Nahni Run Coach
Privacy policy
Last updated: 12 November 2026
Data controller
Studio Cavour360 s.s.d. a r.l., VAT IT01419490113, Corso Cavour 231, 19122 La Spezia, Italy. For any request about your data: info@nahni.app.
What data we process
- Account: email, your name (if you provide it), sign-in method (Apple, Google or email).
- Health and activity data, only with your consent: runs (distance, time, pace, heart rate, cadence and steps, power, route), resting heart rate, heart rate variability (HRV), sleep, weight, height, age, sex and what you report in check-ins (how you feel, pain, symptoms of illness).
- Your training plan and the log of its changes.
- Reports you send us from Profilo › Segnala un problema (Profile › Report a problem): the text, your phone model and system version, the app version and, if you leave it on, the state of your plan.
- Subscription, if you subscribe: the status Apple or Google sends us (plan, expiry date, renewal, refund), linked to your account. Payment details stay with Apple and Google: we never see them.
Where it comes from
- Apple Health (iPhone) or Health Connect (Android), if you allow it on your phone: we only read from them and never write to them.
- Services you connect (Strava, COROS and, coming soon, Garmin): we receive your runs, with the data listed above. For COROS and Garmin we also send the workouts of your plan to the service's calendar, so they reach your watch. Access tokens for these services are kept encrypted on our servers and are never shown in the app.
- Files you import (FIT, GPX, TCX) from other apps or from your watch: we read the runs they contain.
Why
To build your plan and keep adapting it to how you run, how you feel and the sessions you miss; to store it and restore it on another phone. Health data is a special category (art. 9 GDPR): we process it only with your explicit consent, which you can withdraw at any time from Profilo › Dati sulla salute › Revoca consenso (Profile › Health data › Withdraw consent). If you do, we delete your health and training data, but your account remains. We use your subscription status to give you what you paid for (performance of a contract).
What we don't do
We don't sell your data, use it for advertising or commercial profiling, or share it with other users. Data from Apple Health, from Health Connect and from connected services is used only for your training.
Health Connect (Android)
With your permission, Nahni reads from Health Connect your running workouts with their route, heart rate, distance, steps and power, as well as resting heart rate, heart rate variability (HRV) and sleep. It uses them only to analyse your runs and adapt your plan: it does not transfer them to third parties, use them for advertising or sell them. You can revoke the permission at any time in the Health Connect settings. The use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.
Where it is stored
On your phone and on Supabase's servers in the European Union (Frankfurt region): Supabase stores it on our behalf as our data processor. Nahni's calculations run on your phone. With an account, on iPhone your data stays out of iCloud and computer backups (it comes back from the server); without an account, or on Android, it is also in your phone's backup, protected by your Apple or Google account.
How long
As long as you have an account. If you disconnect a service, we revoke access and delete from our servers the access tokens and the original files received from that service; runs already analysed stay in your account until you remove them. If you delete your account (Profilo › Elimina account, i.e. Profile › Delete account), we delete all your data from our servers; only the provider's backups remain, and they are overwritten within a few days.
Your rights
Access, rectification, erasure, restriction, portability (Profilo › I miei dati › Esporta, i.e. Profile › My data › Export), objection, withdrawal of consent (Profilo › Dati sulla salute). You can also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Security
Encrypted connections, data encrypted on your phone and on the provider's servers, access to the data limited to your account (and to the controller for support).