Privacy policy

Last updated 2026-09-23

What Marathon collects

• Account: your Google account email and name, used to sign you in.
• Life settings: the sleep, work, commute and preference answers you give during onboarding, used only to schedule your workouts.
• Calendar (optional, read-only): event times, titles and busy status from the Google calendars you choose, used only to avoid scheduling over them. Marathon never creates, edits or deletes your calendar events unless you enable the separate training calendar.
• Health data (optional): running sessions with distance, duration, pace and heart rate read from Health Connect (Android) or Apple Health (iOS) with your permission, and any FIT/GPX files you import or runs you enter by hand. They are used to match your completed runs to planned workouts and to adapt your training paces.
• Device token: a push-notification token so we can send reminders you opted into.

How it is used

Only to provide the app to you: scheduling, reminders, progress and pace targets. Health and calendar data are never sold, shared with third parties, used for advertising, or used to train machine-learning models. Health Connect data is used and stored in line with the Google Play Health Connect permissions policy.

Where it is stored

In a Supabase-hosted PostgreSQL database and on a server operated by the developer, both protected with TLS in transit and encryption at rest. Calendar refresh tokens are stored encrypted. Data is retained while your account exists.

Your controls

You can revoke Health Connect or calendar access at any time from the app or from Android/Google settings. Deleting your account in the app permanently removes all of your data within 30 days. Requests: avery@neighborbook.org.