Privacy Policy

VOY has two kinds of people: runners, who create an account and stream a run from the mobile app, and viewers, who open a public share link to watch. Viewers do not need an account.

Account information (runners). Your name, email address, and a securely hashed password. If you sign in with Google, we receive your name, email, and profile photo from Google.

Run data. While you are tracking a run, we collect GPS location, heart rate, pace, distance, elevation, and timestamps sent from your phone and watch. This data is stored so viewers can watch live and so you can review the run later.

Viewer interactions. If a viewer leaves a comment or reaction, we store the message, the display name and emoji they choose, and the time it was sent. Viewers can enter any display name; we do not require it to be their real name.

Connected services (optional). If you connect Strava, we store tokens and basic profile/route data needed to import your routes. If you connect Spotify, we store tokens and your currently playing track so it can appear on your live run. You can disconnect either at any time from Connections.

Preferences. Settings you choose, such as distance units, theme, and your notification preferences.

Technical data. Basic information needed to operate and protect the service, such as IP address and device/browser information. We use your IP address on a short-term basis for rate limiting and abuse prevention (for example, to stop spam and protect our email sending).

We use this information to run the service: to stream your run live, to generate a shareable link, to show your run history and statistics, to let viewers cheer and comment, and to keep your account secure.

Email and notifications. We send account and security emails you can't opt out of while you have an account — for example, password-reset codes. We also send optional notifications (by email and, if you use the mobile app, push) when your run gets cheers or comments, or when a run finishes. You control these under Settings → Notifications, and every notification email links to those controls.

Anyone who has your run's share link can view that run — its live map, route, pace, and heart rate — without logging in. A share link is effectively public. Only share it with people you want to watch, and end your run when you are finished. You control when a run starts and stops from the mobile app.

We do not sell your personal information, and we do not use your run data for advertising.

We rely on a small number of providers to operate VOY, and share only the data needed for each to do its job:

Vercel (application hosting), MongoDB Atlas (database hosting), Mapbox (map rendering), Pusher (real-time delivery of live updates), Twilio SendGrid (transactional and notification email), and, when you choose to use them, Google (optional sign-in), Strava (route import), Spotify (now-playing), and Expo (mobile push notifications). Each provider processes data under its own terms and security controls. We share only the data each needs to do its job, and we do not sell your personal information.

We keep your account and run history until you delete them. You can delete individual runs or your entire account; deleting your account removes your profile and associated runs from our database. Backups made by our infrastructure providers may persist for a limited period.

Passwords are stored only as bcrypt hashes — never in plain text. Connections use TLS. No system is perfectly secure, but we take reasonable measures to protect your information.

Access and portability. You can download a copy of your personal data — profile, runs, GPS tracks, comments, and preferences — as a JSON file from Settings → Your data (“Download my data”).

Update and control. You can view and edit your profile, change your notification preferences, manage connected services, and set your units and theme in Settings.

Deletion. You can delete individual runs, or delete your entire account (Settings → Delete account), which removes your profile, runs, GPS tracks, photos, comments, reactions, saved routes, and connections from our database.

Depending on where you live, you may have additional rights to access, correct, delete, or restrict the use of your personal data. Contact us at the address below to make a request.

We use a small number of cookies that are necessary for the service to work: a session cookie to keep you signed in, and cookies that remember preferences such as your distance units and theme. We do not use third-party advertising or cross-site tracking cookies. Viewers watching a public run do not need to sign in and are not required to accept any non-essential cookies.

Some runs shown in Explore are simulated demonstrations generated by VOY (for example, marathon events) rather than real people. These are clearly part of the product experience and are not associated with any real individual's personal data.

We aim to meet the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA and to keep VOY usable with a keyboard and with assistive technologies. Accessibility is ongoing work; if you encounter a barrier, please contact us and we'll do our best to help and to fix it.

VOY is not directed to children under 13, and we do not knowingly collect personal information from them.

We may update this policy from time to time. When we do, we will revise the "Last updated" date above.

Questions about privacy, or want to access or delete your data? Use our contact form. See also our Terms of Service.