Register for our next race in San Marcos, CA2026-09-26
Privacy

Privacy Policy

This policy explains what information TruRace collects, how it is used, and when it may be shared with service providers.

This Privacy Policy is part of and incorporated into the TruRace Terms of Service. Your use of the platform is also governed by the Terms, including the governing law, limitation of liability, and binding arbitration and class action waiver provisions, which apply to disputes arising out of or relating to this Privacy Policy to the maximum extent permitted by law.

1. Information We Collect

TruRace may collect information you provide directly, including your name, email address, phone number, race history, submitted results, account details, and support or contact messages.

We may also collect information related to membership status, leaderboard activity, competition participation, Prize Builder credit activity, referral activity, Equalizer heat participation, and payment or payout onboarding through third-party providers.

2. Location, Recorded Runs, and Health/Fitness Data

When you choose to record a run with TruRace Mobile, TruRace collects precise location data needed to record the activity. This may include latitude and longitude coordinates, timestamps, altitude, location accuracy, speed, heading, route, distance, pace, and related run information.

Location tracking begins only after you start a run in TruRace. While that run is actively being recorded, TruRace may continue collecting precise location data when the app is in the background or your device screen is locked so the route, distance, and pace can continue to be recorded. Pausing or ending the run stops active location tracking until you resume or start another run.

Recorded-run data is stored on your device while the run is being recorded and after you save it. When you choose to sync a saved run, TruRace transmits the recorded activity, including route coordinates and activity summaries, to TruRace systems and service providers used to operate the service.

When you choose to sync workouts from Apple Health / HealthKit, Health Connect, or another supported fitness source, TruRace may receive the workout and health or fitness information you authorize that source to share. Depending on the source and workout, this may include workout date and timestamps, duration, distance, pace or performance metrics, route or location data when available, device and source information, and heart-rate information such as workout-period average and maximum heart rate. Heart-rate data may not be available for every workout and, where the platform permits, may be optional rather than required for the activity itself to sync.

We use location, recorded-run, and synced health or fitness data to provide run recording and activity history, calculate route, distance, pace, and related activity metrics, verify training and performance, estimate competition seeds, support race and heat placement, administer Prize Builder and other eligible activity benefits, investigate suspicious or incorrect activity data, prevent fraud or manipulation, and operate related TruRace features.

TruRace does not use precise location or synced health and fitness data for advertising and does not sell precise location or health and fitness data.

You can control TruRace location and health-data access through your device permission settings and supported fitness-provider controls. If you deny background location permission, run recording may pause or become less reliable when the app is backgrounded or the screen is locked. If you deny access to a health-data category such as heart rate, TruRace may have less evidence available to verify or assess the synced workout.

3. How We Use Information

We use information to operate the TruRace platform, manage memberships, organize heats and competitions, verify performance, estimate competition seeds, calculate Prize Builder credits and training consistency bonuses, communicate with members, prevent fraud, investigate incorrect or suspicious activity data, improve product features, administer prizes and payouts, and support social features such as Equalizer heats.

4. Connected Fitness Accounts

If you choose to connect or sync a fitness source such as Apple Health / HealthKit, Health Connect, Strava, Garmin, COROS, Polar, MapMyRun, or Google Fit when available, TruRace may request permission to read recent activity data for the limited purpose of helping you privately create or update a TruRace competition seed, verify qualifying training activity, award Prize Builder credits, calculate training consistency bonuses, and review activity integrity.

For Apple Health / HealthKit and Health Connect workout imports, TruRace may store the activity summary and evidence needed for these purposes, including heart-rate summaries when you grant the applicable permission and heart-rate data is available. TruRace does not require heart-rate information to exist for every synced activity.

When an automated wearable or mobile activity connection is not available, TruRace may accept FIT uploads, official result links, provider activity links, or manually reviewed evidence for the same limited verification purposes.

For Strava-connected accounts, TruRace stores OAuth tokens in encrypted form. When activity data is used for seed verification or Prize Builder, TruRace may cache minimal activity summaries, such as provider activity ID, sport type, activity name, date, distance, elapsed or moving time, elevation gain, and heart rate or cadence summaries when available.

TruRace does not store Strava routes, maps, GPS streams, segment data, full activity files, or raw Strava activity JSON for connected-account imports. For other connected providers, TruRace aims to store only the activity data and evidence reasonably needed for the authorized verification, competition, credit, integrity, and activity-history purposes described in this policy. TruRace does not use connected fitness account data for advertising, data brokerage, model training, artificial intelligence model development, broad analytics, customer insight generation, or product improvement analytics.

Strava activity summaries connected to your account are private evidence for you and are not displayed to other users. After you submit or confirm a seed or Prize Builder action, TruRace may retain the resulting TruRace competition seed, expected time, heat placement, handicap score, Prize Builder credit award, training consistency bonus, or race-related verification outcome as TruRace competition, credit, or accounting data. Those durable TruRace records should not include Strava activity IDs, activity names, routes, maps, GPS streams, segment data, full activity files, raw Strava activity JSON, or other underlying Strava activity details unless retention is required by law or by agreement with you.

You can disconnect supported fitness accounts from your TruRace profile when a direct connection is available, revoke TruRace access from the provider, or change health-data permissions through your device or provider settings. When you disconnect Strava, or when Strava tells us that you revoked authorization, TruRace deletes stored Strava activity summaries associated with your account. If Strava notifies us that a connected activity was deleted, we delete the corresponding stored summary.

Strava may monitor and collect usage data related to TruRace access to the Strava API and may use that usage data as described in Strava API terms, including for support, security, compliance, platform operation, and API improvements.

5. Sharing of Information

We may share information with service providers that help operate the platform, including hosting providers, authentication providers, analytics providers, customer support tools, email providers, payment processors, and payout providers.

We may also disclose information where required by law, to enforce our agreements, or to protect rights, safety, fairness, or platform integrity.

We review requests from public authorities for user personal information before responding. We require a valid legal basis for disclosure and may challenge or reject requests that we believe are unlawful, overbroad, vague, or improperly issued. If disclosure is legally required, we seek to disclose only the minimum information reasonably necessary to respond to the request. We may document such requests, our responses, the legal basis or reasoning considered, and the people involved in reviewing or responding to the request.

We do not sell connected fitness account data or synced health and fitness data.

6. Payments and Payout Providers

Payments and payouts may be processed by third parties such as Stripe. TruRace does not store full payment card details on its own servers. Your use of those services may also be governed by the provider terms and privacy policies.

7. Cookies and Analytics

TruRace may use cookies, session technologies, and analytics tools to maintain login state, understand site usage, improve performance, and support security and fraud prevention.

8. Data Retention

We retain information as long as reasonably necessary to provide services, maintain records, satisfy legal obligations, resolve disputes, enforce agreements, and protect platform integrity.

Location, recorded-run, and synced health or fitness activity data may be retained as part of your TruRace activity history and verification records for as long as reasonably necessary to provide the activity, competition, credit, fraud-prevention, audit, and dispute-resolution features for which the data was collected, subject to applicable deletion rights and legal requirements.

Connected fitness account summaries are retained only as long as needed for the feature purpose for which they were collected. For Strava-connected accounts, cached activity summaries are retained for up to 7 days and are deleted when you disconnect, revoke access, or request deletion, unless a longer retention period is required by law or by agreement with you. FIT uploads and manually reviewed evidence may be retained as TruRace verification records.

If you request deletion of an individual synced activity, TruRace may temporarily retain the activity, your stated reason, and related review metadata while the request is evaluated so we can protect competition and prize integrity, investigate fraud or data-quality issues, maintain an audit trail, resolve disputes, and satisfy legal obligations. A reported activity may be excluded from seed placement while the request is pending. Approved deletion requests are processed subject to any limited retention that is legally required or otherwise described in this policy.

Prize Builder ledgers, Gear Credit ledgers, and related training qualification records may be retained as accounting, audit, fraud-prevention, and dispute-resolution records. When a credit or qualification decision was supported by Strava, retained TruRace records should record the TruRace decision or credit outcome rather than the underlying Strava activity details, unless retention is legally required or agreed with the affected user.

9. Your Choices

Subject to legal and operational limitations, you may request access to, correction of, or deletion of certain personal information. You may also unsubscribe from marketing emails using the unsubscribe link in those messages.

You may request deletion of an individual synced activity from the TruRace app where that option is available. We ask for a reason so we can identify bad imports, duplicate or incorrect activity data, and other integrity issues. Submitting an individual activity deletion request is separate from requesting deletion of your entire TruRace account.

You may change or revoke TruRace location and health-data permissions through your device settings. You may disconnect a supported connected fitness account from your TruRace profile at any time. You may also revoke TruRace access from the connected provider, such as from your Strava account settings.

10. Security

TruRace uses reasonable administrative, technical, and organizational safeguards to help protect personal information. No method of transmission or storage can be guaranteed to be completely secure.

11. Children's Privacy

TruRace is not directed to children under 13, and we do not knowingly collect personal information from children under 13 without appropriate legal authorization.

12. Contact

For privacy-related questions, please contact TruRace through the contact information provided on the website.