Privacy at Ryvo

Who runs Ryvo

ryvo.run is run by Meysam, who built it and also coaches on it. Every athlete on Ryvo was added by one coach. That coach is the person who sees the athlete's data and answers for it.

Questions about your data go to your coach first. If you would rather not ask them, write to privacy@ryvo.run.

What Ryvo holds about an athlete

Only what a training plan needs, and nothing collected on the side.

• Who you are: first and last name, an email address if your coach entered one, the language you read in, and your coach's notes about you.
• Your body and your fitness, as far as a running plan uses them: birth date, gender, height, weight and when it was measured, resting and maximum heart rate, a recent race result, and your coach's own estimate of your fitness if they set one.
• How you train and what you are aiming for: experience, weekly distance, longest run, how many days and which days you can run, climate and terrain, the race you are training for with its date and goal time, and whether you are coming back from a break or currently unable to run normally.
• Your plan and what you did with it: the sessions your coach set, your answers to "how did it go?" (done or skipped, effort from 1 to 10, a note), your strength sessions and what you logged for them, and your coach's own notes on each session.
• Your runs, when one is added: date and time, name, distance, duration, pace, heart rate, cadence, elevation, calories and lap splits. Ryvo does not keep the GPS track or the route. A run is stored as numbers, not as a map.
• Your devices: if you keep Ryvo on your phone, the phone remembers your link. If you turn notifications on, the subscription your browser issues for them. If you link Telegram, the id of your chat with the bot and when it was linked and last used.
• Your visits: when you last opened your page, whether you have opened it from your home screen, and which version of your plan you last saw, so your coach can tell whether you have seen a change. Nothing else about how you use the page is recorded.

Health-related information

Heart rate, weight, a race result, an injury or an illness say something about your health, and so can a note you write. Ryvo keeps them for one purpose, to build and adjust your training, and shows them to one person, your coach. They are never used for anything else and never shared.

Where the information comes from

Your coach enters it. You answer on your page or in Telegram. A run is entered by hand, or your coach adds a file from your watch, which is read once for its numbers and not kept. Ryvo does not read your watch, your Garmin or your Strava account on its own, and it does not scrape anything from anywhere.

Connecting intervals.icu (coming soon)

This is not available yet. It is described here because it is being built, and this is how it will work. It will be optional: if you have an intervals.icu account, you will be able to let Ryvo read your completed runs from it so they appear on your plan without you doing anything.

You will press Connect on your page, sign in at intervals.icu, and agree to "read activities". intervals.icu will then hand Ryvo a key that can read your activities and nothing else. Ryvo will store that key encrypted, use it to fetch your runs, and keep the numbers listed above and no map. Ryvo will not write to your intervals.icu account.

You will be able to disconnect from your page or ask your coach to. The key is then deleted here and revoked at intervals.icu. Runs already imported stay on your plan like any other log, unless you ask for them to be removed.

What intervals.icu itself does with your data is covered by its own policy: intervals.icu/privacy.

What it is used for

To show you your plan, to show your coach what happened, to compute paces and training load, to suggest to your coach how next week could change from what you reported (your coach decides, nothing changes on its own), and to tell you when a session was added or changed. That is all.

No advertising, no analytics, no tracking scripts, and no selling or renting of anything to anyone. The athlete page sets no cookies.

Who can see it

Your coach. The owner of ryvo.run, who maintains the server and can technically open the database, and does so only to fix a fault. Nobody else. A coach sees only their own athletes.

Other services carry parts of it only when you asked for the feature that needs them:

• Telegram, if you link it: the bot's messages to you and your replies pass through Telegram's servers under Telegram's policy (telegram.org/privacy).
• Your browser's push service (run by Apple, Google, Microsoft or Mozilla), if you turn notifications on: it carries an encrypted message it cannot read.
• intervals.icu, once that connection exists, as described above.

Where it is kept

On one rented server in Istanbul, Türkiye, with a Turkish hosting company. The database and its backups live on that machine, not on a cloud platform. If you are in Iran or anywhere else, your data crosses a border to get there.

Traffic between your phone and the server is encrypted (HTTPS). Coach passwords are stored as hashes, never as the password. A key for a connected service, once there is one, will be stored encrypted.

How long it is kept

For as long as you are on your coach's roster. Your coach can archive you, which hides you but keeps everything, or delete you for good, which removes everything about you at once: plan, logs, runs, answers, notifications, Telegram link and the bot's memory of your chat.

A backup of the database is taken every night and kept for 14 days, and a copy is taken before each software update and kept for 30 days; older copies are deleted. Something deleted today is therefore gone from every copy within 30 days.

The web server logs the IP address, time, path and browser of each request for about two weeks. The path of your page contains your link, so those logs do. The app's own log, which holds errors and sign-in attempts with the address they came from, is capped in size and holds at most a few weeks.

When a page breaks in your browser, it reports the error message, where in the code it happened, and your browser's user-agent string, so the fault can be fixed. Your link is removed from the report before it is sent, and again on arrival.

Your link is your key

There is no account and no password. The long address of your page is the only credential, and anyone holding it can open the page. Keep it to yourself. If it gets out, your coach can issue a new one in a tap and the old one stops working.

Ryvo tells browsers not to cache your page and not to pass its address on to any site you follow a link to.

What stays on your phone

Your browser remembers your link, keeps an offline copy of your plan if you turn that on, holds answers you gave while offline until they can be sent, and remembers light or dark. None of this is sent anywhere by itself. "Not you? Switch athlete" on your page clears the link, the offline copy and any unsent answers.

If you pick English or Persian on the front page, sign-in or the tools, a small cookie remembers that choice and nothing else.

The public running tools work out everything in your browser and keep none of it once you leave the page. Nothing you type there reaches the server.

Coaches

A coach has an email address, a password stored as a hash, a language, and, if linked, a Telegram chat id. The two cookies Ryvo sets exist only for the coach: one holds their sign-in, the other remembers that this browser has signed in before.

What you can ask for

Any of these, at any time, through your coach or by email. They are answered within a month, usually much sooner.

• A copy of what Ryvo holds about you, as a file. Your coach's export covers your profile, plans, runs, logs and answers; strength sessions and anything else are added to it by hand.
• A correction to anything that is wrong.
• Deletion of everything, or of a single run or answer.
• A new link, notifications off, Telegram unlinked, and, once it exists, intervals.icu disconnected.

Under 18

A coach may add an athlete under 18 only with a parent's or guardian's agreement. The guardian can ask for anything on this page on the athlete's behalf.

Changes to this page

The date at the top moves when the text changes. A change that affects what is kept or who sees it reaches you through your coach before it takes effect.