Privacy Policy
This Privacy Policy explains how GhostStride ("GhostStride", "we", "us", or "our") handles information when you use the GhostStride applications, website and related services ("Services").
1. Information we process
Depending on features and permissions, we may process account information (including name, username/handle, authentication identifiers and profile picture); running information (including distance, duration, pace, speed, calories, route, splits, targets, saved runs and training history); precise location and GPS route information; device and technical information needed to operate and secure the Services; and authorized health or fitness information such as heart rate.
2. Location
GhostStride uses location to provide GPS tracking, routes, distance and pace. Location access is controlled through device permissions. When you intentionally use Run Together, live location-derived progress and/or location required for the live session may be shared with the accepted friend participating in that session. Run Together is intended for accepted friends, not public users.
3. Community and friends
Community search is designed to expose only a user's name and username/handle. Search results do not expose run history, distance run, route, profile picture or other running information. After users become accepted friends, additional information may be visible or shared as required by friend features, including profile pictures, running information, completed runs and Run Together functionality.
4. Uses
We process information to provide and maintain the Services; authenticate accounts; record, display and synchronize runs; calculate running statistics; enable friend/community functionality; provide requested live features; secure and troubleshoot the Services; comply with law; and improve reliability.
5. EEA/UK legal bases
Where GDPR or UK GDPR applies, legal bases may include performance of a contract, consent (including where required for sensitive data/device permissions), legitimate interests in operating and securing the Services where not overridden by your rights, and compliance with legal obligations.
6. Health and sensitive information
Health, fitness and precise-location information can be sensitive. We use it for functionality you request and subject to applicable permissions. Apple Health/HealthKit information is handled subject to Apple's requirements and applicable law. We do not use HealthKit data for advertising.
7. Providers
We may use providers for cloud hosting, authentication, databases, storage, diagnostics and notifications. GhostStride uses Firebase/Google infrastructure for parts of its backend and Apple services for platform functionality.
8. Retention
We retain information as reasonably necessary to provide the Services, maintain accounts, satisfy legal obligations, resolve disputes and enforce agreements. Retention differs by data type.
9. Security
We use reasonable safeguards appropriate to the information processed. No electronic system can be guaranteed completely secure.
10. Rights and choices
You can control location, Health and notification permissions through device settings. Depending on jurisdiction, you may have rights to access, correct, delete or port information, restrict or object to processing, withdraw consent, and complain to a supervisory authority.
11. U.S. state privacy
Residents of certain U.S. states may have additional rights under applicable law, including rights concerning access, correction, deletion or certain disclosures/uses where those laws apply.
12. International processing
Information may be processed outside your country. Where required, legally recognized transfer mechanisms or safeguards are used.
13. Children
GhostStride is not directed to children below the minimum age required to consent to online services in their jurisdiction.
14. Changes
We may update this policy as the Services or legal requirements change.
15. Contact
Privacy questions: contact@ghoststride.app. Replace this before launch if your actual contact differs.