Privacy Policy

VOY has two kinds of people: runners, who create an account and stream a run from the mobile app, and viewers, who open a public share link to watch. Viewers do not need an account.

Account information (runners). Your name, email address, and a securely hashed password. If you sign in with Google, we receive your name, email, and profile photo from Google.

Run data. While you are tracking a run, we collect GPS location, heart rate, pace, distance, elevation, and timestamps sent from your phone and watch. This data is stored so viewers can watch live and so you can review the run later.

Viewer interactions. If a viewer leaves a comment or reaction, we store the message, the display name and emoji they choose, and the time it was sent. Viewers can enter any display name; we do not require it to be their real name.

Technical data. Basic information needed to operate the service, such as IP address and device/browser information handled by our infrastructure providers.

We use this information to run the service: to stream your run live, to generate a shareable link, to show your run history and statistics, to let viewers cheer and comment, and to keep your account secure.

Anyone who has your run's share link can view that run — its live map, route, pace, and heart rate — without logging in. A share link is effectively public. Only share it with people you want to watch, and end your run when you are finished. You control when a run starts and stops from the mobile app.

We do not sell your personal information, and we do not use your run data for advertising.

We rely on a small number of providers to operate VOY, and share only the data needed for each to do its job:

MongoDB Atlas (database hosting), Mapbox (map rendering), Pusher (real-time delivery of live updates), and Google (optional sign-in). Each provider processes data under its own terms and security controls.

We keep your account and run history until you delete them. You can delete individual runs or your entire account; deleting your account removes your profile and associated runs from our database. Backups made by our infrastructure providers may persist for a limited period.

Passwords are stored only as bcrypt hashes — never in plain text. Connections use TLS. No system is perfectly secure, but we take reasonable measures to protect your information.

You can view and update your profile in Settings, delete runs, and delete your account. Depending on where you live, you may have rights to access, correct, or delete your personal data; contact us to make a request.

VOY is not directed to children under 13, and we do not knowingly collect personal information from them.

We may update this policy from time to time. When we do, we will revise the "Last updated" date above.

Questions about privacy? Email privacy@voy.app. See also our Terms of Service.