eachrace turns your workout history into a map of everywhere you've been. This policy explains what data it collects, how it's used, and who else sees it.
There's no password - you sign in via OAuth through a fitness platform you already use (Suunto, Strava, Garmin, Coros, or Polar, depending on what's enabled). We never see or store your password for that platform. We receive an access token (and a refresh token, where the provider issues one) that lets us fetch your workout data on your behalf, and a provider-issued account identifier used to recognize you on future visits.
Those tokens expire if they aren't used, so we refresh them periodically in the background even when you haven't recorded anything - without that, a quiet few months would silently disconnect your account. If a provider tells us the authorization has expired for good, we record that (along with the reason the provider gave) and ask you to reconnect the next time you visit. Nothing about this gives us any access beyond what you originally granted, and disconnecting a provider from your account page stops it entirely.
Where a provider lets you choose what to share (Garmin does), we also record which of those permissions you granted, so we can tell you when something you've asked for needs a setting changed on their side rather than silently doing nothing. We only ever read that list - changing it is done in your provider's own account settings, never here.
.fit file you upload directly..fit file is kept, and we store a summary of what it
contains - its header, whether it is internally consistent, how many messages of
each kind it holds, and its file_id message, which includes the
manufacturer, product and serial number of the device that recorded
it, and the UTC offset the device was set to when recording. This is
shown only to you, on your own workouts, and only if you turn
on "Geek mode" in your account settings. It is never included in a shared
link.We don't collect your email address, real name, or payment information - none of that is needed for anything this app does.
Solely to run the app for you: authenticating your sessions, fetching and displaying your workouts, and rendering your personal coverage map. We don't sell your data, use it for advertising, or share it with anyone beyond what's described below.
Your map and workouts are private by default - visible only to you. You can generate a shareable link to your map or an individual workout; anyone with that exact link can view it without signing in. Treat it like any other link you'd only hand to people you trust - if you don't want a workout or map visible to others, don't share its link. A shared workout link never exposes the FIT-file details described above, including your device's serial number - those are visible only to you, signed in, on your own workouts.
We use a session cookie to keep you signed in, and an optional "remember me" cookie (valid up to 30 days) so you're not signed out every time your session expires. Neither is used for tracking or advertising.
We keep your data for as long as your account exists. There's no self-service "delete my account" button yet - if you'd like your data removed, contact us (see below) and we'll take care of it by hand.
eachrace isn't directed at children, and we don't knowingly collect data from anyone under 13.
If this policy changes in a meaningful way, we'll update the date at the top of this page.
Questions about this policy, or a data deletion request, can be sent to privacy@eachrace.com.