SmashRun
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- They say they do not sell or share your data.
- The documents do not say who can read your content.
They keep run data until you deactivate (purged in 24 hours), do not sell it.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, optional body stats, run data (sometimes location), cookies, and Facebook login data.
Read the exact line
Privacy policy
“When you create a Smashrun account, we ask you to provide your name, email address, and a display name.”
Training
They use it to run the site, email you, research, and calculate run stats; they say they will not sell it.
Read the exact line
Privacy policy
“WE DO NOT AND WILL NOT SELL OR RENT YOUR PERSONAL DATA TO ANYONE, FOR ANY REASON, AT ANY TIME.”
Sharing
Other users see what your privacy settings allow; apps you connect and Google/Twitter analytics also get data.
Read the exact line
Privacy policy
“your Smashrun dashboard may be seen by others depending on your privacy settings;”
Kept
They keep data while your account is active; after you deactivate, they say it is purged within 24 hours.
Read the exact line
Privacy policy
“Once your account is deactivated, all of your data will be purged from our database within 24 hours”
Controls
You can change privacy and email settings, disconnect apps, export data, and deactivate your account.
Read the exact line
Privacy policy
“You can always request a bulk export of all your Smashrun data and deactivate your account within your Account page.”
Fine print
You give a license to your content, and Pro plans can auto-renew.
Read the exact line
Terms of service
“You hereby grant Us a , non-exclusive, , sublicenseable, and transferable license to use, reproduce, distribute”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Export data and deactivate your account
Account page (privacy policy: bulk export and deactivate)
Tighten who sees your runs
Profile → Privacy Settings
Cancel Smashrun Pro
Settings Account page; refund requests within 14 days to hi@smashrun.com
Opt out of Google/Twitter tracking cookies
Browser cookie settings; Google Advertising and Privacy Policy; Twitter tailored ads controls
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They can keep using what you post forever, including sharing it with others, even in ways that promote the site.
Read the exact line
Terms of service
“You hereby grant Us a , non-exclusive, , sublicenseable, and transferable license to use, reproduce, distribute, prepare derivative works of, modify, display, and perform all or any portion of the User Content”
For example, a run photo or comment you posted could still be used in Smashrun marketing after you leave.
If someone sues them because of how you used the site, you may have to pay their legal bills.
Read the exact line
Terms of service
“The User agrees to and Smashrun and its parents, subsidiaries, partners, affiliates, service providers, licensors, officers, directors, employees and agents”
For example, if a comment you posted caused a lawsuit, you could be on the hook for Smashrun’s lawyer costs.
They can change the rules whenever they want and you may not get a heads-up.
Read the exact line
Terms of service
“These Terms of Service are subject to change by Smashrun in its sole discretion, at any time, with or without notice.”
For example, a new fee or license could apply the next time you log in even if you never saw an email.
They can shut an unused account without warning.
Read the exact line
Terms of service
“We may, without notice to the applicable user, terminate accounts that have been inactive for more than 90 days (but have no obligation to do so).”
For example, if you skip logging runs for three months, your account could disappear before you export data.
A Google product tracks how you use the website, including sending your IP address to Google.
Read the exact line
Privacy policy
“Smashrun uses Google Analytics to help us evaluate how users and visitors interact with the site.”
For example, Google may see that you visited Smashrun pages even if you never created an account.
They promise not to sell or rent your personal information.
Read the exact line
Privacy policy
“WE DO NOT AND WILL NOT SELL OR RENT YOUR PERSONAL DATA TO ANYONE, FOR ANY REASON, AT ANY TIME.”
For example, they say they will not sell your email list to a marketing company.
If you turn the account off, they say your data is deleted from their database within a day.
Read the exact line
Privacy policy
“Once your account is deactivated, all of your data will be purged from our database within 24 hours”
For example, after you deactivate, your run history should be gone from Smashrun the next day.
Paid Pro plans keep charging you until you cancel.
Read the exact line
Terms of service
“Effective as of July 22, 2018, Smashrun Pro subscription fees, except gifts, will renew automatically at the same amount as your initial charge for the duration of your membership until You cancel.”
For example, a one-year Pro plan bills again next year unless you cancel in Settings.
Kids under 16 are not supposed to use it unless a parent agrees.
Read the exact line
Terms of service
“We prohibit individuals under the age of 16 from using Smashrun without consent from a parent or guardian.”
For example, a 15-year-old would need a parent email so Smashrun can check consent.
Words to know
Legal words from the lines above, in plain English.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- worldwide license
- You let the company use your content anywhere on earth, usually for free and for as long as it likes. For example, a video you post can be shown in ads in any country without asking you again.
- perpetual
- Lasting forever, with no end date. For example, a perpetual licence means the company can keep using your video years after you leave.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- consent
- Your clear agreement to something, given by an action like ticking a box or tapping Accept. For example, a pop-up asking if the app may use your location is asking for consent.
How we got here · grade B · score 51/100 · 15 of 15 policy answers backed by a verified quote · 2 not stated
What does the app collect beyond what it needs to work?
They collect account details, optional body stats, run uploads (including location when provided), cookies, and analytics identifiers.
Does it record your voice, face or body, and what happens to that?
The documents do not describe recording voice, face, or body as biometric identifiers beyond an optional Facebook profile photo.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They use Google Analytics and Twitter website tags, including for marketing measurement, with browser or Twitter opt-outs.
Do they sell or share your data, and can you opt out?
They say they will not sell or rent personal data; sharing with other apps needs your consent.
What rights do they take over what you type and what the AI makes?
You grant a perpetual, sublicensable, transferable license to user content for operating and promoting the site.
How long do they keep your data after you delete it, and can you delete it in the app?
You can export and deactivate in your Account page; they say data is purged within 24 hours.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
You have a profile with optional stats you can delete or disable, plus privacy settings for what others see.
Do they commit to basic security, and have they leaked data?
They describe a US host with SOC, HIPAA, and PCI-style certifications; no independent audit of Smashrun itself is described.
Is there a real age gate, and are teens protected?
Under 16s need parent or guardian consent via email; no strong age-check method is described.
Will they tell you when the rules change, and is the policy specific?
Privacy says they will notify users, but terms say they can change anytime without notice and continued use is acceptance.
Can they close your account without warning, and can you get your data out first?
They may terminate inactive accounts after 90 days without notice; Pro can be ended without refund for violations.
If something goes wrong, who pays?
The site is as-is with broad liability limits, and you must indemnify Smashrun for claims related to your use.
Do subscriptions renew on their own, and can you get a refund?
Pro auto-renews until you cancel in Settings; 14-day refunds on request except Lifelong plans; fee increases need notice.
The privacy policy is 2,096 words at a fairly hard level (Flesch reading ease 53.9); the terms are 3,553 words at a fairly hard level.
