← Back to whynot.run

Privacy Policy

1. Who we are

Why Not is a running coach app for iOS, operated by Robert Kiley, a sole proprietor based in Massachusetts, USA, doing business as Why Not. You can reach me at bobby@whynot.run.

2. What data the app handles

On your device only

The following data is stored on your phone using iOS's local storage (AsyncStorage). It does not leave your device unless you explicitly export or share it:

• Profile: first name, age, gender (used for VO2 max calculations and plan personalization).
• Training plans: generated workout plans, completed workouts, race goals, scheduled run days.
• Workout history: distances, paces, dates, and notes from completed runs.
• App preferences: distance units, voice settings, training-mode toggles.

If you delete the app, this data is deleted with it. We have no way to retrieve it.

Location during runs

If you use the in-app workout runner, the app uses your phone's GPS to calculate pace and distance during a run. Location data is processed on your device in real time and is not transmitted to us. The app records summary statistics (total distance, average pace, duration) to your local workout history. The raw GPS trace is not stored or transmitted.

Apple Health integration (optional)

If you grant the app permission to read workout data from Apple Health (HealthKit), the app uses Apple's HealthKit API to read your recent running and walking workouts so plan adjustments can reflect runs you logged on your Apple Watch, Garmin, Coros, Polar, or any other device that syncs to Apple Health. Specifically:

• HealthKit access is requested through Apple's standard permission sheet. You can grant or deny it without affecting other features.
• Workout data is read from Apple Health into your phone's local storage. It does not pass through any server we operate.
• The app does not write to Apple Health. We only request read access for Workouts, Distance Walking/Running, Active Energy, and Heart Rate.
• You can disconnect Apple Health at any time from the in-app settings, or revoke specific permissions through your iPhone's Settings → Privacy & Security → Health → Why Not.
• Apple Health is governed by Apple's privacy policy, which controls anything Apple collects on its end.

Account, purchase, and subscription data (handled by Apple)

When you start a free trial or pay for a subscription, Apple handles the transaction through the App Store. We never see your credit card, billing address, or Apple ID. Apple shares with us only:

• Anonymous subscription status (so the app knows whether you're in trial, subscribed, or lapsed).
• Aggregate sales and subscription reports (number of subscribers, churn rates, country breakdowns) that don't identify you individually.

If you provide an email address inside the app (for example, when sending feedback), that email is sent to bobby@whynot.run only — it is not added to any mailing list, sold, or shared.

Crash reports and analytics

The app uses Apple's built-in crash reporting if you have it enabled in iOS Settings. These reports go to Apple, not to us, and are anonymized by Apple before we ever see aggregate diagnostics. We do not use third-party analytics SDKs (no Google Analytics, no Mixpanel, no Amplitude, no Facebook SDK, no AppsFlyer, etc.).

3. What we don't do

• We don't sell your data. Ever. There's nothing to sell — we don't have it.
• We don't share your data with advertisers, brokers, or third parties for marketing.
• We don't track you across other apps or websites.
• We don't show you ads inside the app.
• We don't have a database of users. Your account lives on your phone.

4. Permissions the app requests

• Location (when in use): required only for the workout runner. You can deny this permission and still use every other feature of the app — you'll just track runs manually or via Apple Health.
• Apple Health (HealthKit): optional. Read access only, used to ingest run data from Apple Watch and other connected devices.
• Notifications: optional. Used for run-day reminders and workout completion nudges if you opt in.
• Motion: the app does not request Motion permissions in v1.

5. Children's privacy

Why Not is not directed to children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has used the app, contact bobby@whynot.run and we will work with you to address it. (Realistically: since we don't collect data, there's nothing on our end to delete — but we want you to be able to reach us regardless.)

6. Your rights (GDPR, CCPA, and similar laws)

If you live in the EU, UK, California, or another jurisdiction with comprehensive privacy laws, you have rights to access, correct, delete, and export your data. Because Why Not stores your data on your device only:

• Access and export: you have direct access to your data on your phone. We can't email you a copy of data we don't have.
• Deletion: deleting the app deletes all locally stored data. There is no separate server-side record to delete.
• Correction: you can edit profile fields, race times, and plan preferences directly inside the app.

If something about this is unclear or you want to confirm we don't have data on you, email bobby@whynot.run and we'll respond.

7. Data retention

Because we don't store your data, we don't have a retention period. Your data exists on your phone for as long as you keep the app installed. When you uninstall, it's gone.

8. Security

Your training data is protected by your phone's lock screen and iOS's app sandboxing. We follow Apple's recommended practices for storing data in iOS — namely, AsyncStorage with the iOS Data Protection class. We do not transmit your training data over the internet, which means there is no server-side breach risk for the data we don't have.

If your phone is lost or stolen, anyone who unlocks it could potentially access the app's data — secure your phone with a passcode or biometrics.

9. Changes to this policy

If we change anything material — for example, if we add a backend in v1.1 and start storing data — we'll update this page and notify you in the app before the change takes effect. The "last updated" date at the top of this page reflects the most recent revision.

10. Contact

Questions, concerns, or requests:

Robert Kiley (sole proprietor, dba Why Not)
Massachusetts, USA
Email: bobby@whynot.run