A running tracker with nobody watching

Where you run is unusually sensitive data

A year of recorded runs is a map of your home, your workplace, your gym, when you are out and when you are not. It is one of the most revealing datasets an ordinary person generates, and it is routinely handed to a company in readable form in exchange for a pace chart.

Hejje seals every activity on the device before it syncs. Our server holds ciphertext it cannot open, which means the map of your week is not something we could hand over, sell access to, or lose.

What every session gives you

• The route on a map, with a full-screen view and the whole trace rather than a thumbnail.
• Pace kilometre by kilometre, with splits and cadence on the detail view.
• Elevation gained across the session, which is the number that explains a slow hilly run.
• Heart rate across the session.
• Photos and videos attached to the activity, encrypted like everything else.
• Notes, for the context a number never carries.

Walks, hikes and rides are recorded the same way, so the trail and the commute end up in the same history as the intervals.

Location only while recording

Hejje sees where you are while an activity is being recorded, and not otherwise. The Android app ships without the background location permission entirely, so there is no always-on tier sitting behind a toggle. Steps are counted separately and cheaply, without a location fix.

There is no public profile by default, no feed your runs appear in, and no heatmap assembled out of everybody's routes. Following someone is a step you take inside the app and you choose which sessions to share.

Built to survive your phone

Losing a long run at minute eighty is the most common way a tracker loses a user, and the usual culprit is not signal. Android manufacturers end background tasks aggressively, and a screen locked for two hours is a prime candidate. Recording in Hejje is designed to be killed and to come back, so the session resumes rather than ending where the operating system decided.

Signal is the easier half. GPS is a receiver, so distance, pace and elevation are the same with the radio off. The map underneath differs by platform, which is covered honestly on the offline page.