Privacy policy

Harefoot is an Apple Watch and iPhone running app. This page describes what it does with your data.

In short

• Harefoot has no account with us, no analytics, no advertising and no tracking.
• Your runs stay on your Apple Watch and iPhone, and in Apple Health if you allow it. They go only to the services you connect (intervals.icu, Strava), straight from your iPhone.
• The developer receives none of your data. The one exception is the Strava sign-in requests below, which this website passes on to Strava without keeping them.

Apple Health

• During a run the watch reads your heart rate and running power, and saves the run to Apple Health as a running workout with its distance, route and laps. After a run, the effort you rate is added to it.
• If you allow it in Season, the iPhone reads the running workouts other apps saved to Apple Health, with their distance and heart rate, to count them in your season. They stay on your iPhone.
• Harefoot never sends Apple Health data anywhere except as part of the run files you upload to intervals.icu or Strava.

Signing in to intervals.icu

• Harefoot uses intervals.icu's OAuth sign-in with PKCE. You sign in on intervals.icu's own page, so Harefoot never sees your intervals.icu password.
• Harefoot asks for these permissions; you can untick any of them on the consent page: ACTIVITY:WRITE to upload your runs, check your recent activities for duplicates and import your past runs into Season; CALENDAR:WRITE to read your planned workouts and races and add the workouts you build; LIBRARY:READ for your workout library and training plans; WELLNESS:READ for fitness, fatigue and form in Season; SETTINGS:READ for your thresholds, zones and units. Harefoot needs uploads and the calendar; the rest only turn features on.
• The access token that intervals.icu returns is stored only in the Keychain on your iPhone. It isn't synced to other devices, and the Apple Watch app doesn't receive it.
• If you use a personal intervals.icu API key instead, it is stored the same way.

Connecting Strava

• You connect with Connect with Strava, on Strava's own page or in the Strava app, so Harefoot never sees your Strava password.
• Harefoot asks for one permission, activity:write ("Upload your activities"). Strava adds read access to your public profile to every connection; Harefoot doesn't use it. If you untick uploads, Harefoot removes the connection at once.
• Harefoot only uploads. It never reads your Strava activities, profile or other Strava data, and it uses no Strava data for analysis, statistics or AI. Of what Strava returns, it keeps only each uploaded run's activity id, to link to it. The athlete details Strava sends when you connect are discarded before they reach your iPhone.
• The access and refresh tokens are stored only in the Keychain on your iPhone, like the intervals.icu token.
• When your subscription ends, Harefoot asks Strava to revoke its access, the same way Disconnect does, but keeps each uploaded run's activity id, so your runs keep their links to Strava.
• The token broker on this website. Strava needs Harefoot's client secret to sign you in and to renew access every six hours, and a secret can't be kept inside an app. So the iPhone sends those requests (the one-time sign-in code, the refresh token, or the token to revoke) to /strava/token, /strava/refresh and /strava/revoke on this website's broker at api.harefoot.app, which adds the secret and passes them to Strava over HTTPS. It stores nothing it passes on and writes no codes or tokens to its log: the log has the time, the path and the status of each request. To limit how often anyone can call it, it keeps a keyed one-way hash of each caller's IP address in memory until that caller's ten-minute window ends; the IP address itself is never stored or logged. Your runs never pass through it: the iPhone uploads them straight to Strava.

Purchases

• You buy Harefoot's subscription from Apple, in the App Store's own purchase sheet. Apple processes the payment and keeps your purchase history, under Apple's privacy policy. The developer never receives your payment details or your Apple Account.
• Harefoot checks your subscription on your iPhone and Apple Watch with Apple's StoreKit. Nothing about your purchases is sent to this website or to the developer: there is no account and no purchase server. The iPhone tells the watch whether you can start runs directly, between your devices.
• The reminder before your free month ends is a notification your iPhone schedules for itself, if you allow notifications.
• Apple gives the developer sales and subscription reports (for example, how many free months turned into subscriptions). They don't include your name, email or Apple Account.

What is sent, and where

• Harefoot's iPhone app talks to intervals.icu and Strava directly over HTTPS. Uploads contain the runs you record: time, GPS route, distance, pace, heart rate, power, cadence and laps.
• Apart from the Strava sign-in requests above, nothing is sent to this website, to the developer, or to any third party. Harefoot has no analytics, no advertising and no tracking.
• If you choose to share them, Apple gives the developer crash reports and anonymous usage statistics from your devices (iPhone and Apple Watch settings, Privacy & Security → Analytics & Improvements); Harefoot adds nothing to them.

Hosting

• This website (harefoot.app), the token broker (api.harefoot.app) and the domain's DNS run on Cloudflare, which also forwards email sent to the support address to the developer's mailbox. Cloudflare handles this traffic on the developer's behalf, as a processor under its Data Processing Addendum.
• Like any web host, Cloudflare sees the IP address of each visit and each broker request in order to answer it. Cloudflare's request logs are turned off for the website and the broker, so neither keeps a record of your requests, and the developer receives no IP addresses.
• Cloudflare is a US company; transfers of EU data to it rely on the EU-U.S. Data Privacy Framework, as Cloudflare's own privacy policy (cloudflare.com/privacypolicy) describes.

Disconnecting

• In Harefoot: iPhone → Settings → Sign Out. This deletes the token from your iPhone and asks intervals.icu to revoke Harefoot's access.
• In Harefoot: iPhone → Settings → Strava → Disconnect. This deletes the Strava tokens and every Strava activity id from your iPhone, and asks Strava to revoke Harefoot's access.
• On intervals.icu: remove Harefoot from the apps connected to your account in your intervals.icu settings. On Strava: Settings → My Apps → Revoke Access.
• Deleting Harefoot from your iPhone removes its data from the iPhone. Runs already uploaded stay on intervals.icu and Strava until you delete them there, and runs saved to Apple Health stay there until you delete them in the Health app.

Questions

Write to the address on the support page. If this policy changes, this page changes with it.