Privacy

What we collect and why

• Account email. Used to sign you in (magic links) and for messages about your account. Never shown publicly.
• Athlete content. Your profile (name, bio, avatar, sports) and your races — results, journals, photos, GPX course files. You publish this to display it; that's the product.
• Session cookie. One cookie that keeps you signed in. It's the only kind of cookie we set.
• Server logs. Standard request logs (IP address, requested URL, timestamp) used to debug problems and stop abuse.

Who processes it for us

We run on a small set of service providers, each doing one job:

• Railway — hosts the app and the Postgres database where everything above is stored.
• Resend — delivers our email (sign-in links), so it processes your email address.
• Mapbox — renders course maps in your browser from your published routes.
• Anthropic — when you import a race from a results page, the page's text is sent to Anthropic's API to extract the numbers.
• Stripe — will process payments if you buy a paid plan once payments launch. Stripe sees payment details; we don't store card numbers.

Our legal bases

We process your account email, content, and session cookie because that's what running your account requires — performance of a contract. We keep server logs under our legitimate interest in keeping the service working and abuse-free.

How long we keep it

• Account data — until you delete your account.
• Your content — until you delete it (a race, a photo, or the whole account).
• Server logs — at most 90 days.

Deleting your account removes everything immediately — there is no grace period or soft-delete. Database backups age out on our host's schedule shortly after.

Your rights

Every right below has a built-in path — you never need to email us to use them, though you can:

• Access — your profile and race pages show everything you've published, and the export below covers the rest.
• Export — Settings → “Download my data” gives you a JSON bundle of your profile, races, and file list.
• Correction — edit anything in place: profile in Settings, races on their edit pages.
• Deletion — delete races and photos in place, or the whole account in Settings → “Delete account”. Account deletion is immediate and removes your data and files.

Cookies

One session cookie, set when you sign in, so you stay signed in. No analytics cookies, no advertising cookies, no third-party trackers.

No selling, no ads

We do not sell your personal data, and we don't show ads or share your data with advertisers. The processors above get only what their job requires.

Contact

Questions or requests about your data: tarik@tiki.digital. See also the Terms of Service.