Privacy Policy

Last updated: March 2026

What data does Prun collect?

Prun stores all data locally on your device. We do not operate servers that store user data. Your training plan, health records, and preferences never leave your phone unless you explicitly enable iCloud backup (which syncs to your private Apple iCloud account).

Third-party services

Anthropic (Claude AI) — When you use the AI coach, your workout context is sent to Anthropic's API to generate responses. This is governed by Anthropic's privacy policy. Your API key is stored encrypted on your device.

Strava — If connected, Prun reads your completed activities. Data is fetched directly to your device. We only proxy the initial OAuth token exchange (no activity data passes through our server).

Whoop — If connected, Prun reads your recovery, sleep, and strain data. Same as Strava — data goes directly to your device.

What our OAuth proxy does

This server only handles OAuth token exchange (swapping authorization codes for access tokens). It stores client secrets as environment variables but does NOT store any user data, tokens, or personal information. Tokens are returned directly to your device and stored in the iOS Keychain.

iCloud backup

If you enable iCloud sync in Settings, your training plan and preferences are backed up to your private iCloud account using Apple's CloudKit. This data is encrypted and only accessible with your Apple ID.

Analytics and tracking

Prun does not include any analytics, tracking, or advertising SDKs. We do not collect usage data.

Contact

Questions? Email: [email protected]