Privacy Policy

Last updated 18 September 2026

Nuavi films twelve seconds of you running, measures how you move, and builds your training from it. That means we handle a video of you and answers about your body and any pain you have. This page says exactly what we collect, where it goes, how long we keep it, and how you delete it.

1. Who is responsible

The service is provided by Nuavi, operated by Yuval Peleg, Israel (“Nuavi”, “we”). For anything about your data, write to support@areterunner.com.

2. What we collect

  • Account. Your email address and a password, or the identifier and name that Apple or Google share when you sign in with them. Until you create an account, your data is tied to a random identifier stored on your phone.
  • Answers you give us. Your goal and race, your recent times, how often and how far you run, your height, age and sex, where you run, whether you wear a watch, and whether you have pain or past injuries and where. Pain and injury answers are health-related data; we ask for them only with your consent and only to keep the plan safe.
  • Your running video. The short clip you record or choose from your library.
  • Measurements from the video. Cadence, where your foot lands, shin angle, bounce, posture, a few still frames from the clip that show these, and a quality reading of the clip.
  • Your training. The plan we build, the sessions you mark done, how they felt, and any pain you flag.
  • How you use the app. Which onboarding step you reached, when you opened the app, and which screens you used. No advertising identifiers, no cross-app tracking.
  • Purchases. Whether you have an active subscription, from Apple through RevenueCat. Payment happens in the App Store; we never see your card.
  • Optional. A notification token if you turn notifications on. Location only if you use the run recorder and grant it; the recorder is not part of the current plan flow.

3. What happens to your video

This is the part people ask about, so here it is step by step.

  • The clip is uploaded over an encrypted connection to our storage (Supabase, hosted on Amazon Web Services). It is stored under a fingerprint of its contents, not under your name.
  • Our analysis service on Google Cloud (United States) downloads it through a link that expires, finds the position of your joints in each frame, and returns those positions. The clip is not kept there once the analysis returns.
  • From those positions we compute the measurements above and keep them, together with a few still frames, as your review.
  • The clip itself is deleted from our storage within 30 days. An automatic job runs every day to do this.
  • The video is never sent to the service that writes your coaching text (section 4), never shown to other users, never used for advertising, and never sold.

4. Coaching text and the plan

The written parts of your review are produced by OpenAI’s language model from your measurements only: numbers such as cadence and landing distance, and the goal you set. Your name, email and video are not included. OpenAI does not use API data to train its models. Your training plan is built by our own software on our servers from your answers and measurements.

5. Helping improve the analyser (opt-in only)

Our measurements get better with more real clips to test against. In Account you can choose to let us keep a copy of your running clips separated from your account, name and email, for up to 24 months, to test and improve the analysis. This is off unless you turn it on, and you can turn it off at any time; clips kept before that are deleted at your request. Clips kept this way are used only by us, never published.

6. Why we may process your data (legal bases)

  • To provide the service you asked for: the review, the plan, your account and subscription.
  • With your consent: pain and injury answers, the improvement opt-in above, and notifications. You can withdraw consent at any time in the app or by email.
  • Our legitimate interests: keeping the service secure, fixing bugs, and understanding which parts of the app people use, in ways that do not override your rights.

7. Who else sees data

Only companies that process data on our behalf, under contracts that limit them to that:

  • Supabase (database, sign-in, file storage; Amazon Web Services).
  • Google Cloud (the pose analysis service, United States).
  • OpenAI (coaching text from measurements only).
  • RevenueCat and Apple (subscriptions and payment).
  • Vercel (hosting of the app’s web layer and servers).
  • Apple and Google as sign-in providers, if you choose them.

We do not sell personal data, do not share it with advertisers or data brokers, and do not show ads. We would disclose data if the law required it or to protect someone’s safety.

8. Where data is stored

Our providers store data in the European Union and the United States. Israel is recognised by the European Commission as providing adequate protection, and transfers to the United States rely on the providers’ standard contractual clauses or their certification under the EU–US Data Privacy Framework.

9. How long we keep it

  • Running clips: deleted within 30 days (section 3), or up to 24 months only if you opted in under section 5.
  • Measurements, reviews, answers, plan and history: for as long as your account exists.
  • Usage events: up to 24 months.
  • Subscription records: as long as required for accounting and tax law.

Deleting your account (section 10) deletes your account data from our systems within 30 days, except records the law requires us to keep.

10. Your rights and how to use them

  • Delete everything: Profile → Account → Delete account. It works immediately and does not need an email.
  • See, correct, export, or restrict your data, or object to a use of it: email support@areterunner.com. We answer within 30 days and may ask you to confirm it is your account.
  • Withdraw consent at any time in the app or by email; it does not affect what was lawfully done before.
  • Complain to a supervisory authority: in Israel, the Privacy Protection Authority; in the European Union or United Kingdom, your national data protection authority.

11. Security

Data travels encrypted. The database and storage are reachable only from our servers with private keys, never directly from the app. Video links expire. Access is limited to the operator. No system is perfectly secure; if a breach affected you we would tell you and the authorities as the law requires.

12. Age

Nuavi is for people aged 16 and over. We do not knowingly collect data from anyone younger; if you believe we have, email us and we will delete it.

13. Changes

When this policy changes in a way that matters, we tell you in the app before it takes effect. The date at the top is the version you are reading.

14. Contact

Nuavi, operated by Yuval Peleg, Israel. support@areterunner.com