Privacy Policy

Last updated: 11 May 2026 · Effective: 11 May 2026

This Privacy Policy explains how Milestride ("we", "us", "the App") collects, uses, stores and protects your personal data when you use our mobile application. By using Milestride you agree to the practices described in this Policy.

1. Who we are

Milestride is published by Sarayut Siriwi, an independent developer based in Thailand. You can reach us at [email protected].

2. Data we collect

We do not collect: contacts, calendar (unless you grant permission to add training schedule), browsing history, or financial information beyond what Apple / Google handle for in-app purchases.

3. How we use your data

• To provide core features (recording, syncing, statistics)
• To deliver personalised AI Coach responses (premium feature)
• To compute personal records, segment efforts and challenges
• To process Milestride+ subscriptions via Apple / Google
• To diagnose crashes and improve reliability
• To send opt-in notifications (workout reminders, kudos, weekly digest)

4. Third-party services we use

5. Tracking & advertising

We do not use third-party advertising, do not share your data with advertisers, and do not track you across other apps or websites. The App does not request App Tracking Transparency permission because we don't track.

6. Data retention & deletion

We keep your data for as long as your account is active. You can delete your account at any time:

1. Open the App → Settings
2. Tap Account → Delete Account
3. Confirm the prompt

All personal data is deleted within 30 days. Aggregated, anonymised statistics may be retained for product analytics.

7. Your rights (GDPR / PDPA)

Subject to your local law you have the right to:

• Access the data we hold about you
• Correct inaccurate data (via Settings → Edit Profile)
• Delete your account and data (Settings → Delete Account)
• Export your activities as GPX (Activity → Share → Export GPX)
• Withdraw consent for optional permissions in your OS settings
• Lodge a complaint with your data protection authority (in Thailand: PDPC)

8. Children

Milestride is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect data from children. If you believe a child has registered an account, please contact us and we will delete the account.

9. Security

Data in transit is encrypted with TLS. Database access is restricted by row-level security policies. Passwords are never stored in plaintext. However no system is perfectly secure — please use a strong password and avoid sharing your account.

10. International transfers

Your data may be processed in Singapore (Supabase), the United States (Sentry, PostHog, RevenueCat, OpenRouter / Anthropic), or other regions where our service providers operate. Standard contractual clauses apply where required.

11. Changes to this Policy

We may update this Policy from time to time. Material changes will be surfaced in-app and via email. Continued use after a change constitutes acceptance.

12. Contact

Questions or requests: [email protected]