Privacy Policy

StrideTrack ("the App") is developed and published by CodeCraftedApps ("we," "us," or "our"). We are committed to protecting your privacy and ensuring the security of your health data. This policy explains how we handle your information.

Overview

StrideTrack is designed with a simple privacy principle: your data stays on your device. We do not collect, transmit, or store any personal or health information on external servers.

Data Collection

• No Personal Data Collection: We do not collect, store, or transmit your personal health data to our servers.
• HealthKit Integration: All health data is read directly from Apple HealthKit and remains on your device.
• Local Storage Only: Shoe data, workout references, and app preferences are stored locally on your device using SwiftData.
• No App Analytics: The app does not use analytics, tracking, or data collection services.

Data Handling

• Device-Only Processing: All calculations, mileage tracking, and data processing occur on your device.
• Private iCloud Sync: If you have iCloud enabled, your shoe data syncs across your devices using CloudKit's private database. Only you can access your data. We (CodeCraftedApps) cannot read, access, or view your synced data.
• No Third-Party Sharing: We do not share, sell, or transmit your data to any third parties.
• No Advertising: We do not use your data for advertising purposes.

Data Stored on Your Device

StrideTrack stores the following data locally on your device using SwiftData:

• Shoe information (brand, model, size, colorway, mileage thresholds, photos)
• Workout references (date, distance, duration, sport type, source app)
• Shoe notes, ratings, and retirement history
• App preferences and settings

This data is stored in your app's private container and is not accessible to other apps.

iCloud Sync

If you have iCloud enabled, StrideTrack syncs your shoe data across your devices using CloudKit's private database. This means:

• Only you can access your data
• Data is encrypted in transit and at rest by Apple
• We (CodeCraftedApps) cannot read, access, or view your data
• You can disable iCloud sync at any time in iOS Settings

HealthKit Permissions

• Read Access: The app requests read access to workout sessions, distance, heart rate, and running metrics from HealthKit.
• User Control: You can revoke HealthKit permissions at any time in iOS Settings > Health > Data Access > StrideTrack.
• Specific Data Types: We access workout sessions, walking/running distance, heart rate, and running metrics (cadence, pace, stride length).
• On-Device Only: HealthKit data is accessed on-device only. It is never sent to any server, API, or third party.

Notifications

StrideTrack may request permission to send local notifications for shoe mileage warnings, replacement reminders, and unassigned workout alerts. All notifications are generated locally on your device.

Photos

StrideTrack may request access to your photo library or camera so you can attach photos to your shoes. Photos are stored locally on your device and synced via your private iCloud container. They are never sent to external servers.

Face ID / Touch ID

StrideTrack uses biometric authentication (Face ID or Touch ID) to verify your identity before erasing all app data. Biometric data is handled entirely by iOS and is never accessed by the app.

Data Retention

All app data — including your shoe information, workout references, and preferences — is stored locally on your device and optionally in your private iCloud container for as long as the app is installed. We do not retain any data on external servers. When you uninstall StrideTrack, all local app data is permanently deleted from your device. iCloud data can be managed through iOS Settings > iCloud.

Your Rights and Data Deletion

• Data Access: You can view all your data within the app at any time.
• Data Deletion: Because all data is stored locally on your device, you can delete all app data at any time by uninstalling the app or using the in-app "Erase All Data" option in Settings. You may also email us at [email protected] with the subject line "Data Deletion Request" to confirm deletion or ask for assistance.
• Permission Control: You control all HealthKit, notification, photo, and camera permissions through iOS Settings.
• No Account Required: No user account or registration is required.

Consent and Revocation

By using StrideTrack, you consent to this privacy policy and our data handling practices as described above. You can revoke your consent at any time by:

• Revoking HealthKit access: Go to iOS Settings > Health > Data Access & Devices > StrideTrack, and disable any or all data types.
• Revoking photo/camera access: Go to iOS Settings > StrideTrack and disable Photos or Camera access.
• Uninstalling the app: This permanently removes all local app data from your device.

Revoking HealthKit access will prevent the app from reading new workout data but will not delete data already stored locally. To fully remove all data, use the in-app erase option or uninstall the app.

Security

• iOS Security: Your data is protected by iOS security features including device encryption.
• No Network Transmission: Health data is never transmitted over networks (except to your own private iCloud).
• Local Encryption: App data uses iOS encryption standards.
• No Backend Servers: No servers to compromise or hack.
• No External Dependencies: The app uses only Apple frameworks with zero third-party SDKs.

Encryption

StrideTrack does not implement any custom encryption. The app relies solely on Apple's built-in encryption for HTTPS/TLS (used by CloudKit for iCloud sync) and iOS device encryption. The app qualifies for the encryption exemption under U.S. export regulations (EAR) as it uses only standard operating system encryption.

Children's Privacy

StrideTrack does not knowingly collect personal information from children under 13. The app reads health data from HealthKit locally and does not transmit any data off the device.

Website Data

This website (stridetrack.codecraftedapps.com) is a static site hosted on GitHub Pages. While the StrideTrack app collects no data, this website uses the following third-party services:

• Google Analytics (GA4): We use Google Analytics 4 to collect anonymized website usage data such as page views, session duration, traffic sources, and general geographic region. GA4 sets first-party cookies (_ga and _ga_*) to distinguish unique visitors. IP addresses are anonymized by default. You can opt out using the Google Analytics Opt-out Browser Add-on. See Google's Privacy Policy and How Google Uses Data for details
• GitHub Pages may collect standard server logs (IP address, browser type, pages visited) as part of hosting. See GitHub's Privacy Statement for details
• Google Fonts are loaded from Google's CDN, which may involve Google collecting basic connection data. See Google's Privacy Policy for details

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.

Contact

If you have questions about this privacy policy, email us at [email protected].