Privacy Policy
Last Updated: January 29, 2026
This policy explains how we collect, use, and protect your personal information when you use our training platform.
1. Information We Collect
Location Data
We collect and process your location data to provide core training functionality:
- GPS Location: We collect precise location data from your activities (runs, rides, etc.) to map your routes, calculate distance, analyze terrain and surface types, and provide accurate training metrics
- Background Location: When you record an activity from within the app, we continue collecting location data even when the app is in the background to ensure complete activity tracking. This ensures you can lock your screen and continue recording whilst running
- Surface Type Analysis: We use your location with OpenStreetMap data to determine whether you're running on road, trail, or track
- Elevation Data: GPS data is used to calculate elevation gain/loss and analyze cardiovascular drift
You can control location access through your device settings (Settings → Privacy → Location Services). Disabling location services will limit core activity tracking functionality.
Activity & Training Data
- Performance Metrics: Heart rate, pace, cadence, power output, distance
- Activity Details: Type, duration, timestamps, route data
- Connected Devices: Data imported from Garmin and other authorized fitness platforms
- Training Plans: Generated plans, customizations, and progress tracking
Account Information
- Authentication: Email address
- Profile: Name, training experience level, goals, preferences
- Subscription: Payment information processed entirely via RevenueCat, we do not store any payment data
Technical Information
- Device Data: Device type, operating system, app version
- Usage Analytics: Features used, crash logs, performance metrics
2. How We Use Your Information
Core Training Services
- Map workout routes and calculate distances
- Analyze pace, heart rate, and performance trends
- Determine terrain and surface types
- Calculate training load and recovery metrics
- Generate adaptive training plans
- Sync with connected fitness services
Platform Improvement
- Improve AI algorithms and recommendations
- Develop new features and functionality
- Analyze usage patterns and performance
- Ensure security and prevent abuse
- Process subscription payments
- Provide customer support
All location data processing is performed to provide you with accurate training analytics and insights.
3. Information Sharing
Our Commitment
We do not sell your personal information. We share data only as described below.
Limited Sharing Situations
- Fitness Device Providers: Activity data (including location) syncs with services you authorize (Garmin, Strava). Their privacy policies apply to data they collect.
- Payment Processing: RevenueCat processes subscription information under their own strict data protection processes
- Legal Requirements: When required by law, court order, or to protect our rights and safety
- Business Transfers: In the event of a merger or acquisition, with continued privacy protection commitments
4. Your Rights & Controls
You Have the Right To:
- ✓Access your personal data
- ✓Correct inaccurate information
- ✓Delete your account and data
- ✓Export your activity data
- ✓Withdraw consent for data processing
- ✓Object to certain processing activities
Location Data Control
You can control location access at any time:
- Device Settings: Settings → Privacy → Location Services → OnTrack
- In-App Controls: Start/stop activity recording at any time
- Activity Management: Delete individual activities and their associated location data through Settings
Note: Disabling location services will prevent activity tracking and limit core app functionality.
To exercise any of these rights, contact us at support@ontracktrain.awsapps.com or use in-app settings.
5. Data Retention
We retain your information only as long as necessary to provide our services and comply with legal obligations:
- Active Accounts: Data retained while your account is active
- Deleted Activities: Activity data and associated location information permanently deleted within 30 days
- Deleted Accounts: All personal data, including location history, permanently deleted within 30 days
- Legal Requirements: Some aggregated, de-identified data may be retained longer for compliance purposes
6. Third-Party Services
When you connect third-party services (Garmin, Strava), their privacy policies apply to data they collect. We recommend reviewing their policies before authorizing access:
7. Children's Privacy
Ontrack is not intended for users under 16 years old. We do not knowingly collect data from children. If you learn that a child has provided us with personal information, please contact us and we will delete such information.
8. International Data Transfers
Ontrack operates from the United Kingdom. Your data may be transferred to and stored on servers outside your country, including:
- Google Cloud Platform servers (various regions)
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via:
- Email notification to your registered email address
- In-app notification
- Prominent notice on our website
Continued use of Ontrack after changes constitutes acceptance of the updated policy.