Privacy Policy
- Your runs and health data stay on your iPhone. There is no Cursans account.
- Only what you choose to share leaves your phone: a report for your coach, or an export or backup you save yourself.
- Cursans only reads Apple Health, never writes to it, and only after you allow it.
- No ads, no tracking, and your data is never sold. The app has no analytics; this website counts visits without cookies.
- You can delete everything Cursans holds with one action in the app.
Using Cursans is also covered by the Terms of Use: Cursans helps you understand your training; it is not medical advice.
1. Who is responsible
Cursans is made and published by Maikel Colli, based in Belgium. Maikel Colli is the data controller under the EU General Data Protection Regulation (GDPR) for the personal data described in this policy. Contact: privacy@cursans.com.
2. The Cursans app
What the app reads
| Source | Data | When |
|---|---|---|
| Apple Health | Running workouts with their laps, routes, heart rate, steps (for cadence), distance, running speed, power, stride length, vertical oscillation, ground contact time, VO₂ max, resting heart rate, heart-rate variability, sleep (time asleep, sleep stages, time awake, bedtime and wake time), active energy, strength and core workouts, body mass, height, date of birth and sex | Only after you grant permission in Apple's Health sheet. Read only: Cursans never writes to Apple Health. New workouts are read in the background so a run appears without opening the app. |
| Your Garmin watch | Readings the Cursans data field (“Cursans view”) records during your runs: GPS position, heart rate, cadence, speed, power, altitude, distance and blood oxygen; with a compatible heart-rate strap or Running Dynamics Pod also vertical oscillation, ground contact time, step length and vertical ratio | Only after you install the data field and link your watch. They go over Bluetooth, through Garmin's own watch connection, directly to your iPhone; they do not pass through any server of ours. |
| Cursans Watch Copy (Mac and Windows) | Activity files copied from your watch over USB, with everything the watch recorded (including beat-to-beat heart-rate intervals when your watch logs them) | Only when you run Watch Copy. The files go from your computer to your iPhone over your own Wi-Fi, only to a phone that has entered the computer's pairing code (Cursans asks for it once; choosing a new code makes every paired phone ask again), or through a folder you choose (for example iCloud Drive), or by AirDrop. They do not pass through any server of ours. |
| Your calendars | The training sessions your plan app (Runna, TrainingPeaks, Garmin Connect) puts in your iPhone calendar: date, title, notes and link of each session. If you use Advanced planning, also the busy times and titles of events in the calendars you pick, so planned runs avoid them; Cursans then writes its sessions to a calendar of its own named Cursans. | Only after you allow calendar access, and only the calendars you pick |
| Plan calendar links | A private calendar link from Garmin Connect or TrainingPeaks that you paste in, and the planned sessions it contains | Only when you add the link; removing it stops the downloads |
| Files you import | FIT, TCX, GPX or ZIP activity files you choose or share to Cursans, such as a Garmin account export or a Strava archive | Only when you import them, or when a new file lands in a folder you chose |
| Services you connect | Your activities from Polar or COROS (and Strava, for connections made before it was paused) | Only after you connect the service yourself |
| Details you enter | Optional name, date of birth, height, weight, heart-rate settings, a sex reference for fitness comparisons, lab test results, races and goal times, a long-run setting, a profile photo, check-ins (sore legs, stress, alcohol, travel, feeling ill, a niggle), how hard a run felt, fuel taken in a run, sessions you paste as written, where your past runs are, and Coach questions | Only what you type or tap in |
Where it is stored
All of this data is stored on your iPhone, in the app's private storage. Login tokens for connected services are stored in the iPhone Keychain. Keychain items can survive deleting the app; Cursans clears them the first time it opens after a reinstall. Cursans does not upload your runs, health data or profile to any server operated by us, except a report for your coach that you choose to send (below). Like any app data, it may be included in your own iPhone or iCloud device backup if you have backups turned on; that backup is controlled by you and Apple.
Backups and exports you make. Export backup saves a file with your training data where you choose. It is not encrypted, so keep it somewhere private. A CSV for your coach, a PDF report and a share card (which can show a route map) are made on the phone and go only where you send them.
Lock Screen. Widgets and the race-day Live Activity show training data (your next run, your week, a race time) while the phone is locked. Leave them off if others can see your phone.
What the app uses it for
Only to show you your own training analysis: fitness and VO₂-equivalent estimates, pace and heart-rate zones, training load, durability, race predictions, maps of your routes, how conditions such as heat, sleep, morning resting heart rate and your check-ins relate to your runs, and answers from the coach, Sans. Cursans makes no automated decisions with legal or similarly significant effects on you: everything it shows is information for you to judge.
Apple Health data
Data from Apple Health is used only to provide these features to you. It is never used for advertising or marketing, never sold, and never shared with third parties. It leaves the phone only inside a report for your coach that you choose to send, and only the parts listed below.
The coach (Sans)
Answers from Sans, the in-app coach, are written on your iPhone by Apple's on-device model (Apple Intelligence). Your questions and data do not leave the phone. Cursans does not send any data to a cloud AI service. If an optional cloud analysis is offered in the future, it will run only after you explicitly agree, and this policy will be updated first.
When the app goes online
- Weather: to read each outdoor run with the weather it was run in, the app sends the run's start area, rounded to about 1 km, and the date and hours of the run to a weather service (and, for older runs or when it does not answer, a second weather service). They receive that request and your IP address, but not your route, heart rate, health data or identity. For heat warnings, the app sends the area where most of your recent runs start, rounded the same way, and receives a forecast.
- Place names: to name a race by its city, the app sends the race's start point, rounded to about 1 km, to a place-name service once per race.
- Map tiles: to draw route maps, the app downloads map images for the area on screen from a map tile service, which receives your IP address and the map area, but not your run, route or identity.
- Plan calendar links: the app downloads the calendar directly from the service that made it (Garmin Connect, TrainingPeaks). That service sees your IP address and the request.
- Garmin Connect and Connect IQ: to link your watch, Cursans opens the Garmin Connect app, where you choose the watch. The data field comes from Garmin's Connect IQ Store, and Garmin's software carries its messages between watch and iPhone. Garmin's privacy policy applies to your Garmin account.
- Connected services (Polar, COROS, Strava): the app downloads your activities directly from that service with your own login. To sign in without putting secret app keys inside the app, a small sign-in helper run by us passes the login result to your iPhone. It holds it for a few minutes at most, then deletes it, and also passes on login renewals without keeping them. No activity or health data passes through it. Each service's own privacy policy applies to the data it holds.
- Send to watch: when you send a planned session to your watch, its steps (name, date, durations, distances and pace or heart-rate targets) go to a Garmin watch over Bluetooth through the data field, to an Apple Watch through the iPhone's workout scheduling, or, if you connected COROS, to your COROS account. Nothing else is sent.
- Report for your coach: only when you choose Send the link or Every week, the app uploads the report to our server: the period, the name you typed, your plan sessions and their verdicts, weekly distance, time and load by intensity, each run of the period as the app reads it (title, date and start hour, type, distance, time, pace, heart rate, load, laps, work steps, reps against the plan, temperature, humidity and climb, its pace, heart rate, elevation and cadence over the run in simplified form, and Coach's read), your long runs' drift, your trends and LT1/LT2, your note and, only if you switch them on, each morning's resting heart rate, HRV and sleep, your overnight notices and your check-ins. Never your routes, maps or GPS positions, the full recordings, your Apple Health history or the ids your apps give your runs. Anyone with the link can open it; it is not listed or indexed, ends after at most 30 days, and is deleted at once when you withdraw it. To protect the service from abuse, the uploading IP address is kept for up to 1 hour.
Notifications, photos and feedback
If you allow notifications, the app shows them from the phone itself; no push server is involved. A profile photo stays on the iPhone. Send feedback opens your own mail app with a message to feedback@cursans.com that you can read and edit before sending: it adds the app version, iOS version, the page you were on, how many runs the app holds, which sources are connected and, if you report a run, its date. Nothing is sent unless you press Send in your mail app.
What the app does not do
No user accounts, no advertising, no analytics or crash-reporting SDKs, no tracking across apps or websites, no sale or sharing of personal data.
3. This website
Waitlist. If you join the waitlist, we store the email address you enter, which form you used, whether you asked about a web version, and the date, and use it only to write to you about Cursans. To be removed, write to privacy@cursans.com.
Hosting. Our hosting provider serves this website and processes technical data such as your IP address to deliver it and protect it from abuse. This website uses no cookies and no third-party fonts.
Visit counts. To know how many people visit, this website counts the pages it serves: which page, the day, the country, phone or computer, and the site you came from. Only daily totals are kept, for up to 400 days; no IP address, cookie or visitor id is stored, and nothing is read from your device. For visitors outside the EU, our hosting provider also measures page views and loading speed with a small script, without cookies and without storing your IP address. We see only totals, never who visited (legitimate interest in knowing whether the site is used, GDPR Art. 6(1)(f)).
Email. Messages you send to our @cursans.com addresses are received through our email provider.
4. Why we may use your data (legal bases)
| What | Legal basis (GDPR) |
|---|---|
| Health data read from Apple Health, your watch and connected services, and check-ins, on your phone | Your explicit consent (Art. 6(1)(a) and 9(2)(a)), given in the permission and connection screens; withdraw it there at any time |
| Report for your coach | Your explicit consent (Art. 6(1)(a) and 9(2)(a)): pressing Send, with the health switches you chose, is that consent. Withdraw the report at any time. |
| Weather, place names, map tiles, calendar links, sign-in helper, Send to watch | Providing the app you asked for (Art. 6(1)(b)) |
| Feedback emails and privacy requests | Answering you (Art. 6(1)(b) and 6(1)(c) for privacy requests) |
| Waitlist | Your consent (Art. 6(1)(a)); withdraw it by writing to us |
| Website visit counts (daily totals) | Our legitimate interest in knowing whether the site is used (Art. 6(1)(f)) |
| Website security and the 1-hour abuse record | Our legitimate interest in a safe service (Art. 6(1)(f)) |
5. Who processes data for us, and transfers
We use a small number of service providers, each only for the task named here:
- Our hosting provider: this website, the waitlist, the sign-in helper and coach reports.
- Our email provider: the @cursans.com mailboxes.
- Weather, place-name and map tile services: the rounded location and map requests described above.
Some of these providers have servers outside the European Economic Area, including in the United States. Such transfers are covered by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses. Ask us at privacy@cursans.com for details.
6. How long we keep it
| Data | Kept |
|---|---|
| Everything in the app | On your phone until you delete it |
| Report for your coach | Up to 30 days, or until you withdraw it |
| IP address of a report upload | Up to 1 hour |
| Sign-in helper | A few minutes, until your iPhone collects the login |
| Waitlist email | Until you ask us to remove it, and deleted at the latest 12 months after the public launch |
| Feedback emails | 24 months |
| Website visit counts | Daily totals, 400 days |
7. Deleting your data
- One run: swipe left on it in Runs and choose Delete. It will not be imported again.
- Everything: Settings › Privacy & data › Delete all local data. It removes everything listed in this policy that the app holds, including check-ins, how hard runs felt, fuel answers, your profile photo, stored watch files and session structure, plan calendar links, where your past runs are, and the login tokens, and it withdraws any live report for your coach.
- Deleting the app removes its data from the phone; Keychain items are cleared the next time Cursans opens after a reinstall.
- Apple Health access: iPhone Settings › Health › Data Access & Devices › Cursans.
- Connected services: Settings › Connections › Disconnect; you can also revoke access in the service itself.
- Garmin watch: Settings › Connections › Unlink watch, and remove the data field from the watch in the Connect IQ Store. Runs not yet sent to the phone are deleted with the data field.
- Calendar: iPhone Settings › Privacy & Security › Calendars › Cursans; a plan calendar link: Settings › Connections › remove the link.
- A report for your coach: Settings › Report for your coach › Withdraw (a weekly one: Stop and withdraw); otherwise it is deleted when it ends.
- Waitlist email or feedback emails: write to privacy@cursans.com.
8. Your rights
You have the right to access, correct, delete and port your personal data, to restrict or object to processing, and to withdraw consent at any time, without affecting what was done before. Because the app's data is only on your phone, you can exercise most of these rights directly in the app. For anything else, contact privacy@cursans.com. You can also lodge a complaint with the Belgian Data Protection Authority: dataprotectionauthority.be.
9. Children
Cursans is not directed at children under 16 and we do not knowingly collect their data.
10. Changes
If we change how data is handled, we will update this page and its date before the change takes effect. Significant changes will also be shown in the app.
11. Contact
Maikel Colli, based in Belgium · privacy@cursans.com