Privacy Policy

Last updated: July 27, 2026

Short version: FinishArc stores your training data so you can access it across devices. We do not sell your data, share it with advertisers, or use it for any purpose beyond running the app for you.

1. Scope

This policy covers FinishArc, a training app for distance runners. FinishArc decides what data is collected and why, and is responsible for it. In the language of data protection law, we are the controller for the personal data we collect about users of FinishArc. Contact: hello@finisharc.com.

2. Information We Collect

We collect only what the app needs to build and adapt your training plan.

Account information: your email address, used to create your account and send a one-time sign-in code. We do not use it for marketing.
Training data: run dates, distance, time, average and maximum heart rate, elevation gain, temperature, humidity, and any notes you write.
Race information: race dates, distances, goal times, how you intend to run each race, and a race location if you choose one.
Performance settings: your fitness benchmark, run/walk intervals, weekly schedule, heart rate threshold, shoes, fueling preferences, and a home training location if you set one.
Health data (optional): how you rate your sleep and how your legs feel in the morning check-in, together with any wellness readings a connected service holds for you. These can include heart rate variability, resting heart rate, sleep duration and quality, and blood oxygen.
Location data: for runs that arrive from a connected service, the position your watch recorded during the run. Plus a home training location or race location if you choose to set one.
Recorded run detail: for runs that arrive from a connected service, the detail your watch recorded. This can include per-mile splits, laps, and second-by-second heart rate, pace, elevation, cadence and power. It is what lets the app recognise a hard effort inside an easy run, and account for hills.
Connection tokens (optional): if you connect a service, the access token that lets us read your activities. We never see or store your password for it. The services you can connect are named in section 7.
How you use the app: when you open it, which screens you visit and for how long, the kind of device and browser you use, and a record of the main things you do, such as logging a run, adding a race, or a run arriving from a connected service. Each record is tied to your account. We use this to see whether features work and to find what is broken. It stays with us and goes to no advertiser or analytics company.

We do not collect your contacts, and we never see your payment card details.

A note on location and health data. These are the two most sensitive categories we hold, so we want to be plain about them. Position data comes from runs you have already recorded on your watch; the app does not track you in the background and does not build a picture of where you go. Health readings arrive only if you use the morning check-in or connect a service that holds them. Both are used to shape your training plan and nothing else, and you can delete all of it at any time from Settings.

3. How We Use Your Information

To build and display your personalized training plan, and to adapt it as your training changes.
To keep your data in sync across your devices.
To bring in runs from a connected service, so you do not have to enter them by hand.
To look up the weather for a run, so the plan can account for heat.
To generate your calendar feed, if you turn calendar sync on.
To operate and support the app, including diagnosing problems you report.
To understand how the app is used, so we can tell whether a feature works for real runners and fix the ones that do not.

We do not sell your data, share it with advertisers, or use it for any purpose beyond running FinishArc for you.

Artificial intelligence. We do not use your data to train AI models, and we do not permit anyone else to train on it. If we add a feature that answers questions about your training, it would send only the parts of your plan needed to answer you, and it would still not be used for training. No such feature is enabled today. If that changes, this page changes in the same release.

4. Our Legal Basis For Using Your Data

Where the law requires us to name a basis for using your data, these are ours:

To perform our contract with you: building and adapting your plan, syncing it across your devices, bringing in runs from a service you connected, and helping when something breaks. This covers most of what we do.
Our legitimate interests: keeping the app secure, preventing fraud and abuse, and understanding which features work so we can fix the ones that do not. We use the least data that answers the question.
Your consent: the optional things you switch on, such as connecting a service, the morning check-in, calendar sync, or setting a location. You can withdraw consent at any time in Settings and we stop.
Legal obligation: where we must keep or disclose something to comply with the law.

5. How We Share Your Information

We do not sell or rent your personal data, and we do not share it with advertisers. Your data reaches someone other than us only in these cases:

Service providers acting on our behalf: the companies that host the app, store its data, handle sign-in, and deliver email. Each may use your data only to provide that service to us, never for its own purposes.
A service you connect: only if you choose to connect one, and only to read from it. We never write anything back.
Weather lookup: a coordinate and a date are sent to a public weather service to find the conditions for a run. It is not told who you are.
Legal reasons: if required by law, or to protect the rights and safety of our users.
Payments: Paddle, our merchant of record, sells FinishArc to you and handles payment, subscription billing, invoices and sales tax. Paddle collects your payment details directly, so we never see your card number. Paddle is responsible for that data in its own right and its own privacy policy governs it.
A change of ownership: if the app were ever sold or merged, your data could transfer as part of it. You would be told before that happened.

We name the categories of provider rather than the individual companies, which is standard practice and keeps details of our infrastructure from being published. If you need the specifics, for example for a security review, write to us.

6. Cookies and On-Device Storage

FinishArc sets no cookies of its own, and uses no advertising or cross-site tracking cookies. There is no cookie banner because there is nothing to consent to.

The app does keep data in your browser's own storage so it can start instantly and keep working offline: your plan, your logs and your settings, plus small interface details such as which tab you had open. Signing in sets a session cookie so you stay signed in between visits. Clearing your browser data removes all of it, and your account data is restored from the server the next time you sign in.

7. Connecting a Service

You can connect intervals.icu or Strava so your runs arrive on their own. Connecting is optional and the app works without it. If you connect one, FinishArc will:

Ask for read-only access to your activities, and for intervals.icu your wellness readings as well.
Bring your runs into your training log, including the detail described in section 2.
Keep the connection token so syncing continues without asking you again.

We only ever read. We never post, never change anything in your account on either service, and never reach for data beyond what is described above. You can disconnect at any time from Settings, which deletes the stored token.

Each service's own privacy policy governs the data it holds: intervals.icu/privacy and strava.com/legal/privacy.

8. Your Privacy Rights and Choices

You have control over your data, and most of it you can exercise yourself without asking us:

See it: everything we hold about your training is visible in the app.
Correct it: edit any run, race or setting directly.
Delete it: Settings, then Danger Zone, then "Delete All Data" permanently removes your training data and account information.
Disconnect a service: Settings, then "Disconnect" on a connected service, revokes our access and deletes its stored token.
Get a copy: write to hello@finisharc.com and we will send you your data in a portable format.

Depending on where you live, you may have additional rights under local law, including to object to or restrict how we use your data, to withdraw consent, or to complain to your data protection authority. Write to us and we will honour them. We do not charge for any of this and we will not make the app worse for you because you asked.

9. Security and Retention

Your data is held in a managed cloud database with per-account access rules enforced by the database itself, so one account cannot read another's data. Traffic is encrypted in transit, and connection tokens are stored where the app's front end cannot read them. Data is stored in the United States.

We keep your data for as long as you have an account. If you delete your account, it is removed permanently, and we do not keep backups of deleted accounts beyond 30 days.

One thing is deleted sooner. The second-by-second recordings described in section 2 are large and lose their value quickly, so we remove them automatically after a year. The summary of each run, including your splits and laps, is kept for as long as your account exists, because your training history is the whole point of the app.

No service can promise perfect security, and we will not pretend otherwise. If a breach ever affected your data, we would tell you.

10. Who can use this

Using FinishArc requires that you are at least 18 years old, or the age of legal majority where you live if that age is higher. This is set out in our Terms of Service and it is the same rule here.

FinishArc is not intended for children and should not be used by them. We do not knowingly collect data from anyone below that age. If you believe a child has given us data, write to us and we will delete it.

11. Changes to This Policy

If we make material changes, we will update the "Last updated" date above, and where the change is significant we will say so in the app. Continued use after a change means you accept the updated policy.

12. Contact Us

Questions, requests, or concerns: hello@finisharc.com. A real person reads it.