Privacy Policy
Hermes (tryhermes.run) is a running coach built and operated by Julián López Baasch. This page explains, in plain language, what data the app handles and why. No fine print: what you read here is what the code does.
What we collect
- Your account. Email and name, via Clerk (our authentication provider). If you sign in with Google, Google shares your basic email and name with us.
- Your Strava training. If you connect Strava, we import your activities — distance, time, pace, heart rate, laps and streams (including private activities, per the permission you grant on Strava). Access tokens are stored encrypted.
- What you tell us. Your race goal, weekly availability, the sign-up health questionnaire, and your conversations with the coach.
- Technical data. Your browser's push subscription (if you enable notifications) and product analytics (PostHog) to understand what works and what doesn't.
What we use it for
- Building your runner profile and training plan, and adapting it to what you actually do.
- Analysing your runs and giving you the coach's feedback.
- Sending notifications (if you enable them) and transactional email.
- Improving the product based on aggregate usage.
About the AI: analyses, verdicts and the chat are generated with language models. To do that, metrics and summaries of your training are sent to model providers via OpenRouter (US). We do not train models on your data.
About the health questionnaire: your answers are sensitive data. They are used exclusively to keep your plan in a prudent range and are never shared beyond what's described here. You provide them with your explicit consent at sign-up.
Where your data lives
The database is on Supabase, hosted in the European Union (Stockholm). The API runs on Railway and the web on Netlify. Providers that process data on our behalf: Clerk (authentication), Strava (the source of your activities), OpenRouter and AI model providers (analysis), Resend (email), PostHog (analytics). We never sell your data. To anyone.
Retention and deletion
- Disconnecting Strava from Settings deletes every imported activity from Hermes, immediately.
- Deleting your whole account: write to us and we remove everything — profile, plans, conversations — no questions asked.
Your rights
If you're in the EU, you have the right to access, correct, export and delete your data, and to withdraw consent. For any of these, or any question: julianlopezba@gmail.com. A human answers.
Cookies
No advertising cookies, no third-party commercial trackers. The app uses local storage for your preferences (language, theme) and session, plus PostHog for product analytics.
Hermes uses the Strava API under its API agreement. Strava is a trademark of Strava, Inc. If this policy changes materially, we'll announce it in the app.