Privacy Policy

Last updated: July 23, 2026

Palma is a running tracker for iPhone. This policy explains what data the app handles, why, and where it goes. The short version: Palma exists to record your runs, not to monetize your data. There are no ads, no third-party analytics, and no ad trackers in the app, and your data is never sold.

Location

Palma uses your location to record your running route, distance, and pace — including in the background while your screen is locked during a run you started. Location is only tracked while a run is in progress; when you stop the run, tracking stops. GPS points for an in-progress run are checkpointed on your device so a run isn't lost if the app is interrupted.

Health data

With your permission, Palma reads workouts and heart-rate data from Apple Health so runs and walks recorded on your Apple Watch appear in the app. Palma does not write to Apple Health today, and Apple Health data is never used for advertising or shared with third parties.

Your account and activity data

Palma stores your account and activity data (runs, distances, streaks, faith log entries, intentions, and Palms shared with friends) in a backend hosted on Supabase. This data is used solely to provide the app's features — your run history, stats, and the Circle feed you share with friends you've connected with.

Strava

If you connect Strava, finished runs you choose to upload are sent to Strava as GPX files. Your Strava tokens are stored in the iOS keychain on your device. Strava's handling of your data is governed by Strava's privacy policy. You can disconnect Strava at any time.

Coaching messages

Sebastian's daily coaching message is generated by an AI model (Anthropic's Claude) via a server function. To write the message, the function is given limited training context — such as your current streak, weekly mileage, today's planned workout, and the day's feast. One message is generated per day and cached on your device. This context is not used to train AI models.

What we don't do

• No advertising and no ad networks.
• No third-party analytics or tracking SDKs.
• No selling or renting of personal data — ever.

Data retention and deletion

Your data is retained while you have an account so the app can show your history. To delete your account and associated data, contact us at the address below and we'll take care of it.

Children

Palma is not directed at children under 13, and we do not knowingly collect data from them.

Changes

If this policy changes in a meaningful way, the "Last updated" date above will change with it.

Contact

Questions about privacy? Email grantjosephdeker@gmail.com.