Legal
Privacy Policy
The short version: Wendure keeps most of what it knows on your phone, never sells your data or shows ads, and you can delete your account and its data at any time, from inside the app.
Last updated: 24 October 2026.
Who we are
Wendure is published by [publisher's legal name and registered address - to be added] (“we”, “us”). We are responsible for the personal information described here - the “controller” under the EU General Data Protection Regulation (GDPR), and an organisation bound by the Australian Privacy Principles under the Australian Privacy Act 1988. Questions, requests and complaints: [email protected].
On your phone only
Everything below stays on your phone - it isn't sent to us with your account unless it's listed under “Your account”:
- your runs and rides history (the part of each route you covered, time, climb, how it felt, your notes) and the “Places you've been” map;
- shoe mileage, settings and reminders (reminders are scheduled by the phone itself - we don't run a notification server);
- everything Wendure reads from Apple Health or Health Connect, except the few items listed under “Apple Health and Health Connect” below.
What we collect, and why
Location
To build a route, the app sends the start point (and a destination, if you pick one) to our routing service, which passes them to the map providers listed below to work out the route, its elevation, what's along it and the weather. During navigation your position is used on the phone to guide you - including while the screen is locked: on iPhone if you allow “Always”, and on Android through a notification that shows while it's guiding you (Wendure doesn't ask Android for background location). It's only used while a navigation is running. We don't keep a log of your movements on our servers. Saved routes (with an account) include their start point.
Apple Health and Health Connect (optional)
If you connect Apple Health (iPhone), Wendure reads: workouts, walking/running and cycling distance, height, weight, resting heart rate, date of birth, biological sex and last night's sleep. If you connect Health Connect (Android), it reads: exercise sessions, distance, height, weight, resting heart rate and sleep - Health Connect has no date of birth or sex. It uses them to set your starting point and pace, to mark plan sessions done when you record them with another app, and for a “short night - keep it easy” note. It can save sessions you finish with Wendure back as workouts (exercise sessions and their distance on Android).
Most of this never leaves your phone. What does, and only when you have an account:
- that a plan session was completed by a workout recorded elsewhere, and when;
- age, sex, height and weight - if you accept them as your answers in setup, they sync like any answer you type in.
Data from Apple Health and Health Connect is never used for advertising or marketing, never sold, never used to profile you for anyone else, and never stored by us in iCloud. Wendure's use of information from Health Connect follows the Health Connect Permissions policy, including its Limited Use requirements. You can switch access off at any time: on iPhone in Settings → Health → Data Access, on Android in Health Connect (or from Account in the app).
Your account
You sign in to use Wendure - by email link, Sign in with Apple (iPhone) or Google - so your plan and trial are kept safe and follow you to a new phone. We store:
- your email address, or your Apple or Google sign-in identity (Apple can hide your real email);
- your setup answers: activity, goal, experience, what's held you back, age, sex, height, weight, whether you have joint pain, whether weight loss is a goal, training days and preferences, and your first name if you give one;
- your plan progress (sessions done, when, how they felt), custom plans, milestones and saved routes;
- the route styles you tend to like, learned from Discover;
- whether you've said yes to plan tips by email.
Each record is tied to your account and protected so that only you can read it.
Health information - your consent
Some of the above is health information (for example weight, joint pain, how a session felt, and anything from Apple Health). It is “sensitive information” under Australian privacy law and a “special category” under the GDPR, so we only collect it with your consent: you give it when you answer those questions or allow Apple Health access, and - for it to be stored on our servers - when you create an account after being told so in the app. Every such question can be skipped. You can withdraw consent at any time by deleting your account (removes it from our servers), editing your answers, or switching Apple Health or Health Connect access off.
Plan tips by email (optional)
Only if you switch them on: a few emails about your plan, sent to your account's email address. Every email has a one-tap unsubscribe, and the switch is in Account.
Usage analytics and crash reports
We count how the app is used - for example that a route was made, a session finished or a step was skipped - and collect crash reports, so we can fix problems and see where the app helps. Events carry categories and rounded numbers (such as distance in km), never health values, your email or your location. They're linked to a random install id, and to your account id once you sign in. Session recording is off. You can turn analytics off at any time in Account → Usage analytics.
Keeping the service safe
To stop abuse and keep costs fair, our servers use your IP address, a random install id and - on genuine devices - Apple's App Attest or Google's Play Integrity check to rate-limit requests. These are kept briefly for that purpose only.
Purchases
If you subscribe, Apple or Google handles the payment; we never see your card details. Our subscription service, RevenueCat, receives the store's confirmation of what you bought, linked to your account id, and tells the app and our server whether it's on a trial, active or ended, so Premium can unlock on any phone you sign in on.
Strava (optional)
If you connect Strava, we store the access it grants and your Strava athlete id. With it, the app reads your recent runs and rides (type, start, duration and distance) to mark plan sessions done - they pass through our server to your phone and aren't stored by us. We revoke the access and delete it when you disconnect (Account) or delete your account.
If you don't give us information
You need an account to use Wendure. Everything else is your choice: you can use it without Apple Health or Health Connect and without location (pick a start point on the map instead), and skip any setup question. Without some answers, plans and routes are less tailored to you.
Legal bases (GDPR)
- Providing the app you asked for (a contract with you): routes, plans, sync, purchases.
- Your explicit consent: health information, Apple Health and Health Connect, precise location (including while the screen is locked), notifications, plan tips by email.
- Our legitimate interests: usage analytics and crash reports (to improve the app and fix faults), and abuse prevention (to keep the service running). You can object at any time; analytics has its own off switch.
- Legal obligations: records we must keep, for example for tax.
Who helps us run Wendure
We use these service providers (“processors”). They only process data on our instructions, under data-processing terms that require the same level of protection as this policy:
- Supabase - account sign-in and the synced account data above.
- PostHog (EU hosting) - usage analytics and crash reports.
- Our API hosting provider and Upstash - run our servers and the rate limits (IP address, install id).
- Stadia Maps - routes and elevation, from the points you send (sent by our server, not from your phone).
- OpenStreetMap data services (OpenFreeMap's map tiles, the Overpass servers, and Amazon Web Services' free terrain tiles) - what's along and around a route, such as parks, quiet streets, water, toilets and hills. Our server asks for the area around the start point; your own address details aren't sent.
- MET Norway - the weather, for your start point rounded to about 1 km.
- Map tiles - OpenFreeMap, CyclOSM / OpenStreetMap France, Waymarked Trails and Esri (satellite) draw the map. Like any website, they see your device's IP address and the area shown.
- Brevo - sends plan tips by email, if you switch them on.
- RevenueCat - keeps track of subscriptions and free trials bought through Apple or Google.
- Apple - Sign in with Apple, Apple Health (on your phone), App Attest and App Store purchases.
- Google - Google sign-in, Health Connect (on your phone), Play Integrity and Google Play purchases.
- Strava - only if you connect it.
We don't sell or rent personal information, don't show ads, and don't track you across other companies' apps or websites.
Data outside your country
Our servers and providers are in the European Union and European Economic Area (including Ireland, Germany, France, Lithuania and Norway) and the United States. If you're in Australia, your information will be sent to and held in those countries. Transfers out of the EU/EEA rely on the European Commission's safeguards - an adequacy decision (such as the EU-US Data Privacy Framework) or its Standard Contractual Clauses. Wherever your information goes, we stay responsible for it under this policy.
Decisions the app makes
Wendure suggests a plan, a starting point and route sizes from your answers and activity, using fixed rules. These are suggestions - you can change the plan, the days and every route - and nothing the app works out has legal or similarly significant effects on you.
How long we keep it
- Account data: while you have an account. Delete it in the app (Account → Delete account) and it's removed from our servers straight away; backups roll over within 30 days. Without the app, see Delete your account.
- Analytics and crash reports: at most 12 months, then deleted. They're also deleted when you delete your account.
- Rate-limit records: hours to days.
On sign-out you choose whether to keep or remove what's on the phone.
Security
Data travels encrypted (HTTPS). Your sign-in is kept in the phone's encrypted store (the iPhone keychain, the Android Keystore), and synced records can only be read with your account's sign-in. No system is perfect: if a breach is likely to cause you serious harm, we'll tell you and the regulator as the law requires.
Your rights
You can ask us for a copy of your information, to correct it, to delete it, to restrict or object to how it's used, to receive it in a portable format, and you can withdraw consent at any time (without affecting what was done before). Most of this you can do in the app; for the rest write to [email protected]. We may need to check it's you. We reply within 30 days and don't charge for it.
Complaints
Please tell us first at [email protected] - we'll acknowledge it within 7 days and give you an answer within 30. If you're not happy with the answer, you can complain to:
- in Australia, the Office of the Australian Information Commissioner (OAIC) - oaic.gov.au, 1300 363 992;
- in Lithuania, the State Data Protection Inspectorate (VDAI) - vdai.lrv.lt, [email protected];
- or the data-protection authority where you live.
Sharing your runs
Nothing is shared unless you share it. Story images and route files you share are trimmed at both ends by default, so they don't show where you start - usually your front door. You can turn this off in Account.
Age
Wendure is for people aged 16 and over. We don't knowingly collect information from anyone younger; if you think we have, write to us and we'll delete it.
Changes
If we change this policy in a way that matters, we'll tell you in the app before the change applies, and ask again for consent where the law requires it. The date at the top shows the latest version.
Contact
[publisher's legal name and registered address - to be added] - [email protected]