Privacy

Privacy policy

Last updated: November 5, 2026

This policy explains where StrideBuddy keeps your training diary, how your required StrideBuddy account works, what StrideBuddy sends for AI and optional product analytics, and the technical data used to keep the service secure. It covers the StrideBuddy iPhone app and the StrideBuddy web app at web.stridebuddy.app. Please read it together with the StrideBuddy Terms of Use.

StrideBuddy is operated by Andrea Federici, an independent developer in Italy. Andrea Federici is the controller responsible for the processing described in this policy. The postal contact address is Via Alessandro Manzoni, 3, 20021 Bollate, Milano, Italy. The privacy email is support@stridebuddy.app.

StrideBuddy is intended for adults aged 18 or older, not for children or teenagers.

Where your training diary is stored

StrideBuddy requires an account. Its server database is the main copy of your training diary, your weekly plan, and your latest Daily Review. The iPhone app also keeps a copy on your device so you can log and read your diary offline. The account diary includes your athlete profile, personal bests, workouts, planned sessions, planned races, notes, reps, splits, recoveries, strength entries, and latest Daily Review. It lets your devices and the web app restore and sync the same diary and review.

The web app keeps a copy of your diary in your browser while you are signed in, so pages open quickly and changes made without a connection can wait to sync. Signing out of the web app removes that copy from the browser. The web app also stores a few settings in your browser: your language and appearance, your AI setting, which Terms and Privacy Policy you accepted, an unsent feedback draft, and your recent diary searches. Firebase Authentication keeps you signed in on that browser. The web app does not use cookies for advertising, analytics, or tracking.

Existing users may also have an older copy in their private iCloud account. To keep using StrideBuddy, an existing user must accept the current Terms and Privacy Policy, sign in, and complete a verified migration. StrideBuddy compares stable entry IDs, counts, and content hashes before the server database becomes the main copy.

If verification fails, the diary remains saved on the device and in private iCloud. StrideBuddy stays at the retry and support screen until migration succeeds. It does not continue in the older local and iCloud mode. After a successful migration, the old iCloud records are kept unchanged as a recovery archive. They are not used as the active diary and are not automatically deleted.

StrideBuddy uses the data you enter for logging, diary views, workout categorization, personal-best tracking, Daily Review, Plan, the race predictions and session comparisons in Insights, and future AI features.

Optional product analytics

Product analytics is part of the iPhone app only. The web app does not include product analytics and does not send events to PostHog.

StrideBuddy asks whether you want to share a small amount of product-usage data. Product analytics is off until you choose Share usage data. Choosing Not now does not limit the app, and you can change the separate Product Analytics setting at any time in Settings. This choice is independent from the AI setting.

If you enable product analytics, the iPhone app sends limited interaction events to PostHog’s EU Cloud service. These show app sessions and visits to main features, logging choices and saved workouts, diary and search use, Plan setup, generation and plan interactions, race predictions in Insights, account sign-in and diary-restoration outcomes, sync failures and recovery, planned-session and race saves, and opening or copying a workout sticker. Copying a sticker does not tell StrideBuddy where you share it. Search text, account identity, and the contents of your diary or Plan answers are never included.

Analytics events may include a random analytics-only identifier, app version and build, the language the app is shown in, the iOS version (major and minor number only, for example 26.1), development, TestFlight, or production environment, fixed feature and action categories, logging mode and entry source, a today, past, or future date category, logging-flow stage, broad count and elapsed-time buckets, and normalized operation outcomes or failure codes. They do not include exact workout dates, account or diary record IDs, or free-form error messages. The random identifier is separate from account and AI infrastructure identifiers. StrideBuddy does not use PostHog person profiles or identify you by name or contact details. A previous choice not to share remains respected.

Product analytics never includes workout notes, Note text, generated review text, athlete names, contact information, exact personal bests, workout times, splits, recoveries, distances, workout structures, RPE, feelings, injury information, body-signal tags, race results, venue or precise location, free-form error messages, AI prompts or outputs, security material, advertising identifiers, or IDFA. Session replay, tap autocapture, screen recording, crash capture, application-log capture, surveys, feature flags, and advertising tracking are disabled.

PostHog receives normal network connection data, such as an IP address, while accepting a request. Before product analytics is enabled in a release, StrideBuddy configures the EU project to discard stored client IP addresses and disables GeoIP enrichment, so location properties are not added to the event record. PostHog processes analytics for StrideBuddy under its applicable terms, privacy commitments, and data-processing terms. You can read the PostHog Privacy Policy.

Information StrideBuddy processes

The information StrideBuddy processes depends on how you use the app and may include:

• training diary content stored in StrideBuddy’s account database and on your device or in your browser, including workouts, notes, RPE, feeling, tags, races, personal bests, reps, splits, recoveries, and strength entries;
• profile and event details, including your competition category, event, athlete type, birth year if you enter it, timezone, and event-specific personal-best context;
• your Plan setup answers, stored in your account: what you are training for, your season months, the days you can train and do strength work, how many strength sessions you want and how long they can be, your equipment, how much training you want, and how your recent training has gone;
• the training weeks Plan suggests and Plan’s feedback on workouts you save, stored in your account;
• the latest Daily Review generated for each local day and language, stored in your account so your devices can read the same review;
• the race predictions StrideBuddy makes for you and the session comparisons it confirms in Insights, stored in your account;
• account and sign-in details, including an internal StrideBuddy user ID, Firebase user ID, Apple or Google provider subject, device-install or web-app installation ID, accepted policy versions, and account state;
• data required for an AI request, but only when AI features are enabled and need to make a request;
• the optional, limited product-interaction, fitness-category, identifier, and diagnostic data described in the Product Analytics section, but only after you enable it;
• technical and security information, including pseudonymous install identifiers, short-lived web-app sessions, request identifiers, source hashes, rate-limit counters, salted IP hashes, app version, locale, and policy-acceptance metadata; and
• messages you send to StrideBuddy for support, feedback, privacy requests, or deletion requests, along with details such as your email address.

AI features

AI features may run automatically after you confirm that you are at least 18 and accept StrideBuddy’s terms, privacy policy, and AI disclosure. When a feature runs, the app sends only the information that feature needs to StrideBuddy’s backend. The backend then sends the relevant prompt data to Google’s paid Gemini API or to OpenAI’s API to generate a response.

Insights requests run on StrideBuddy’s server rather than from the app, without you having to ask. From time to time, for example after you add, change, or delete a session, the server may ask an AI provider to update your race predictions or to check whether a new session is comparable to an earlier one. This happens only while AI is on, and you can turn AI off at any time in Settings.

Depending on which feature runs, the request may contain:

• a pseudonymous app-install identifier and a request identifier used only once;
• your local date and timezone, plus a source hash that checks whether the underlying diary input has changed;
• your event profile, which may include event distance, sex, athlete type, and personal-best times;
• the workout under review and brief summaries of recent workouts, including dates, workout type, title, summary, category, RPE, feeling, notes, and facts such as distance, duration, race time, exercise names, or obstacle-work details;
• a brief summary created on your device from recent weeks, which may include session and category counts, recent race logs, repeated body-signal terms from notes, average RPE, and low-feeling counts; and
• for Daily Review, brief context from earlier Daily Reviews when it helps relate a new workout to your recent training;
• for Plan, your Plan setup answers; an age range worked out from your birth year, such as 18 to 34 (your birth year itself is not sent); the date, event distance, discipline, and priority of races in your race calendar (race names and notes are not sent); if you tell Plan that your own coach plans your track sessions, the sessions you planned for the days Plan is planning and the following week, with their date, workout type, structure, target effort, and notes; your recent completed sessions in detail, including titles, notes, RPE, reps, results, recoveries, and strength exercises, with the weeks before them reduced to short daily summaries; and, when Plan updates a week, the current plan, the change you asked for, and Plan’s own earlier notes about your season;
• for race predictions in Insights, a summary that StrideBuddy’s server builds from your account diary: your main event and competition category; your personal bests and their dates; your races from the last 12 months, with their date, event, time, and race name; your best time at each rep distance for each of the last 6 months; your sessions with timed reps from the last 6 months, with their date, title, category, structure, rep times, and RPE; your tempo runs from the last 6 months, with their date, title, distance, pace, and RPE; your weekly distance for the last 26 weeks; and StrideBuddy’s previous predictions. Notes, feelings, tags, your birth year, and your account details are not sent; and
• for session comparisons in Insights, the session you saved and up to five earlier sessions that nearly repeat it, with their date, title, category, structure, rep times, and RPE, and for strength exercises the exercise name, sets, reps, weights, and rest. Notes are not sent.

If you describe a session in your own words, typed or spoken, so StrideBuddy can fill it in for you, the request contains what you typed or a recording of what you said, and the names of exercises you added yourself. StrideBuddy sends this to one of the AI providers named below, which fills in the session, and you review it before it is saved. StrideBuddy does not keep the text or the recording after the request.

When you take or choose a photo of your training for StrideBuddy to fill in, the photo is sent to Google's Gemini API to read the sessions written in it. Before it is sent, the app makes a smaller copy and removes the photo's location and device details. StrideBuddy does not keep the photo after the request. A photo can show other things that happen to be in it; StrideBuddy uses only the training written in it.

You write your own notes, so they may contain health information or other sensitive details if you choose to add them. Do not put anything in your notes that you do not want AI features to process.

StrideBuddy does not send your complete diary history to an AI provider. For Daily Review, the app reduces recent history to a short summary on your device. For Plan, StrideBuddy sends your most recent sessions in detail and reduces the few weeks before them to short daily summaries. For Insights, it sends only the summaries and sessions described above.

StrideBuddy uses two AI providers: Google’s paid Gemini API and OpenAI’s API. Google states that it does not use data submitted to its paid Gemini API services to train Google AI models. Google may process Gemini API input and output under its applicable terms and privacy commitments, including the Gemini API Additional Terms and the Google Privacy Policy.

OpenAI states that it does not use data sent to its API to train its models by default. OpenAI’s standard API data retention applies, under which OpenAI may keep API input and output for up to 30 days to monitor for abuse. OpenAI processes this data for StrideBuddy under its applicable terms and privacy commitments, including its Data Processing Addendum and the OpenAI Privacy Policy.

AI disclosure

Daily Review, Plan, Insights, and future AI features use selected diary data to generate text, suggested training, race predictions, and session comparisons, and fill in sessions you describe or photograph. That output may be wrong or incomplete. Plan’s suggested sessions, target times, and target effort are estimates, and so are the race times and other numbers in Insights: they are not a promise of what you will run. StrideBuddy does not provide medical advice, diagnoses, injury-risk scores, emergency support, or a guaranteed training plan. It should not be your only source for decisions about training, health, injuries, or safety.

After onboarding, you can control every AI feature with one master toggle in Settings. Turning it off prevents future AI requests. You can still log workouts and view your diary.

Account, backend, and security data

StrideBuddy’s backend stores your account-owned diary data. It also uses technical data to sync changes, run AI features, apply generation limits, prevent abuse, and block malicious traffic. That data may include:

• your internal account ID, sign-in provider mapping, and pseudonymous app-install identifiers;
• stable diary-entry IDs, server revisions, sync cursors, deletion markers, and mutation receipts used to prevent duplicate or lost changes;
• request identifiers and source hashes;
• timezone information for checking review windows;
• counters that enforce limits on AI requests;
• limited metadata about your acceptance of AI terms, including accepted policy versions, app version, locale or region when available, adult confirmation, and whether AI is enabled; and
• a salted hash created from the request’s IP address for abuse prevention. Backend rate-limit records keep the hash rather than the raw IP address.

The account database stores the latest Daily Review for each local day and language. Your devices receive that stored review through diary sync. When the diary input has not changed, the backend returns the existing review instead of generating another one. A newer Daily Review for the same day and language replaces the earlier one. Other AI output remains stored on your device unless this policy says otherwise.

The account database also stores your Plan setup answers, the training weeks Plan suggests with Plan’s notes about your season, and Plan’s feedback on workouts you save, so the web app and your devices show the same plan. When Plan runs, the backend reads what it needs from your account. iPhone app versions that do not yet sync Plan keep this content only on that device.

For Insights, the account database stores each set of race predictions StrideBuddy makes, with their ranges and confidence, for about six months so the app can chart them; the newest set stays until a newer one replaces it. It also stores which earlier session StrideBuddy found comparable to a session you saved, the timing of pending Insights requests, and counters that limit how often they run.

App feedback

If you send feedback from the iPhone app or the web app, StrideBuddy receives your message, an internal account reference, and technical details: from iPhone, the app version and build, iOS version, and device model; from the web app, its version, your browser’s name, and your device’s platform. Feedback is associated with your signed-in account and is used to understand problems and improve the app. It is separate from optional product analytics and AI processing. The form does not ask for a reply email address.

An unfinished draft is kept on your device or in your browser until you clear it, send it, sign out, or delete the account. Submitted feedback is stored by the backend and forwarded through an email service to the StrideBuddy support inbox. The forwarded message contains the internal account reference and technical details, rather than your account name or email address.

Undelivered submissions remain stored for delivery retries and investigation. Backend copies are removed 30 days after successful email delivery, or sooner when you delete the account. Deleting the account does not automatically remove copies already delivered to the support inbox. Those copies follow the support-message handling below; contact support@stridebuddy.app to request deletion.

How StrideBuddy uses information

StrideBuddy processes information for the following purposes:

• to provide logging, diary views, workout categorization, records, Plan, and app settings on iPhone and on the web;
• to create and secure your account, sync your diary, restore it on another device, and resolve competing offline changes without relying on device clocks;
• to generate Plan training weeks, Insights race predictions and session comparisons, and future AI features, and to fill in sessions you describe, when AI is enabled;
• to remember whether you accepted the Terms, Privacy Policy, and AI disclosure;
• with your separate choice, to understand activation, repeated logging, reliability, historical-value discovery, and retention;
• to apply request limits, prevent abuse, investigate reliability problems, and protect the backend;
• to answer support, privacy, deletion, or legal requests; and
• to comply with the law, enforce the Terms, and protect rights, safety, and security.

Retention

StrideBuddy keeps the server diary, Plan content, Insights predictions and comparisons, and latest Daily Reviews while the account is active, except that older race predictions are removed after about six months. Deleted entries remain as limited deletion markers so an offline device cannot restore them by mistake. When you delete the account, the active server diary, Plan content, Insights data, Daily Reviews, and deletion markers are removed. The web app’s browser copy is removed when you sign out or delete the account in that browser.

Render continuously backs up the paid account database for point-in-time recovery. The current recovery window is three days. Data deleted from the active database may remain in those recovery copies until that window expires. Recovery copies are used only to restore the service after data loss. A restored database must reapply any later account deletions before account access resumes.

An older iCloud archive remains in your Apple Account until you remove StrideBuddy’s iCloud data through Apple’s settings. StrideBuddy does not automatically delete that private archive. Backend rate-limit records are usually kept for about 24 hours. StrideBuddy may keep limited security records longer when necessary to protect the service, investigate abuse, comply with the law, or resolve security problems.

Optional PostHog analytics events are intended to be kept for no more than 12 months. StrideBuddy will configure that period where the service provides a retention control or use PostHog’s deletion process to enforce it. A consent record and the random analytics identifier remain on your device until the app or its data is deleted or the analytics identity is reset.

Sharing

StrideBuddy does not sell your personal information or share it for cross-context behavioral advertising. Apple or Google processes the sign-in authorization you choose, and Firebase Authentication processes account identity for StrideBuddy. Render hosts the backend and the account database in Frankfurt, Germany, and delivers the web app’s files. AI request data goes to Google Gemini and OpenAI only to provide AI features. If you enable product analytics, the limited events described above go to PostHog EU Cloud. An older iCloud archive is handled by Apple under the Apple Privacy Policy. These providers process data for StrideBuddy under their applicable terms and privacy commitments.

StrideBuddy may disclose limited information when the law requires it, to enforce the Terms, to protect users or the service, or during a merger, acquisition, financing, reorganization, asset sale, or similar business transfer. In a business transfer, StrideBuddy will require the recipient to handle personal information in line with this policy unless you receive notice and any choices required by law.

Your control

You control your diary through the app. In the iPhone app you can sign out, remove downloaded account data when no change is waiting to sync, or delete your account in Settings. In the web app you can sign out, which removes the browser copy, or delete your account in Settings. You control any older iCloud archive through your device’s iCloud settings. AI processing is part of StrideBuddy’s core experience. A master toggle in Settings controls all AI features. Turning it off stops future AI requests but leaves logging and diary viewing available.

Product Analytics has its own control in Settings. Turning it off stops future analytics transmission. It does not turn off AI, change local features, or delete analytics events that PostHog already received. You may also request deletion of those existing events by contacting StrideBuddy.

Your location may give you privacy rights, including rights to access, correct, delete, or object to the processing of your data. A signed-in account lets StrideBuddy delete the correct server diary and the operational backend records linked to its registered installations. We may still need your analytics identifier to delete optional PostHog events.

StrideBuddy does not use product analytics for decisions that produce legal or similarly significant effects about you. The analytics only informs aggregate product and reliability decisions.

Deletion and requests

You can start account deletion at the bottom of Settings without emailing support. StrideBuddy asks you to sign in again with the same Apple or Google account used by your current StrideBuddy account, then confirm the permanent action. The server diary, Plan content, Insights data, Daily Reviews, account mapping, registered installations, App Attest keys, sync records, and operational AI or security records linked to those installations are then removed. StrideBuddy also asks Firebase and the relevant sign-in provider to revoke or delete the related sign-in identity where their systems allow it. A provider cleanup failure does not stop deletion of StrideBuddy data.

Deleting the account does not automatically delete an older private iCloud archive, iOS backup, or export that you control. You can remove iCloud data through Apple’s settings and remove downloaded account data from the device in the app. Database backups age out under the backup schedule. To request deletion of PostHog analytics events or support messages, contact StrideBuddy.

StrideBuddy will answer privacy requests within the period required by applicable law. Some limited information may be kept when necessary for security, legal compliance, or dispute resolution.

European, UK, and Swiss privacy rights

If you live in the European Economic Area, the United Kingdom, or Switzerland, laws such as the GDPR, UK GDPR, or Swiss data-protection law may give you rights over your personal data. Where applicable, StrideBuddy processes data to provide the app and requested AI features based on contract, consent, legitimate interests such as security and abuse prevention, and legal obligations. Optional product analytics is based on your separate consent.

You may have the right to access, correct, delete, restrict, object to, or receive a portable copy of your personal data. You may also be able to withdraw consent for future processing. You can stop future AI requests by turning off the master AI features toggle, and you can contact StrideBuddy with privacy requests. Withdrawing consent does not invalidate processing that was lawful when it occurred.

Your diary notes may contain health information or other sensitive details if you choose to write them. Do not add sensitive information that you do not want enabled app features to process.

You may be entitled to complain to your local data protection authority. In Italy, this is the Garante per la protezione dei dati personali. In the UK, it is the Information Commissioner’s Office. In Switzerland, it is the Federal Data Protection and Information Commissioner.

Canadian privacy rights

If Canadian privacy law applies to you, you may ask to access or correct personal information StrideBuddy controls and may withdraw consent for future optional processing, subject to legal limits. You can withdraw product-analytics consent in the app and contact StrideBuddy with a privacy request or complaint.

California and US state privacy rights

StrideBuddy does not sell personal information, share it for cross-context behavioral advertising, use targeted advertising, or track people across third-party apps or websites. The optional PostHog SDK is used only for the limited first-party product analytics described above. Browser Do Not Track and Global Privacy Control signals do not control the iOS setting, but product analytics stays off until you enable it in the app. The web app has no product analytics.

If California or another US state privacy law applies to you, you may have the right to request access, correction, deletion, a copy of your personal information, or details about certain disclosures. Subject to legal limits, StrideBuddy will not discriminate against you for exercising a privacy right.

International transfers

StrideBuddy, Google, OpenAI, PostHog, and infrastructure providers may process data outside the country where you live. Product analytics is sent to PostHog’s EU Cloud region. When the law requires it, StrideBuddy relies on appropriate transfer safeguards, including contractual protections from the relevant service providers.

Security

StrideBuddy saves changes on your device or in your browser first, uses encrypted network connections, verifies account tokens, verifies genuine app installations on iPhone and short-lived sessions tied to the StrideBuddy web address on the web, restricts database access, and keeps diary content out of application logs. Render encrypts managed database storage. No app or online service can promise complete security.

Children and teens

StrideBuddy is intended for adults aged 18 or older, not for children or teenagers. Do not use the app if you are under 18. If you believe a child or teenager sent personal information to StrideBuddy’s backend, contact us. We will review the request and delete relevant backend records where possible.

Changes

StrideBuddy may revise this policy when the app, its providers, or legal requirements change. If a revision materially changes required account storage or other core processing, the app will ask you to accept the updated Terms and Privacy Policy before you continue. If a revision materially changes the data, provider, purpose, or risk involved in AI processing, AI features will not run again until the required updated acceptance. If the optional analytics scope materially changes, StrideBuddy will ask for a new analytics choice before collecting under the new scope.

Questions

For privacy questions, contact: support@stridebuddy.app

← Back to home