RunningForm
Legal

Privacy Policy.

Last updated 2026-05-27

Draft. Have legal counsel review before launch.

What we collect

  • Account: email, display name, optional height, experience level, goals.
  • Video frames: still images extracted from the running video you upload, plus the original filename.
  • Derived data: pose landmarks, biomechanical measurements, the AI analysis, and your ratings of it.
  • Basic operational logs: timestamps, error events, and processing status.

We do not store raw video files. Frame extraction happens in your browser and only the extracted JPEGs are uploaded.

How we use it

Solely to deliver the analysis, to operate and improve the service, to communicate with you about your account, and to comply with the law. We do not sell your data. We do not train AI models on your content.

Who processes it on our behalf

We use the following subprocessors:

  • Supabase — authentication, database, frame storage (AWS-backed).
  • Vercel — application hosting and edge delivery.
  • Inngest — background job queue for analysis processing.
  • Anthropic — the AI model that generates the written analysis. Frames and biomechanical measurements are sent to Anthropic's API. Per Anthropic's terms, content sent via the API is not used to train their models and is retained per their stated retention policy.

Retention

Uploaded frames are automatically deleted from our storage 30 days after upload. Your account, profile, derived analysis results, and biomechanics data are retained until you delete a session or close your account. When you close your account, all of the above are removed within seven days.

Your rights

You can:

  • View and edit your profile from the settings page.
  • Delete an individual analysis from your history.
  • Delete your entire account from the settings page; this removes all of your data.
  • Contact us to request a copy of your data or to exercise GDPR / CCPA rights: support@runningform.app.

Cookies

We use first-party cookies for authentication. We do not use third-party advertising or tracking cookies.

Security

All traffic is encrypted in transit (HTTPS). Frames are stored in a Supabase Storage bucket with row-level access controls. Account access is protected by Supabase Auth.

Children

RunningForm is not intended for users under 16. Do not upload video of minors without the consent of a parent or guardian.

Changes

We may update this policy from time to time. Material changes will be communicated by email or in-app notice.

Contact

Privacy questions: support@runningform.app