Privacy
Trailbound privacy notice
Version 2026-09-07 · Trailbound notice
What Trailbound stores
Trailbound stores account and team membership, onboarding preferences, daily activity check-ins, historical workout outcomes, recovery check-ins, daily nutrition check-ins, optional weight, safety state, consent, visibility preferences, and limited operational records. Email/password accounts store a one-way password hash, verification status, and revocable sessions—never the password itself. Resend receives the account email only to deliver verification, reset, or team invitation messages. Exact activity measurements, health, weight entries, protein targets, nutrition answers, notes, restrictions, connection tokens, and a connected provider’s current-weight suggestion are encrypted and owner-only. Imported performance summaries are also owner-only.
What teammates can see
Teammates and the captain see only the audited team projection: broad activity categories and active-day counts, privacy-thresholded group nutrition totals, check-in cadence, and signals you explicitly elect to share. They do not receive your exact private values or safety reason.
Offline storage
An installed app may store your limited seven-day activity summary on this device. Team pages, routes, exact activity measurements, weight, recovery values, nutrition answers, and private notes are excluded. Private caches are cleared on sign-out, identity change, and account deletion.
Optional Strava connection
If you connect Strava, Trailbound receives a read-only summary of your eligible activities from the preceding 30 days and later changes that Strava reports. Stored summaries may include the activity name and type, date, duration, distance, elevation gain, and visibility. Trailbound does not store Strava GPS routes, heart-rate values, or detailed activity streams.
With profile permission, Trailbound may also read the current body weight recorded by Strava. That value is not added to your Trailbound weight history unless you explicitly confirm it. Imported activities remain private until you review and save a daily check-in. Saving can add the activity category to your team feed; exact measurements stay private. Disconnecting Strava revokes access and removes its imported summaries from Trailbound.
Optional Google Health connection
If you connect Google Health, Trailbound requests read-only access to weight measurements only. It can import up to one year of measurements, including the measurement time and the originating device or platform label. Trailbound does not request activity, sleep, location, or other health scopes through this connection. Exact weights and OAuth tokens are encrypted and owner-only. Disconnecting revokes future access; measurements already copied into your private Trailbound history remain until you delete them or your account.
Google API data use
Trailbound uses information received from Google APIs only to provide the features you request. For Google Health, this means displaying your private weight history and calculating your private weight trend. The app does not use Google user data for advertising, does not sell it, and does not allow teammates to see exact measurements.
Google Health data is processed by Trailbound's hosting and encrypted storage providers only as needed to operate the service. It is not transferred to data brokers or unrelated third parties. You can revoke Trailbound's Google access from Settings or from your Google Account. Trailbound's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Exports, deletion, and retention
You can download a direct archive containing personal records and a separately labeled team-safe snapshot. Trailbound does not retain the archive. Account deletion immediately disables access, revokes supported connections, removes active personal data, and removes your team projection. Non-identifying completion records may be retained for security and accountability; recoverable backup copies are targeted to expire within 30 days.
Data promises
Trailbound does not sell fitness or health data. The beta uses minimal operational logging and no third-party behavioral analytics or session replay.
Profile photos and AI crew videos
When an adult teammate adds a profile photo, Trailbound may use that photo to create a short AI-generated crew video for the team’s race journey. Trailbound may securely send up to three adult teammates’ profile photos, first names, known race facts, and the team’s broad journey stage to Google Gemini. Gemini generates a short video with synthetic likeness, motion, and audio; the result may not perfectly match the featured teammates.
Generated crew videos are stored privately and are available only to authenticated members of that team. Replacing or removing a profile photo, or deleting an account, removes any saved team video that used that photo.