Privacy Policy
Treadline is operated by John Uschold, Vohburgerstr. 2, 80687 München, Germany (“we”). We are the controller for the processing described here under the General Data Protection Regulation (GDPR). Contact: support@treadlineapp.club.
The short version
- Recording a run needs your location. That is the product; there is no way around it.
- Your account, activities and routes are stored in the EU (Ireland).
- Treadline does not track you across other companies’ apps or websites, shows no ads, and never sells your data. There is no ATT prompt because there is nothing to ask for.
- Product analytics and attribution can be switched off entirely in the app, under Profile → Privacy.
- You can delete your account, and everything attached to it, from inside the app.
What we process, and why
| Data | Why | Legal basis |
|---|---|---|
| Precise location (GPS) | Recording an activity: distance, pace, elevation gain and your route. With automatic tracking enabled, location is also read in the background so an activity can start and end with the phone in your pocket. | Art. 6(1)(b) — performance of the contract |
| Fitness data — distance, pace, duration, elevation, splits | Your activity history, statistics, records and leaderboards. | Art. 6(1)(b) |
| Health data — average and maximum heart rate, active energy | Shown on an activity and on your profile, if you connect Apple Health. See the Apple Health section below for what stays on your phone. | Art. 9(2)(a) — your explicit consent, given in the Health permission sheet |
| Name and email address | Your account. Supplied by whichever sign-in you choose — Sign in with Apple, where an Apple private-relay address is all we receive unless you choose otherwise, or Sign in with Google, which gives us the name and email address on your Google Account. | Art. 6(1)(b) |
| Username and account identifier | Friends, invites, clubs and leaderboards are resolved through it. | Art. 6(1)(b) |
| Profile photo | Shown to your friends. Optional. Photos you attach to a run stay on your phone and are never uploaded. | Art. 6(1)(b) |
| Subscription status | Whether your account is entitled to Treadline Pro. We never see your payment details — Apple handles payment. | Art. 6(1)(b) |
| Product analytics — which screens are used, which flows are abandoned | Finding out where the app fails people. Includes compact recording-quality summaries: speed statistics, GPS quality and gaps, and the share of time the phone reported running, walking, cycling or vehicle motion. These summaries contain no route coordinates or raw sensor timeline. Tied to your account identifier so one person’s path can be followed through a flow. | Art. 6(1)(a) — consent, withdrawable at any time |
| Crash reports | Diagnosing crashes. Sent on the next launch after a crash. | Art. 6(1)(a) |
| Device identifier (Apple IDFV) for install attribution | Knowing which channel an install came from. This is Apple’s per-vendor identifier, not the advertising identifier (IDFA), and it cannot follow you into another company’s apps. | Art. 6(1)(a) |
What we deliberately do not do
- No advertising identifier and no ATT prompt. The app contains no code that requests tracking permission, and its build configuration is checked before every release to keep it that way.
- No advertising, no ad networks, and no sale or sharing of personal data for advertising.
- No session recording or screen replay. Analytics events are a fixed, hand-written list; the app does not capture screens or taps automatically.
- No personal detail inside analytics events. No name, username, email, or club name is ever attached to one. You appear as an account identifier and nothing else.
- Your GPS tracks are never sent to the analytics or attribution providers.
Apple Health
Connecting Apple Health is optional and the app works without it. If you connect it:
- Treadline writes your runs, walks, distances and routes to Health.
- Treadline reads heart rate, active energy, steps, exercise time, cardio fitness, heart-rate variability, respiratory rate, running dynamics, sleep, walking metrics and your date of birth.
- Of everything read, only average heart rate, maximum heart rate and active energy for a given activity leave your phone, because they are shown on the activity and on your profile. Everything else — heart-rate zones, cadence, recovery, sleep, your rings, your date of birth — is used on the device and is never uploaded.
Health data is never used for advertising or marketing, is never shared with the analytics or attribution providers, and is not used to make decisions about you. You can revoke access at any time in Apple’s Health app.
Maps
Maps are drawn by Mapbox. Displaying a map sends technical request data, including the map area being viewed and your device’s IP address, to Mapbox so it can return the map tiles for that area. Mapbox also receives anonymous usage telemetry from its map software, which you can turn off from the i button on any map. We do not send Mapbox your name, your account or your recorded activities; your routes and territory are drawn on top of the map by the app itself.
Friends, leaderboards and what other people see
Other people see what you would expect them to: your display name, username, profile photo, and the activity statistics that place you on a board you share with them. While you are recording, friends can see your live position on the map.
You control this. You can hide your live location while still recording privately, hide your activity from everyone, remove a friend, and block or report anyone. Reports go to a queue only we can read.
Activity insights and name review
We calculate activity profiles from recorded distance, moving time, elevation and splits, with comparisons to your recent activities. Where enabled, TypeSafe's Jev service receives public names for moderation, or a minimized activity summary to select factual recap observations and suggest recordings for review. We do not send Jev GPS coordinates, photos, account identifiers or HealthKit measurements. Its activity judgments do not automatically remove your leaderboard or territory eligibility. You can request a review of a restriction in the app.
Detailed request and response records are normally removed after 30 days. Evidence for an unresolved review is kept until 30 days after resolution. Deleting the activity or account removes its linked analysis records. Saved activity insights remain private unless you choose to share them.
Who processes data for us
| Processor | Purpose | Where |
|---|---|---|
| Supabase | Authentication, database, file storage | EU (Ireland) |
| TypeSafe AI | Name review and minimized activity-summary interpretation, where enabled | See TypeSafe's data-processing terms |
| PostHog | Product analytics and crash reports | EU |
| RevenueCat, Inc. | Subscription status | USA |
| AppsFlyer | Install attribution and invite deep links | EU |
| Mapbox, Inc. | Map tiles and map rendering | USA |
| Apple Inc. | Sign in with Apple, payments, HealthKit | EU / USA |
| Google LLC | Sign in with Google, for people who choose that button | EU / USA |
| Vercel Inc. | Hosting for this website only | USA |
Where a processor is outside the EU, transfers rely on the European Commission’s Standard Contractual Clauses where required. Our primary activity and route storage is in the EU. The minimized summaries described above may also be processed by TypeSafe under its data-processing terms.
How long we keep it
- Account, activities and routes — until you delete your account.
- Analytics and crash events — up to 12 months.
- Attribution data — up to 24 months.
- Deleting your account removes your profile, activities, routes, splits, friendships, club memberships and profile photo. Deletion runs automatically and is not reversible.
Your rights
You have the right of access, rectification, erasure, restriction, data portability, and the right to object to processing. Where processing rests on consent, you may withdraw it at any time without affecting what was lawful beforehand — in the app, under Profile → Privacy, or by deleting your account.
Write to support@treadlineapp.club to exercise any of them. You also have the right to complain to a supervisory authority; ours is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Ansbach, Germany.
Children
Treadline is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will delete it.
This website
This site is static. It sets no cookies, uses no analytics, and loads nothing from a third party. Our host, Vercel, processes server log data including IP addresses to deliver the page and to defend against abuse.
Changes
If this policy changes materially we will update the date at the top and, where the change affects you, say so in the app.