Privacy Policy

Your data stays yours.

Last updated: 29 October 2026

Narun is a solo-built, indie iOS app. I made it for myself first, and I've kept it as privacy-respecting as I'd want any app on my own phone to be. Here's exactly what that means in practice.

Data Controller: Nathan De Maegd, Belgium - demaegdnathan3@gmail.com

The short version

What Narun stores

Narun stores your imported training plans, your manually logged sessions, your race history, your preferences (theme, units, widget config) and any data fetched from Strava if you've connected it. All of this is kept locally on your iPhone, inside the app's sandboxed storage.

If you have iCloud Backup enabled for your device, Apple may include this data in your encrypted device backup - that's between you and Apple, and Narun doesn't have access to it.

AI import

Importing an Excel or CSV file in Narun's own format happens entirely on your device. When you use AI import - for a PDF, a file in another layout, or text you paste in - the content of that plan is sent to Google's AI service to convert it into a schedule. The converted plan comes back to your device and is stored there.

Only send plans you're comfortable sharing with Google this way. Don't include personal details such as your name or health information in the text. This processing is covered by Google's Privacy Policy. Narun does not store the plan on any server of its own.

Strava integration

Connecting Strava is optional. When you tap "Connect", you're sent to Strava's official OAuth flow - Narun never sees your password. Strava returns an access token that's stored in the iOS Keychain on your device only.

With your permission, Narun reads your activities from Strava to mark planned sessions as completed and to populate your stats. After a completed run, Narun offers to rename the activity on Strava to match the planned session. It only does this when you tap "Rename on Strava" - "Keep mine" leaves it untouched. Narun does not share your Strava data with anyone. You can disconnect at any time from Settings → Preferences → Strava → Disconnect, which deletes the token from your device.

Apple Calendar sync

If you turn on calendar sync, Narun creates a calendar named "Narun" on your device using Apple's EventKit and writes your planned sessions into it. This sync is local to your device - Narun does not upload your calendar anywhere. Turning sync off removes the calendar's events on the next sync.

Analytics & tracking

Narun uses TelemetryDeck to collect anonymous, aggregated usage statistics, such as which features are used and how often the app is opened. TelemetryDeck is a privacy-focused analytics service from the EU. It does not collect your name, email address, training plan or Strava data, and the statistics can't be traced back to you personally.

Narun contains no advertising or tracking SDKs. There is no Facebook SDK, no Google Analytics and no ad network, and Narun does not track you across other apps or websites.

Apple also provides me with crash reports and basic App Store metrics, if you've chosen to share them with developers in your iPhone settings. This is Apple's data, governed by Apple's privacy policy.

Data I do see

Children

Narun is intended for adults using running plans for personal training. It is not designed for or directed at children under 13 and I do not knowingly collect data from minors.

Your rights

Because your data lives on your device, you control it directly:

If you're in the EU/UK and want to exercise your GDPR rights specifically, email me. Your plans and history never reach a server I run. The only thing stored on a server is feedback you send from the app, and I can delete that on request.

Device permissions

Narun does not access HealthKit, your location, motion sensors, contacts, or photos. The only system permissions Narun requests are:

No account required

Narun does not require you to create an account. Your plans and history live on your device. To delete all your data, simply uninstall the app - iOS removes everything automatically.

International data

AI import sends your plan to Google, whose servers may be located outside the EU. This transfer is covered by Google's own privacy terms.

When you connect Strava, your activity data is fetched from Strava's servers, which are operated by Strava, Inc. (USA). This transfer is covered by Strava's own Privacy Policy. Narun does not store your Strava data on any server - it is cached locally on your device only.

Legal basis (GDPR)

For users in the EU/UK, the legal basis for processing is:

Changes to this policy

If this policy changes, I'll update the date at the top of this page. Check back here from time to time to see the current version.

Contact

Questions, concerns, GDPR requests, or just want to say hi:
demaegdnathan3@gmail.com
LinkedIn: nathandemaegd

Built solo by nathandm in Belgium. Thanks for trusting Narun with your runs.