This page says what Stridelong does with your data, in the app and on the stridelong.com website (the trainer console included), with no surprises and no jargon. The essential point fits in one sentence: your data is used to run Stridelong, nothing is sold, nothing is shared outside the stable unless the trainer or you choose to share it (and you can see it in the app), and there is no advertising and no tracking.
Who is responsible
Stridelong is published by R2C PROD CO, a French simplified joint-stock company with a single shareholder, 14B rue de l'Église, 60260 Lamorlaye, France (Compiègne Trade and Companies Register 943 570 010), the data controller within the meaning of the General Data Protection Regulation (GDPR). Its president is Lucas Gutierrez. No data protection officer has been appointed. For any question about your data, write to support@stridelong.com, or from the app: Settings, then Customer support.
Without an account, your data stays on your phone
Stridelong works without an account. Your horses, tracks and workouts are then stored on your phone, and we receive none of it. The only requests that leave the phone are those needed for some displays, described below: a track's weather, maps and place search, and the draft of a track if you choose to continue it on a computer.
What the app records on your phone
The data you create: your horses, your tracks, your workouts with the workout type and the note you write on them, your settings and your profile.
Location and sensors. When a workout screen is open, the app reads your GPS position so the signal is ready at the start. Once the workout is armed ("Ready to go") and until it stops, the app records the GPS position and the phone's motion sensors, including with the screen locked: this is why iOS asks you to allow location access "Always". When you create a track by walking it, or by drawing it on the map around where you are, the app also reads your position, for the time of that creation. Outside these moments, it never tracks your position.
Stridelong measures horses, not people: it reads no health or fitness data about the person riding and does not ask you to enter any.
What we receive, and when
If you create an account. You sign in with Apple, with no password. We receive the identifier assigned by Sign in with Apple, the email address Apple passes on to us when it does (a relay address if you chose to hide yours), and the name you display. Once you are signed in, your horses, tracks and workouts are backed up on our servers: each workout with its GPS trace, the charts drawn from the sensors, its type, its note and a PDF copy of its sheet.
If you subscribe to Plus. The purchase is made in the app, from Apple. Apple collects the payment, applies its own billing and refund rules, and does not pass on to us your card or your bank details. So that Plus opens what it should open, the app reads the state of your subscription from Apple: the plan, the dates, whether a trial is running. We keep its state, active or not, and its end date, with your account: Apple notifies us of each purchase, renewal, cancellation or refund, and we keep those notices for as long as the subscription lasts.
If you join a stable. Your membership of the stable, your role and the name you display. Joining a stable transfers no horse and makes no workout visible: the trainer receives a workout only if you sent it (see "Who sees your data"). The number of linked riders is used to calculate the trainer's subscription; the rider is never billed for it.
If you run a stable on the trainer console. The email address to which we send your sign-in link, your stable's name, your linked riders, the workouts your riders send you and, for the subscription, your billing details (company name, address, VAT and company registration numbers). The subscription is collected by Stripe: we receive from Stripe the state of the subscription, its dates and your invoices, never your full card number, which only Stripe handles.
If you use Network. Your contact code, your contacts, the requests you send and receive, the people you have blocked, the workouts and tracks you send or receive, and the reports you make or that concern you.
If you contact support. From the app, signed in to an account: your message, the topic you choose, and a technical status attached automatically, namely the app version, the number of workouts on the phone, the number of items waiting to be backed up, the last backup error, whether you are signed in and, if so, your stable's name and your role. This technical status contains neither your location nor your workouts. If you tick workouts, the request points to them and we look at their backup, GPS trace included. You can attach up to five files of 10 MB each: screenshots, photos, PDFs, text files or short videos. A screenshot may show the name of a horse or a person, or a place: leave in only what is useful. By email: your message, your address and whatever you attach.
If you submit a track for certification. A copy of the track (its outline, its start and finish points with their names, its name, its surface), the country and town you enter, our answer and, if the track is accepted, your reward credit.
If you continue on a computer a track you are drawing. The draft of the track, stored on our servers with the link the app creates. No account is needed: the link is enough to open it.
On the stridelong.com website. Like any website, it receives your IP address and your browser's technical information, needed to serve you the pages. It keeps your choice of language and, if you sign in to the console, the session cookies required to sign in; a few display settings and drafts stay in your browser's storage. These trackers are only used to make the site work and do not require consent; they are listed in our cookie policy. On the console, if you allow it in your browser, your location is used to show the weather where you are: it goes through our server to Apple's weather service, and we do not keep it.
If you ask to be told about a release. On the website, you can leave your email address to be told when the trainer console or an Android version of Stridelong is released. This is optional, and nothing else is asked of you. We first send you an email to confirm your address; if it is not confirmed within 7 days, it is deleted. We record your address, the release you are waiting for, the language and the page of the website you signed up from, the dates of your sign-up, of our emails and of your confirmation, the unique keys of the confirmation and unsubscribe links, and proof of your agreement: the wording of the box you ticked, in the version shown that day. Nothing else: no tracking of your visits, no measurement of whether you open our emails or click their links.
If you test a beta version with TestFlight. Apple passes on to us the feedback, screenshots and crash reports you choose to send, with your device model and version, and your email address if you were invited by email. Outside TestFlight, Apple passes on the app's crash reports if you agreed, in your iPhone's settings, to share them with developers.
Nothing else: no advertising identifier, no audience measurement tool, no tracking.
Why, and on what legal basis
- Running the app and backing up your horses, tracks and workouts on our servers, so that nothing is lost in case of a failure or a change of device. This is the performance of the service you agreed to.
- Selling you Plus and making it work: reading the state of your subscription from Apple to open the Plus features. This is the performance of the contract you entered into by subscribing.
- Billing the console: creating the trainer's subscription with Stripe, counting linked riders, issuing invoices. This is the performance of the trainer's contract, and our legal obligation to keep accounts and retain invoices.
- Running the stable: linking riders to the trainer by invitation, delivering to the trainer the workouts the rider sends. This is the performance of the service requested by the trainer, who invites, and by the rider, who joins the stable and sends. When a rider joins a stable, an email lets us know, with the email address of their account and the stable's name: this is our legitimate interest, following how stables get started so that we can help them.
- Connecting you with your contacts and delivering what you send them. This is the performance of the service you asked for, one action at a time: nothing goes to a contact unless you sent it.
- Enforcing the rules: filtering offensive names, handling reports, enforcing blocks and, when necessary, suspending an account that breaks the terms of use. This is a legal obligation for a service that stores content for its users, and our legitimate interest as well as that of every user: a network where you can be harassed with no way out is no longer a working tool.
- Showing weather, maps and places. For a track's weather, its coordinates, and for a past workout its date, are sent to the Open-Meteo service. Maps, place search and the name of a track's location come from Apple. This is our legitimate interest, and yours: a workout's sheet carries the day's weather and the place.
- Answering your support requests and fixing the problems they reveal. This is the performance of the service you use. Once a request has arrived, its message and the attached technical status may be read by an artificial intelligence model (Claude, by Anthropic) to write a short summary for our team only. This summary is never shown to you, never replaces your message and decides nothing: a person always replies to you. Your account's identifier and address are not sent for this step; what you write in your message is.
- Improving the measurement algorithms. Workouts you send us, through support or by sending us an export, may be used as a test bench to make timing, stride and lead detection more accurate. They are then kept in our development tools and may be analysed with the help of an artificial intelligence assistant (Claude, by Anthropic). This is our legitimate interest: more accurate measurements for everyone. If you do not want this, say so in your request: your workouts will not be added, and those already there will be removed on simple request.
- Telling you about a release, if you asked for it on the website: one email to announce it, once, preceded by the email that confirms your address, and nothing else. Your address is used for no other message; it is not sold, rented or handed to anyone for their own mailings. This is based on your consent, given by ticking the box and confirmed through the link we send you, which you can withdraw at any time.
- Protecting the service against abuse and failures: technical logs, sending limits. This is our legitimate interest.
Who sees your data
- Your trainer, if you join their stable through their invitation link: they see your name, as you display it or as they write it on the console, and the workouts you choose to send them, nothing else. You decide on sending in the app: a "Send to trainer" panel at the top of a morning's preparation, or a default trainer set in your profile; no workout goes to them unless the panel is ticked, and you can tick several for the same morning. A workout is sent in full, exactly as you see it in the app: the horse's name, the times, the charts, the GPS trace of the route, the track, the type, the note and the PDF sheet. Your other workouts and your other horses stay invisible to them. The console groups on one sheet the horses with the same name, sex and year of birth when they come from several riders of the stable. If you leave the stable, the workouts already sent stay readable to the trainer (you keep your copy) and later ones are no longer sent to them; if you delete your account, they are erased from our servers. The trainer can also create a read-only link on those workouts (see "Read-only links").
- Your riders, if you run a stable: each one sees your stable's name and knows they can send you their workouts; they see neither the other riders' workouts nor your billing details.
- Your Network contacts: they see your display name and what you send them, nothing more. A workout is sent in full, exactly as you see it in the app: the horse's name, the times, the charts and the GPS trace of the route, which shows where it was run. A track is sent with its outline and its start and finish points.
- A contact request shows your display name to the person who receives it. Stridelong publishes no directory: people can only find you with your code or your link.
- If you report a person or an item, the Stridelong team reads your report: the reason, your details, the address you choose to leave for a reply, and a copy of the names involved kept by our servers (the name of the person, the horse, the track and its points; never the trace or the figures). The reported person is not told.
- All users see a track you submitted and that we accepted: its outline, its points, its country and its town, without your name or your account. Only Stridelong knows who submitted it.
- Anyone who has the link to continue a track can open its draft while it exists: do not pass it on to anyone but yourself.
- The Stridelong team reads your support requests. Otherwise, access to our servers is limited to the people who run the service, for support, security and fixing problems. We do not read what you send to your contacts; we only see something you sent if it is reported to us.
- Anyone who has a read-only link created on one of your workouts, until it expires or is revoked: they see the image described in "Read-only links", and nothing else. A link can be passed on: the rider and the trainer give it only to the person who should see the workout.
- Nobody else. Nothing is sold, nothing is rented, nothing is shared with advertisers or data brokers.
Read-only links
A read-only link is a web address that opens a page showing the image of a workout to someone who doesn't have the app, an owner or a veterinarian for example. A rider can create one on their own workouts; a trainer can create one on the workouts a rider has sent them, never on those of a rider who has left the stable. When a rider leaves the stable, the links the trainer had created on their workouts are revoked.
What the page shows. The portion of the workout that was run, its splits and its date, as an image made for sharing on the rider's phone, never the PDF sheet. The horse's name and the track name appear on it only if the rider chose to show them, and never on a link created by a trainer. The page contains no note, no location, no complete trace, no time of day and no rider's name: it only says who created the link, "a rider" or the stable's name.
Why, and on what legal basis. To show a workout to a person chosen by the link's author, without asking them to create an account. If you create the link yourself, this is the performance of the service you asked for. If your stable's trainer creates one on a workout you sent them, this is the stable's legitimate interest in showing a horse's workout to its owner or veterinarian: you can object at any time, by revoking the link in the app or by writing to us. Counting the openings is our legitimate interest and the author's: knowing that a link was read, and protecting it against abuse. A link is never used to monitor a rider's hours or movements.
Who sees what. The rider sees in the app every link created on their workouts, with its author, its expiry date and the number of times it was opened, and can revoke it with one tap; the trainer sees those they created and can revoke them. Anyone who has the link can open the page: a link can be passed on, it is a key and not restricted access, and we cannot prevent its recipient from passing it on. The address carries a random token that cannot be guessed; the page is not indexed by search engines, and its preview in a messaging app shows neither the workout nor the horse.
The log of openings. At each opening, we keep the date and time, in order to count them. This count records neither the IP address nor the device of the person who opens the link; like any website, the page may leave a brief technical trace in our hosts' logs, 30 days at most. The page uses no cookie, no tracker and no third-party service. The count is visible to the link's author and to the rider whose workout it is, to nobody else.
How long. A link lasts 7 days by default, 30 at most. When it expires, or as soon as it is revoked, it stops working and the image is deleted from our servers; its log stays visible to the rider for 30 days, then is deleted. If you delete your account, the links you created are revoked and their images deleted.
Your rights. For a link that concerns you, whether you are its author, the rider whose workout it is or anyone else, you can ask for access to what we keep, for its erasure, or object to its existence: the rider and the author revoke the link in the app, and anyone can write to support@stridelong.com: we reply within one month. The person who opens a link gets the essentials of this information on the page itself; as the count keeps nothing that identifies them, we cannot find their own openings.
Where your data is, and who helps us
Your data is on your phone and, if you have an account, on our servers, hosted by Supabase in the European Union.
Service providers help us, each with one task. They act on our instructions, under a GDPR-compliant contract, and do not use your data for their own purposes:
- Supabase: our servers (database, accounts, files, and the list of people to tell about a release), located in the European Union.
- Vercel: hosting of the stridelong.com website, its forms and the console. Pages, and what you enter in the forms, may be served and processed outside the European Union, notably in the United States.
- Resend: sending some emails, such as the notification that tells us when a rider joins a stable, and the waiting list emails (the address confirmation and the release announcement). These emails are processed in the United States.
- Hostinger: our domain name and our mailbox, where messages written to support@stridelong.com arrive.
- Anthropic: the automatic summary of support requests for our team, and help analysing workouts added to the test bench. This data is processed in the United States.
- GitHub: our development tools, where workouts added to the test bench are kept, in the United States.
Other services handle one specific task, under their own rules:
- Apple: Sign in with Apple, buying and managing the Plus subscription, maps, place search and the name of a place from its coordinates, in the app and on the console, the weather on the console, TestFlight and the App Store. Apple processes this data under its own privacy policy.
- Stripe: collecting the console subscription, its invoices and the portal where the trainer changes card or cancels. Stripe processes payment data partly on our instructions and partly on its own account (fraud prevention, legal obligations), under its own privacy policy. Stripe processes data in the United States.
- Open-Meteo: a track's weather in the app, from its coordinates only and, for a past workout, its date.
- OpenStreetMap (Nominatim service): the region of a certified track, from its coordinates, when it enters the public catalog.
Requests sent to Apple and Open-Meteo leave from your phone or your browser: like any online service, they see your connection's IP address.
When a provider is established outside the European Union, or accesses data from abroad, the transfer relies on the EU-US Data Privacy Framework for American companies certified under it, and otherwise on the European Commission's standard contractual clauses.
How long
- Your horses, tracks, workouts, profile, contacts and blocks: as long as your account exists. Deleting a workout, a horse or a track in the app removes it from your phone, but not from its backup, which stays attached to your account until the account is deleted. To have a specific backup deleted without deleting your account, write to us. What is on your phone belongs to you and is deleted with the app.
- Workouts you sent to a trainer: as long as your account exists, or until the trainer or you have them erased. Leaving the stable does not remove them; deleting your account does.
- Invoices and billing data for the console: ten years, the legal retention period for accounting records, even after the subscription is cancelled.
- Network is a transit. A pending item stays on our servers for 30 days at most. An accepted item leaves them as soon as your contact's app has stored it, and at the latest 30 days after it was accepted. Of a declined item, only a record without content remains for 30 days, so it cannot be sent again unchanged. An accepted workout is stored on your contact's phone, outside our servers. An accepted track becomes one of their tracks: it is backed up with their account, like the others.
- Erased names and reports. When an action erases what one person showed another (a name, that of a horse, a track or its points; never a trace or a figure), our servers keep a copy for 30 days, read only by the team, so that a report can be handled. A report is kept as long as both accounts exist; it also opens a request in our support queue, which is linked to no account and follows the period for support requests.
- Support requests are kept while we handle them. A request we have answered is closed automatically one month after our reply, then deleted one year after it is closed. Requests linked to your account are deleted with it. Messages received by email stay in our mailbox while we handle the request and the problem it reports.
- Files are not yet deleted automatically. Attachments of a deleted request, and the PDFs of workouts removed from our servers (by an account deletion or by a trainer), stay there, readable by no user, until we delete them by hand. Write to us: we do it within a month.
- A read-only link, its image and its log: 7 days by default, 30 days at most; the image is deleted as soon as the link expires or is revoked, and the log 30 days later.
- Track submissions and credits: as long as your account exists. An accepted track stays in the public catalog after your account is deleted, with nothing linking it to you; you can ask for its removal by writing to us.
- The draft of a track continued on a computer is deleted about 6 hours after its last change, and never more than 24 hours after it was created.
- The email that tells us a rider has joined a stable stays in our mailbox as long as it is useful for following that stable.
- Workouts added to the test bench stay there as long as they help check our measurements, or until you ask us to remove them.
- The address left to be told about a release, with proof of your agreement, is deleted 7 days after the last confirmation email if you have not confirmed it; once confirmed, one month after the email announcing the release, and at the latest two years after you signed up if that email has not been sent. If you unsubscribe, it is deleted at once, from all our waiting lists.
- Technical logs of our servers and of the website (IP address, request, time) are kept by our hosting providers for a short time, 30 days at most.
Deleting your account
Open Settings, then Delete my account. Deletion erases from our servers your account and what they keep for it: the backup of your horses, your tracks and all the workouts you recorded, including those you had sent to a trainer, your profile, your read-only links and their images, your support requests and, in Network, your code, your contacts, your requests, your blocks and your items.
Deleting your account does not stop a Plus subscription: it is cancelled in your Apple account settings, as the refund policy explains.
What remains: what is on your phone, which you can export beforehand; what a contact has already accepted, which is on their phone; a track we published in the catalog, with nothing linking it to you; the support requests opened by your reports, which follow their own period; the console invoices, which the law requires us to keep for ten years; and the files described above, which we delete by hand on request.
A trainer's account is deleted from the console, Settings page, "Delete my account" button, after a confirmation. Deletion is refused while a subscription is running: cancel it first, Billing page, and come back at the end of the paid period. It erases what belongs to the trainer; the workouts stay with each rider who recorded them. You can also write to us; when a deletion goes through email, we write to the address linked to the account to check that the request really comes from you, and nothing is deleted before you reply.
Your rights
The GDPR gives you a right of access, rectification, erasure, restriction, portability and objection. Many are exercised in the app, without writing to us: the full export, in Settings then Data & exports, gives you all the data on your phone in a file that can be re-imported as is; you correct your horses, tracks, workouts and name yourself; removing a contact, blocking someone and deleting your account are done in the app. For the rest, notably to receive what our servers keep for you or to have a specific backup deleted, write to support@stridelong.com: we reply within one month.
You can object at any time to processing based on our legitimate interest, in particular to the use of your workouts as a test bench. If you left your address to be told about a release, you can withdraw your consent at any time, through the unsubscribe link in each of our emails or by writing to us; this withdrawal applies for the future. You can also tell us what you want to happen to your data after your death.
No decision about you is made in a fully automated way, apart from the filter that rejects a name containing an offensive word. No data is asked of you to use the app without an account; the account asks only for Sign in with Apple, and without it backup, the stable, Network, the track catalog and in-app support are not available.
You can lodge a complaint with the CNIL, the French data protection authority (cnil.fr), or with the data protection authority of the country where you live.
If you live in the United States. Stridelong does not sell your personal data, does not share it for targeted advertising and does not use your precise location for anything other than running the app. We do not reach the applicability thresholds of the US consumer privacy laws, such as California's, but we give you the same rights on simple request to support@stridelong.com: to know what data we keep about you, to correct it, to have it deleted, and to get a portable copy. We do not treat you worse for exercising them. Stridelong is not intended for children (see "Minimum age").
If you live in Australia. We handle your data according to the principles of this text, including storage in the European Union and the use of providers in the United States, described above. To access your data, correct it or make a complaint, write to support@stridelong.com: we reply within a reasonable time, one month at most. You can contact the Office of the Australian Information Commissioner (oaic.gov.au) if you are not satisfied with our answer.
Minimum age
Stridelong is intended for people aged 16 and over and is not intended for children. We do not knowingly collect data from people under 16, nor, in any case, from children under 13. If you think a child has given us data, write to us: we will delete it.
Security
Exchanges between the app, the website and our servers are encrypted. On our servers, rules enforced by the database itself mean that each account can only access what concerns it.
If this policy changes
If it changes significantly, we announce it in the app and on this page before it applies. The date at the top of the page says when it last changed.