Privacy Policy

Last updated: May 11, 2026

RunRaceTrace is a small companion service for the RunXC RaceTrace iOS app — a race timing tool for high-school cross-country and track coaches. This page explains what we collect and how we use it. Plain English; no dark patterns.

What we collect

• Sign-in identity. When you sign in with Google or Apple, we receive your name, email address, and a stable user identifier from that provider. We store these to identify your account.
• Coaching data you create. Athletes on your roster (first name, last name, optional grade, optional gender), race results (split times, distances, dates), and workouts you log in the training log. This is data you intentionally enter; we store it so you can use it on multiple devices.
• Technical logs. Standard server logs (IP, timestamp, request path) kept for short periods for security and debugging. Not used for profiling.

What we don't collect

• We don't use third-party analytics, advertising trackers, or tag managers.
• We don't sell or share your data with marketers, ever.
• We don't ask for personal info beyond what's needed for sign-in and coaching.

How we use it

• To let you sign in, view, and edit your roster, race results, and training log on the web and the iOS app.
• To sync data between your devices via your account.
• To keep the service running (operational logs, error reports).

Who we share with

Nobody. Sign-in tokens flow only between you and Google/Apple. Your coaching data is stored on our server and not shared with any third parties.

Where data is stored

All data lives on a single AWS EC2 server in the United States (US East region). We use HTTPS (TLS) for all traffic.

Strava integration (optional)

If you connect your Strava account, RunRaceTrace receives the following data from Strava: your activity list (run distance, time, pace, name, sport type) — by default 365 days of history on first connect, and the most recent 14 days on routine refresh. We aggregate this into your training log entries (running miles, strength/cross-training minutes, workout type, pace). Activity names (and descriptions, when available) are populated into the entry's Notes field on first creation only — after that, your own edits to Notes are preserved. No raw activity data, location/GPS data, heart rate, or social data is stored.

• You can disconnect at any time from your training log page. On disconnect, we revoke our access at Strava and delete all Strava-sourced fields from your training log entries. Your own notes and day-feel ratings are preserved.
• Per Strava's API agreement, we don't share Strava data with anyone other than you and (with your consent, by adding your email to a coach's roster) your coach.
• We don't use Strava data for advertising, analytics, or AI/ML training.
• Strava data is refreshed periodically (every 6 hours) so it never stales beyond Strava's 7-day cache window.
• If you delete an activity on Strava, it will be removed from your RunRaceTrace training log within 48 hours.

Powered by Strava. Strava is a trademark of Strava, Inc. Use of Strava trademarks is governed by Strava's brand guidelines.

Cookies

We use one HTTP-only cookie (connect.sid) to keep you signed in. It expires after 30 days. No tracking or advertising cookies.

Deleting your account

You can permanently delete your account and all associated data at any time by visiting the account section in the iOS app (Settings → Account → Delete Account), or by emailing the support contact below. Deletion is immediate and irreversible — we don't keep a backup of your account data after deletion.

Children's privacy

RunRaceTrace is intended for coaches (adults). Coaches enter information about athletes on their roster, which may include minors. This information is provided and controlled by the coach. We do not knowingly collect information directly from anyone under 13, and we recommend coaches obtain appropriate consent from athletes' parents/guardians before adding athletes who are minors.

Changes

If we make material changes to this policy, we'll update the "Last updated" date and, where appropriate, notify signed-in users via the dashboard.

Contact

Questions, concerns, or deletion requests: cotepat@gmail.com.