This privacy policy applies to the Run Story app (hereby referred to as "Application") for mobile devices that was created by Finish Line Labs, LLC (hereby referred to as "Service Provider") as a Free service. This service is intended for use "AS IS".
The Application does not directly collect personally identifiable information. To function, it relies on the following:
This Application does not access your device's location services and does not collect real-time location data. The only location information the Application handles is whatever is already attached to the activities you have recorded with your connected service, which you control through that service. As described above, an activity's starting coordinate may be sent to a geocoding service in order to display a place name.
The Application uses on-device machine learning for one feature: cutting the subject out of a background photo, so your stats can be layered behind you.
The Service Provider does not use your activity data, location data, or health data to train, retrain, or improve any artificial intelligence or machine learning model, and does not supply that data to any third-party or generative AI service. Data from a connected fitness service is used only to display your activities and to compose the graphics and videos you create.
On supported iOS devices, the Application offers an optional Augmented Reality (AR) feature that overlays your run statistics on a live camera view. This AR feature uses Apple's ARKit framework, which on devices equipped with the TrueDepth camera may access face-tracking information (face geometry and depth data) to position the AR overlay correctly in front of you.
What is collected: Face geometry and depth data provided by ARKit while the AR camera view is active.
Purpose: Used solely to position and render the AR stats overlay on the live camera image during the AR session. The data is never used to identify a user, build a profile, train any model, or for any purpose other than rendering the AR overlay.
Where it is stored / shared: Face data is processed entirely on your device, in memory, only while the AR session is running. It is never saved to disk, never transmitted off the device, never sent to the Service Provider's servers, and never shared with any third party (including Strava, Garmin, Apple, Google AdMob, Google Firebase, or Google Maps). When the AR session ends, the face data is discarded.
Retention: Zero. No face data persists beyond the active AR session.
The Application relies on the following third-party services, each governed by its own privacy policy:
No user data is sold, rented, or shared with any other third party.
Activity data cached on your device is removed when you uninstall the Application.
For Strava, the notification records described above are kept on the Service Provider's servers after they are delivered to your device, so that an activity the Application has not yet collected — because the app was not opened, or was reinstalled — is not lost. They are automatically deleted 90 days after they are received. Expiring them costs nothing you cannot get back: the records only say that an activity changed, and the Application reads the activity itself from Strava directly. The contents of your activities are not held on those servers at all. You can also have every record held for your athlete identifier deleted sooner by emailing mike@finishlinelabs.info.
For Garmin Connect, activity data received from Garmin is kept on the Service Provider's servers so it can be re-synced to you. This is because Garmin does not allow an application to request your past activities: Garmin sends each activity once, as it is recorded, and it cannot be asked for again. The stored copy is therefore what allows your history to be restored to the Application if you reinstall it, sign in on a new device, or clear the Application's data. Without it, your earlier activities would be permanently unavailable to you.
It is kept for that purpose only. It is not used for advertising, not sold or shared, and not used to train any model.
There are two ways to disconnect, and they do different things.
Disconnecting inside the Application stops it syncing on that device and deletes your stored authorization tokens. Your activity data is kept, so that reconnecting later restores your history rather than starting you from empty.
Revoking the Application from Garmin Connect — in Garmin's own connected-applications settings — is treated as an instruction to stop holding your data, not only to stop receiving more of it. When Garmin notifies the Service Provider that you have revoked access, or that you have withdrawn permission for activity data, all activity data held for your account is deleted, along with your tokens. This is permanent: Garmin cannot re-send activities it has already sent, so a history deleted this way cannot be restored, even if you reconnect later.
You can have it deleted at any time. Email mike@finishlinelabs.info and the Service Provider will delete all activity data held for your account. Deletion is permanent, and because Garmin cannot re-send past activities, the deleted history cannot be recovered afterwards.
You can stop all collection of information by the Application by uninstalling it through the standard uninstall process on your mobile device or via the mobile application marketplace. You can also revoke the Application's access to your connected service at any time: through Strava's "My Apps" settings, through Garmin Connect's connected-applications settings, or through the Health app's privacy settings on iOS.
The Application is not used to knowingly solicit data from or market to children under the age of 13.
The Service Provider does not knowingly collect personally identifiable information from children. The Service Provider encourages all children to never submit any personally identifiable information through the Application and/or Services. The Service Provider encourage parents and legal guardians to monitor their children's Internet usage and to help enforce this Policy by instructing their children never to provide personally identifiable information through the Application and/or Services without their permission. If you have reason to believe that a child has provided personally identifiable information to the Service Provider through the Application and/or Services, please contact the Service Provider (mike@finishlinelabs.info) so that they will be able to take the necessary actions. You must also be at least 16 years of age to consent to the processing of your personally identifiable information in your country (in some countries we may allow your parent or guardian to do so on your behalf).
The Service Provider takes reasonable steps to safeguard the confidentiality of the limited data the Application handles. Authentication tokens for Strava are stored using encrypted storage on your device. Authentication tokens for Garmin Connect are stored on the Service Provider's servers, which are required to receive data on your behalf, and are transmitted over encrypted connections. The Strava webhook service holds only activity identifiers and change metadata, never activity content.
This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to their Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.
This privacy policy is effective as of 2026-08-29
By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by the Service Provider.
If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider:
Finish Line Labs, LLC
Email: mike@finishlinelabs.info