PRIVACY POLICY

Effective Date: September 9, 2026

RunCut (“RunCut”, “we”, “us”, or “our”) is a video editor for runners and cyclists. This Privacy Policy explains what information RunCut processes, how it is used, and how you can control your data.

1. How RunCut Processes Your Data

RunCut is designed to process workout data and media locally on your device whenever possible.

The main purpose of collecting workout data is to create dynamic visual overlays, maps, charts, and other elements for your videos. We do not use your workout data for advertising, user profiling, or AI/ML model training.

2. Workout and Health Data

RunCut can use workout data from supported sources, including Apple Health, Strava, and user-imported workout files (FIT, TCX, and GPX).

Depending on the source and the permissions you grant, this may include:

RunCut uses this information to create visual workout overlays and other visualizations in your videos.

We only access the data needed for the features you use and only after you authorize the relevant data source or select a file to import. All user-imported workout files and their telemetry are processed locally on your device and are never uploaded to RunCut’s servers.

Apple Health

On supported devices, RunCut can read workout data from Apple Health after you grant the requested permissions.

Apple Health data is processed locally on your device and is not uploaded to RunCut’s servers for storage or video rendering.

You can change or revoke Apple Health permissions at any time through your device settings.

3. Strava Integration

RunCut allows you to connect your Strava account and import your own activities.

When you authorize RunCut through Strava, we may receive activity information such as:

The exact information available depends on the activity and the permissions granted through Strava.

RunCut uses this data to create dynamic workout visualizations and overlays for your videos.

Strava activity data accessed through RunCut is used only for the authenticated athlete’s own experience. RunCut does not use one athlete’s Strava activity data to provide information to another athlete.

How Strava Data Is Processed

Most workout processing and video rendering take place on your device.

For the Strava integration, RunCut uses its server infrastructure to handle OAuth authentication, receive activity event notifications from Strava, and temporarily transfer activity data to your device when required.

Strava activity data may be held temporarily on our servers for up to 24 hours to complete this transfer and support the integration. It is not permanently stored on our servers.

RunCut does not use Strava data for advertising, user profiling, or AI/ML model training.

Strava may independently collect and process API usage information in accordance with its own policies. For more information, please see Strava’s Privacy Policy and API Policy.

4. Photos and Videos

Photos and videos that you select for editing are processed locally on your device.

RunCut does not upload your original videos or photos to our servers for video processing or storage.

Video decoding, overlay composition, and video rendering are performed on your device. Your exported videos are saved to the location you choose, such as your device’s photo library or another destination through the system share sheet.

5. Server and Temporary Data

RunCut uses a small amount of server infrastructure to support features such as the Strava integration and push notifications.

Depending on the feature you use, our servers may temporarily process:

Temporary Strava activity data is automatically removed when it is no longer needed and is not retained as a permanent workout database.

We do not sell, rent, or monetize your personal data.

6. Disconnecting Strava and Deleting Data

You can disconnect your Strava account from RunCut at any time from:
Hub → Connected Accounts → Disconnect

When you disconnect Strava through RunCut, the app revokes its authorization with Strava and removes the Strava data and temporary server-side data associated with the connection.

You can also revoke RunCut’s access directly from your Strava account settings. When RunCut receives a deauthorization notification from Strava, we remove the associated Strava access credentials and temporary Strava data from our systems and notify the app so that locally stored imported Strava activity data can be removed.

If you delete an activity from Strava, RunCut will remove the corresponding Strava activity data from our systems when we receive the relevant notification from Strava.

You can also contact us at hi@runcut.app to request deletion of your personal data or Strava connection.

7. Push Notifications

RunCut uses Apple Push Notification service (APNs) on iOS and Firebase Cloud Messaging (FCM) on Android to deliver notifications.

These services may process a device push token and information necessary to deliver a notification to your device.

Push notifications are used for app functionality and are not used for third-party advertising or behavioral tracking.

You can disable RunCut notifications at any time through your device settings.

8. Diagnostics and Crash Reporting

RunCut may use services such as Firebase Crashlytics to identify crashes, diagnose technical problems, and improve app stability.

Depending on the service and your device, diagnostic information may include:

These services are not used by RunCut to collect your workout metrics, GPS routes, photos, or videos for analytics purposes.

9. Security

We use reasonable technical and organizational measures to protect the information processed by RunCut.

Data transmitted between RunCut and our servers is protected using HTTPS/TLS. Authentication credentials and other sensitive information stored on the device use the security mechanisms provided by the operating system.

Because most workout processing and video rendering happens locally, your original photos, videos, and workout data do not need to be uploaded to RunCut for the core editing workflow.

No method of storing or transmitting information can be guaranteed to be completely secure, but we work to protect the data we process and to minimize the amount of personal data that leaves your device.

10. Children’s Privacy

RunCut is not directed to children under 13 years of age, or the applicable minimum age in the jurisdiction where the user lives.

We do not knowingly collect personal information from children below the applicable age.

If you believe that a child has provided personal information to RunCut, please contact us so that we can take appropriate action.

11. Your Choices

Depending on the features you use, you can control your data by:

12. Changes to This Privacy Policy

We may update this Privacy Policy when our app, data practices, or legal requirements change.

When we make changes, we will update the Effective Date at the top of this page. If a change materially affects how we use personal data, we will provide additional notice where required by applicable law.

13. Contact

If you have questions about this Privacy Policy, want to request deletion of your personal data, or have any privacy-related concerns, please contact us:

hi@runcut.app