What run4health stores about you

Plain version, because you deserve to know before you sign up.

What we keep

• Your name and email address — so the app knows who you are and your progress stays yours.
• Your password, hashed — scrambled with scrypt so that even we cannot read it. Nobody here can see or recover your password; if you lose it, it gets replaced, not looked up.
• Which sessions you have ticked off, and when.
• The runs you record — only when you tap Record: the route your phone's GPS traced, when you started, how long and how far. That route is a precise record of where you run, often from your own front door. Only you can see it, and deleting a run deletes its route.
• Your weight, if you add it — optional, and used for one thing: estimating the calories of the activities you record. Leave it blank and no calories are shown. You can change or clear it in Account.
• The altitude along each route, when your phone reports it, to work out how much you climbed.
• A session token for each browser you sign in from, so you stay signed in.

What we don't keep

No location outside the runs you choose to record — the app never reads your GPS in the background or when you're not recording. No heart rate, no health records, no device data, no analytics, no advertising identifiers. There are no third-party trackers on any page — the app loads nothing from anyone else's servers.

The map

When the map is switched on, it comes from Apple Maps. To draw it, your phone asks Apple for the map of the area on screen — so Apple sees roughly where you are while a map is showing, the same as when you open Apple Maps itself. Your route, times and account are never sent to Apple; the line on top is drawn by this app.

Where it lives

On one server rented from DigitalOcean in New York, in a single database file. It is backed up nightly, and the backups are kept for two weeks. Nothing is shared with, sold to, or sent to anybody.

Who can see it

You, and Angel, who runs the server and can read the database directly. Nobody else can see your progress: each account only ever shows its own.

Anyone with the link can create an account, so treat this as a private space among people who know each other rather than a vault.

Taking it with you

Your account screen has Download your data: a file with your account and every session you've ticked off, with dates. No permission needed, no waiting on anyone.

Deleting it

Also on your account screen: Delete your account. You type your email address to confirm, and your name, your email and every tick are removed from the database immediately. It cannot be undone, and you don't have to ask anybody.

One honest caveat: your data stays in the nightly backups for up to fourteen days before those expire. That window is what protects everyone from an accidental deletion — including yours.

Last updated 8 September 2026. Sign in