Privacy Policy

Location data (Track) — When you use Track to record a workout, we collect precise location data (GPS coordinates, route points, distance, pace, and related movement metrics) from your device. On Android this may include approximate and precise location, and — only if you grant it — background location so recording can continue while the screen is off or the app is not in the foreground. Location is collected only during an active Track session that you start, and is shown with an ongoing notification you can pause or stop. We do not use location for advertising or to track you outside of Track.

Strava activity data — When connected via OAuth, we access distance, pace, duration, elevation, route/map data where available, and heart rate. We request the minimum read access needed to build your cards (activity:read and related scopes as shown in the Strava consent screen).

COROS activity data — When you connect COROS, we access workout-related data you authorize (for example activity type, distance, time, pace, heart rate, and route) to list your activities and generate story cards.

Garmin Connect activity data — When you connect Garmin Connect, we access activity data you authorize — including activity type, distance, time, pace, heart rate, route, and personal bests — solely so you can view your own activities in the app and create story cards. That Garmin data is shown only to you.

Other fitness sources — If you connect Health Connect (Android), Apple Health (iOS), Suunto, Polar, or Wahoo, we read workout-related data you authorize (for example distance, duration, elevation, heart rate, and routes) to list activities and generate cards. Write access is used only when you choose to save a Track session back to Health Connect / Apple Health.

Account & profile — If you sign in with Google (or continue with an account flow in the app), we process identifiers such as your Google user ID, name, and email as provided by the sign-in provider, plus any handle or profile details you set in Pursuit Tag.

Photos & media — If you pick photos or videos from your library as card backgrounds, those files are processed on your device for editing and export. We do not upload your full photo library to our servers.

Notifications — On Android, Track may show an ongoing notification while a session is recording (foreground service). We may also use notifications for product features you enable (for example chat or updates), subject to your system permission.

Device & diagnostics — We may collect limited technical information (app version, OS, crash or performance signals) to keep the service reliable.

Track recording — Location and motion data from Track are used to record your route and stats, show live metrics, and optionally create a shareable activity card or save the workout to Health Connect / Apple Health when you choose.

Card generation — Fitness and profile data are used to render story cards and exports on your device.

Account features — Sign-in data is used to sync preferences, Track activities tied to your account, and social features you use in the app.

Service improvement — Anonymised or aggregated interaction data may help us understand popular layouts and fix technical issues.

No advertising sale — We do not sell your personal fitness or location data, and we do not use Track location data for advertising.

We retain personal data only as long as needed to provide the service you use, comply with legal obligations, or resolve disputes. Retention periods:

Account & profile — Retained until you delete your account (or request deletion). After deletion we remove or de-identify account-linked data we control within a reasonable period, except where we must keep limited records for legal, security, or fraud-prevention reasons.

Track activities (signed in) — Saved Track activities and related route/stats tied to your account are retained until you delete the activity or delete your account.

Track GPS on device — Live GPS points and session checkpoints are stored on your device so a recording can resume after the app is closed. That local data is removed when you finish and save/discard the session, clear app data, or uninstall the app. We do not keep background location streams beyond the route saved with that Track activity.

Integrations (Strava, COROS, Garmin Connect, Health Connect, Suunto, Polar, Wahoo, Google) — Tokens and fetched activity payloads are retained while the integration stays connected and as needed to power the editor. Disconnecting revokes access; cached partner data for that connection is cleared or stopped being refreshed. For COROS and Garmin Connect, disconnecting removes the connection and credentials and stops future imports. Previously imported activities, related stories, and achievements remain in your Pursuit Tag account, subject to normal story expiration and your visibility settings.

Photos & media — Media you pick for card backgrounds is processed on-device for editing and export. We do not retain your photo library on our servers.

Diagnostics — Limited technical logs (for example crash or performance signals) may be retained for a short period (typically up to 90 days) to keep the service reliable, then deleted or aggregated.

Browser / web — On the website, some editor state may live only in browser memory or localStorage for onboarding and settings until you clear site data.

As required by the Strava API Agreement, Strava may monitor data related to your use of Strava API features within Pursuit Tag.

This section describes how we handle Garmin Connect user data when you connect Garmin to Pursuit Tag.

How we use Garmin data — We use Garmin user data only to show your own activities in the app (activity type, distance, time, pace, heart rate, route, and personal bests) and to create story cards from those activities. Garmin data is shown only to you — we do not display it to other users.

Third parties that receive or process Garmin data — By category: hosting — Cloudflare; database & authentication — Supabase; integration partners — none other than Garmin Connect as the source you authorize; technology vendors / AI or data processing — none. No other integration partners receive or process your Garmin data.

No sale or sharing — We do not sell Garmin data. We do not share Garmin data with third parties for their own purposes. Cloudflare and Supabase process data only on our behalf to host and operate the service.

AI Transparency Statement — Garmin data is not processed by any AI system and is not used to train or evaluate AI models. An AI Transparency Statement does not apply.

Access, correction, deletion, export & revoke consent — You can disconnect Garmin in the app at any time. Disconnecting removes the connection and access tokens and stops future imports. Previously imported activities, related stories, and achievements remain in your Pursuit Tag account, subject to normal story expiration and your visibility settings. To access, correct, delete, or export your Garmin-related data, contact aiman@pursuittag.com.

We use cookies and/or localStorage for session, onboarding, and preferences (for example units, theme, or editor settings).

We share data with service providers only as needed to operate the product (for example hosting, authentication, or analytics), under appropriate safeguards.

Fitness platforms you connect (Strava, COROS, Garmin Connect, Suunto, Polar, Wahoo, Google Health Connect, Apple Health) process data under their own policies when you authorize them.

We may disclose information if required by law or to protect safety and our rights.

Location — You can deny or revoke location (including background location) in system Settings. Without location permission, Track cannot record a GPS route.

Health & integrations — You can disconnect Strava, COROS, Garmin Connect, Suunto, Polar, Wahoo, Health Connect, or Apple Health in app Settings or in the partner's app settings.

Notifications — You can disable notifications in system Settings.

In the app, open Settings (profile icon when signed in) and tap Delete account. You can also use pursuittag.com/account/delete.

Deleting your account revokes connected integrations where applicable, clears session data we control, and removes account-linked preferences and local editor history stored for that account on your device.

You can revoke Strava access anytime at strava.com/settings/apps.

You can revoke Garmin Connect access anytime by disconnecting Garmin in Pursuit Tag Settings or removing access in Garmin Connect. We remove the connection and access tokens and stop future imports. Previously imported activities, related stories, and achievements remain in your Pursuit Tag account, subject to normal story expiration and your visibility settings. Disconnecting does not request deletion of saved activities. You can contact aiman@pursuittag.com to access, correct, delete, or export your Garmin-related data, or to revoke consent.

For feedback or support messages you sent by email, contact hello@pursuittag.com.

All transmission is encrypted over HTTPS.

We use secure OAuth / sign-in flows so partner passwords are never exposed to us.

Pursuit Tag is not directed at children under 13. We do not knowingly collect data from children.

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use after an update constitutes acceptance of the revised policy.

Privacy questions: hello@pursuittag.com

Garmin Connect data requests: aiman@pursuittag.com