Privacy policy

Hi, I’m Kevin. I built jrny for my own marathon training and hoped it would be useful to other runners too. This policy covers jrny everywhere: the website at jrny.run and the jrny app for iPhone.

The short version: we only collect what jrny needs to work, we never sell your data or use it for advertising, we don’t track you around the internet, and you can delete everything whenever you like. Questions go to hello@jrny.run.

Who we are

jrny is run by Kevin Devine in Ireland. For data protection law (the GDPR), Kevin Devine is the controller of your personal data. Contact: hello@jrny.run.

What we collect

Your account

Your email address, a password (stored only as a secure hash by our database provider), and the name and photo you choose to show. If you sign in with Strava, your Strava name and profile photo.

Your runs, from Strava

When you connect Strava, we read your activities: date and time, distance, duration, pace, elevation, the route (GPS map line, which shows where you ran), splits and, if your watch records it, heart rate. We read the course of a race from the Strava route you link to it. We only read; jrny never posts to Strava.

Heart rate

Heart rate is health data. We use it only to show your effort and heart-rate zones back to you, and only if your runs include it and you choose to use those features. The zones you set are stored with your account.

What you add in jrny

Your journeys (goal race, dates, goal times), tune-up races, planned runs, race-day plans and checklists, and any training plan you upload. A plan you upload (a photo, PDF or text) is read once to turn it into planned runs; see AI below.

Run and race invites

If you share a “Run with me” or “Race with me” link, we store what the link shows (the run or race, a time and a meeting point you type) so the person you send it to can open it. Anyone with the link can see that page.

Photos

The app asks for your camera or photo library only when you choose to put your stats on a photo, or save a share card. The photo stays on your phone; it isn’t uploaded to us.

Usage and device

On the website, Plausible counts page views and feature use without cookies and without identifying you (see below). Our servers keep short-lived technical logs (such as IP address and browser or device type) for security and fixing faults. The app doesn’t include any analytics or advertising SDKs.

What we don’t collect

We don’t track your location: routes come from Strava runs you’ve already recorded. We don’t collect contacts, payment details or advertising IDs.

Why we use it, and on what basis

• To run jrny for you (your account, your weeks, progress, race tools and summaries). Basis: providing the service you signed up for.
• Heart rate: only to show effort and zones to you. Basis: your explicit consent, which you give by connecting Strava and using those features, and can withdraw at any time by disconnecting Strava or deleting your account.
• Emails you need (confirming your address, resetting your password). Basis: providing the service. We don’t send marketing emails without asking.
• Keeping jrny safe and working (security logs, fixing bugs, aggregate usage counts). Basis: our legitimate interest in a secure, working service.

We never sell your data, share it for advertising, or use it to profile you.

Who helps us run jrny

These companies process data for us, only to provide their part of jrny, under data processing terms:

• Supabase: our database and sign-in. Stores your account and training data.
• Netlify: hosts the website and the server that the app talks to.
• Strava: where your runs come from, through Strava’s official API, with your permission.
• Resend: sends account emails (confirmation, password reset).
• Anthropic: reads a training plan you upload and turns it into planned runs. The plan is sent without your name or email and isn’t used to train their models.
• OpenWeather and Open-Meteo: race-day weather for the race location. No personal data.
• Google (Elevation API): elevation for a race course’s map line. No personal data.
• Apple Maps (in the iPhone app) and OpenStreetMap / CARTO (on the website): the map behind a course.
• Plausible Analytics (website only): cookieless, aggregate usage counts. We never send it your email, Strava ID, race names or runs.
• Apple: delivers the app through the App Store and TestFlight.

Some of these companies are based in the United States. Where your data leaves the European Economic Area, it’s protected by the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

Cookies and storage

The website only uses the cookies your sign-in needs, so you stay logged in. No advertising or tracking cookies. The app keeps your sign-in and a copy of your recent runs on your phone so jrny opens quickly.

How long we keep it

As long as you have an account. If you delete your account, we remove your personal data within 30 days (backups roll over within a further 30 days). If you disconnect Strava, we stop reading new runs. Run and race invite links stop working when you delete your account.

Your rights

You can ask to see, correct, export or delete your data, object to or restrict how we use it, and withdraw consent at any time. Email hello@jrny.run and we’ll reply within 30 days. You can disconnect Strava in jrny’s settings, or from Strava’s own settings under My Apps.

If you’re unhappy with how we handle your data, you can complain to the Data Protection Commission in Ireland (dataprotection.ie) or your local data protection authority.

Keeping it safe

Data is encrypted in transit (HTTPS) and at rest, and access is limited to what’s needed to run jrny. Each account can only reach its own data.

Children

jrny is for people aged 16 and over. We don’t knowingly collect data from anyone younger.

Changes

If we change this policy, we’ll update the date at the top, and tell you in the app or by email if the change is significant.

Contact

Kevin Devine, jrny, Ireland. hello@jrny.run