Personal data protection policy

1. Who are we?

The RunMorph platform (available at runmorph.com) is published and operated by Homeseek SARL, a company registered in France, whose registered office is at 117 Rue Jean-Baptiste Lebas, 59493 Villeneuve-d'Ascq, France.

As data controller, Homeseek SARL determines the purposes and means of processing your personal information when you use RunMorph.

For any question about the protection of your data, you can write to us at admin@runmorph.com.

2. What information do we collect?

2.1 Information you give us directly

• Account creation: email address, password (encrypted), first and last name.
• Third-party sign-in: if you choose to sign up or log in with Google, we receive your name, email address and profile photo as provided by the identity provider. We never receive your Google password.
• Athlete profile: gender, date of birth, years of running, number of weekly sessions, weekly mileage, injury history, recurring pain, training preferences, personal records.
• Race goals: target distance, goal time, race date, available training days.

2.2 Information from connected services

If you link your Strava account to RunMorph, we import certain data about your running activities (run, trail run, virtual run):

• Activity name, date, distance, duration, elevation gain.
• Average and maximum speed.
• Average and maximum heart rate (when available).
• Cadence and power (when available).
• A simplified map of the route.

RunMorph only stores running activities. Your cycling, swimming or any other activities are neither imported nor kept.

2.3 Information collected automatically

• Browsing data: we use Google Analytics to measure site traffic (pages visited, session length, approximate geographic origin, device type). This data is aggregated and does not identify you personally.
• Authentication tokens: a session token is stored in your browser (localStorage) to keep you logged in between visits.

3. Why do we process this information?

4. Who do we share your data with?

We never sell, rent or transfer your personal data to third parties for commercial purposes. Some information is, however, shared with the technical providers needed to run the service:

When data is transferred to countries outside the European Economic Area, we make sure appropriate safeguards are in place (standard contractual clauses of the European Commission, certifications or adequacy decisions).

5. How long do we keep your data?

• Account and athlete profile data: kept as long as your account is active. If you delete your account, your data is erased within 30 days.
• Strava activities: kept as long as the Strava connection is active. Disconnecting Strava deletes your imported activities.
• Payment data: managed and kept by Lemon Squeezy in line with its legal obligations. RunMorph does not store any card numbers.
• Analytics data: kept according to the Google Analytics configuration (26 months maximum).

6. How do we protect your information?

We put technical and organizational measures in place to keep your data secure:

• Encrypted exchanges via HTTPS/TLS across the entire site.
• Passwords stored as an irreversible cryptographic hash (bcrypt).
• Strava access tokens encrypted and renewed automatically when they expire.
• Database access restricted by limited-scope service keys.
• Hosting within the European Union (OVH France, Supabase Ireland).

Since no system is infallible, we encourage you to use a strong, unique password for your RunMorph account.

7. Your rights

Under the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés), you have the following rights:

• Access: obtain confirmation that data about you is being processed and receive a copy of it.
• Rectification: correct inaccurate or incomplete information from your profile page or by contacting us.
• Erasure: request the deletion of your account and the associated data.
• Restriction: temporarily restrict the processing of your data in certain circumstances.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on our legitimate interest.
• Withdrawal of consent: withdraw your consent at any time for processing that relies on it (the Strava connection, for example), without affecting the lawfulness of prior processing.

To exercise any of these rights, write to us at admin@runmorph.com. We undertake to reply within one month. You also have the right to lodge a complaint with a competent supervisory authority (in France: the CNIL, www.cnil.fr).

8. Use of artificial intelligence

RunMorph uses a generative artificial intelligence model (Google Gemini) to design personalized training plans. Your athlete profile data (age, gender, level, volume, records, injuries) is sent to the model as an anonymized prompt to produce a suitable program. No directly identifying data (name, email) is included in the requests sent to the model.

The plans generated are suggestions and in no way replace the advice of a healthcare professional or a qualified coach.

9. Cookies and similar technologies

RunMorph uses the following technologies:

You can set your browser to refuse cookies or delete those already stored. Refusing analytics cookies does not affect how the service works.

10. Minors

RunMorph is open to users of all ages. If you are under 16, we ask you to obtain the consent of your parent or legal guardian before creating an account and sharing personal data with us. We reserve the right to delete any account created by a minor without the required parental consent as soon as we become aware of it.

11. Changes to this policy

We may update this policy to reflect changes in our practices or in the applicable regulations. In the event of a substantial change, we will let you know by email or through a notification in the app. The last-updated date at the top of this page lets you check which version applies.

12. Contact us

For any question, request to exercise your rights or complaint about the processing of your personal data:

Homeseek SARL
117 Rue Jean-Baptiste Lebas
59493 Villeneuve-d'Ascq, France
admin@runmorph.com