The RaceFeed Promise: RaceFeed was built by an endurance athlete. Your race data belongs to you. We will never sell your personal information, never use it to target you with intrusive ads, and never share it with anyone who is not helping us run the platform or receiving it in anonymized, aggregate form as described below. We work with brand partners to bring athletes relevant offers — this is always disclosed and never involves sharing your personal data.
Plain English: We collect what you give us and what your usage generates. We use it to run RaceFeed, generate anonymized aggregate insights sold commercially, and power brand partnerships through contextual recommendations. We never sell your personal data. Ever.
1. What We Collect
1.1 Information You Provide Directly
When you create an account or use RaceFeed, you provide us with:
- Account credentials: email address and password (stored encrypted, never in plain text).
- Profile information: username, display name, city, state, and profile photo.
- Athletic identity: disciplines (Running, Triathlon, HYROX, OCR), finish line count, and states raced in.
- Race history: race names, dates, finish times, course ratings, and reviews.
- Training logs: workout descriptions, durations, and notes you choose to log.
- Photos: race images and profile photos you upload, stored on Cloudflare R2.
- Communications: comments, Race Room messages, and support inquiries.
1.2 Age and Eligibility
RaceFeed is intended exclusively for users 18 years of age and older. We collect date of birth during account creation solely to verify eligibility. We do not knowingly collect personal information from anyone under 18 years of age. If we become aware that a user is under 18, we will terminate their account and delete their data promptly.
1.3 Health and Fitness Data
Finish times, training logs, and athletic performance data you submit are categorized as sensitive personal information under California law (CPRA). We treat this data with heightened care. It is never sold, never shared with advertisers or Brand Partners in identifiable form, and is used solely to power your Race Story, detect personal records, and personalize your feed. Your individual health and fitness data is never shared with organizers, brands, tourism bodies, or any third party in identifiable form.
1.4 Information Collected Automatically
When you use the RaceFeed app or website, we automatically collect:
- Device type and operating system (iOS or Android) — to deliver the correct app experience.
- Push notification token — to send race registration alerts, likes, and mentions. Deleted within 30 days of account deletion.
- App usage data — screens viewed, features used, session duration. Used to improve the product. Not used to increase time spent on the app.
- IP address — used for security, fraud prevention, and approximate location.
- Crash logs and error reports — retained for 90 days, used to identify and fix bugs.
We do not collect GPS location data or track your physical movement. We do not track time-on-app for the purpose of increasing engagement.
1.5 Derived Data
RaceFeed generates derived data from your inputs — for example, your personal record status is calculated by comparing your submitted finish times. Your feed is ranked using derived signals from your activity on the platform. These derived metrics are used only within the Services to power features for you. They are not sold or shared individually.
1.6 Cookies and Local Storage
The RaceFeed website uses session cookies and browser local storage to maintain your authentication state and preferences. We do not use third-party tracking cookies, advertising cookies, or behavioral tracking pixels. We do not participate in cross-site tracking networks. The mobile app uses device-local storage (AsyncStorage) for offline caching — this data never leaves your device without your action.
1.7 Information from Third Parties
If you sign in with Apple or Google, we receive only the minimum information necessary to create your account: a unique identifier and, if you permit it, your email address. We do not receive or store your Apple ID or Google password. If RaceFeed integrates with third-party fitness platforms in the future (such as Strava or Garmin), health data received from those integrations will be governed by heightened protections and will never be used for advertising or shared with third parties without your prior consent.
2. How We Use Your Information
2.1 Providing the Services
We use your information to operate your account, display posts and profiles, run Race Rooms, deliver push notifications, detect personal records, personalize your feed, and enable all app features.
2.2 Safety, Enforcement, and Communications
We use your information to detect fraud, fake results, spam, and Terms violations; to send transactional emails (account confirmation, password reset); and to comply with applicable laws.
2.3 RaceFeed Insights — Our Commercial Data Program
RaceFeed generates and licenses RaceFeed Insights — de-identified, aggregated statistical analyses derived from patterns across all athlete activity on the platform. RaceFeed Insights are a commercial product. We sell or license them to race organizers, tourism boards and city governments, sports brands and event sponsors, city planners and infrastructure bodies, and academic and research institutions.
De-identification standards: Before any data enters a RaceFeed Insights product, all personal identifiers are removed. Data is aggregated to a minimum group size of 10 — if fewer than 10 athletes contribute to a data point, that data point is suppressed.
What RaceFeed Insights never include: your name, username, email address, or any identifier that could connect a data point to you; your individual race history, finish times, or training log entries; your push token, device ID, or any technical identifier; data from activities you have set to private.
Your control: You may opt out of contributing to RaceFeed Insights at any time by emailing [email protected] with subject line "Insights Opt-Out." We will remove your data from all future Insights products within 30 days.
2.4 Brand Partnerships — How RaceFeed Works With Sponsors
RaceFeed partners with endurance sports brands including gear companies, nutrition brands, and race technology companies. These partnerships generate revenue through sponsored challenges, contextual gear recommendations, finish card integrations, and notification sponsorships. Personal data is never shared with Brand Partners. Brand Partners receive aggregate, de-identified campaign performance reports only. Gear recommendations are shown based on race type and discipline, not on your individual browsing history or behavioral profile.
2.5 Affiliate Relationships — Race Registration and Gear Links
RaceFeed may have affiliate or commercial relationships with race registration platforms (such as RunSignUp, Race Roster, and Active.com) and gear brands. When you click a race registration link or a contextual gear recommendation on RaceFeed and complete a transaction, RaceFeed may earn a commission from the platform or brand. Affiliate relationships are always disclosed at the point of the link.
RaceFeed's affiliate commission relationship with a registration platform does not constitute an endorsement of any specific race event, race organizer, or the safety, quality, or legitimacy of any race. RaceFeed does not independently verify race events, course safety conditions, or organizer credentials. RaceFeed has no ability to process refunds, cancellations, or transfers for race registrations — all such matters are governed solely by the race organizer's policies and the registration platform's terms of service.
2.6 Notification Delivery
We use your push notification token to deliver event-driven notifications — likes, comments, follows, race registration alerts, and Race Room mentions. We do not use notification delivery as a mechanism to maximize time spent on the app. Notification timing reflects the underlying event, not an algorithmic decision about the optimal moment to re-engage you.
2.7 Analytics and Product Improvement
RaceFeed uses PostHog for product analytics and Sentry for error tracking. PostHog helps us understand how athletes use the app — which features are used, where friction occurs, and how features perform after updates. This data is used exclusively to improve RaceFeed. It is not used to increase the amount of time athletes spend on the platform, to serve advertising, or to build behavioral profiles for commercial use outside the platform. Sentry captures crash logs and error reports retained for 90 days and used only for debugging.
2.8 Personalized Athlete Intelligence
RaceFeed uses third-party AI inference services to power personalized features available to Athlete and Elite tier subscribers, including your race time predictor, personalized coaching responses, weekly training intelligence, and race morning briefings. To generate these outputs, your de-identified race history, finish times, and discipline data are processed by these services. Your name, email address, username, and all direct identifiers are never included in AI inference requests. AI-generated outputs are subject to RaceFeed's internal quality standards — outputs that do not meet specificity and accuracy thresholds are suppressed and never delivered to you. RaceFeed does not use AI inference to make decisions that materially affect your account status, access, or pricing.
3. What We Share
3.1 With Other RaceFeed Athletes
Your username and race identity (finish line count, disciplines, states raced) are always public by design — they are your Race Identity on the platform. Your posts and reviews are public unless you set them to followers-only. Training logs are private by default.
3.2 With Race Organizers — Dashboard Insights
If you save a race, join its Race Room, or post a review, the organizer of that race may see aggregated analytics about athlete engagement through their RaceFeed dashboard. In all cases, organizers see aggregate counts and patterns — never your individual name, email, or personal information. The minimum threshold for any breakdown is 10 athletes.
3.3 RaceFeed Insights — Commercial Partners
As described in Section 2.3, RaceFeed licenses de-identified, aggregated insights to commercial partners. These partners receive statistical data only — never personal information about individual athletes. Partners are contractually prohibited from attempting to re-identify individuals from RaceFeed Insights data.
3.4 Affiliate and Registration Partners
When you click a race registration link or gear recommendation on RaceFeed, you are redirected to a third-party platform or brand website. RaceFeed shares only the information necessary to complete the referral transaction — typically a click identifier. RaceFeed does not share your name, email address, race history, or personal profile with affiliate partners. Your registration data is collected and controlled by the registration platform, not by RaceFeed, and is subject to that platform's privacy policy.
3.5 With Service Providers
We share your information with trusted third-party service providers who help us operate RaceFeed. Each provider accesses only the information necessary for their specific function and is contractually required to protect your data:
- Supabase: database hosting and authentication (United States).
- Expo/EAS: mobile app build infrastructure and push notification delivery (United States).
- Cloudflare: content delivery, image storage via Cloudflare R2, and edge security (United States).
- Vercel: web app hosting for racefeed.app (United States).
- Upstash: Redis caching layer for feed performance (United States).
- Resend or equivalent: transactional email delivery.
- Stripe: payment processing for organizer subscriptions. We do not store payment card details.
- Sentry: error tracking and crash reporting — 90-day retention, used only for debugging (United States).
- PostHog: product analytics for understanding feature usage and improving the product (United States).
- AI inference services: third-party artificial intelligence services used to generate personalized features for Athlete and Elite tier subscribers. These services receive de-identified race history and performance data solely to generate your personalized output. They do not retain your data beyond the inference request and do not use your data to train their models pursuant to our service agreements. Your name, email address, username, and all direct identifiers are excluded from all AI inference requests.
3.6 Legal Requirements
We may disclose your information if required by law, court order, or governmental authority, or if we reasonably believe disclosure is necessary to protect the rights, property, or safety of RaceFeed, our users, or the public.
3.7 Business Transfer
If RaceFeed LLC is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred. We will notify you via email and in-app notice at least 30 days before your information is transferred and becomes subject to a different privacy policy.
3.8 What We Do Not Share
We do not sell, rent, or trade your personal information — meaning your name, email, race history, finish times, or any information that identifies you as an individual — to advertisers, data brokers, or other third parties for their own marketing or commercial purposes. RaceFeed does not serve intrusive third-party advertising, banner ads, pop-up ads, or behavioral targeted advertising. We do not participate in cross-site tracking networks or ad exchanges. Your personal data is never used to target you with advertising on other platforms.
4. Data Retention
- Account and profile data: retained for the life of your account. Deleted within 30 days of account deletion.
- Race posts and training logs: deleted within 30 days of account deletion.
- Race reviews: may be retained in de-identified form after account deletion to preserve community rating integrity.
- Aggregated Insights data: once incorporated into an anonymized aggregate dataset and delivered to a partner, it cannot be removed from that delivered dataset because it is indistinguishable from other athletes' data within the aggregate. Future Insights products will exclude your data within 30 days of an opt-out or account deletion.
- Push notification tokens: deleted within 30 days of account deletion.
- Crash logs and error reports: automatically deleted after 90 days.
- Financial and billing records: retained for 7 years as required by tax and accounting law.
- Backup copies: complete deletion from all backup systems within 90 days of account deletion.
- Legal holds: if your account is subject to an active legal request, we may retain relevant data until the matter is resolved.
5. Your Rights and Choices
5.1 Access and Correction
You can access and update your profile information at any time through Settings. For information not visible in the app, contact [email protected].
5.2 Deletion
You may delete your account at any time through Settings. We will remove your personal information as described in Section 4.
5.3 Data Portability
You have the right to receive a copy of your personal data in a portable format. Email [email protected] with subject line "Data Export Request." We will respond within 45 days.
5.4 Opt Out of RaceFeed Insights
You may opt out of contributing your activity data to RaceFeed Insights at any time by emailing [email protected] with subject line "Insights Opt-Out." We will exclude your data from all future Insights products within 30 days. Opting out does not affect your ability to use any feature of RaceFeed.
5.5 Push Notification Controls
You control push notifications through RaceFeed's in-app notification preferences screen, including the ability to disable all notifications, disable specific notification types individually, and set quiet hours. You may also disable notifications through your device's system settings.
5.6 Privacy Settings
You control the visibility of your posts, training logs, and profile through your account settings. Activities set to private are automatically excluded from all RaceFeed Insights products, regardless of your Insights opt-out status.
5.7 California Residents — CCPA and CPRA Rights
If you are a California resident, you have the following rights:
- Right to Know: request disclosure of the personal information we have collected, the categories of sources, our business purpose, and categories of third parties we share with.
- Right to Delete: request deletion of your personal information, subject to legal exceptions.
- Right to Correct: request correction of inaccurate personal information.
- Right to Limit Use of Sensitive Personal Information: your health and fitness data is already used only to provide the Services. No further action is needed.
- Right to Opt Out of Sale or Sharing: we do not sell personal information. Our RaceFeed Insights program and Brand Partner campaign reporting operate on de-identified aggregate data only, which does not constitute a "sale" of personal information under CCPA. No action is required.
- Right to Data Portability: receive a copy of your data in portable format (see Section 5.3).
- Right to Non-Discrimination: we will not discriminate against you for exercising any CCPA or CPRA rights.
To exercise any of these rights, email [email protected]. We will respond to verifiable requests within 45 days.
6. Security
We implement commercially reasonable security measures including:
- Encrypted data transmission via HTTPS/TLS between the app and our servers.
- Encrypted password storage using industry-standard hashing (managed by Supabase Auth).
- Row-level security policies on our Supabase database — every table is protected at the database level.
- Access controls limiting data access to authorized personnel.
- Photo uploads routed through Cloudflare Worker with server-side signing — never directly from the client browser.
- Error tracking via Sentry — crash logs retained for 90 days and used only for debugging.
- Pre-launch privacy review of all new RaceFeed Insights product designs and Brand Partner campaign structures to confirm de-identification standards are met.
No security system is impenetrable. If we become aware of a breach that materially affects your personal information, we will notify you as required by applicable law.
7. Minors
RaceFeed is intended exclusively for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18 years of age. If you are a parent or guardian and believe your child has provided us with personal information, contact us at [email protected] and we will delete that information promptly. If we become aware that a user is under 18, we will terminate their account and delete their data without delay.
8. Future Integrations
RaceFeed may in the future integrate with third-party fitness platforms such as Strava, Garmin Connect, or Apple Health. If and when such integrations are available, health data received from those platforms will be governed by heightened protections: it will not be sold or used for advertising; it will not be disclosed to third parties without your prior consent; and it will only be used for the specific purposes described in an updated version of this Privacy Policy. We will update this Policy before launching any such integration.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email and in-app notice at least 14 days before the changes take effect. Continued use of the Services after that date constitutes acceptance of the updated Policy.
10. Contact Us
RaceFeed LLC · San Dimas, California
Email: [email protected]
Website: racefeed.app
DMCA Agent: [email protected] (subject: DMCA Notice)
Data requests: [email protected] (subject: Data Export Request, CCPA Request, or Insights Opt-Out)
We will respond to all inquiries within 5 business days.
RaceFeed LLC · Privacy Policy Version 5 · Effective April 28, 2026