1. Who we are
26weeks.ai is a product of Renojas Technologies Private Limited (“26weeks.ai”, “we”, “us”, or “our”). We decide how and why your personal data is used, which makes us its controller or data fiduciary under privacy law.
This policy covers our website, our iOS app, and related services (the “Service”).
2. What we collect
What we collect depends on how you use the Service and which permissions you give.
- Account details. Your name, email address, and account identifiers. When you use Sign in with Apple, Apple may give us a private relay address instead of your email. Some older accounts use Google sign-in, which gives us the same basic details.
- Training and onboarding details. Your goals, race dates, schedule, experience, planned and completed workouts, check-ins, perceived effort, recovery notes, and preferences.
- Health details you give us. Such as your age, height, weight, pain or injury history, health conditions, and menstrual cycle or life stage, where you choose to answer.
- Apple Health data (optional). The types you allow, such as workouts, heart rate, effort, sleep, recovery signals, and body measurements. See Apple Health and Apple Workout.
- Location (optional). Your precise location during outdoor activities, used to record your route, distance, pace, and speed. If you allow it, this continues while your screen is locked. The app may also use your location on your device to center the Arena map. We do not collect your location when you are not recording an activity.
- Motion data (optional).Steps, distance, and cadence from Motion & Fitness, used for treadmill sessions and auto-pause.
- Coaching requests. The short text you type in the app when something changes. See AI service providers.
- Group Runs. Your display name, position, route, distance, and time during the run.
- Purchases. Your subscription status and Apple transaction identifiers. Apple processes payment, and we never see your card details.
- Notifications. Your push token and notification preferences, if you turn notifications on.
- Product analytics. Actions you take in the app, your device and app version, linked to your account ID. We do not record your screen. We leave search text, weights, reps, and exercise-level health details out of analytics.
- Crash reports. Our iOS app uses Firebase Crashlytics, a Google service, so we can find and fix crashes. A report includes technical details such as the stack trace, app state at the time of the crash, device model, operating system version, and identifiers for the app installation and session. We do not add your name, email address, or account ID to these reports.
- Website and server logs. Pages you visit, your IP address, and browser details. Our website uses cookies or similar technologies for essential functions and analytics, and respects your browser’s Do Not Track setting. We do not use advertising pixels.
- Messages to us. Whatever you send us when you ask for help.
Your camera, microphone, and photo library are used only when you create clips, photos, or share cards. Those stay on your device unless you choose to share them yourself.
3. How we use it
We use your information to:
- Build your plan and adapt it to your training and recovery
- Record your workouts and show your progress
- Provide coaching and Group Runs
- Manage your subscription and send the notifications you choose
- Keep the Service secure and prevent fraud and abuse
- Provide support and reply to your requests
- Find and fix problems, and understand how the Service is used
- Meet our legal obligations
Legal bases. Where laws such as the EU or UK GDPR apply, we rely on performing our contract with you, your consent (including explicit consent for health data), our legitimate interests in running and improving a secure Service, and our legal obligations. You can withdraw consent at any time. This does not affect anything we did before you withdrew it.
4. Apple Health and Apple Workout
If you connect Apple Health, we read only the data types you allow and use them to build your plan, adjust each day, and show your progress. Data from devices and apps that write to Apple Health, such as Garmin, COROS, or WHOOP, reaches us this way. We do not connect directly to those accounts.
If you allow it, we save the workouts you record, including route, distance, heart rate, energy, and effort, and your breathwork and meditation sessions, to Apple Health. If you turn on Apple Workout scheduling, we send your planned workouts to Apple’s Workout app on your Apple Watch.
We do not use Apple Health data for advertising or marketing, and we do not sell it. You can change or remove our access at any time in iOS Settings or the Health app.
5. AI service providers
We use AI service providers for coaching. When you tell us in the app that something has changed, they check what you type for signs of illness, pain, or a safety concern, work out what you are asking for, and can suggest a short follow-up question. Your plan itself is not written by AI. Our own rules-based engine sets its dates, load, and sessions.
Your consent. We show you an in-app disclosure and ask you to accept it before your first plan is built. You can turn AI off later in Settings. Your plan keeps working, and coaching uses our own rules instead.
What we send. The text you type, up to 280 characters, with basic context such as the screen, date, and internal identifiers for the session or activity it relates to. We do not include your name, email address, or Apple Health records. Your text is sent as you wrote it, so please leave out anything you would rather not share.
Who receives it. We currently use OpenAI. Our in-app disclosure also names AWS, Gemini, and Anthropic. We may use them for the same purposes, and we will list any that we start using here.
How it is handled. We send requests with OpenAI’s storage setting turned off, and we do not keep your text or the model’s reply in our database, logs, analytics, or crash reports. OpenAI does not use this data to train its models. OpenAI may keep API data for up to 30 days to monitor for abuse, or longer if the law requires it. We do not use this data for advertising, and we do not sell it.
6. What other people can see
Group Runs. Group members can see each other’s display names, positions, routes, and progress during the run.
Sharing you do yourself. Activity cards and clips go wherever you send them, and that app’s privacy policy then applies.
7. Who we share it with
We do not sell your personal information, and we do not track you across other companies’ apps and websites for advertising. We share information with service providers that work on our behalf, only as needed to run the Service:
- Amazon Web Services: hosting
- MongoDB Atlas: database hosting
- Google Firebase: sign-in, push notifications, and crash reporting
- OpenAI: AI for coaching, if you accept it
- PostHog: product analytics, hosted in the EU
- Mapbox: maps
- Apple: sign-in, In-App Purchase, push notifications, Apple Health, and Apple Workout
We may also share information when the law requires it, to protect people’s rights and safety, or as part of a merger, sale, or reorganization. We will tell you if your information becomes subject to a different privacy policy as a result.
A small number of authorized team members can access account and training data, for support, safety, and operations.
8. How long we keep it
- Account and training data: until you delete your account. Deletion in the app removes it from our live systems.
- Crash reports: kept by Firebase for about 90 days.
- Analytics events: these carry an account ID rather than your name or email, and they are not erased automatically when you delete your account. Email us and we will delete them.
- Records we must keep: limited security, audit, transaction, and legal records, for as long as they are needed for those purposes. Backups are overwritten on their normal cycle.
Deleting your account does not remove workouts we saved to Apple Health. You control those in the Health app.
9. Your choices and rights
In the app. You can delete your account under Settings and turn AI off at any time. You can control Health, Location, Motion, Camera, Microphone, Photos, and Notifications in iOS Settings.
By email. You can ask us for a copy of your data, or ask us to correct or delete it, by emailing [email protected] from your account email address. We may need to confirm it is you.
Depending on where you live, you may also have these rights:
- EU, UK, and similar laws: to access, correct, delete, restrict, object to, or move your data, and to complain to your local data protection authority.
- India: to access, correct, and erase your data, to withdraw consent, to nominate someone to act for you, and to raise a grievance with us and then with the Data Protection Board of India.
- US states with privacy laws: to know, access, correct, and delete your data, and not to be treated differently for using these rights. We do not sell or share data for targeted advertising.
10. Security
We use administrative, technical, and physical safeguards to protect your information, including encrypted connections between the app and our servers. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects you, we will notify you and the relevant authorities as the law requires.
11. Age requirement
The Service is for adults. You must be at least 18, or the age of majority where you live if that is higher. We do not knowingly collect personal data from anyone younger. If you believe a child has given us their data, please contact us and we will delete it.
12. International transfers
Your data may be processed outside your country. Our main servers are in the United States, and our service providers operate in other countries, including EU countries. Where the law requires it, we rely on appropriate safeguards, such as standard contractual clauses, for these transfers.
13. Changes to this policy
We may update this policy as the Service changes. The date at the top of this page shows the latest version. If a change is significant, we will tell you in the app or by email before it takes effect.
14. Contact and grievances
Questions, requests, or complaints about privacy? Email [email protected]. We will acknowledge a grievance within 48 hours and aim to resolve it within one month.