SimplyRunFaster Privacy Policy

Effective Date: June 16, 2026 · Last Updated: June 16, 2026

1. Who We Are

SimplyRunFaster (“we,” “us,” or “our”) is a personalized running coaching platform operated as a sole proprietorship by Will Musto. Our platform is accessible at simplyrunfaster.com and provides customized training plans, coach messaging, and progress tracking services.

For privacy-related inquiries, contact us at:

privacy@simplyrunfaster.com

2. Scope of This Policy

This Privacy Policy applies to all users of SimplyRunFaster, including athletes and coaches, regardless of where they are located. We are committed to complying with applicable privacy laws including:

• United States: California Consumer Privacy Act (CCPA) and applicable federal privacy law
• European Union / EEA: General Data Protection Regulation (GDPR)
• United Kingdom: UK GDPR
• Canada: Personal Information Protection and Electronic Documents Act (PIPEDA)
• Mexico: Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP)

3. Age Requirements and Parental Consent

SimplyRunFaster is available to users of all ages. Users under the age of 18 must have parental or guardian consent to use the platform. By creating an account, you confirm that you are 18 years of age or older, or that you have obtained verifiable parental or guardian consent.

We do not knowingly collect personal data from children under 13 without verifiable parental consent. If you believe we have collected data from a child under 13 without consent, contact us immediately at privacy@simplyrunfaster.com and we will delete it promptly.

4. Data We Collect

Account and profile data:

• Name, email address, password (stored as a one-way hash — we cannot read your password)
• Phone number (optional, for SMS notifications if enabled)
• Timezone and theme preference

Training and health data:

• Goal race date, goal race distance, goal finish time
• Current weekly training volume, training history, experience level
• Typical easy pace, availability and scheduling preferences
• Must-off days, injury history
• Pace zones and heart rate zones (derived or imported)
• Completed workout data including duration, distance, RPE, and session notes

Billing data:

• Subscription status and billing interval
• We do not store payment card numbers or full payment details — these are handled exclusively by Stripe (see Section 7)

Communications:

• Messages between athletes and coaches within the platform
• Notification preferences

Technical data:

• IP address, browser type, device type
• Web Push notification subscription tokens
• Session cookies for authentication

5. How We Use Your Data

We use your data to:

• Create and manage your account
• Generate personalized training plans
• Facilitate communication between athletes and coaches
• Send notifications about your training plan, messages, and account
• Process subscription payments
• Sync workouts to and from connected third-party platforms (with your consent)
• Improve the platform based on aggregate, anonymized usage patterns
• Comply with legal obligations

Legal basis for processing (GDPR / UK GDPR):

• Contract performance: Processing necessary to deliver the coaching services you signed up for
• Legitimate interests: Platform security, fraud prevention, and service improvement
• Consent: Push notifications, optional integrations (e.g. Intervals.icu), and marketing communications
• Legal obligation: Compliance with applicable law

Legal basis for processing (LFPDPPP — Mexico):

We process your data with your consent, as necessary for the performance of our contractual relationship, and as required by applicable law. This notice (aviso de privacidad) constitutes the required disclosure under Mexican law.

6. Data Sharing

We do not sell your personal data. We do not share your data with advertisers.

We share data only with the following categories of service providers, strictly for the purpose of operating the platform:

Each provider is bound by data processing terms consistent with applicable law. Stripe maintains a GDPR-compliant Data Processing Agreement automatically included in their terms of service. International data transfers from the EU/EEA to the United States are covered by Standard Contractual Clauses where required.

We may disclose your data if required by law, court order, or to protect the rights and safety of our users.

7. Payment Data

All payment processing is handled by Stripe, LLC. When you enter payment information, it is transmitted directly to Stripe over an encrypted connection. SimplyRunFaster stores only your Stripe customer ID and subscription status — never your card number, CVV, or full billing details. Stripe’s privacy policy is available at stripe.com/privacy.

8. Third-Party Integrations

Intervals.icu (optional):

If you choose to connect your Intervals.icu account, we will access your Intervals.icu calendar to push structured workouts and receive completed activity data. This integration requires your explicit authorization via Intervals.icu’s OAuth consent flow. You can revoke this access at any time from your Settings page or directly within Intervals.icu.

We do not access any Intervals.icu data beyond what is necessary to push planned workouts and receive completed activity confirmations.

9. Data Retention

We retain your data for as long as your account is active. When your account is cancelled or subscription lapses:

• Your training data, messages, and profile are retained for 90 days to allow reactivation
• After 90 days, your personal data is permanently deleted from our systems
• Billing records are retained for 7 years as required for tax and accounting compliance — these records contain only transaction amounts and dates, not payment card details
• Anonymized, aggregate training data (with no personally identifying information) may be retained indefinitely for platform improvement purposes

You may request deletion of your data at any time by emailing privacy@simplyrunfaster.com. We will process deletion requests within 30 days. Note that billing records required for legal compliance cannot be deleted within the legally mandated retention period.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

All users:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent for optional processing (e.g. push notifications, third-party integrations)

EU / UK users (GDPR / UK GDPR):

• Data portability — receive your data in a machine-readable format
• Object to processing based on legitimate interests
• Restrict processing in certain circumstances
• Lodge a complaint with your local supervisory authority

California users (CCPA):

• Know what personal data we collect and how it is used
• Delete your personal data
• Opt out of the sale of personal data (we do not sell personal data)
• Non-discrimination for exercising your privacy rights

Canadian users (PIPEDA):

• Access your personal data and challenge its accuracy
• Withdraw consent (subject to legal or contractual restrictions)
• File a complaint with the Office of the Privacy Commissioner of Canada

Mexican users (LFPDPPP):

• Access, rectify, cancel, or oppose (derechos ARCO) the processing of your personal data by contacting us at privacy@simplyrunfaster.com
• Revoke your consent at any time
• Limit the use or disclosure of your data

To exercise any of these rights, contact us at privacy@simplyrunfaster.com. We will respond within 30 days (or within the timeframe required by applicable law).

11. Cookies and Tracking

SimplyRunFaster uses session cookies solely for authentication purposes — to keep you logged in during your session. We do not use tracking cookies, advertising cookies, or analytics cookies. We do not use Google Analytics or any third-party analytics service.

Web Push notification tokens are stored to deliver notifications you have opted into. You can revoke push notification permission at any time through your browser or device settings.

12. Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• HTTPS encryption for all data in transit
• Passwords stored as one-way hashes (bcrypt)
• Payment data handled exclusively by PCI-compliant Stripe
• Access to production data restricted to authorized personnel only

No method of transmission or storage is 100% secure. If we become aware of a data breach affecting your personal data, we will notify you as required by applicable law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notification. The “Last Updated” date at the top of this policy reflects the most recent revision. Continued use of SimplyRunFaster after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

For any privacy-related questions, requests, or complaints:

Email: privacy@simplyrunfaster.com
Operator: Will Musto, SimplyRunFaster
Website: simplyrunfaster.com

EU/UK users may also lodge complaints with their local data protection authority. A list of EU supervisory authorities is available at edpb.europa.eu.

Mexican users may contact the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI) at inai.org.mx.

Canadian users may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.