Privacy policy

Who we are

Trackbuddy is operated by Kaine Ventures, LLC, a Texas limited liability company (“we”, “us”). This policy covers the Trackbuddy iPhone app and the website www.trackbuddy.co. Write to hello@trackbuddy.co with any question or request about your data.

What the app collects

• Account. Your email address and name from sign-in, and a user ID. With Sign in with Apple you can hide your email address, and Apple forwards our messages instead. When you create an account, we get an alert in Slack with your name and email address.
• Age. The age range you share through Apple (13 to 15, 16 to 17, or 18 and over), or the birth date you enter when the app asks for one. We use it to check the minimum age and to apply the protections for athletes under 18.
• Profile. Your name, handle, bio, location text, profile and cover photos, level, and, for coaches, a coach bio and specialties. Body and health details (height, weight, resting and maximum heart rate, injuries) only if you add them.
• Training. Sessions, sets, reps, attempts, marks and results with their wind, timing method, implement and conditions, including the weather at the venue; notes; planned sessions; seasons, phases and goals; and the venues you pick.
• Photos and videos you attach to sessions, reps and marks, your profile and cover photos, and the team logos and banners admins upload. You pick them with the iPhone’s photo picker, so the app sees only the items you choose. Before uploading, Trackbuddy removes the location from every photo and video, along with device identifiers such as serial numbers and photo library ids. The camera make and model and the time it was taken stay in the file. When you save a share card, the app asks to add it to your photo library and reads nothing from it.
• Other content you add. Notes, comments, bios, team details, reports, and the venues and venue corrections you add.
• Social activity. Follows, likes, comments, team memberships, coach connections and the access you grant coaches, and the reports, blocks and hides you make.
• Location, only when you tap Find venues near me. The app asks for your location only when you tap Find venues near me while picking a venue. It sends that one reading to list and sort the venues near you, and Trackbuddy doesn’t store it. If you then add a venue where you stand, the venue keeps the altitude from that reading. Weather for a session comes from the venue’s coordinates, never from your location.
• Crash reports. When the app crashes, Firebase Crashlytics receives the device model, system and app versions, the technical details of the crash and your user ID.
• Usage events. A fixed list of named events, such as app opened, screen viewed, session finished, mark added and report submitted, sent to PostHog so we can see which parts of the app and the web app (app.trackbuddy.co) people use. Each event carries counts and kinds (never your content), the app and iOS versions, the device model, the language and region setting, and an ID: a random one made on the phone before you sign in, then your user ID. An event also carries your team’s ID when you have a team. Under your user ID, PostHog keeps whether you coach, whether you are under or over 18, the level you chose and your account ID at our sign-in provider Clerk, so we can link your usage to your account. Signing out resets the random ID. The app and the web app record no taps or keystrokes beyond that list, and the web app stores no analytics identifier in your browser.

We use this data to run the app, to keep it safe and to improve it. None of it is used for advertising or shared with data brokers.

Who can see your training

You choose who sees each session: everyone, your followers, your team and coaches, or only you and your coaches. Your profile follows your profile setting. Coaches see your health details and edit your sessions only when you grant it, and you can take that back at any time. Athletes under 18 never have public profiles or public sessions (see Minors).

Photos and videos

Photos and videos follow the visibility of the session or mark they belong to. The app loads them through links that expire within an hour, issued only to people allowed to see that session. When you remove a photo or video, or delete the session it belongs to, Trackbuddy deletes the stored file once nothing else uses it.

What the website collects

• Waitlist. If you join the waitlist, we store your email address and the country your connection comes from (worked out from your IP address, which we don’t keep) in our waitlist system and in PostHog, and use the address to send you one email when the app launches. We also get an alert in Slack with your email address. We don’t add it to any other list. Write to us and we remove it.
• Analytics. The site counts page views and a few interactions (a call to action clicked, a question opened, a post read to the end) through PostHog, served from this domain. The site sets no cookies and stores no analytics identifier in your browser, so each page view stays anonymous and unconnected to your other visits.
• Theme. If you switch between light and dark mode, your browser stores that choice on your device. It never leaves your device.
• Server logs. Vercel, which hosts the site, records IP addresses and browser details in its logs to run and protect the site.

Processors

These companies process data for Trackbuddy under their own security and privacy commitments. They store data in the United States and other countries where they operate.

We share data with anyone else only when the law requires it, or to protect people from harm.

How long data is kept

• Your account and training data stay as long as your account exists.
• A deleted session with results stays in Recently Deleted for 30 days, where you can restore it. Trackbuddy removes it for good after the 30 days, or at once when you choose Delete Now on a session you own. A session with no results is removed at once.
• Photos and videos you upload but never attach are removed after 14 days, and failed uploads after 7 days.
• Crash reports are kept for 90 days by Firebase Crashlytics.
• Waitlist addresses are kept in the waitlist system and PostHog until you ask us to remove yours.
• Signup and waitlist alerts stay in Slack until we remove them. Write to us and we remove the alerts about you.
• Reports and the moderation decisions on them are kept as long as we need them to enforce the terms.

Deleting your account

In the app, open your profile, tap Settings and choose Delete Account. Trackbuddy then removes, in a few minutes:

• your profile and your sign-in account;
• your sessions, marks, bests and seasons, and every photo and video you uploaded, including the stored files;
• your comments, likes, follows, blocks, hides, notifications and the reports you filed;
• your coach connections and team memberships, the invites you created, and the unfinished sessions you created for others.

A team you own passes to another admin or coach, or closes when no one is left to run it. Completed sessions you logged as a coach stay with the athletes who own them. Venues you added stay listed without your name once they were approved. The app shows the deletion’s progress; Trackbuddy keeps that status for 30 days under a one-way code that contains none of your details.

Past usage events in PostHog carry your user ID, the event name and the counts and kinds above. They stay after your account is deleted, with the role, age group and level PostHog keeps under your user ID. Write to hello@trackbuddy.co and we delete them too. You can also ask us by email to delete your account, to correct your data or to send you a copy of it.

Minors

You must be 13 or older to use Trackbuddy. When the app learns that a person is under 13, it stops them from continuing, and we delete any account we learn belongs to a child under 13. A parent who believes their child under 13 has an account can write to us and we delete it.

Athletes aged 13 to 17 get protected defaults that the server enforces:

• their profile is visible only to approved followers, teammates and connected coaches;
• they can’t make a session public;
• they appear in search only to their teammates and connected coaches;
• every follow request needs their approval.

An account that hasn’t confirmed an age gets the same protections.

Security

Data travels to and from Trackbuddy encrypted, and our processors encrypt it at rest. Only Kaine Ventures, LLC accesses production data, and only to operate the service, handle your requests and review reports.

Your choices and rights

Wherever you live, you can ask for a copy of your data, ask us to correct or delete it, and object to how we use it. Write to hello@trackbuddy.co; we answer within 30 days. Depending on where you live, you can also complain to your local data protection authority.

Changes

When this policy changes, the date at the top changes with it. We tell you in the app before a change that affects how your data is used takes effect.