• Browser type and version (when using the website)
• Date and time of access
• Log files for technical security and troubleshooting

4. Purposes and legal basis for processing

We process your personal data for the following purposes:

5. GPS Data and Location Access

The Runergy app accesses your device’s GPS sensor while recording your run. This happens only when you actively start a training session.

The location data collected is used for:

• Calculating distance covered, pace, and elevation profile
• Displaying the running route on a map
• Analyzing and evaluating your training performance

Location data is not collected in the background when the app is not actively in use. You can disable location access at any time in your device’s system settings. This will result in the app’s GPS functions no longer being available.

6. Garmin Connect Integration

The Runergy app offers an optional integration with Garmin Connect that lets you synchronise your Garmin device and account with your Runergy training. This integration is only activated if you explicitly connect your Garmin account. This section explains, in accordance with Garmin’s requirements, how Garmin data is collected, used, processed, and stored, and whether it is shared with or processed by any third-party services.

6.1 Establishing the connection

You start the connection from within the app. Authorisation takes place exclusively through Garmin’s official login and consent screen using the OAuth 2.0 standard. Runergy never receives or stores your Garmin username or password. After you grant consent, Garmin provides us with secure access tokens that allow us to exchange data with Garmin on your behalf, together with the specific permissions (scopes) you have approved.

6.2 What Garmin data we collect

Depending on the permissions you grant, we may collect and process the following Garmin data:

• Account and authorisation data: your Garmin User ID, the permissions you have granted to Runergy, and the OAuth access and refresh tokens used to communicate with Garmin.
• Activity and workout data: completed running and training activities, including distance, duration and elapsed time, pace and speed, heart rate, calories, altitude/elevation, aerobic and anaerobic training effect, GPS/route samples, laps, and activity timestamps.
• Workout scheduling data: identifiers for the training workouts that Runergy creates and schedules on your Garmin account so that your Runergy training plan appears on your Garmin device.

6.3 How Garmin data is used

Garmin data is used solely to provide the features you have requested:

• Transferring your Runergy training plans and scheduled workouts to your Garmin device.
• Importing your completed activities so that your training history, progress, and performance metrics stay up to date in Runergy.
• Matching completed Garmin activities to the corresponding planned training and displaying accurate statistics (pace, distance, heart rate, calories, and related insights).

Garmin data is never used for advertising, is not sold, and is not used for any purpose unrelated to providing the Runergy service.

6.4 How Garmin data is processed

Garmin data reaches us in two ways: (1) on-demand requests to Garmin’s Wellness/Health and Training APIs when you connect your account or synchronise a workout; and (2) automatic notifications sent by Garmin to our secured server endpoints when new activity data is available, when your granted permissions change, or when your account is deregistered. We process these notifications to keep your data synchronised and to respect any changes to your consent.

6.5 How and where Garmin data is stored

Garmin data is stored on our secured backend infrastructure and linked to your Runergy account. Access and refresh tokens are stored so that the connection can be maintained, and application secrets are held in a dedicated secrets-management system. Data is transmitted using SSL/TLS encryption and is retained only for as long as necessary to provide the service, in line with Section 9 (Retention period).

6.6 Sharing with and processing by third parties

Garmin data is exchanged with the following parties:

We do not share Garmin data with advertisers or data brokers, and we do not sell it. Any processor that handles Garmin data does so only to operate the Runergy service and under appropriate confidentiality and data protection obligations.

6.7 Disconnecting and deleting Garmin data

You can disconnect your Garmin account at any time in the app, which stops further data collection and deregisters Runergy’s access with Garmin. You may also revoke access directly in your Garmin Connect account settings. When you disconnect your Garmin account or delete your Runergy account, the associated Garmin authorisation data is removed, and any imported Garmin activity data is deleted or anonymised in accordance with Section 9.

7. Disclosure of Data to Third Parties

We will only disclose your personal data to third parties to the extent that it is necessary for the performance of the contract or permitted by law. This includes:

Data processing generally takes place in Switzerland. If service providers in other countries are used, we ensure that an adequate level of data protection is guaranteed (e.g., through standard contractual clauses or adequacy decisions).

Your data will not be shared for advertising purposes or sold to third parties.

8. Cookies and App Analytics

The app uses technically necessary mechanisms (e.g., session tokens) for its operation. Analytics or marketing tracking is only performed with your express consent.

The following types of tracking may be used:

• Technically necessary: Authentication, security, basic app functionality (no consent required)
• Analytics: Anonymized usage statistics to improve the app (only with consent)

You can revoke your consent to optional tracking at any time in the app settings.

9. Retention period

We retain your personal data only for as long as is necessary for the respective purposes or as required by legal retention obligations:

Once the retention period has expired, the data will be deleted or anonymized in such a way that it can no longer be traced back to you.

10. Data Security

We implement appropriate technical and organizational safeguards to protect your data from unauthorized access, loss, misuse, or alteration. These include, in particular:

• SSL/TLS encryption during data transmission
• Encrypted storage of passwords (hashing)
• Access restrictions and authorization management
• Firewalls and regular security updates
• Regular review and adjustment of security measures

Despite all due care, absolute security cannot be guaranteed. Data transmission over the Internet (e.g., via email) always carries a certain residual risk. We recommend that you do not send us any particularly confidential information via unsecured channels.

11. Your rights as a data subject

Under the revised Swiss Data Protection Act (revDSG), you have the following rights. These rights apply unless there are legal exceptions or overriding interests that preclude them:

To exercise your rights, please contact: info@runergy.ch

Please note that in certain cases, we may need to verify your identity before we can respond to your request.

Exercising your rights will not result in any disadvantages for you (no higher prices, no poorer service).

12. Right to File a Complaint with the Supervisory Authority

You have the right to file a complaint with the competent data protection supervisory authority:

13. Minors

The Runergy app is intended for users 16 years of age and older. We do not knowingly collect personal data from children under 16 without parental consent.

Legal guardians who become aware that a child under the age of 16 has created an account without their consent are asked to contact us at info@runergy.ch. We will promptly delete such accounts and data.

14. External Links

The app may contain links to external websites or services. We are not responsible for the privacy practices of external providers. We recommend that you read the privacy policies of the respective third-party providers.

15. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time, particularly in the event of changes to the app’s features, the legal landscape, or our data processing practices.

In the event of significant changes, we will notify you via email or by posting a clear notice in the app. The current version is available in the app and at www.runergy.ch. The version number and date at the top of this document indicate the status of the most recent update.

16. EULA

This app uses the Apple Standard End User License Agreement (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/

Our End User License Agreement (EULA) governs your use of Runergy, including its subscription features. By accessing or using our app, you agree to abide by the terms and conditions outlined in the EULA. The EULA covers important aspects such as your rights and responsibilities as a user, the scope of the subscription service, payment terms, cancellation policies, and any other relevant provisions governing your use of the app. For more detailed information about our EULA, please refer to the Terms of Use section within the app or visit our Terms of Service and Conditions of Use. By subscribing to Runergy, you acknowledge that you have read, understood, and agreed to the terms outlined in the EULA.

Unlock premium features and enjoy the full app experience with our subscription. Gain access to exclusive content, priority support, and enhanced privacy settings. Choose from flexible plans and cancel anytime. Support ongoing app development and enjoy a seamless, personalised experience.

Try it before you subscribe.

Plan name: Monthly Plan

Price: $9.9

Duration: 1 Month

17. Contact and Privacy Inquiries

If you have any questions about this Privacy Policy, the processing of your personal data, or the exercise of your rights, please contact:

Horw, June 2026 | Runergy