Privacy Policy

Last updated: October 27, 2026

What we collect

Account information. Your email address, password (stored as a salted hash, never in plain text), and optionally your name. If you sign in with Google or Apple, we receive your email address, your name if you share it, and an account identifier from them instead of a password. With Apple you can choose to share a private relay address instead of your own email.

Race follows. If you follow a race from its page without an account, the email address you give and which race you follow. Nothing is sent to it until you confirm from the email we send, and unconfirmed follows are deleted after a week.

Profile. Birthdate, gender, timezone, and unit preference. Birthdate and gender are used to compare you against runners in your own age group and gender at each race; leaving them blank means we compare you against everyone instead.

Target paces. The pace you enter for each race distance. This is what we use to estimate where you would place.

Places. Cities you save as home or travel locations, used to find races near you. If you tap “Use my location” in the app, your phone’s approximate position (rounded to about 7 miles before it leaves the device) is used once to find the town you’re in; we keep the town you save, not the position.

Strava data (optional). If you connect Strava, we store an access token and refresh token (encrypted at rest) and import your runs: date, distance, duration, pace, elevation, start location, the GPS route, and the activity's recorded data streams (such as GPS position, time, heart rate, cadence, and power, where your device records them). We currently use this to suggest a target pace and to match your own runs to races you've run, and may use it for future features that analyze your running. We do not import photos or Strava social data, and we don't show your Strava data to other users or sell it.

Connected AI tools (optional). If you connect an AI tool such as Claude or ChatGPT to raceIQ (see raceIQ in your AI tool), we store the app's name, the address it returns you to, and hashes of the access tokens we issue it, plus when you connected it and last used it. The tool can then read race data, your paces, places and recommendations, and save races, as listed on the page where you allowed it.

Usage and device information. Standard web log data (IP address, browser, pages visited), a session cookie that keeps you signed in, and product analytics: the pages you view, what you click, errors you run into, and recordings of how you use the site, with everything you type into forms masked. When you're signed in, this is linked to your account and email address. We do not use advertising cookies.

Race results are public data, not something we collect from you

raceIQ's core feature compares your pace against past finishers of a race. That finisher data — names, ages, cities, and finish times — comes from public race-results pages published by timing and registration sites (for example RunSignUp and Athlinks), not from you or any account holder. It is used only in aggregate, to compute percentiles and field strength; individual results may also be shown on a race's page as they appear publicly on the source site. If you are a race finisher and want a result removed, contact us and we will remove it from our database (it will remain on the original results site).

How we use what we collect

To provide the product: rank upcoming races by where your pace would place you, show your progress and chances, and, if you've opted in, email you about new races near your saved places where you'd likely place well. If you follow a race, we email you the week before each edition and when its results are posted, and nothing else.

We do not sell your personal information, and we do not share it with advertisers.

Who we share it with

We use a small number of service providers to run raceIQ: a database host, an email provider (Resend) to send the alerts you opt into, and analytics providers (PostHog, Google Analytics and Plausible) that receive the usage information described above. If you connect Strava, Strava receives the authorization you grant it directly; see Strava's own privacy policy for how it handles your data. If you connect an AI tool, it receives the answers to the requests it makes for you, and its provider handles them under its own privacy policy. We do not otherwise share your account data with third parties.

Cookies

We use one first-party session cookie to keep you signed in. It is required for the app to work and is not used for advertising or cross-site tracking. We also use analytics cookies from PostHog and Google Analytics to understand how the site is used; they aren't used for advertising.

How long we keep data

We keep your account data for as long as your account is active. If you delete your account, we delete your profile, target paces, saved places, and Strava tokens and all imported Strava data; any other personal data is removed within a reasonable period, except where we're required to keep records for legal reasons.

Your choices

You can edit or remove your target paces, saved places, and profile details at any time from your account settings, disconnect Strava at any time (we stop syncing and delete your imported Strava data immediately), disconnect AI tools from your account page (their access ends immediately), and turn race-alert emails on or off from your account settings. Every race-follow email has a link to unfollow. To request a copy or deletion of your data, contact us using the details below.

Children

raceIQ is not directed to children under 13, and we do not knowingly collect information from them.

Changes to this policy

If we make a material change to this policy, we'll update the date above and, where required, notify you directly.

Contact

Questions about this policy or your data can be sent to [email protected].