Privacy Policy · effective 14 October 2026

Your runs are not our business.

Vanoor is a running app for iPhone and Apple Watch made by a single independent developer. It has no account system, no third-party analytics SDK, no advertising and no server of its own that stores your data. This page explains, plainly, what happens to your data — in the app and on this website. It is written for the whole world: Vanoor is sold in every App Store country, and the same rules apply wherever you run.

Short version: your workouts are saved to Apple Health and to Vanoor's own storage on your devices. Your routes stay on your devices. If you use iCloud, copies go to your private iCloud database, which we cannot access. The only third party that ever receives your runs is Strava — and only if you connect it yourself. The developer receives nothing about you: only the anonymous usage counts below, and only if you agree.

Who we are

Vanoor and vanoor.app are made and run by Machán Félix, an independent developer and sole trader in Budapest, Hungary — the data controller in GDPR terms.
Address: 1063 Budapest, Szinyei Merse utca 10., alagsor 2., Hungary
E-mail: hello@vanoor.app
Company details are in the imprint.

What the app processes, and where it stays

DataUsed forWhere it lives
Location during a runShowing your position on the route, recording the route, distance and pace. On runs with the iPhone alone, the iPhone records them also while its screen is locked.On your Watch and iPhone; the route is written to Apple Health as part of the workout; optionally mirrored to your private iCloud database
Heart rate, calories, cadence and running dynamics (vertical oscillation, ground contact time, stride length, power)Live metrics, zones and the run summaryApple Health and Vanoor's local storage on your devices. Never uploaded to iCloud by Vanoor.
Routes you import or planFollowing them on the Watch or the iPhoneOn your devices; optionally in your private iCloud database
Your first name and age (optional)Greeting you, and calculating default heart-rate zonesOn your devices only
Settings and screen layoutsConfiguring the run screensOn your devices; optionally in your private iCloud database
Trial start date and purchase statusMeasuring the 7-day free trial and unlocking Vanoor ProOn your devices (Keychain) and with Apple's App Store; the developer sees no purchase or payment details

During a run, Vanoor reads your live heart rate (and, on the Watch, your running dynamics) to show them on the screen. On runs with the iPhone alone, time, distance and pace can also appear on the Lock Screen and in the Dynamic Island (Live Activity); you can turn this off in Settings. Afterwards, Vanoor reads back from Apple Health only the workouts it recorded itself — the query is limited to Vanoor's own entries, so other apps' workouts and your other health data are never fetched. Health data is never used for advertising, marketing or profiling.

Why we may process it, and for how long

Everything in the table above is processed to provide the app you installed (GDPR Article 6(1)(b), performance of a contract). Heart rate and the other body-sensor readings are health data; they are processed only on your own devices and in your own Apple Health store at your request and under your control, and Vanoor never transfers them anywhere — not to the developer, not to iCloud. Data stays for as long as you keep it: delete a run or a route in the app or in Apple Health and it is gone, and deleting the app removes Vanoor's local storage. Copies in your private iCloud database are removed when you delete the item in the app or clear the app's iCloud data in iOS Settings.

Apple services

Strava (optional)

If you connect Strava in Settings, Vanoor uploads the runs you record directly from your iPhone to Strava's API. That is the only direction: Vanoor reads nothing from your Strava account beyond your name, which it shows only to you. The authorisation tokens are stored in your device's Keychain. Nothing passes through a Vanoor server. You can disconnect at any time in Settings, or revoke Vanoor at strava.com → Settings → My Apps; either way the tokens and your Strava name are deleted from the device. Strava, Inc. is based in the United States; by connecting it you choose to send your runs there under your own Strava account, and Strava's handling of your data is governed by Strava's privacy policy.

Anonymous usage counts

To make Vanoor better, the iPhone app asks once whether you want to share anonymous usage analytics. Only if you say yes, it sends a handful of one-time milestones to an analytics server in the EU run by Felix Machan, sole trader: first launch, onboarding finished, first route added, first workout planned, Watch app ready, first route on the Watch, first run finished, paywall seen, free week ended, purchase started, purchase completed, an event opened and a challenge joined (with the event's name), and each tip (Settings → Support Vanoor). Once a day it also sends a short status: whether the install is in its free week (and how many days are left), the free week has ended, or Vanoor Pro is unlocked. Each milestone is sent at most once per install; every message carries only the app version, how many days since the first use, a distance range for the first run (for example "5–10 km"), whether it was recorded on the Watch or the iPhone, whether you said in the welcome screen that you have an Apple Watch, and your language and screen size; for a purchase or a tip, also which product it was and the price and currency the App Store charged. The messages of one install are tied together by a random ID the app creates for this purpose only; it is not your Apple ID, device ID or advertising ID, it is deleted with the app, and switching the stats off throws it away. There is no location, no route, no health data and no advertising use; nothing in them identifies you. Like any web request, the server sees the IP address in transit; it works out the country from it and does not store the address. We use this analytics only with your consent (GDPR Article 6(1)(a)) and keep them for at most two years. Until you answer, nothing is sent. You can withdraw your consent at any time in Settings → About → Share anonymous usage stats; the app then sends nothing more and deletes the random ID and anything not yet sent.

Events and challenges

Now and then the iPhone app loads the list of current events and challenges from vanoor.app, the same way a browser loads a page. The request carries nothing about you or your runs. Whether you join a challenge, how far you are and which badges you earned are worked out on your iPhone from the runs Vanoor saved there, and they stay on your iPhone.

If you write to us

E-mail to hello@vanoor.app is the only way personal data reaches the developer. We keep your message and our reply for as long as it takes to handle your request and to document that we did (legitimate interest, GDPR Article 6(1)(f)), then delete it. The mailbox is hosted by Apple (iCloud Mail). The app has a hidden diagnostics screen (hold the version number in Settings → About) that can share a plain-text log — device model, iOS and watchOS versions, app version, and sync and workout-session events with their timings, never coordinates, heart rate or route contents. It is sent only if you choose to share it, and we use it only to help you.

What we do not do

This website

vanoor.app is a static site hosted by NextHub. It counts visits with an analytics server in the EU run by Felix Machan, sole trader: cookieless and privacy-first, it records the page, the referring site, any campaign tags in the link (utm_*) and anonymous interaction counts (App Store and outbound link clicks, calculator use, opened FAQ answers, whether a guide was read to the end, taps on "would you use it on Android"), without fingerprinting visitors or storing personal data. The site sets no cookies and stores nothing on your device. Links to the App Store carry a campaign label (for example the referring site) so Apple's aggregated App Store statistics can show which campaigns lead to downloads. The hosting provider and the DNS/network edge in front of it see the IP address of requests as part of serving the pages, as any website does.

Your rights

Under the GDPR you can ask what data we hold about you, have it corrected or deleted, restrict or object to its processing, and take it with you. Because Vanoor keeps your data on your own devices and in your own Apple and Strava accounts, in practice you exercise these rights directly: delete a run or route in the app or in Apple Health, export a route as GPX from the app, disconnect Strava, or delete the app. For anything else write to hello@vanoor.app; we answer within one month. You may also lodge a complaint with the Hungarian data protection authority (NAIH, naih.hu) or your local supervisory authority. If the law where you live gives you further rights — for example in the United Kingdom, Switzerland, Brazil or California — you can exercise them at the same address; we do not sell or share personal data in the sense of any of those laws.

Children

Vanoor is not directed at children under 16 and does not knowingly collect data from them.

Changes

If this policy changes, the new version is published here with a new effective date. Material changes will be noted in the app's release notes.