PRIVACY POLICY

Last Updated: January 7, 2026

1. Introduction

At Trailflow.io, we respect your privacy. This policy explains how we collect, use, and protect your information when you visit our website and when you connect your Strava account to our Service.

2. Information We Collect

We collect information in two ways: when you voluntarily authenticate via Strava, and automatically through website analytics.

A. Strava Account Data (Authenticated Users)

We adhere to the principle of Data Minimization. We do not store your entire athletic history.

  • Identity Information: We collect your Name, Email Address, Location (City/State/Country), and Profile Picture. We use your email to facilitate account management and send critical service updates.
  • Relevant Activities: We only process and store data for activities that match our specific “Season Segments.”
  • Irrelevant Activities: If an activity uploaded to Strava does not contain one of our tracked segments, we do not collect or store detailed GPS data for that activity.
  • Segment Data: For relevant activities, we store the segment effort time, date, and associated metrics required for the leaderboard.

B. Website Usage Data (Analytics)

We use third-party tools to understand how visitors interact with Trailflow.io.

  • Plausible Analytics: We use Plausible to track overall trends. Plausible is an open-source project dedicated to making web analytics more privacy-friendly. It does not use cookies and does not generate any persistent identifiers. It generates a random string that is reset once per day, meaning there is no way to know whether a person returns to the site on another day. All data is aggregated and isolated to a single day. We do not use this data to mine for behavioral trends or sell it to advertising companies.
  • Google Analytics: We use Google Analytics to collect usage metrics. This service does use cookies to track session duration and page visits. We have enabled IP anonymization to protect your privacy.

3. How We Use Your Information & Email Preferences

  • Leaderboards: To rank your performance against other users on specific segments and maintain historical season records.
  • Service Functionality: To authenticate your identity and manage your session.
  • Communication & Opt-Out: We may use your email to send you updates regarding specific seasons, leaderboards, or community news.
    • Opt-Out: You may unsubscribe from these non-essential communications at any time by clicking the “unsubscribe” link found at the bottom of our emails.
    • Transactional Emails: You cannot opt-out of critical service emails, such as password resets, security alerts, or updates to these Terms of Service.

4. Data Retention

  • Historical Data: We retain your segment data and leaderboard rankings indefinitely to preserve the history of past seasons and competitions.
  • Account Deletion: You may request the deletion of your account and data at any time by contacting us. If you delete your account, your name and time will be removed from all current and historical leaderboards.

5. Sharing Your Information

  • Public Display: Your name, profile picture, and segment times will be visible to other users of the Service on the leaderboards.
  • Third Parties: We do not sell your data. We share data only with service providers required to host the app and analyze traffic (Google, Plausible).

6. Strava Data Agreement

We comply strictly with the Strava API Agreement.

  • We do not use your Strava data for model training (AI) or advertising purposes.
  • You can revoke our access to your Strava data at any time via your Strava settings page.

7. Children’s Privacy

We do not knowingly collect personal data from children under the age of 13 in the United States or under the age of 16 in the rest of the world. If we become aware that we have collected such data without parental consent, we will take steps to remove that information from our servers.

8. International Users

Trailflow.io is hosted in the United States. If you are accessing the Service from the European Union, Asia, or any other region with laws or regulations governing personal data collection, use, and disclosure that differ from United States laws, please be advised that through your continued use of the Service, you are transferring your personal information to the United States and you consent to that transfer.

9. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights to data access or deletion, please contact us at: stephen@trailflow.io.