Privacy Policy
This policy explains what data EasyRUN collects, for what purpose and legal basis, how long it is kept, and how to exercise your rights.
1. Data controller
EasyRUN (Montevideo, Uruguay) is the controller of the personal data described in this policy. For any question or request about your data: info@easyrun.life.
2. What data EasyRUN collects
EasyRUN collects the data needed to create and operate athlete, coach and team accounts:
- First name, last name, email and profile photo.
- Team, memberships, classes, training plans, races, results and challenges.
- Trainings you log, comments, reactions and notification preferences.
- Basic technical data such as account creation date, access date and connection status.
3. Data obtained from Strava
If you connect Strava (express authorization via the official OAuth flow, with read-only activity permission), EasyRUN imports only your foot-running activities. The data may include:
- Strava athlete identifier (to keep the connection).
- Activity name or title, start date and time, and activity type.
- Distance, duration, moving time, pace and elevation.
- Public Strava URL of the activity when available.
- Privacy or deletion status reported by Strava.
EasyRUN does not request permission to create or modify activities on Strava, nor to access other sports. Strava data is not used in any AI/ML system or for advertising, and is never sold or shared with third parties.
4. Garmin Connect data
If you connect your Garmin Connect account, you do it through Garmin's official authorization: EasyRUN never asks for your Garmin username or password. Before connecting, we show you what data goes each way and ask for your express consent. The connection is used for two things, and you use each one only if you want to:
- Sending sessions to your watch: when you tap "Send to Garmin" on a session of your plan, EasyRUN sends that session (name, date, steps, durations and target paces) to the calendar of your Garmin Connect account. What is sent will also be held by Garmin and is governed by the Garmin Connect privacy notice; Garmin may use it under its own terms. If you are restricted from uploading data to your Garmin Connect account, do not use this feature.
- What your watch records: Garmin sends EasyRUN the summary of the activities you record with your watch after you connect, of any sport (running, walking, cycling, etc.). We store only: activity identifier, type, date and time, duration, distance and watch model. We do not receive or store heart rate, GPS tracks or health metrics, and we do not take activities entered manually in Garmin Connect.
Nothing is used until you choose. A Garmin activity does not complete your log, does not add kilometers and is not seen by anyone until you decide what to do with it: use a run in the log of a day of your plan (the tap only fills in the kilometers; marking the day as done is still up to you), share it with your coach, or discard it. Anything you do not use or share is deleted automatically after 7 days; discarding deletes it right away.
Your coach sees only what you share. You share one activity at a time and can stop sharing whenever you want. What you share is seen only by your coach in your team, in your training week, labeled "Garmin [watch model]". Garmin activities are never shown to other athletes, and do not appear in the community, the team feed or rankings. Kilometers from runs (used in your log or shared) add to your kilometer counter like any others; walking, cycling and other sports do not. For those runs only the total number is shown, not the activity. If you are not in a team, instead of sharing you can choose "Add to my km", also one run at a time.
Garmin data is not sold, not shared with third parties, not used for advertising and not processed by artificial intelligence systems, neither to train models nor to generate recommendations. The only provider that stores it is our hosting provider (DigitalOcean, see section 10). Push notifications or emails may tell you that a new activity is available, but they do not contain its data.
Disconnecting: you can disconnect Garmin from your EasyRUN profile or revoke access from your Garmin Connect account settings. EasyRUN deletes the access tokens and the imported activities; only the records you declared as your own are kept. Sessions you already sent to Garmin remain in your Garmin Connect account; you can delete them there.
5. Purposes and legal bases
- Service delivery (performance of contract): show your trainings, plans, races, personal bests and progress; manage teams and classes.
- Strava integration (consent, revocable at any time): suggest linking activities to your plan or races. Strava data is seen only by you; your coach sees only the records you confirm as your own.
- Garmin integration (consent, revocable at any time): send the sessions you choose to your watch, and show you what your watch records so you can choose what to use in your log and what to share with your coach.
- Notifications (consent, configurable by type): reminders and alerts you enable.
- Security and support (legitimate interest): prevent abuse, diagnose errors and provide support.
6. Retention periods
| Data | Period |
|---|---|
| Imported Strava activities (unconfirmed) | Maximum 7 days from import. |
| Activities received from Garmin (not used or shared) | Maximum 7 days from arrival. |
| Garmin activities you used or shared | While your account exists and Garmin stays connected; deleted when you disconnect (what you declared in your log is kept). |
| Garmin access tokens | Until you disconnect or revoke; deleted immediately. |
| Technical sync events (webhooks) | Maximum 7 days from processing. |
| Strava access tokens | Until you disconnect or revoke; deleted immediately. |
| Strava connection identifier (after disconnecting) | Kept as a minimal record that the connection existed, to let you reconnect; deleted with your account or on request. |
| Records you declared (training log, shared runs, results) | While your account exists, or until you request deletion. |
| Account and team data | While your account exists, or until you request deletion. |
7. Data visible to other users
Some data may be shown within the community or team according to your settings: race results, achievements, public trainings, comments or reactions. Imported Strava activities are never shown to other users (not even to your coach), do not appear in the community feed, and are not aggregated in rankings. Garmin activities are seen only by your coach, and only the ones you share (section 4); never by other users.
8. Disconnecting Strava
You can disconnect Strava from your EasyRUN profile (Strava section) or revoke access from Strava's connected-apps settings. In both cases, EasyRUN automatically deletes the imported activities, their associated data and the access tokens, and confirms this to you (on-screen message when disconnecting from EasyRUN; notification if you revoke from Strava). Only the records you declared as your own are kept. If you delete an activity on Strava, that deletion is reflected in EasyRUN within 48 hours (usually within minutes).
9. Your rights
You may exercise at any time the rights of access, rectification, erasure, objection, restriction and portability (export) of your data, and withdraw your consent to any integration, by writing to info@easyrun.life from the email associated with your account (or proving ownership). We respond within the applicable legal timeframes and confirm in writing when an erasure is completed. Many of these rights can also be exercised directly in the app (edit your profile, delete trainings, disconnect Strava or Garmin).
10. Where data is stored and subprocessors
Data is stored on DigitalOcean servers (cloud infrastructure). Push notifications use browser Web Push messaging services. These providers act as processors under their own data-protection commitments; where they involve international transfers, they rely on recognized safeguard mechanisms (such as Standard Contractual Clauses). The list of subprocessors is available on request at info@easyrun.life. Strava and Garmin are not EasyRUN subprocessors: each is the controller of the data on its own platform.
11. Strava API usage data
Strava may monitor and collect technical usage data from the API (call volume, errors) under its own privacy policy, available at strava.com/legal/privacy.
12. Security
Access to data is limited to authenticated users and to the staff strictly necessary to operate or provide support. We use encrypted connections (HTTPS), protected credentials and role-based access controls. In the event of a security incident affecting personal data, we will notify affected users and the relevant providers (including Strava and Garmin) within the required timeframes.
13. Changes to this policy
EasyRUN may update this policy to reflect product changes, legal requirements or integration adjustments. The current version will be publicly available on this page, with its last-updated date.