Nike Run Club (NRC) is Nike, Inc.'s free GPS running and coaching app, tied to a Nike Member account and to health/fitness repositories such as Apple HealthKit and Google Fit. Nike's U.S. privacy policy discloses collecting fitness activity data (time, duration, distance, location, calorie count, heart rate, pace/stride) and physical characteristics, and separately states it does not share HealthKit-sourced fitness/activity information with third parties for advertising or data-mining purposes. Apple's App Store privacy label for NRC nonetheless shows Health & Fitness data collected and linked to identity, used in part for 'Third-Party Advertising,' and Identifiers used to track users across other companies' apps and websites. Nike, Inc. is a publicly traded (NYSE: NKE), Oregon-incorporated company with fully traceable ownership via routine SEC 10-K filings; no NRC-specific breach, FTC action, or court judgment was substantiated on a live primary source, though Nike's own 10-K acknowledges ongoing cyberattack attempts against its systems.
TRACK RECORD
1 ENFORCEMENT ACTION
[2026-07-15]
Nike's own 10-K risk factors disclose that the company has experienced, and expects to continue experiencing, cyberattacks and unauthorized-access attempts against its systems; Nike states these attacks have not had a material impact on operations to date, though no incident specific to Nike Run Club was substantiated on a live primary source.
Nike's U.S. privacy policy discloses collecting fitness activity information generated through use of the Nike Platform (which includes Nike Run Club) -- such as time, duration, distance, location, calorie count, resting heart rate and pace/stride -- as well as physical characteristics and data from connected fitness health repositories such as Apple HealthKit or Google Fit.
Apple's App Store privacy label for Nike Run Club discloses that Health & Fitness data, among other categories, may be collected and linked to the user's identity.
Nike, Inc.'s SEC Form 10-K cover page identifies it as an Oregon corporation with a listed IRS Employer Identification Number, filed as part of its annual regulatory disclosures; Nike Run Club is developed and operated by this same publicly traded parent.
Nike's privacy policy states that Nike does not share fitness and activity information obtained from connected fitness health repositories (such as Apple HealthKit) with third parties for advertising, marketing, or other use-based data mining purposes -- a health-data-specific no-share commitment narrower than Nike's general advertising-sharing practices.
Apple's App Store privacy label for Nike Run Club discloses that Health & Fitness data, among other categories linked to identity, may be used for the developer's 'Third-Party Advertising' purposes -- an independent disclosure that complicates the privacy policy's health-data no-share carve-out.
Nike's own 10-K risk factors disclose that the company has experienced, and expects to continue experiencing, cyberattacks and unauthorized-access attempts against its systems; Nike states these attacks have not had a material impact on operations to date, though no incident specific to Nike Run Club was substantiated on a live primary source.
Apple's App Store privacy label for Nike Run Club discloses that Identifiers data collected by the app may be used to track users across apps and websites owned by other companies.
Nike's privacy policy discloses using cookies and similar technologies -- including some operated by third parties -- to target advertising and content to users across Nike's own platform (which includes Nike Run Club) and third-party sites and services.