Privacy Policy

1. Overview

TrailMetrics is designed to enrich your trail running activities by calculating specialized trail metrics (elevation gain, vert per kilometer, GAP, average grade) and writing them onto your Strava activity description. We value your privacy and retain only the minimal data required to perform this service.

2. Data We Collect

When you authenticate with Strava, we receive:

• Your Strava Athlete ID and name.
• OAuth tokens (access token and refresh token) to interact with the Strava API on your behalf.
• Activity metadata necessary to calculate trail stats (distance, elevation, moving time, sport type, and activity ID).

We do not sell, share, or monetize your activity or profile data.

3. Data Storage & Security

All tokens and activity records are stored in a secure PostgreSQL database with Row Level Security (RLS) enabled. Only server-side processes with authorized credentials can access your records. No athlete tokens are ever exposed to the client or public web.

4. Deauthorization and Data Deletion

You may revoke TrailMetrics’ access at any time:

• Directly in your Strava account settings under My Apps → Revoke Access.
• Through the TrailMetrics disconnect page.

In accordance with the Strava API Agreement, when an athlete deauthorizes the application, all stored tokens and associated activity records for that athlete are immediately deleted from our database.

5. Third-Party Services

TrailMetrics relies on the Strava API to receive activity notifications and update descriptions. Your use of Strava remains governed by the Strava Privacy Policy.