Privacy Policy
This Privacy Policy explains how Orezzero Inc., the operator of OURRUN, collects, uses, discloses, retains, and protects personal information.
OURRUN is a private running, training, coaching, and team-operations service. It is not a public social network. Athlete accounts do not create public profiles, follower lists, public feeds, or public posts.
1. Information we collect
Account and identity information: name; email address or phone number; authentication identifiers; month and year of birth or age band; account role, such as athlete, solo runner, coach, or guardian; team, school, club, or roster affiliation; guardian-link and consent status; profile settings and preferences.
We use age information to determine eligibility and the protections that apply. OURRUN is not available to children under 13.
Training and activity information: workouts, runs, splits, pace, distance, duration, elevation, and route; precise location and timestamps during a run you start; training plans, assignments, completion status, and workout notes; readiness, workload, recovery, stress, and adaptation estimates; attendance, availability, scheduling, and team-operation records; coach and athlete comments; source-provider identifiers for imported activities.
Health and fitness information: heart rate and sensor samples; workout and activity history; sleep and recovery information; readiness and workload information; injury, symptom, nutrition, and wellbeing responses; body measurements or fitness information you choose to provide; information imported from Apple Health or another connected service. We treat this information as sensitive. We do not sell it or use it for advertising.
Device and technical information: device model; operating-system and app version; device and app identifiers used for authentication, security, notifications, or diagnostics; IP address and network information; language and time-zone settings; app events, performance information, crash reports, and error codes; push-notification token and preferences.
Files and documents: if you upload a file or photograph a document, we collect the file, associated metadata, upload time, team requirement, and access history where supported.
Connected-service information: if you connect Apple Health, a heart-rate sensor, Mapbox maps, or another provider, we receive or send the data needed for the connection and the permissions you approved.
Support and communications: messages and information you provide when requesting support, reporting a problem, or communicating with a team.
2. Sources of information
We collect information directly from you; from a verified guardian or authorized coach; from device sensors and operating-system services you authorize; from Apple Health and connected services you authorize; from team administrators; and automatically from the app or website where needed for security, diagnostics, and operation.
3. How we use information
We use information to create, authenticate, and secure accounts; record and display runs; calculate pace, route, distance, elevation, workload, readiness, recovery, and related training information; deliver schedules, workouts, logs, attendance, files, and team operations; connect athletes, guardians, and coaches through authorized role relationships; import and reconcile activities from connected providers; provide maps; send requested notifications; provide support and investigate errors; prevent fraud, abuse, and security incidents; maintain legal, consent, and audit records; improve the service using information permitted by your settings; and comply with law.
We do not use personal information, precise location, training data, consumer health data, school or team data, or minors' data for targeted advertising.
4. How information is disclosed
Authorized team roles: information may be disclosed to coaches, guardians, athletes, or team administrators according to the role and permissions shown in the app. A coach does not receive continuous live location merely because an athlete records a run. A guardian or coach does not receive Apple Health data unless the app identifies that category and the required authorization is recorded.
Service providers: Apple for operating-system services, Apple Health, notifications, and App Store distribution; Google Firebase for authentication, backend services, storage, and server functions; Mapbox for maps and route display; connected training providers expressly authorized by the user; hosting, security, support, and communications vendors listed in the current vendor register.
Legal, safety, and security disclosures: we may disclose information when reasonably necessary to comply with law, legal process, or a valid government request; protect a person from serious harm; investigate fraud, abuse, or a security incident; enforce the Terms of Use; or protect the rights and safety of users, OURRUN, or others.
Business transaction: if OURRUN is involved in a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, information may be disclosed as part of that transaction subject to confidentiality and applicable law.
No sale or targeted advertising: OURRUN does not sell personal information or consumer health data, and does not share personal information for cross-context behavioral or targeted advertising.
5. Precise location and maps
OURRUN collects precise location only when needed for a feature the user starts or separately enables, such as recording a run.
When maps are displayed, Mapbox may receive the map area, route coordinates, device and network information, and technical usage data needed to provide and secure the map service.
OURRUN does not continuously monitor location merely because permission exists. Background location is used only while an active feature requires it.
Users can deny or revoke location permission and enter runs manually without route data.
For a user under 18, precise-location recording remains off until the required guardian authorization is recorded.
6. Apple Health and connected fitness data
OURRUN accesses only the Apple Health data types the user selects and that an active feature needs. Apple Health data is used to provide user-requested training, history, workload, readiness, recovery, and coaching functions. It is not sold, used for advertising, or used to build advertising profiles.
Apple Health permissions can be changed in the Apple Health app or iOS Settings. Revoking permission stops future access but does not automatically delete information already imported into OURRUN.
7. Consumer health data
Training, heart-rate, recovery, readiness, sleep, injury, symptom, wellbeing, and related information may qualify as consumer health data.
OURRUN provides a separate Consumer Health Data Privacy Policy describing categories collected, sources, purposes, categories shared, recipients, consent controls, and access, withdrawal, download, and deletion rights.
Where separate consent is required for collection and sharing, OURRUN requests them separately.
8. Minors and guardians
OURRUN is not available to children under 13.
A user age 13 through 17 may use OURRUN only through the age-appropriate account and consent process. Protected features remain off until the required verified guardian authorization is recorded.
A verified guardian may be able to review the linked account; approve or decline protected features; manage privacy and account settings; review categories shared with a coach or team; withdraw consent; obtain a copy of covered data; and request deletion, subject to lawful exceptions and records independently controlled by a school or team.
If a school or team independently controls attendance, eligibility, safety, or compliance records, requests involving those records may also need to be directed to that organization.
9. Coaches and teams
An authorized coach can access all athlete information currently exposed in the team workspace, including training logs, reflections, attendance, files, routes, and profile information. OURRUN does not currently provide field-by-field privacy controls for coach access.
Coaches are independent users and may have duties imposed by their school, club, profession, or law. OURRUN does not authorize a coach to use athlete information outside the team purpose.
Do not describe any field as private from a coach unless code and tests enforce that restriction.
10. AI features
AI features are optional and remain off until consent is given.
Before sending information to an AI provider, OURRUN identifies the provider, data categories, purpose, retention terms, model-training terms, and intended recipients of the output.
OURRUN does not send personal, precise-location, training, or health data to an AI provider without explicit purpose-specific consent. For an athlete under 18, required guardian approval must also be recorded.
AI output may be incomplete or wrong. It is not medical advice, emergency monitoring, or a substitute for a qualified coach or clinician.
11. Retention
OURRUN uses the default retention periods stated in the retention summary.
We may retain limited information longer when required by law, necessary to establish or defend legal claims, necessary to prevent fraud or protect security, or controlled by a school or team with an independent retention duty.
When information is no longer required, we delete it or deidentify it so it is no longer reasonably linked to a person.
12. Account deletion
Users can initiate complete account deletion inside the app.
After reauthentication and confirmation: access ends when the request is accepted; covered data is deleted from active systems within 30 days; encrypted backup copies expire within 90 days; the user receives in-app confirmation when processing begins and completes; limited information may be retained for legal, safety, fraud-prevention, dispute, or security reasons; and records independently controlled by a school or team may require a separate request.
Merely signing out, uninstalling the app, disconnecting a provider, or deleting an authentication credential does not by itself constitute complete account deletion.
13. Data export
Users can request a portable copy through Privacy and Data settings, subject to identity verification, legal restrictions, and the rights of other people. Completed exports are available inside the authenticated app for seven days.
14. Security
We use administrative, technical, and organizational safeguards designed for the nature and sensitivity of the information processed.
No service can guarantee absolute security. Users should protect their credentials, use device security features, and report suspected unauthorized access promptly.
15. Security incidents and health-data breaches
If a security incident compromises personal information, OURRUN will investigate, contain, document, and provide notices required by applicable law.
Where the FTC Health Breach Notification Rule or another health-data breach law applies, notices will identify what happened, the categories involved, steps OURRUN has taken, steps users can take, and contact information for questions.
16. Your rights and choices
Depending on location and applicable law, a user may have the right to know whether information is collected, used, or disclosed; access information; correct inaccurate information; obtain a portable copy; delete information; withdraw consent for future collection or sharing; obtain information about recipients; opt out of sale or targeted advertising; appeal a denied request; and avoid unlawful discrimination for exercising a right.
Use Settings, then Privacy and Data, or contact privacy@ourrun.run.
We may verify identity before fulfilling a request. A verified guardian may exercise applicable rights for a linked minor.
17. Cookies and website choices
The website uses essential cookies for security, authentication, and preferences. Optional analytics cookies remain off unless accepted. OURRUN does not use advertising cookies.
Where technically implemented and legally required, OURRUN honors recognized browser-based opt-out signals for non-essential tracking.
18. Changes to this policy
We may update this policy when the product, vendors, or law changes.
If a change materially expands how sensitive information is collected, used, or disclosed, we will provide notice and obtain consent where required before the new practice begins.
19. Contact
Orezzero Inc.
Privacy: privacy@ourrun.run
Support: support@ourrun.run
Legal notices: legal@ourrun.run
ourrun