Privacy Policy
Treadline is operated by John Uschold, Vohburgerstr. 2, 80687 München, Germany (“we”). We are the controller for the processing described here under the General Data Protection Regulation (GDPR). Contact: support@treadlineapp.club.
The short version
- Recording a run needs your location. That is the product; there is no way around it.
- Your account, activities and routes are stored in the EU (Ireland).
- Treadline does not track you across other companies’ apps or websites, shows no ads, and never sells your data. There is no ATT prompt because there is nothing to ask for.
- Product analytics and attribution can be switched off entirely in the app, under Profile → Privacy.
- You can delete your account, and everything attached to it, from inside the app.
What we process, and why
| Data | Why | Legal basis |
|---|---|---|
| Precise location (GPS) | Recording an activity: distance, pace, elevation gain and your route. With automatic tracking enabled, location is also read in the background so an activity can start and end with the phone in your pocket. | Art. 6(1)(b) — performance of the contract |
| Fitness data — distance, pace, duration, elevation, splits | Your activity history, statistics, records and leaderboards. | Art. 6(1)(b) |
| Health data — average and maximum heart rate, active energy | Shown on an activity and on your profile, if you connect Apple Health. See the Apple Health section below for what stays on your phone. | Art. 9(2)(a) — your explicit consent, given in the Health permission sheet |
| Name and email address | Your account. Supplied by whichever sign-in you choose — Sign in with Apple, where an Apple private-relay address is all we receive unless you choose otherwise, or Sign in with Google, which gives us the name and email address on your Google Account. | Art. 6(1)(b) |
| Username and account identifier | Friends, invites, clubs and leaderboards are resolved through it. | Art. 6(1)(b) |
| Profile photo | Shown to your friends. Optional. Photos you attach to a run stay on your phone and are never uploaded. | Art. 6(1)(b) |
| Subscription status | Whether your account is entitled to Treadline Pro. We never see your payment details — Apple or Google handles payment. | Art. 6(1)(b) |
| Refund requests | If you ask Apple or Google to refund a Pro purchase, RevenueCat tells the store on our behalf whether Pro was delivered to your account and whether we support the refund. Nothing about your activities, location or health is included. The store makes the final decision. | Art. 6(1)(f) — our legitimate interest in answering refund requests |
| Product analytics — which screens are used, which flows are abandoned | Finding out where the app fails people. Includes compact recording-quality summaries: speed statistics, GPS quality and gaps, and the share of time the phone reported running, walking, cycling or vehicle motion. These summaries contain no route coordinates or raw sensor timeline. Tied to your account identifier so one person’s path can be followed through a flow. | Art. 6(1)(a) — consent, withdrawable at any time |
| Crash reports | Diagnosing crashes. Sent on the next launch after a crash. | Art. 6(1)(a) |
| Performance reports | Finding out where the app is slow. About once a day, the performance numbers Apple’s MetricKit collects on your phone: how long the app takes to start and resume, time spent frozen, how smoothly lists scroll, and memory use, as counts and percentiles. No stack traces, routes or anything you typed. Tied to your account identifier, like product analytics. Switching analytics off in Profile → Privacy stops these too. | Art. 6(1)(a) |
| Error reports | Diagnosing failures the app recovers from, such as an Apple Health export or a server request that did not go through. The type of error, where in the app it happened, and the app version — never anything you typed. | Art. 6(1)(a) |
| Device identifier (Apple IDFV) for install attribution | Knowing which channel an install came from. This is Apple’s per-vendor identifier, not the advertising identifier (IDFA), and it cannot follow you into another company’s apps. | Art. 6(1)(a) |
What we deliberately do not do
- No advertising identifier and no ATT prompt. The app contains no code that requests tracking permission, and its build configuration is checked before every release to keep it that way.
- No advertising, no ad networks, and no sale or sharing of personal data for advertising.
- No session recording or screen replay. Analytics events are a fixed, hand-written list; the app does not capture screens or taps automatically.
- No personal detail inside analytics events. No name, username, email, or club name is ever attached to one. You appear as an account identifier and nothing else.
- Your GPS tracks are never sent to the analytics or attribution providers.
Apple Health
Connecting Apple Health is optional and the app works without it. If you connect it:
- Treadline writes your runs, walks, distances and routes to Health.
- Treadline reads heart rate, active energy, steps, exercise time, cardio fitness, heart-rate variability, respiratory rate, running dynamics, sleep, walking metrics and your date of birth.
- Of everything read, only average heart rate, maximum heart rate and active energy for a given activity leave your phone, because they are shown on the activity and on your profile. Everything else — heart-rate zones, cadence, recovery, sleep, your rings, your date of birth — is used on the device and is never uploaded.
Health data is never used for advertising or marketing, is never shared with the analytics or attribution providers, and is not used to make decisions about you. You can revoke access at any time in Apple’s Health app.
Health Connect (Android)
Connecting Health Connect is optional and the app works without it. You choose each permission on Android’s own screen and can change or revoke any of them at any time in Health Connect’s settings. If you connect it:
- Treadline writes your runs and walks as exercise sessions, with their distance and route.
- Treadline reads exercise sessions, their routes and distance, heart rate, resting heart rate, heart-rate variability, steps, active calories, VO2 max and sleep.
- Watch & other apps: if you turn it on, Treadline reads runs and walks that other apps (such as Strava, Fitbit, Samsung Health or Garmin Connect) saved to Health Connect, including while Treadline is not on screen, so they appear in your activities without you opening the app. Import past runs reads older ones once, when you ask.
- Only what an activity shows leaves your phone: for each run or walk you record or bring in, its route, start time, duration, distance, pace, elevation, average and maximum heart rate, active calories, and the name of the app and device that recorded it. These are stored with your account like any recorded activity. Everything else — heart-rate zones, resting heart rate, heart-rate variability, VO2 max, sleep and step counts — is used on the device and is never uploaded.
Health Connect data is never used for advertising or marketing, is never sold, is never shared with the analytics or attribution providers, and is not used to make decisions about you. Treadline’s use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements. Deleting your account deletes the activities stored with it; nothing is deleted from Health Connect itself.
Garmin
Connecting Garmin is optional and part of Treadline Pro. You connect on Garmin’s own sign-in page; Treadline never sees your Garmin password, and you can disconnect at any time in the app (Profile → Settings → Watch & other apps) or in Garmin Connect. While connected:
- For each activity you sync to Garmin Connect, Garmin sends us its summary (type, start time, duration, distance, heart rate, calories, elevation gain, the device that recorded it, and whether it was typed in or uploaded on Garmin’s website) and its activity file, which holds the GPS route.
- Our server holds these only until your phone collects them. Your phone turns runs, walks and hikes into Treadline activities, stored like any other activity. Anything else, such as a ride or a swim, never reaches your phone: as soon as our server sees its type, it deletes the summary and the file. The activity file is deleted from our server as soon as your phone has collected it. A short record of each activity Garmin sent (Garmin’s reference, its type and whether it was typed in or uploaded) is kept for 30 days so the same activity is never brought in twice.
- Friends see a Garmin activity like your other activities, named with the Garmin device that recorded it.
- Garmin data is never processed by artificial intelligence: it is never sent to TypeSafe’s Jev or any other AI service. It is also never sent to the analytics, attribution or subscription providers (PostHog, AppsFlyer, RevenueCat).
- Disconnecting, or deleting your account, ends the connection with Garmin and deletes the access we were given and anything not yet collected by your phone. Activities already saved stay until you delete them or your account.
Garmin is not our processor: it sends the activities you choose to share at your request, and its own handling of your data in Garmin Connect is governed by Garmin’s privacy policy.
Maps
Maps are drawn by Mapbox. Displaying a map sends technical request data, including the map area being viewed and your device’s IP address, to Mapbox so it can return the map tiles for that area. Mapbox also receives anonymous usage telemetry from its map software, which you can turn off from the i button on any map. We do not send Mapbox your name, your account or your recorded activities; your routes and territory are drawn on top of the map by the app itself.
Friends, leaderboards and what other people see
Other people see what you would expect them to: your display name, username, profile photo, and the activity statistics that place you on a board you share with them. While you are recording, friends can see your live position on the map.
If you join a meetup, everyone else who joined it can see your live position on the map while you are recording, even if they are not your friends, until you arrive, you leave, or the meetup ends. Opening a meetup link or being invited shares nothing until you choose Join, and hosts can remove anyone. We keep the meeting place, who was in the meetup and when they arrived for seven days after it ends, then delete them. We check your position to confirm you arrived and do not store that position.
You control this. You can hide your live location while still recording privately, hide your activity from everyone, remove a friend, and block or report anyone. Reports go to a queue only we can read.
Activity insights and name review
We calculate activity profiles from recorded distance, moving time, elevation and splits, with comparisons to your recent activities. Where enabled, TypeSafe's Jev service receives public names for moderation, or a minimized activity summary to select factual recap observations and suggest recordings for review. We do not send Jev GPS coordinates, photos, account identifiers or HealthKit measurements. Its activity judgments do not automatically remove your leaderboard or territory eligibility. You can request a review of a restriction in the app.
Detailed request and response records are normally removed after 30 days. Evidence for an unresolved review is kept until 30 days after resolution. Deleting the activity or account removes its linked analysis records. Saved activity insights remain private unless you choose to share them.
Who processes data for us
| Processor | Purpose | Where |
|---|---|---|
| Supabase | Authentication, database, file storage | EU (Ireland) |
| TypeSafe AI | Name review and minimized activity-summary interpretation, where enabled | See TypeSafe's data-processing terms |
| PostHog | Product analytics, crash, error and performance reports; visit and tap counts on treadlineapp.club/get | EU |
| RevenueCat, Inc. | Subscription status | USA |
| AppsFlyer | Install attribution and invite deep links | EU |
| Mapbox, Inc. | Map tiles and map rendering | USA |
| Apple Inc. | Sign in with Apple, payments, HealthKit | EU / USA |
| Google LLC | Sign in with Google, for people who choose that button; Google Play payments and push notifications (Firebase Cloud Messaging) in the Android app | EU / USA |
| Resend, Inc. | Sending the one Android launch email to people on the waitlist | EU / USA |
| Vercel Inc. | Hosting for this website only | USA |
Where a processor is outside the EU, transfers rely on the European Commission’s Standard Contractual Clauses where required. Our primary activity and route storage is in the EU. The minimized summaries described above may also be processed by TypeSafe under its data-processing terms.
How long we keep it
- Account, activities and routes — until you delete your account.
- Analytics, crash and performance events — up to 12 months.
- Attribution data — up to 24 months.
- Garmin activities not yet collected by your phone — up to 30 days, for example while your Pro subscription is paused, then deleted.
- Deleting your account removes your profile, activities, routes, splits, friendships, club memberships, meetups and profile photo. Deletion runs automatically and is not reversible.
Your rights
You have the right of access, rectification, erasure, restriction, data portability, and the right to object to processing. Where processing rests on consent, you may withdraw it at any time without affecting what was lawful beforehand — in the app, under Profile → Privacy, or by deleting your account.
Write to support@treadlineapp.club to exercise any of them. You also have the right to complain to a supervisory authority; ours is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Ansbach, Germany.
Children
Treadline is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will delete it.
This website
This site sets no cookies and loads its images, fonts and scripts from our own host. The TikTok bio page (/get) counts opens and button taps by browser type. Our guides, comparison articles and free tools count page views and App Store taps by fixed page, language and a broad referral category, such as AI, search or social. An absent referrer remains unknown. These counts go to our existing PostHog project in the EU. A fresh random identifier groups counts within one page load; it is not stored on your device or reused on another page. No person profiles or session replay are created, and no IP address is stored by these counts. We do not send full referrer URLs, search terms, selected places, calculator inputs or other entered data. Our host, Vercel, processes server log data including IP addresses to deliver pages and defend against abuse.
Android waitlist
The Android waitlist closed when Treadline launched on Android in November 2026. If you joined it, we store your email address, signup time, whether you came through TikTok, and the version of the signup consent in Supabase in the EU. Your consent (Art. 6(1)(a) GDPR) lets us use that email only for updates about Treadline on Android. Joining did not create an app account. Your email is not sent to our analytics service.
The launch email. We send it through our email provider, Resend. For that, Resend receives your email address and the private code described below. We remove both from Resend when you unsubscribe or withdraw consent, and at the latest 30 days after the email goes out. We don't track whether you open the email or click its links.
You can withdraw consent using your saved removal link or by emailing support@treadlineapp.club. We delete the signup when you withdraw consent, or after 12 months. Requests also use a keyed fingerprint of your IP address to limit abuse; the fingerprint changes daily and is deleted within 48 hours. We do not store the raw IP address in the waitlist database. Supabase and our website host may process request metadata in their service logs to operate and protect their services.
Waitlist price. People on the waitlist get a lower price for their first year of Pro. Each signup has a private code in the launch email's link. To give you that price, we link your signup to your Treadline account once: by that code, when the app is opened or installed from the link, or by matching your account's email address to your signup. We store which account claimed the price and until when it applies, and use this only to show and honour the price. The link is removed with your signup.
Changes
If this policy changes materially we will update the date at the top and, where the change affects you, say so in the app.