Privacy Policy

Location data (Track) — When you use Track to record a workout, we collect precise location data (GPS coordinates, route points, distance, pace, and related movement metrics) from your device. On Android this may include approximate and precise location, and — only if you grant it — background location so recording can continue while the screen is off or the app is not in the foreground. Location is collected only during an active Track session that you start, and is shown with an ongoing notification you can pause or stop. We do not use location for advertising or to track you outside of Track.

Strava activity data — When connected via OAuth, we access distance, pace, duration, elevation, route/map data where available, and heart rate. We request the minimum read access needed to build your cards (activity:read and related scopes as shown in the Strava consent screen).

Other fitness sources — If you connect Health Connect (Android), Apple Health (iOS), Suunto, Polar, or Wahoo, we read workout-related data you authorize (for example distance, duration, elevation, heart rate, and routes) to list activities and generate cards. Write access is used only when you choose to save a Track session back to Health Connect / Apple Health.

Account & profile — If you sign in with Google (or continue with an account flow in the app), we process identifiers such as your Google user ID, name, and email as provided by the sign-in provider, plus any handle or profile details you set in Pursuit Tag.

Photos & media — If you pick photos or videos from your library as card backgrounds, those files are processed on your device for editing and export. We do not upload your full photo library to our servers.

Notifications — On Android, Track may show an ongoing notification while a session is recording (foreground service). We may also use notifications for product features you enable (for example chat or updates), subject to your system permission.

Device & diagnostics — We may collect limited technical information (app version, OS, crash or performance signals) to keep the service reliable.

Track recording — Location and motion data from Track are used to record your route and stats, show live metrics, and optionally create a shareable activity card or save the workout to Health Connect / Apple Health when you choose.

Card generation — Fitness and profile data are used to render story cards and exports on your device.

Account features — Sign-in data is used to sync preferences, Track activities tied to your account, and social features you use in the app.

Service improvement — Anonymised or aggregated interaction data may help us understand popular layouts and fix technical issues.

No advertising sale — We do not sell your personal fitness or location data, and we do not use Track location data for advertising.

We retain personal data only as long as needed to provide the service you use, comply with legal obligations, or resolve disputes. Retention periods:

Account & profile — Retained until you delete your account (or request deletion). After deletion we remove or de-identify account-linked data we control within a reasonable period, except where we must keep limited records for legal, security, or fraud-prevention reasons.

Track activities (signed in) — Saved Track activities and related route/stats tied to your account are retained until you delete the activity or delete your account.

Track GPS on device — Live GPS points and session checkpoints are stored on your device so a recording can resume after the app is closed. That local data is removed when you finish and save/discard the session, clear app data, or uninstall the app. We do not keep background location streams beyond the route saved with that Track activity.

Integrations (Strava, Health Connect, Suunto, Polar, Wahoo, Google) — Tokens and fetched activity payloads are retained while the integration stays connected and as needed to power the editor. Disconnecting revokes access; cached partner data for that connection is cleared or stopped being refreshed.

Photos & media — Media you pick for card backgrounds is processed on-device for editing and export. We do not retain your photo library on our servers.

Diagnostics — Limited technical logs (for example crash or performance signals) may be retained for a short period (typically up to 90 days) to keep the service reliable, then deleted or aggregated.

Browser / web — On the website, some editor state may live only in browser memory or localStorage for onboarding and settings until you clear site data.

As required by the Strava API Agreement, Strava may monitor data related to your use of Strava API features within Pursuit Tag.

We use cookies and/or localStorage for session, onboarding, and preferences (for example units, theme, or editor settings).

We share data with service providers only as needed to operate the product (for example hosting, authentication, or analytics), under appropriate safeguards.

Fitness platforms you connect (Strava, Suunto, Polar, Wahoo, Google Health Connect, Apple Health) process data under their own policies when you authorize them.

We may disclose information if required by law or to protect safety and our rights.

Location — You can deny or revoke location (including background location) in system Settings. Without location permission, Track cannot record a GPS route.

Health & integrations — You can disconnect Strava, Suunto, Polar, Wahoo, Health Connect, or Apple Health in app Settings or in the partner's app settings.

Notifications — You can disable notifications in system Settings.

In the app, open Settings (profile icon when signed in) and tap Delete account. You can also use pursuittag.com/account/delete.

Deleting your account revokes connected integrations where applicable, clears session data we control, and removes account-linked preferences and local editor history stored for that account on your device.

You can revoke Strava access anytime at strava.com/settings/apps.

For feedback or support messages you sent by email, contact hello@pursuittag.com.

All transmission is encrypted over HTTPS.

We use secure OAuth / sign-in flows so partner passwords are never exposed to us.

Pursuit Tag is not directed at children under 13. We do not knowingly collect data from children.

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use after an update constitutes acceptance of the revised policy.

Privacy questions: hello@pursuittag.com