The short version. Your account is anonymous: no name, email or age. Your routes and run history stay on your phone. To rank each race, the server keeps your time and, only if you choose to share them, your country and gender, and deletes them 14 days after the race closes. No ads, no analytics, no tracking.
Who I am
STEUD is made by Thomas Martin, an independent developer in the United Kingdom, who is the data controller. Contact: hello@steud.app.
On your phone
Your location (while recording a run, including with the phone locked), routes, splits, step counts, barometer readings, heart rate, run history, reviews, stats and settings are stored only on your phone and never sent to me. Run reviews are written on your phone too. Deleting the app or your account erases them.
Apple Health
If you turn it on, STEUD saves your runs to Apple Health as workouts. If you also turn on importing, it reads your running workouts, their routes and the heart rate and steps recorded during them from Apple Health, to offer runs from other apps and devices as races. It reads nothing else, and what it reads stays on your phone.
On the server
| Data | Why | How long |
|---|---|---|
| A random anonymous account ID; your notification token, app language and notification choices; your STEUD+ expiry date | To tell your entries apart, send your results and unlock STEUD+ | Until you delete your account |
| For each race you enter: your time, whether it passed the app's checks, your bib number (the order you entered in), your position, and your country and gender if you chose to share them | To rank the race and tell you where you placed | 14 days after the race closes |
| Each country's average time and number of runners in a race; each team's time and position; special event prizes | To show the country leaderboard, rank the team events and give prizes | 14 days after the race closes |
| Your team, if you join one: its ID and which accounts are in it (teams have no names) | To run the team events | Until you leave; a team is deleted when its last member leaves |
Your position is shown only to you; there's no public leaderboard of runners. I may review and disqualify a time that doesn't look genuine.
Country and gender (optional)
You can choose to share your country, so your times count towards your country's average, and whether you're a woman, so you're also ranked among women. Both are optional, sent only with the races you enter, and can be changed or removed in Settings.
Crash reports
If the app crashes, an anonymous report (the error, the app and operating system versions and the phone model) is sent so I can fix it. It contains no account ID, location or routes, and is deleted after 30 days.
Who receives data
- A cloud hosting provider, for the server and database.
- A subscription service, which receives your anonymous account ID and App Store purchase details.
- A crash reporting service, for the reports above.
- A notification service, which relays your results to Apple's push service.
- Apple, for App Store payments, notifications, Apple Health and maps.
I don't sell your data or share it with anyone else, and this website uses no cookies or analytics. Where a provider processes data outside the UK, it relies on safeguards recognised under UK law.
Permissions
Location (to record runs), motion & fitness (for your cadence and climbs), notifications (results and, if you turn them on, new special events), Apple Health (as above) and adding to Photos (to save your result bib). You can change these in your phone's Settings.
Legal basis
Entering and ranking races and sending results is needed to provide the service (contract). Country, gender, Apple Health and notifications rely on your consent, which you can withdraw in Settings. Keeping races fair and fixing crashes are legitimate interests.
Your rights
You can access, correct, delete, restrict or object to the use of your data, and ask for a copy. The quickest way to erase everything is Settings → Delete account, which deletes your server data and the runs on your phone (cancel any subscription in your Apple ID settings). Because accounts are anonymous, include the account ID shown in Settings with any other request to hello@steud.app. You can complain to the Information Commissioner's Office at ico.org.uk.
Children
STEUD isn't directed at children under 13, and I don't knowingly collect their data.
Changes
If this policy changes, I'll update it here and change the date at the top, and tell you in the app if a change significantly affects your data.