Privacy Policy

James Graham ("I," "me," or "my")
Effective Date: January 2026
Last Updated: January 2026

This Privacy Policy describes how I handle your information when you use Running Convo, including the mobile application, the website at runningconvo.com, and any related services (collectively, the "Service"). By using the Service, you agree to this Privacy Policy.

1. Who Operates Running Convo

Running Convo is operated by:

James Graham
Email: [email protected]

2. Information I Collect

2.1 Information You Provide

Account Information
When you create an account, I collect:

  • Email address
  • Name (optional)
  • LLM provider preference (if using your own API key)
  • Voice and speech speed preferences

Voice and Conversation Data
When you use the Service, I process:

  • Audio recordings of your voice (temporarily, for speech-to-text processing)
  • Text transcripts of your speech
  • AI-generated responses
  • Conversation history within sessions

Session Data
I store information about your conversation sessions:

  • Session timestamps and duration
  • Conversation mode (brainstorm, story, learn, etc.)
  • Session titles (AI-generated or user-edited)
  • Session summaries (when generated)

BYOK (Bring Your Own Key) Configuration
If you choose to use your own API key:

  • Your API key is stored securely on your device only (not on my servers)
  • I store your provider and model preferences in my database

Communications
If you contact me for support, I collect the content of your messages.

2.2 Information Collected Automatically

Usage Data
I collect information about how you use the Service:

  • Features used and actions taken
  • Session counts and exchange counts
  • Date and time of access
  • App version and platform (iOS/Android)
  • Error logs and performance data

Device Information
I collect basic device information:

  • Device type and model
  • Operating system version
  • Unique device identifiers (for push notifications)

Analytics
I use analytics services (such as Mixpanel) to understand usage patterns. This data is aggregated and used to improve the Service.

2.3 Information from Third-Party Services

Apple/Google App Stores
If you make in-app purchases, payment processing is handled entirely by Apple or Google. I receive confirmation of your subscription status but not your payment details.

3. How I Use Your Information

I use your information to:

  • Provide the Service — Process your voice, generate responses, maintain conversation history
  • Process speech — Convert your voice to text using speech-to-text services
  • Generate responses — Send your text inputs to AI providers to generate conversational responses
  • Synthesize speech — Convert AI responses to audio using text-to-speech services
  • Store your sessions — Save transcripts and summaries for later review
  • Track usage — Monitor usage against plan limits
  • Improve the Service — Analyze usage patterns, fix bugs, develop new features
  • Provide support — Respond to your questions and requests

4. Voice, Audio, and AI Processing

The Service uses voice recognition and artificial intelligence to enable hands-free conversation. Here's how it works:

Voice Recording and Processing:

  1. Your voice is recorded on your device while you speak
  2. When you say "Send" (or your chosen command), the audio is sent to my server
  3. My server sends the audio to a speech-to-text provider (Deepgram) for transcription
  4. Audio is processed in real-time and is not stored permanently

What speech-to-text providers receive:

  • Your audio recording for that specific exchange
  • They do NOT receive your email, name, or account information

AI Response Generation:

  1. Your transcribed text is sent to an AI provider (Anthropic, OpenAI, or Google)
  2. The AI generates a conversational response
  3. The response is sent to a text-to-speech provider (OpenAI or ElevenLabs)
  4. Audio is streamed back to your device for playback

What AI providers receive:

  • Your text input for that specific request
  • Recent conversation history for context
  • The conversation mode (brainstorm, coach, etc.) to guide response style
  • They do NOT receive your email, name, or account credentials

AI provider data practices:

  • Anthropic, OpenAI, and Google have their own privacy policies governing how they handle data
  • I use API configurations that minimize data retention where available
  • AI providers may use data to improve their models unless opted out at the API level

BYOK (Bring Your Own Key):
If you provide your own API key:

  • Your API key is stored only on your device (in the secure keychain), never on my servers
  • Requests are sent directly using your API key
  • You are subject to your own agreement with the AI provider

Important notes:

  • AI responses are generated automatically and may occasionally be inaccurate
  • The AI does not provide professional advice (medical, legal, financial)
  • You should verify important information independently

5. How I Share Your Information

I do not sell your personal information.

I share information only in these circumstances:

Service Providers
I use third-party services to operate Running Convo:

  • Supabase — Database hosting and authentication
  • Deepgram — Speech-to-text processing
  • OpenAI — AI language processing and text-to-speech
  • Anthropic — AI language processing (optional)
  • Google — AI language processing (optional)
  • ElevenLabs — Text-to-speech (future premium feature)
  • Apple / Google — App distribution and payments
  • RevenueCat — Subscription management
  • Mixpanel — Analytics
  • Sentry — Error tracking

These providers access only the data necessary to perform their functions and are bound by their own privacy policies.

Legal Requirements
I may disclose information if required by law, legal process, or government request, or to protect rights, safety, or property.

Business Transfers
If Running Convo is acquired or merged with another company, your information may be transferred as part of that transaction. I will notify you before your information becomes subject to a different privacy policy.

6. Data Storage and Security

Where data is stored:

  • Your account data and conversation transcripts are stored in Supabase (cloud database)
  • BYOK API keys are stored only on your device in the secure keychain
  • Data may be processed in the United States

Security measures:

  • All data is encrypted in transit (HTTPS/TLS)
  • Database access is protected by authentication and row-level security
  • API keys and credentials are stored securely
  • BYOK API keys are stored in your device's secure keychain
  • I follow industry-standard security practices

Audio data:

  • Audio recordings are processed in real-time and not permanently stored
  • Only text transcripts are stored for your session history

Retention:

  • Your data is retained while your account is active
  • You can delete individual sessions or your entire account at any time
  • After account deletion, data is removed from active systems within 30 days
  • Backups may retain data for up to 90 days before being purged

No system is 100% secure. I cannot guarantee absolute security of your data.

7. Your Rights and Choices

Access and Portability
You can view your conversation history within the app. You can request a copy of your data by emailing [email protected].

Correction
You can edit session titles and other information directly in the app, or contact me for assistance.

Deletion
You can delete individual sessions in the app, or delete your entire account through Settings. You can also email [email protected] to request deletion.

BYOK Management
You can add, change, or remove your own API key at any time through the app settings.

Opt-Out of Analytics
Contact me at [email protected] to opt out of analytics collection.

Push Notifications
You can disable push notifications through your device settings or within the app.

8. Children's Privacy

The Service is not intended for children under 13. I do not knowingly collect personal information from children under 13.

If you believe a child under 13 has created an account or provided personal information directly, please contact me at [email protected] and I will delete it.

9. International Users

The Service is operated from the United States. If you use the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from your country.

By using the Service, you consent to this transfer and processing.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know — You can request what personal information I collect, use, and disclose
  • Right to Delete — You can request deletion of your personal information
  • Right to Opt-Out — I do not sell personal information, so this right does not apply
  • Non-Discrimination — I will not discriminate against you for exercising your rights

To exercise these rights, email [email protected].

11. Changes to This Policy

I may update this Privacy Policy from time to time. The "Last Updated" date at the top will be revised accordingly.

For material changes, I will notify you through the app or by email before the changes take effect.

Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact

For questions about this Privacy Policy or my data practices, contact:

Email: [email protected]

13. Platform-Specific Information

Mobile App (iOS and Android)

Microphone Access: The Service requires microphone access to record your voice. Audio is processed in real-time for speech-to-text conversion. Audio recordings are not permanently stored.

Background Audio: The app can continue listening and responding while in the background (phone in pocket, screen locked). This is essential for hands-free use while running.

Bluetooth Audio: The app supports Bluetooth headphones for voice input and audio output.

In-App Purchases: Subscription payments are processed by Apple (App Store) or Google (Play Store). I receive confirmation of your subscription status but do not receive your payment card details.

Offline Data: Some data may be cached on your device for offline access. Session data is synced when connection is restored. This data is deleted when you log out or uninstall the app.

Website

Cookies: The website at runningconvo.com uses minimal cookies for basic functionality. I do not use advertising or tracking cookies.

Analytics: Basic analytics may be collected to understand website traffic and improve the user experience.

This Privacy Policy was last updated in January 2026.