Privacy Policy

Effective May 23, 2026 · Last updated May 23, 2026 · Mana Athletic LLC

This policy explains what RunMana does with your data. It is written in plain language because we believe the contract between an athlete and their training app should be readable.

What data RunMana touches, and where it lives

1. Apple Health (HealthKit) — read only

If you grant Apple Health access during onboarding (optional, you can skip), RunMana reads:

• Your recent running workouts (distance, duration, average pace, start time, source)
• Heart rate samples associated with those workouts
• VO₂Max estimates produced by Apple Watch or other sources

We use these to:

• Suggest an initial Mana Mile pace from your fastest recent race-distance effort
• Show your training history in the app
• (Future) Detect aerobic-fitness drift and propose recalibration

We never write to Apple Health from the iPhone. A separate companion Watch app (not shipped in v1.0) will save workouts you record on your wrist, but that path is not yet available.

You can revoke Apple Health access at any time in iOS Settings → Health → Data Access & Devices → RunMana.

2. Data you enter during onboarding

• Your name (whatever you type; we don't verify it)
• Your sex (used for tier placement math)
• Your age (used for tier placement math)
• Your goal race date and distance (optional)
• Your unit preference (miles or kilometers)
• Your day-of-week running availability
• Your typed Mana Mile (if you choose not to accept the derived value from Apple Health)

This data is stored on your iPhone in a private database. It never leaves the device except via the iCloud backup mechanism described below.

3. iCloud backup (Apple-controlled)

If you are signed into iCloud on your iPhone, the iOS operating system mirrors RunMana's local database to your own private iCloud database, controlled by your Apple ID. This is end-to-end Apple — Mana Athletic LLC cannot see this data. The mirror exists so that if you delete and reinstall RunMana, your plan and history come right back.

If you sign out of iCloud, the mirror stops and only the on-device copy remains.

4. Optional: Mana Course Database race-share

RunMana includes an optional Mana Course Database feature that lets you anonymously share race-day results to help the running community rate courses by difficulty. This is off by default. You opt in via the in-app Privacy card on the Profile tab.

If you opt in:

• We upload race-day data (date, distance, finish time, course identifier, optional GPS polyline) along with an anonymous identifier that is randomly generated and stored only on your device.
• We do NOT upload your name, age, sex, email, device identifier, or any personal information.
• Uploads go to our Supabase backend (https://pinlbkzecvddrsjhxtfa.supabase.co).
• You can withdraw consent at any time on the same Privacy card. Already-uploaded data remains in the database under the anonymous ID — you can request its deletion via the support email below.

5. What we do NOT collect

We do not collect:

• Email addresses
• Account credentials
• Device identifiers (IDFA, IDFV)
• Location data outside of optional race GPS polylines you explicitly share
• Browsing history, analytics events, or telemetry
• Advertising identifiers
• Contacts, calendar, photos, or any other system data

We do not use third-party analytics, advertising SDKs, or tracking libraries.

How long we keep your data

• On your iPhone: as long as RunMana is installed. Deleting the app removes everything from the device.
• In your iCloud: as long as you're signed into iCloud with mirror enabled. Apple's standard iCloud retention policies apply.
• Mana Course Database uploads (if you opted in): retained indefinitely under your anonymous identifier. Email [email protected] to request deletion of records associated with a specific anonymous ID (you can find your anonymous ID on the Privacy card).

How to delete your data

Three independent paths:

1. Profile → Privacy → "Delete all RunMana data" — wipes your plan, completed workouts, Mana Mile history, race calendar, and Apple Health backfill from your iPhone. Deletes propagate to your iCloud mirror.
2. Delete the RunMana app from your iPhone — same effect as #1.
3. For Mana Course Database opt-in users only: email [email protected] with your anonymous ID to request deletion of your race-share records.

We do not require you to email us to delete your account because we do not have accounts.

Children's privacy

RunMana is designed for high-school cross country athletes (typically 14–18) as well as adult runners. We do not knowingly collect personal information from children under 13. The data RunMana stores on the device (name, age, sex, training answers) is entered by the athlete or their guardian. If you are a parent or guardian and you believe your child has provided RunMana with information you did not authorize, please contact [email protected] and we will help you delete it.

Security

• All on-device data is stored in Apple's SwiftData framework with the standard iOS file protection class (encrypted when the device is locked).
• iCloud mirroring uses Apple's standard CloudKit encryption.
• Mana Course Database uploads use HTTPS (TLS 1.2+).

We use only Apple's standard cryptographic frameworks and qualify for the U.S. export compliance exemption.

Third parties

• Apple (Apple Health, iCloud, CloudKit): governed by Apple's privacy policy
• Supabase (Mana Course Database backend, only if you opt in): governed by Supabase's privacy policy

We do not share data with anyone else.

Changes to this policy

If we change this policy in a material way, we will update the "Last updated" date at the top and notify you in-app on next launch. Non-material edits (typo fixes, clarifications that don't change what we do) won't trigger a notice.

Contact