Privacy Policy

The short version

Treadly is a running coach, run recorder, and shoe-tracking service. We collect the account, training, fitness, health, and location data needed to provide the features you choose. We do not sell your personal data or use health, fitness, or precise location data for advertising. This policy explains what we collect, why, and how you can control it.

Who we are

Treadly is operated by an individual based in Washington State, USA. If you have any questions about this policy or your data, you can reach us at privacy@treadly.run.

What we collect and why

Account and profile information

Depending on how you sign in, we receive information such as your email address, name, Apple account identifier, Strava athlete ID, and Strava profile photo. We store authentication credentials or tokens needed to keep you signed in and connect the services you authorize. We do not receive your Apple ID password, Strava password, or full payment-card information.

Training plan, coach, shoe, and activity data

We store information you provide or generate while using Treadly, including training goals, race distance and date, target time, running schedule, pace and mileage inputs, plan progress, coach actions, completed workouts, shoe assignments, shoe names, mileage limits, ratings, notes, and related settings. Treadly uses this information to build and adapt your plan, provide Run Coach recommendations, show progress, and track shoe mileage.

Run recording and precise location

If you start an outdoor run and grant location permission, the iPhone or Apple Watch app records precise GPS locations while the workout is active. Treadly uses those samples to calculate and display your route, distance, pace, splits, and elevation and to save the workout to Apple Health. A compact route line may also be synced to your Treadly account for run history, coaching, and sharing features. For sufficiently long routes, Treadly trims approximately 100 meters from the start and finish before that route line is synced or shown in Treadly. Short routes may be stored without that trim, and trimming does not guarantee that a location cannot be identified. You can deny or revoke location access in device settings; outdoor route recording will then be unavailable or limited.

Apple Health (HealthKit) data

If you grant permission, Treadly may read running workouts, workout routes, distance, duration, pace, heart rate, heart-rate variability (HRV), resting heart rate, sleep, active energy, steps, cadence, and elevation data from Apple Health. Treadly uses this data to import runs, calculate readiness and training load, adapt Run Coach guidance, show workout details, and update shoe mileage. Some calculations happen on your device; selected workout metrics, derived scores, and route summaries may be synced to your Treadly account. When you record a workout with Treadly on Apple Watch, Treadly writes the completed workout and route to Apple Health. HealthKit data is not sold, used for advertising, or disclosed for third-party marketing. You can control Treadly's Health access in Settings > Privacy & Security > Health.

Strava data and optional posting

If you connect Strava, we receive your athlete identifier and profile information and sync authorized activity and gear data, which may include workout time, distance, pace, route, elevation, and heart-rate metrics. If you separately enable posting, Treadly sends completed recorded-run details, including the route when available, to Strava. You can disable posting or disconnect Strava in Treadly settings; Strava's own retention practices continue to apply to data already sent there.

Weather and music features

With permission, Treadly uses your current location to request local weather and offer run-time and heat guidance. Treadly may also access limited now-playing or Apple Music information when you use music controls or music-related run features. These features are optional and can be controlled through device permissions and settings.

Share cards and photos

You may select photos and create share cards containing information you choose, such as a photo, route shape, distance, pace, workout result, plan progress, or shoe data. Share cards are rendered on your device and are not published to a public Treadly feed. Nothing is sent to another person or platform unless you save the card or choose a destination through Apple's share sheet or the Instagram Stories integration. Once shared, the recipient platform's privacy practices apply and others may copy or reshare the card. Review every card before sharing, especially if it contains a route or photo that could reveal your location.

Shoe photos

You may optionally attach photos to a shoe. Uploaded shoe photos are stored in private storage and made available to your account. We do not use facial recognition on those photos. You can remove photos in the app. A photo you choose for a share card is shared only when you direct the app to save or send the finished card.

Subscriptions and purchase information

Apple processes App Store purchases. We receive subscription status, product and transaction identifiers, purchase and expiration dates, and related entitlement information so we can provide Pro access, restore purchases, prevent fraud, and support your account. We do not receive your full payment-card number.

Transactional emails

If you sign up with email, we send account-related messages such as verification codes and password-reset links. We may also send important service or policy notices. We do not currently send marketing emails.

Push notifications

If you enable push notifications, we store a device token issued by Apple's Push Notification service so we can send you alerts (e.g., when a shoe is nearing its mileage limit). We do not use push notifications for marketing. You can disable notifications at any time in your device settings, and your device token will no longer be used.

Analytics events

Treadly collects product-interaction events such as screens viewed, features used, share-card type and destination, and purchase-flow status. Events may be associated with an account, installation identifier, platform, app version, and coarse diagnostic information. Share analytics do not include the rendered image itself. We use this data to operate, secure, measure, and improve Treadly. Analytics are stored in our own database rather than sent to a third-party advertising analytics network.

Technical data

Our hosting providers process standard server logs and request metadata, including IP address, user agent, timestamps, and error information. We use this information for delivery, troubleshooting, fraud prevention, rate limiting, and security. We may store a rotating, salted hash derived from an IP address to investigate suspicious or synthetic traffic without retaining the raw address in our product analytics database.

What we don't do

We do not sell or rent your personal data. We do not use or disclose health, fitness, or precise location data for advertising or third-party marketing. We do not run third-party ads or track you across other companies' apps and websites.

Third-party services we use

Running Treadly requires a small number of trusted third-party services. Each handles your data only to the extent necessary to perform their function:

• Supabase — Provides database, authentication, and private file storage for account, training, activity, route-summary, subscription, analytics, and shoe-photo data in the United States. supabase.com
• Vercel — Hosts and serves the Treadly web application. vercel.com
• Apple — Provides Sign in with Apple, HealthKit, WeatherKit, MusicKit, StoreKit, App Store subscriptions, and push-notification delivery, depending on the features and permissions you use. apple.com
• Strava — If connected, authenticates your account, provides authorized activity and gear data, and receives completed run data when you enable posting. strava.com
• Resend — Delivers transactional emails (verification codes, password resets) on our behalf. resend.com

When we disclose information

We disclose information to the service providers listed above only as needed to run Treadly; to Apple, Strava, or another destination when you enable an integration or choose to share; when required by law or valid legal process; or when reasonably necessary to protect users, enforce our terms, investigate fraud, or secure the Service. If Treadly is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction subject to applicable law.

Our service providers are required to handle data consistently with this policy and applicable privacy and security obligations.

Data retention

Account, training, activity, and shoe data are generally kept while your account is active. You can permanently delete your account in the app or dashboard; this removes account data from active systems, subject to limited records we must retain for legal, security, fraud-prevention, or transaction purposes. Deleted information may remain in encrypted backups for up to 30 days before being purged. Information already shared with Strava, social platforms, or other recipients is controlled by those recipients.

Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit, access controls, private file storage, database row-level security, and rate limiting.

No system is perfectly secure. If you discover a security vulnerability, please contact us at privacy@treadly.run before disclosing it publicly.

Your rights

You have the right to access, correct, or delete your personal data at any time. Most of this is available directly in the app. For anything you can't do yourself, email us at privacy@treadly.run and we'll take care of it promptly.

If you are located in the European Economic Area, United Kingdom, or California, you may have additional rights under GDPR or CCPA respectively. We honor those rights regardless of where you are located.

Washington consumers and others whose consumer health data is collected in Washington can review the separate Consumer Health Data Privacy Policy, including how to access or delete consumer health data and withdraw consent.

Your choices and permissions

You can change Apple Health, location, Photos, Apple Music, and notification permissions in device settings; disconnect Strava or disable Strava posting in Treadly; remove shoe photos; and delete your account in the app or dashboard. Revoking a permission stops future access but may not delete data previously synced to your Treadly account. Use account deletion or email us to request deletion of that data.

International use

Treadly is operated in the United States, and information may be processed and stored in the United States. If you use Treadly from another country, its data-protection laws may differ from those where you live.

Children

Treadly is for people age 13 and older and is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. Users under the age of legal majority where they live must have permission from a parent or legal guardian. If you believe a child under 13 has provided information to Treadly, contact us and we will investigate and delete it as appropriate.

Changes to this policy

If we make material changes to this policy we will update the date at the top of this page. For significant changes we will notify you by email if we have your address on file.

Contact

Questions, requests, or concerns about your privacy — email us any time at privacy@treadly.run. We aim to respond within 5 business days.