How we handle your data.
The short version: this website sets no cookies, runs no analytics, and makes no requests to third parties. If you have not emailed us, we hold nothing about you beyond the server logs any website produces.
Last updated 30 July 2026
Our principles
01
Collect as little as possible
The best way to protect data is not to hold it. We ask for what a feature genuinely needs and nothing more, and we delete what we no longer need.
02
European by default
We are a Danish company and we build for people who would rather their data stayed in Europe. Our website and our products are hosted on EU infrastructure. Where a processor sits outside the EU, as our email provider does, we name it and say what protects the transfer.
03
Never sold, never used to train models
We do not sell personal data, rent it, or trade it. We do not use the data you give us to train AI models, ours or anyone else's.
04
You stay in control
You can ask what we hold, get a copy, correct it, or have it deleted. Where you have connected something, you can disconnect it.
05
Describe what we do, not what sounds good
This page says what actually happens, including the parts that are unremarkable. Where a claim would need a caveat, we write the caveat.
Who is responsible
Improva Labs ApS is the data controller. We are registered in Denmark under CVR number 46606558. For anything on this page, including any request about your own data, write to hello@improvalabs.com and a person will answer.
This website
No cookies, no analytics, no trackers
improvalabs.com sets no cookies and stores nothing in your browser. We run no analytics product, so we do not know who visits, how many of you there are, or what you clicked. There are no advertising or social media trackers, and the page makes no requests to any third-party domain. The typeface is served from our own server rather than from Google Fonts, so loading this page does not tell Google that you did.
That is also why you have not been asked to accept anything. A consent banner exists to permit non-essential cookies, and there are none here to permit.
Server logs
Our host records the ordinary technical detail of each request, including your IP address, the page requested, the time, and your browser's user-agent string. We rely on legitimate interest under Article 6(1)(f) GDPR, for the narrow purposes of serving the site, keeping it available, and investigating abuse or attacks. We do not use these logs to build a picture of individuals, and we do not export or combine them with anything else. Our host keeps them only as long as they are useful for those purposes and then discards them. We take no copy and keep no record of our own.
Links away from this site
Some links, including the waiting list, take you to runsei.com. Once you are there, that site's own privacy information applies. We do not receive anything about you as a result of you following a link.
If you email us
If you write to us we hold your message, your email address, and anything else you choose to include, for as long as it takes to deal with the matter and for a reasonable period afterwards in case you write again. The legal basis is legitimate interest under Article 6(1)(f), or the steps leading to a contract under Article 6(1)(b) where that is what we are discussing. Our email runs on Google Workspace, so anything you send us is stored and processed by Google on our behalf.
Our products
Runsei is a separate product with its own data handling, set out at runsei.com/privacy. Health data connected to Runsei is stored in the EU, an EU-only mode is available for the AI, and that data is never used to train anyone's models. Onword has not been built and collects nothing from anyone.
We deliberately do not restate Runsei's specifics here. Two copies of the same commitment drift apart, and a privacy statement is the last place that should happen. runsei.com is the authoritative source for Runsei.
Who processes data for us
- ·Vercel, for hosting this website. We use Vercel's EU hosting, so the site is served from European infrastructure.
- ·Google Workspace, for our email. Anything you send to hello@improvalabs.com is stored and processed by Google on our behalf.
Each of them acts only on our instructions, under a data processing agreement. We add processors rarely, and this list is updated when we do.
Google is the one processor whose operations reach outside the EU. For those transfers Google relies on the EU–US Data Privacy Framework and on standard contractual clauses. We would rather email were European too, and we are not going to pretend otherwise.
Our domain registrars are not on the list. They register the domain names and answer DNS lookups, and neither involves them processing personal data about you on our behalf.
Automated decisions
Nothing on this website makes automated decisions about you and there is no profiling. Where Runsei proposes a change to a training plan, the proposal is exactly that: a person accepts or rejects it.
Your rights
Under GDPR you have the right to ask for a copy of the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent where you have given it. Exercising any of these costs nothing and we will not treat you differently for asking.
Write to hello@improvalabs.com. We will reply within one month, as GDPR requires. If we have got something wrong, or you are not satisfied with how we have handled a request, you can complain to the Danish Data Protection Agency, Datatilsynet, at datatilsynet.dk. You may also complain to the supervisory authority where you live.
Changes
If we change how we handle personal data, we will change this page and update the date at the top. We will not quietly broaden what we do with data you have already given us.