Privacy policy

Last updated October 17, 2026

Rove is a running-plan app for iPhone with an AI coach, and Rove for Garmin is its companion app for Garmin watches. This page explains what they collect, where it goes and what you can do about it. The short version: your training and health data stay on your iPhone, we don't sell anything or show ads, and we use no advertising or analytics trackers.

On your iPhone

Your plan, workouts, runs, coach chats and settings are stored on your iPhone. With your permission, Rove reads your runs, strength workouts, distance, heart rate and sleep from Apple Health to match runs to your plan and adapt it, and saves the runs you record in Rove to Apple Health with their distance and route. Your location is used only while you record a run, to measure pace and distance and draw your route; it stays on your iPhone and in Apple Health. Health data is never used for advertising and never sold.

When you talk to the coach

To answer you, Rove sends our server your message and a short summary of your training: your first name, your coach's name and personality, your plan, and your last two weeks of workouts (the date, type and distance of each, and how it felt or what was sore if you told Rove). It doesn't send heart rate, sleep, location or routes.

Our server passes this to an AI model provider, currently OpenAI, to write the coach's reply, under their terms for businesses using their API, which say they don't train their models on it. Our server keeps only usage numbers (such as message counts, response time and which model answered), not what you wrote. The coach is an AI: it can be wrong, and it isn't a doctor. Rove checks every plan change it suggests against its training rules, and nothing changes until you apply it.

To stop misuse, the app proves to our server that it's a genuine copy of Rove on a real iPhone (Apple's App Attest). The server keeps that device key and a random device ID so it can apply message limits.

Rove for Garmin

If you link a Garmin watch, your iPhone sends our server your next seven days of planned workouts (their names, distances, steps and target paces) so the watch can download them. The watch sends its model (for example "Forerunner 165"), and when you press Start, which workout you started and when, so Rove can match the run that follows. While you link, your first name goes to the watch once so it can say hello. We keep the linked watch, its access keys and the seven days until you unlink; starts are deleted after 30 days. Nothing goes from Rove to Garmin: your runs reach Rove through Garmin Connect and Apple Health, under Garmin's and Apple's own privacy policies.

Where it's stored

Our server runs on Google Cloud in the United States. Data is encrypted in transit and at rest.

Your choices

• Change what Rove can read in the Health app (your picture, then Apps, then Rove), and turn off location in Settings.
• Unlink a Garmin watch in Rove › Profile › Garmin watch, or on the watch; we delete what we hold for it.
• Deleting Rove deletes what it stored on your iPhone (runs it saved to Apple Health stay in Health until you delete them there). To have anything we hold about your device deleted, email us.

Children

Rove isn't meant for children under 13, and we don't knowingly collect their data.

Changes

If this policy changes, we'll update this page and its date, and tell you in the app if the change matters.

Contact

Questions or requests: privacy@runwithrove.com.