Trace is a running intelligence platform built and operated by Nick Marshall, based in Australia. Trace connects to your Strava and/or Garmin account to provide personalised training insights, readiness scoring, and AI-powered coaching.

Contact us at hello@tracerun.app.

We collect only the data necessary to provide the Trace service:

• From Strava: Your athlete profile (name, profile photo), activity data (runs, hikes, rides — distance, pace, heart rate, elevation, duration), and OAuth access tokens used to retrieve this data on your behalf.
• From Garmin: Activity data (type, distance, duration, elevation, heart rate) and daily health metrics (HRV, sleep duration, Body Battery, stress). Collected only if you connect your Garmin account via our explicit OAuth flow.
• From you directly: Settings you configure in Trace (maximum heart rate, cross-training preferences), races you add to the planner, and optional daily check-ins.
• Usage data: Pages visited and basic server logs used solely for debugging and improving the service. No advertising or third-party tracking.

Your data is used solely to provide the Trace service to you. Specifically:

• Calculating your readiness score and training load (CTL, ATL, TSB) using local computation
• Generating your daily training recommendation using a rules-based engine
• Displaying your activity history, streaks, and personal records
• Building your race plan and estimating race readiness
• Generating AI coaching responses (see AI section below for full detail on what is and is not shared)

We do not use your data for advertising, profiling, or any purpose unrelated to providing Trace's features directly to you.

Trace accesses Garmin activity and health data only with your explicit consent via Garmin's OAuth 1.0a authorisation flow. You may revoke this access at any time from within Trace or directly through Garmin Connect settings.

Garmin data is used exclusively for the following purposes within Trace:

• Readiness scoring: HRV, sleep duration, and Body Battery are used by a local rules-based engine to adjust your readiness score. This computation happens entirely within Trace's own infrastructure.
• Activity storage: Activity metrics (distance, elevation, duration, heart rate) are stored in Trace's database to power your dashboard, load charts, and training history. Raw Garmin payloads are stored as received and never forwarded to third parties.
• Recovery signals: HRV, sleep, and Body Battery signals are displayed in the Trace interface to inform your daily session recommendation. This logic is entirely rules-based — no Garmin health data is sent to any AI service.

Garmin data is processed in accordance with the Garmin Connect Developer Program policies. Any future changes to how Trace handles Garmin data will be submitted to the Garmin Connect Developer Program team for approval before implementation.

We do not sell, share, licence, or otherwise transfer Garmin data to any third party for any purpose.

Trace uses Anthropic's Claude API to power certain features: the AI coach chat, session narration, and training insights. We take a deliberate approach to what data is and is not shared with Anthropic.

What is sent to Anthropic: Aggregated, derived training metrics computed by Trace — including total weekly kilometres, training load balance (TSB), intensity distribution, days since last run, training phase, and upcoming race details. These are statistical summaries, not raw data records.

What is never sent to Anthropic:

• Raw Garmin health data of any kind — HRV, sleep, Body Battery, stress, or any other Garmin health metric
• Raw activity payloads from Strava or Garmin
• OAuth tokens or authentication credentials
• Any personally identifiable information beyond your first name

Anthropic's data processing is governed by their own privacy policy, available at anthropic.com/privacy. We use the minimum data necessary to generate useful, personalised responses.

By using AI-powered features in Trace (coach chat, training insights, weekly recap), you consent to the transmission of derived training metrics as described above to Anthropic's API for the sole purpose of generating your response. You can use Trace without these features — simply avoid the Coach section.

Your data is stored in a SQLite database hosted on Railway's infrastructure in the United States. Railway is SOC 2 Type II compliant. We store:

• Your athlete profile and settings (name, photo URL, max heart rate, preferences)
• OAuth tokens (stored securely, transmitted over HTTPS only)
• Activity records from Strava and Garmin (metrics and raw payloads)
• Garmin health data pushed to Trace via webhook (HRV summaries, sleep records, Body Battery)
• Races you add to the planner
• Cached training statistics and personal records
• AI usage logs (request counts and token volumes — no AI response content is stored)
• Daily check-ins

You have the right to:

• Access your data: Ask us what data we hold about you.
• Delete your data: You can permanently delete your account and all associated data directly from the Trace app — go to Settings and tap "Delete account." Deletion is immediate and irreversible. If you have an active Pro subscription it will be cancelled at the same time.
• Disconnect: You can revoke Trace's access to your Strava or Garmin account at any time through those platforms' settings. This stops Trace from retrieving new data.
• Correct your data: Update your settings directly in the Trace app, or contact us to correct anything we hold.

To exercise any of these rights, email hello@tracerun.app.

Trace uses session cookies solely to keep you logged in. We do not use advertising cookies, tracking pixels, or any third-party analytics. The only cookies set are those required for the app to function.

If we make material changes to this policy we will update the "last updated" date above. For significant changes affecting Garmin data handling, we will notify the Garmin Connect Developer Program team and obtain written approval before implementation.