← Back to Home

Privacy Policy

Last Updated: October 13, 2026

1. Who We Are

This Privacy Policy covers the Rawa mobile app (Android and iOS) and the website rawa.world, operated by Rawa ("we," "our," or "us"). It explains what data we collect, why, who we share it with, how long we keep it and how you can delete it.

Contact for any privacy question or request: support@rawa.world

2. Information We Collect

• Account information: email address, name, profile photo and profile details. If you sign in with Google or Apple, we receive your name and email from that provider.
• Training and activity data: workouts, routes, pace, distance, elevation, heart rate, power, cadence and other performance metrics you record or import.
• Content you share: photos, comments, posts and connections with other athletes.
• Device and diagnostic data: device model, operating system version, app version, and app performance data such as memory usage and crash reports, used to keep the app stable.

Location Data

The app collects precise location to record GPS activities (running, cycling and other outdoor sports):

• Location is collected only while you are actively recording an activity, including when the screen is off or the app is in the background during that recording. We do not collect location when you are not recording.
• Your route is stored with the activity on our servers, so we can show distance, pace, elevation and maps.
• Routes are shown to other users only according to your privacy settings.

Health Connect and Apple Health Data

If you choose to connect Health Connect (Android) or Apple Health (iOS), the app reads, with your permission, the following data types: steps, distance, floors climbed, active calories burned, heart rate, sleep, weight, hydration and nutrition.

• We use this data only to show your training, recovery and sleep in the app and to personalize your training insights and coaching.
• This data is stored on our servers with your account. It is never sold, never used for advertising, and never shared with other users unless you share an activity yourself.
• You can revoke access at any time in Health Connect or Apple Health settings. Revoking stops new reads; to delete data already synced, delete your account (see section 6).
• The app does not write data to Health Connect or Apple Health.

Our use of information received from Health Connect complies with the Health Connect Permissions policy, including the Limited Use requirements.

Sensors and Physical Activity

• Bluetooth: used only to connect heart rate monitors, power meters and other sports sensors you pair. We do not use Bluetooth to find your location.
• Physical activity recognition: used to count steps and detect movement during a recording.

Connected Services

If you connect Garmin or COROS, or import files from Strava, Suunto or other services, we receive the activities and health data you authorize from that service. You can disconnect a service at any time in Settings.

3. How We Use Your Information

• Provide the app: record and store activities, show maps, statistics and training progress.
• Generate training insights, plans and coaching messages for you (see section 4, AI processing).
• Show your activities to athletes you follow or who follow you, per your privacy settings.
• Send notifications and emails about your activities and account. You can turn notifications off in Settings.
• Keep the service secure and fix crashes and errors.

We do not sell your personal data and we do not use it for advertising.

4. Sharing Your Information

We share data only with service providers that help us run Rawa, only for that purpose:

• Hetzner Online GmbH (Germany) — servers, database and file storage.
• Google Firebase Cloud Messaging — delivering push notifications.
• Google Sign-In and Sign in with Apple — signing in, if you choose them.
• AI processing: to generate your training insights and coach messages, parts of your training data (for example workouts, heart rate, sleep and recovery) are sent to AI model providers (OpenRouter, Groq, DeepSeek, OpenAI, Together AI). They process it only to return a response and do not receive your name or email.
• Email delivery provider — sending account and activity emails.
• Garmin, COROS — only if you connect them, to receive your data from them.

We may also disclose data when required by law.

5. Data Security

Data is encrypted in transit (HTTPS/TLS). Access to servers and databases is limited to the people who operate Rawa.

6. Data Retention and Deletion

• We keep your data while your account is active.
• We delete personal data of inactive accounts after 24 months of inactivity. You will receive a notice before deletion.
• Delete your account in the app: Settings → Privacy → Delete Account. This deletes your profile, activities, routes, health data and content. You can also request deletion by emailing support@rawa.world from your account email.
• Deleted data is removed from our live systems within 30 days and from backups within 90 days.

7. Your Rights

Under GDPR and similar laws, you have the right to access, correct, export and delete your data, and to object to or restrict its processing.

• Export your data: Settings → Privacy → Export my data.
• For any other request, email support@rawa.world. We respond within 30 days.

8. Children

Rawa is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

9. Changes

We may update this Privacy Policy. We will post the new version on this page with a new date and notify you in the app of significant changes.