On your device
What stays on your iPhone
Granular run data lives on your iPhone and syncs across your Apple devices through iCloud — every individual heart-rate sample, every pace reading, training plans, personal records, and shoe mileage. Cursa servers never see this detailed data. Apple handles the iCloud sync, and only your Apple ID can access it.
On our servers
What we hold
The social side of Cursa runs on Cursa servers*. We store:
- Your profile: display name and share code
- Your social graph: who you follow, clubs you belong to
- Your interactions: kudos, comments, RSVPs
- Run summaries: distance, time, average pace, average heart rate, calories — the totals, not the per-second samples
- GPS routes for outdoor runs, with the first and last 400m trimmed by default so the run-detail map can show where you ran without revealing home or work locations
Live tracking is a separate, opt-in feature. When you tap "Share Live" during a run, real-time GPS streams to Cursa servers* so the people you've shared the link with can watch you finish. The stream ends when you stop the run; recorded points are deleted after 7 days.
Use Ghost Mode to keep a run entirely off our servers — no summary, no route, no live tracking.
* "Cursa servers" refers to our backend infrastructure, which is hosted on Supabase — an open-source Postgres and Storage platform. Full sub-processor list is in the Privacy Policy.
Diagnostics
How we keep Cursa stable
Two third-party tools help us catch bugs and improve the app:
- Sentry — when Cursa crashes, a stack trace is sent so we can fix it. PII scrubbing is on by default: no email, no name, no health data, no GPS coordinates. The identifier sent is a pseudonymous device UUID that resets if you reinstall the app.
- TelemetryDeck — bucketed product analytics (e.g. "run completed", "plan created"). No GPS, no exact distances, no pace values, no email. Same pseudonymous device UUID as Sentry.
Both can be switched off at Me → Privacy → Analytics at any time.
Your controls
You decide who sees what
Every piece of shared data has its own visibility setting:
- Profile visibility: Public, Followers only, or Hidden
- Route visibility: Public, Followers only, or Hidden
- Stats visibility: Public, Followers only, or Hidden
- Ghost mode: Run without appearing in anyone's feed at all
Routes are trimmed by default. The first and last 400 meters of every GPS route are hidden so nobody can pinpoint where you live. You can adjust this from 0 to 1 km, or hide routes entirely.
What we won't do
Lines we don't cross
- We do not sell your data. Not to advertisers, not to data brokers, not to anyone.
- We do not track you outside the app.
- We do not use your run data to train machine learning models.
- We do not share your information with third parties unless you connect a specific integration (like Garmin) and authorize it yourself.
Leaving
Take your data and go
Cursa includes a full data export. Go to Me → Privacy → Download my data, and you will get a JSON file containing everything we have.
To delete your account: open the Me tab, scroll to the bottom of the settings section, and tap Delete Account below the Sign Out button. This permanently removes your profile, social connections, and any shared run data from our servers. Your on-device data — GPS routes, Apple Health runs, training plans — is stored by iOS and is not affected; remove the app if you want to clear that too.
Cursa ships a privacy manifest (PrivacyInfo.xcprivacy) as required by Apple. The App Store privacy nutrition label for Cursa reflects the actual data practices described on this page.
Questions
Talk to a real person
If anything here is unclear, email privacy@cursa.run and a real person will answer.
For the full legal version of this, see the Privacy Policy and Terms of Service.