Privacy Policy · effective 14 October 2026
Your runs are not our business.
Vanoor is a running app for iPhone and Apple Watch made by a single independent developer. It has no account system, no third-party analytics SDK, no advertising and no server of its own that stores your data. This page explains, plainly, what happens to your data — in the app and on this website. It is written for the whole world: Vanoor is sold in every App Store country, and the same rules apply wherever you run.
Who we are
Vanoor and vanoor.app are made and run by Machán Félix, an independent developer
and sole trader in Budapest, Hungary — the data controller in GDPR terms.
Address: 1063 Budapest, Szinyei Merse utca 10., alagsor 2., Hungary
E-mail: hello@vanoor.app
Company details are in the imprint.
What the app processes, and where it stays
| Data | Used for | Where it lives |
|---|---|---|
| Location during a run | Showing your position on the route, recording the route, distance and pace. On runs with the iPhone alone, the iPhone records them also while its screen is locked. | On your Watch and iPhone; the route is written to Apple Health as part of the workout; optionally mirrored to your private iCloud database |
| Heart rate, calories, cadence and running dynamics (vertical oscillation, ground contact time, stride length, power) | Live metrics, zones and the run summary | Apple Health and Vanoor's local storage on your devices. Never uploaded to iCloud by Vanoor. |
| Routes you import or plan | Following them on the Watch or the iPhone | On your devices; optionally in your private iCloud database |
| Your first name and age (optional) | Greeting you, and calculating default heart-rate zones | On your devices only |
| Settings and screen layouts | Configuring the run screens | On your devices; optionally in your private iCloud database |
| Trial start date and purchase status | Measuring the 7-day free trial and unlocking Vanoor Pro | On your devices (Keychain) and with Apple's App Store; the developer sees no purchase or payment details |
During a run, Vanoor reads your live heart rate (and, on the Watch, your running dynamics) to show them on the screen. On runs with the iPhone alone, time, distance and pace can also appear on the Lock Screen and in the Dynamic Island (Live Activity); you can turn this off in Settings. Afterwards, Vanoor reads back from Apple Health only the workouts it recorded itself — the query is limited to Vanoor's own entries, so other apps' workouts and your other health data are never fetched. Health data is never used for advertising, marketing or profiling.
Why we may process it, and for how long
Everything in the table above is processed to provide the app you installed (GDPR Article 6(1)(b), performance of a contract). Heart rate and the other body-sensor readings are health data; they are processed only on your own devices and in your own Apple Health store at your request and under your control, and Vanoor never transfers them anywhere — not to the developer, not to iCloud. Data stays for as long as you keep it: delete a run or a route in the app or in Apple Health and it is gone, and deleting the app removes Vanoor's local storage. Copies in your private iCloud database are removed when you delete the item in the app or clear the app's iCloud data in iOS Settings.
Apple services
- Apple Health (HealthKit) stores your workouts under Apple's own privacy terms.
- iCloud (CloudKit) — if you are signed in to iCloud, Vanoor mirrors your routes, settings and recorded runs (route, distance, pace and elevation — without heart rate, calories, cadence or running dynamics) into your private iCloud database so they survive a reinstall or a new iPhone. This database belongs to your Apple ID; the developer has no access to it.
- Apple Maps (MapKit) provides the map imagery, place search and walking routes in the route planner and on the Watch. Map requests go from your device to Apple under Apple's privacy policy.
- App Store handles the trial-to-purchase step and the purchase itself; the developer never sees your payment details or your Apple ID.
Strava (optional)
If you connect Strava in Settings, Vanoor uploads the runs you record directly from your iPhone to Strava's API. That is the only direction: Vanoor reads nothing from your Strava account beyond your name, which it shows only to you. The authorisation tokens are stored in your device's Keychain. Nothing passes through a Vanoor server. You can disconnect at any time in Settings, or revoke Vanoor at strava.com → Settings → My Apps; either way the tokens and your Strava name are deleted from the device. Strava, Inc. is based in the United States; by connecting it you choose to send your runs there under your own Strava account, and Strava's handling of your data is governed by Strava's privacy policy.
Anonymous usage counts
To make Vanoor better, the iPhone app asks once whether you want to share anonymous usage analytics. Only if you say yes, it sends a handful of one-time milestones to an analytics server in the EU run by Felix Machan, sole trader: first launch, onboarding finished, first route added, first workout planned, Watch app ready, first route on the Watch, first run finished, paywall seen, free week ended, purchase started, purchase completed, an event opened and a challenge joined (with the event's name), and each tip (Settings → Support Vanoor). Once a day it also sends a short status: whether the install is in its free week (and how many days are left), the free week has ended, or Vanoor Pro is unlocked. Each milestone is sent at most once per install; every message carries only the app version, how many days since the first use, a distance range for the first run (for example "5–10 km"), whether it was recorded on the Watch or the iPhone, whether you said in the welcome screen that you have an Apple Watch, and your language and screen size; for a purchase or a tip, also which product it was and the price and currency the App Store charged. The messages of one install are tied together by a random ID the app creates for this purpose only; it is not your Apple ID, device ID or advertising ID, it is deleted with the app, and switching the stats off throws it away. There is no location, no route, no health data and no advertising use; nothing in them identifies you. Like any web request, the server sees the IP address in transit; it works out the country from it and does not store the address. We use this analytics only with your consent (GDPR Article 6(1)(a)) and keep them for at most two years. Until you answer, nothing is sent. You can withdraw your consent at any time in Settings → About → Share anonymous usage stats; the app then sends nothing more and deletes the random ID and anything not yet sent.
Events and challenges
Now and then the iPhone app loads the list of current events and challenges from vanoor.app, the same way a browser loads a page. The request carries nothing about you or your runs. Whether you join a challenge, how far you are and which badges you earned are worked out on your iPhone from the runs Vanoor saved there, and they stay on your iPhone.
If you write to us
E-mail to hello@vanoor.app is the only way personal data reaches the developer. We keep your message and our reply for as long as it takes to handle your request and to document that we did (legitimate interest, GDPR Article 6(1)(f)), then delete it. The mailbox is hosted by Apple (iCloud Mail). The app has a hidden diagnostics screen (hold the version number in Settings → About) that can share a plain-text log — device model, iOS and watchOS versions, app version, and sync and workout-session events with their timings, never coordinates, heart rate or route contents. It is sent only if you choose to share it, and we use it only to help you.
What we do not do
- No account, no sign-up, no e-mail collection.
- No third-party analytics, crash-reporting or advertising SDKs in the app.
- No tracking across apps or websites, and no sale or sharing of data.
- No server operated by the developer receives your location, health or workout data.
This website
vanoor.app is a static site hosted by NextHub. It counts visits with an analytics server in the EU run by Felix Machan, sole trader: cookieless and privacy-first, it records the page, the referring site, any campaign tags in the link (utm_*) and anonymous interaction counts (App Store and outbound link clicks, calculator use, opened FAQ answers, whether a guide was read to the end, taps on "would you use it on Android"), without fingerprinting visitors or storing personal data. The site sets no cookies and stores nothing on your device. Links to the App Store carry a campaign label (for example the referring site) so Apple's aggregated App Store statistics can show which campaigns lead to downloads. The hosting provider and the DNS/network edge in front of it see the IP address of requests as part of serving the pages, as any website does.
Your rights
Under the GDPR you can ask what data we hold about you, have it corrected or deleted, restrict or object to its processing, and take it with you. Because Vanoor keeps your data on your own devices and in your own Apple and Strava accounts, in practice you exercise these rights directly: delete a run or route in the app or in Apple Health, export a route as GPX from the app, disconnect Strava, or delete the app. For anything else write to hello@vanoor.app; we answer within one month. You may also lodge a complaint with the Hungarian data protection authority (NAIH, naih.hu) or your local supervisory authority. If the law where you live gives you further rights — for example in the United Kingdom, Switzerland, Brazil or California — you can exercise them at the same address; we do not sell or share personal data in the sense of any of those laws.
Children
Vanoor is not directed at children under 16 and does not knowingly collect data from them.
Changes
If this policy changes, the new version is published here with a new effective date. Material changes will be noted in the app's release notes.