Privacy Policy

Samedia AS, Norway, is the controller for personal data processed in RunTaste. Organisation number: [to be confirmed before launch]. Registered address: [to be confirmed before launch]. Privacy contact: [contact email to be confirmed before launch].

• Account: your email address, an encrypted password or the fact that you signed in with Google, and when you accepted our terms.
• Your shoes: the shoes you add, nicknames, sizes, mileage you enter, and whether you own or want to try them.
• Your taste: ratings, what you liked and disliked about a shoe, what you use it for, your fit and feel preferences, and your usual size.
• Your reactions: shoes you saved as Want to Try, shoes you passed on, and the reasons you gave.
• Strava, if you connect it: your Strava athlete ID and first name, the shoes in your Strava profile with their total distance, and — if you allow activities — basic facts about your runs. See “Strava” below.
• Usage events: which key steps you complete in the app, recorded only if you accept optional analytics.
• Technical data: standard server logs from our hosting and backend providers, which include IP address and browser type, used to keep the service secure and working.

We do not ask you for health data. The one exception is optional: if you connect Strava, the average heart rate of a run is only stored if you explicitly agree to it. We do not run advertising or third-party tracking cookies.

• To give you an account and keep you signed in — necessary to perform our agreement with you (GDPR art. 6(1)(b)).
• To learn your taste and generate recommendations — the core of the service, also art. 6(1)(b).
• To import your shoes and runs from Strava when you connect it, keep mileage up to date and show your stats — because you ask us to, art. 6(1)(b). Average heart rate only with your explicit consent (art. 9(2)(a)), which you can withdraw at any time.
• To keep the service secure, prevent abuse and fix faults — our legitimate interest (art. 6(1)(f)).
• To measure how the product is used so we can improve it — your consent (art. 6(1)(a)), which you can give or withdraw from the cookie banner and the account menu.
• To meet legal obligations such as accounting rules — art. 6(1)(c).

Connecting Strava is optional. When you connect, Strava asks you which permissions to give RunTaste, and you can change them or disconnect at any time, in RunTaste or in your Strava settings.

• Connection: the access tokens Strava gives us, which permissions you granted, your Strava athlete ID, your first name and when we last synced. Tokens are kept on our servers and never sent to your browser or phone.
• Shoes: the name and total distance of each shoe in your Strava profile, used to add pairs to My Shoes and keep their mileage current. Shoes that disappear from your Strava profile are marked as retired.
• Runs, only if you allow activities: for runs from the last two years, the date and start time, distance, moving time, whether it was a road, trail or virtual run, Strava's run tag (race, long run or workout) and which shoe you wore. We use this for your stats, “weeks left” estimates and the order of your rotation.
• Heart rate, only if you also explicitly agree: the average heart rate of each run. You give or withdraw this consent with its own switch on the Strava tab in My Shoes. Without it we don't store heart rate, and switching it off deletes every value we stored.

We never store routes, maps or GPS data, run titles, descriptions, photos, other sports, or anything about other athletes. Strava's activity list includes some of these, and we drop them the moment it arrives. Your runs are only used for your own stats and are not shared with anyone. Strava's own privacy policy covers the data Strava holds.

When you disconnect Strava or delete your account, we delete the stored tokens and all runs we have read right away. If you revoke RunTaste's access in Strava instead, we do the same as soon as Strava tells us or refuses our next request. Shoes you already added to My Shoes stay there until you remove them.

Necessary storage keeps you signed in and remembers your privacy choice. It cannot be turned off without breaking sign-in. The app also keeps a few small notes on your device, such as what the last Strava sync brought in and which new shoes you dismissed, so it doesn't show you the same thing twice. Optional analytics storage records the usage events described above and is only used if you accept. You can change your choice at any time from the account menu under “Cookie choices”.

We use a small number of providers who process data on our instructions under data processing agreements: our application hosting and backend platform (which also handles sign-in and the database), and Google, if you choose to sign in with a Google account. If you connect Strava, we fetch your data from Strava on your request; Strava is a separate service with its own terms and privacy policy, not a processor for us. Where data is transferred outside the EU/EEA, it is covered by the European Commission's standard contractual clauses.

We do not sell your personal data and we do not share it with advertisers.

Your account data lives as long as you have an account. When you delete your account from the account menu, your shoes, ratings, preferences, reactions, usage events and anything we read from Strava are deleted along with the login itself. Strava data is also deleted as soon as you disconnect Strava. Technical logs at our providers are kept for a short period for security purposes, and data we must keep for legal reasons is kept for the required period.

• See what we hold about you, and get a copy.
• Correct anything that is wrong.
• Delete your account and data — instantly, from the account menu.
• Withdraw your analytics consent at any time.
• Withdraw your heart-rate consent at any time, from the Strava tab in My Shoes.
• Object to or restrict processing based on our legitimate interest.
• Complain to the Norwegian Data Protection Authority (Datatilsynet) if you think we handle your data wrongly.

Contact us at [contact email to be confirmed before launch] to use any of these rights.

RunTaste is not intended for children under 16, and we do not knowingly collect their data.

We will update this page as the product develops and note the date at the top. If a change significantly affects you, we will tell you in the app or by email.

See also our Terms of Service.