Legal

Privacy Policy

Last updated: May 15, 2026

Overview

RunMirror ("we", "us", "our") is a personal running reflection tool that connects to your Strava account to help you understand your running history. This Privacy Policy explains what data we collect, how we use it, and how we protect it.

Data We Collect

When you connect your Strava account, we access and store the following data via the Strava API:

Your Strava athlete profile (name, profile photo, location)
Your activity history (runs, distances, times, elevation, heart rate)
Activity names and descriptions (including any personal dedications in titles)
GPS route data for activities where available
Gear (shoe) information
Personal records and segment efforts

We do not collect payment information, passwords, or any data beyond what the Strava API provides.

How We Use Your Data

Your data is used exclusively to power your personal RunMirror experience:

To compute your running persona and identity portrait
To surface milestones, rituals, and patterns in your running history
To generate geographic journey maps of where you have run
To display personal records and performance arcs
To sync new activities automatically via Strava webhooks

Data Storage

Your data is stored securely in a Supabase (PostgreSQL) database. We use industry-standard encryption in transit (HTTPS/TLS) and at rest. Your data is never sold, shared with third parties, or used for advertising purposes.

Strava API Compliance

RunMirror is built on the Strava API and complies with the Strava API Agreement. We only request the minimum scopes necessary: activity:read_all and profile:read_all. We do not write data back to Strava on your behalf.

Data Retention

We retain your data for as long as your account is active. You can request deletion of your data at any time by emailing us at the address below. Upon request, we will delete all stored activities, persona data, and athlete profile information within 30 days.

Revoking Access

You can revoke RunMirror's access to your Strava data at any time by visiting strava.com/settings/apps and disconnecting RunMirror. This will stop any future data sync. To delete your existing stored data, contact us directly.

Cookies and Analytics

RunMirror uses a session cookie to keep you logged in. We do not use third-party analytics, advertising cookies, or tracking pixels. We do not use Google Analytics or any similar service.

Children's Privacy

RunMirror is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of RunMirror after changes constitutes acceptance of the updated policy.

Contact

For privacy questions, data deletion requests, or any concerns:

Balaji Mudduluri
RunMirror
St. Louis, Missouri, USA
balaji@runmirror.app