Privacy Policy
Last updated: June 9, 2026 · Effective: June 9, 2026
Tracer is a running and fitness social platform operated by
Tracer, Inc. (“Tracer,” “we,” “us,” or “our”). This Privacy
Policy explains what we collect, how we use it, when we share it, and the
choices and rights you have. It applies to the Tracer mobile app and to
tracerclub.com and related web pages (together, the “Services”).
The short version. We collect what we need to run Tracer —
your account details, the runs and content you create, and the precise location
that powers tracking and live broadcasts. We use it to provide the Services,
process payments and donations, keep you and the community safe, and improve the
product. We do not sell your personal information, and we do not use it
for third-party advertising. You control who sees your activity, and you
can delete your account at any time.
1. Information we collect
We collect the following categories of information, all in service of operating Tracer:
Information you give us
- Account & profile: email address, name, username (handle), password (handled by our authentication provider — we never see it in plain text), and optional profile photo, bio, location/city, interests, and account type (runner, creator, or supporter).
- Activity & fitness content: the runs and activities you record — including GPS routes, distance, pace, duration, elevation, splits, cadence, activity type, and any heart-rate or workout data you choose to import from a connected device or service.
- Photos, video & posts: images and videos you upload, captions, comments, group posts, share cards, and (for creators) exclusive content you publish.
- Social graph: who you follow, your groups, leaderboard participation, and the people you designate as trusted spectators.
- Payments, tips & donations: when you subscribe to a creator, send a tip, or donate to a campaign, our payment processors collect your payment details. Tracer never stores full card numbers — they are handled directly by Stripe. We retain records such as amounts, dates, the recipient, and purchase history.
- Communications: messages you send us (e.g. support or abuse reports) and content you submit through in-app reporting tools.
Information collected automatically
- Precise location: when you record a run or go live, we collect precise GPS location to map your route and, if you broadcast, to share your position with the audience you choose. See Location & safety controls.
- Music listening history: if you connect Spotify or Apple Music, we log the tracks played during a run to build your post-run soundtrack insights. We only access this while you have connected the service.
- Device & diagnostics: device identifiers, app version, operating system, crash reports, and performance/diagnostic data, used to keep the app stable and debug problems.
These map to the data types we declared to Apple: email address, name, user ID,
precise location, health, fitness, photos or videos, other user content, payment
info, purchase history, music listening history, device ID, crash data,
performance data, and other diagnostic data.
2. How we use information
We use the information above to:
- Provide, maintain, and operate the Services — recording runs, rendering maps, powering live broadcasts, feeds, groups, leaderboards, and creator pages.
- Process subscriptions, tips, creator payouts, and charitable donations.
- Generate your post-run analysis, music insights, and personalized stats.
- Keep the community safe — detecting fraud, abuse, fake activities, and violations of our Terms, and responding to reports.
- Communicate with you about your account, security, and service updates, and (if you opt in) send push notifications such as when someone you support goes live.
- Understand how the Services are used so we can fix bugs and improve features.
- Comply with law and enforce our agreements.
3. Location & safety controls
Location is the heart of Tracer, and we’ve built it to put you in control:
- You choose the audience of every run and live broadcast — public, followers/friends, or unlisted/private.
- Decoy modes (“Mars” / “Moon”) let you broadcast live without revealing your real coordinates; your true location is obscured before it ever reaches spectators.
- Private runs are never shown publicly on the map or as “ghost traces.”
- Trusted spectators can be limited to a list you control for followers-only broadcasts.
- We collect precise location only while you are recording or broadcasting. You can revoke location permission at any time in your device settings (doing so disables tracking features).
- When a live broadcast ends, the raw real-time GPS breadcrumb stream is purged; the saved activity keeps only the route you chose to publish.
Please share thoughtfully. Publicly broadcasting a route that starts
or ends at your home, school, or workplace can reveal where you live. Use private
mode, decoy modes, or start your recording a short distance away when in doubt.
4. Health & fitness data
Activity metrics (distance, pace, duration, elevation, cadence, and any heart-rate
or workout data you import) are used to power your stats, insights, leaderboards,
and — where you choose to share them — your public profile and feed. We do
not use your health or fitness data for advertising, and we do not sell it.
If you connect Apple Health, Garmin, or Strava, we access only the data needed for
the feature you enabled, and you can disconnect at any time.
5. How we share information
We share information only in these situations:
- With other users, as you direct: your public profile, posts, runs, live broadcasts, leaderboard standings, comments, and creator content are visible according to the audience settings you choose. Information you make public can be seen, copied, or re-shared by others.
- With service providers who process data on our behalf under contract — see the list below.
- For payments and donations: with Stripe (subscriptions, tips, creator payouts) and Pledge.to (donations to nonprofits) to complete transactions you initiate.
- For legal and safety reasons: to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, safety, and property of users, the public, or Tracer — including referring serious safety issues (credible threats, doxxing, or content involving a minor) to law enforcement.
- In a business transfer: if Tracer is involved in a merger, acquisition, financing, or sale of assets, information may transfer as part of that transaction, subject to this Policy.
- With your consent for any other purpose we describe at the time.
6. Service providers (subprocessors)
We rely on trusted third parties to run Tracer. Each handles only the data needed for its function:
| Provider | Purpose |
| Supabase | Database, authentication, file storage, and real-time infrastructure |
| Stripe / Stripe Connect | Subscription, tip, and creator-payout processing |
| Pledge.to | Charitable donation processing to nonprofits |
| Vercel | Hosting for tracerclub.com and web spectator pages |
| Sentry | Crash and performance monitoring |
| Mapbox & Apple Maps | Map rendering and routing |
| Spotify / Apple Music | Music capture and insights (only if you connect them) |
| Garmin / Strava | Activity import (only if you connect them) |
| Expo (EAS) | App delivery and push-notification routing |
| Apple / Google | App distribution and push-notification delivery |
7. We don’t sell your data
Tracer does not sell your personal information, and we do
not “share” it for cross-context behavioral advertising as those
terms are defined under California law. We do not run third-party ad networks in
the Services and do not track you across other companies’ apps or websites for
advertising.
8. Data retention
We keep your information for as long as your account is active or as needed to
provide the Services. When you delete your account, we delete or de-identify your
personal information within a reasonable period, except where we must retain it to
comply with legal, tax, accounting, fraud-prevention, or dispute-resolution
obligations (for example, transaction records required by payment regulations).
Content you shared publicly or with groups may persist in others’ copies or caches
outside our control.
9. Security
We protect your information with measures including encryption in transit,
row-level database access controls, and secure storage of authentication
credentials on your device. No system is perfectly secure, so we cannot guarantee
absolute security; you are responsible for keeping your password confidential.
If we become aware of a breach affecting your personal information, we will notify
you and authorities as required by law.
10. Your rights & choices
- Access & correction: view and edit most profile and account information directly in the app.
- Deletion: delete your account at any time from in-app settings, which removes your personal information subject to the retention exceptions above.
- Location: revoke location permission in your device settings; control audience and decoy modes per run.
- Notifications: turn push notifications on or off in the app or device settings.
- Connected services: disconnect Spotify, Apple Music, Garmin, or Strava at any time.
- Marketing: opt out of non-essential emails using the unsubscribe link; we’ll still send essential account and security messages.
To exercise any right, use the in-app controls or contact us at glen@tracerclub.com. We will not discriminate against you for exercising your privacy rights.
11. California privacy rights
If you are a California resident, the CCPA/CPRA gives you the right to know the
categories and specific pieces of personal information we collect, to request
deletion or correction, and to opt out of the “sale” or “sharing” of personal
information. We do not sell or share personal information, so no
opt-out is necessary, but you may still exercise your other rights by contacting
glen@tracerclub.com. We will verify your
request against information in your account. You may use an authorized agent, and we
will not discriminate against you for exercising these rights. The categories of
personal information we collect are described in Section 1; we collect them for the
business purposes in Section 2 and disclose them to the service providers in Section 6.
12. International users (EEA/UK)
Tracer is operated from the United States, and your information will be processed in
the U.S. and other countries that may have different data-protection laws than
yours. Where required, we rely on appropriate safeguards for international
transfers. If you are in the European Economic Area or the United Kingdom, our legal
bases for processing are: performance of our contract with you (to provide the
Services), your consent (for example, precise location and connected-service
access), our legitimate interests (safety, fraud prevention, and improving the
Services), and compliance with legal obligations. You have rights to access,
correct, delete, restrict, port, and object to processing of your personal data, and
to lodge a complaint with your local supervisory authority. Contact
glen@tracerclub.com to exercise these rights.
13. Children
Tracer is not directed to children under 13, and you must be at least 13 years old
to use the Services. We do not knowingly collect personal information from children
under 13. If we learn that we have collected such information, we will delete it. If
you believe a child under 13 has provided us information, contact
glen@tracerclub.com. Users between 13 and the
age of majority should use Tracer with the involvement of a parent or guardian.
14. Changes to this Policy
We may update this Policy from time to time. When we make material changes, we will
update the “Last updated” date and, where appropriate, notify you in the app or by
email. Your continued use of the Services after an update means you accept the
revised Policy.
Questions or privacy requests? Contact Tracer, Inc. at
glen@tracerclub.com.