RunStrengthLab is operated by Akansha Saxena, and is the controller of the personal data described here. You can reach us at saxenaakansha30@gmail.com. RunStrengthLab is an independent app. It is not affiliated with, endorsed by, or sponsored by Strava. Use of the app is also covered by our Terms of Service.

From Strava, only after you authorize it, and read-only (we request the read and activity:read_all permissions; the second includes activities you have marked private, so your training load is not undercounted):

From you, during onboarding and ongoing use: your training goal, experience level, the equipment you have access to, the plans generated for you, and your feedback on individual exercises.

Technical data: a signed session cookie that keeps you logged in, and server logs (internal user ID, timestamps, and error details). We use no advertising or analytics cookies or trackers.

Solely to generate and adapt your own strength training plan. Your recent activity is compared, in our own code, against your own normal training load to spot body parts you have been loading hard, and those are quietly left out of that day's exercise options. Your equipment, experience level, and goal shape which exercises you are offered. Your feedback tells tomorrow's plan what to avoid. We also show you the numbers behind your reading (your activity counts, training load, and most recent activity), only to you, and only when you ask for it. That is the entire use case.

If you delete an activity on Strava, it stops counting the next time we read your activities.

Your Strava data is never given to any AI model, in any form, raw or summarized. It only ever gets compared against your own recent training in our own code, which narrows the list of exercises available before the AI model is involved. We never use Strava data to train, fine-tune, or evaluate an AI model.

What the AI model does receive to write your plan: your goal, the list of exercises available to you, your past exercise feedback, and your recent strength sessions, tied to an internal numeric ID rather than your name.

We never share your data with other users. We never sell it, rent it, or use it for advertising. We never use your Strava data for analytics, product research, or building datasets across users. We only ever compare your data against your own history. We never post anything back to your Strava account.

We use the providers below to run the app. They act on our instructions and only for the purpose listed. None of them receives your Strava activity data, except where noted.

Some of these providers process data outside your country, including in the United States and India. Where the law requires it, transfers rely on the provider's standard contractual safeguards.

Where data protection law such as the GDPR applies: we read your Strava data because you consented by authorizing access, and you can withdraw that consent at any time. We process your equipment, goal, and feedback to provide the service you asked for. We keep basic server logs for security and reliability, which is our legitimate interest.

Log out anytime to end your session.

If you cannot access your account to do any of this yourself, contact us using the details below and we will take care of it.

Data is encrypted in transit, and our database provider encrypts stored data at rest. Access to production systems is limited to the person who runs the app. If a security incident affects your data, we will notify you and Strava as required by law and by Strava's API terms.

RunStrengthLab is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has signed up, contact us and we will delete the account.

If how we handle your data changes in any meaningful way, we will update this page and its "last updated" date. If a change affects what we ask Strava for, we will ask for your permission again.

Questions about your data, or a request from the list above? Reach out at saxenaakansha30@gmail.com.