Privacy policy

Last updated 20 September 2026

What we store

• Account: email address, a password hash, your display name, handle and optional weight.
• Runs: every GPS point of every run you record, with time, altitude, speed and, when you connect a sensor, heart rate and cadence. Derived values such as distance, effort and splits.
• Races: which opponent you raced and the result.
• Social: your friend list and pending requests.
• Settings: voice thresholds, units and privacy level.
• Device: platform and app version, so we can debug sync problems.

Why

Location history is the product: a ghost is a replay of your own points. We keep every point so that a race against an old run is exact and so that the effort model can be recomputed when it improves.

Who sees it

Nobody by default. Your privacy setting is friends unless you change it: friends see your stats and can race your runs; strangers see your name and handle only. Public makes your profile visible to anyone with the link. Private hides everything, including from friends.

We do not sell data, run advertising, or embed third-party analytics. Elevation correction sends coordinates, without your identity, to an elevation service or to our own tiles.

Where

On a server we operate in Google Cloud. Backups are encrypted at rest.

Your rights

From settings you can export everything we hold as GPX and JSON, and delete your account. Deletion removes your runs, points, races and friendships immediately and the backups within 30 days. Email [email protected] for anything else.

Cookies

Two httpOnly session cookies keep you logged in on the web. Nothing else.

Changes

We update this page and the date above when the policy changes. Material changes are announced in the app.