Nothing leaves your phone.

Why it matters for a health app

Your runs say where you were, when, and how hard your heart was working. That is not marketing data. Runtile was built so that question never comes up: there is no account to create, no server to send anything to, and no analytics library watching what you tap.

What that means in practice

• No sign up. Open the app, grant Health access, see your runs.
• Almost no network. Runtile has no server to talk to. The one exception: to show a place name like "Eixample, Barcelona" on a run, the points where that run started and finished are sent to Apple Maps, once, when you open the run. Not the route, not your name, nothing else.
• Read only. Runtile reads Health and never writes to it. The write entitlement exists only in developer builds, to seed test data on the simulator.
• Local storage. Shoes, goals and settings are stored on your iPhone and included in your normal iCloud device backup. A Strava archive you import is read once and not kept.
• Local notifications. The shoe prompt and the retirement warning are scheduled on the device. There is no push server.
• Purchases through Apple. Runtile only sees an anonymous entitlement, never your payment details.
• Delete all data in Settings wipes everything Runtile stored, and says out loud that Health is untouched.

The privacy label

On the App Store, Runtile's privacy label says Data Not Collected. Nothing you do in the app is collected by us, because there is nowhere for it to go.

Read the full privacy policy.