Privacy Policy for Stride

Last updated: October 31, 2026

Who we are

Stride is made by Code VIA Technologies (“we”, “us”), run by Tom Weiss, an independent developer based in Israel. We are the controller of the personal data described here. Contact details are at the end of this policy.

Data that stays on your device

• Apple Health: Stride reads your steps, active energy and body weight. It uses them to show your progress and to estimate distance and calories. Access is read-only: Stride never writes to Apple Health. These values are never sent to us or anyone else.
• Motion: step counts from your iPhone's motion sensor. These are used on the device, and to calculate a Battle score (see below).
• Location: used while a walk or workout is running, so tracking continues in the background. If route tracking is on, the GPS route is saved in your History on this iPhone. It stays there until you delete that walk or the app. We never send your location or routes off your device.
• Walk history, goals, Companion pace and the Lock Screen and Dynamic Island displays. None of these is synced to iCloud or any other service.

Step Battles (friend and Random)

Battles are optional. The first time you play, the app creates an anonymous Battle identity: a user ID, a device ID and a device secret. They are stored in your iPhone's Keychain, so they survive deleting and reinstalling the app. You can move them to a new phone with a one-time transfer code. No email, password or Apple ID is involved. Our Battle server, stride-battles-api, stores:

• your display name and, if you add one, your profile photo
• your Battle step scores, meaning steps counted since a Battle started, plus each Battle's start, end and sync times and its result. Your daily total and raw Health data are never sent.
• the time zone of a Battle's creator, so Battles end at the right local time
• your Random Battle settings: whether you accept invitations, your weekly Battle goal, and your notification choices
• the push and Live Activity tokens Apple gives your device, so we can notify you about your Battles and keep a Battle's Live Activity up to date
• reports and blocks you make, and reports made about you. If we ban a Battle identity, we keep the date and a short reason with it.
• if you buy Random Battles Pro, the App Store transaction IDs linked to your Battle identity. Apple processes the payment; we never see your payment details.
• one-time transfer codes, stored only in hashed form. They expire after 15 minutes.
• a log of Random Battle events, such as searches, invitations, matches and results, used to run matchmaking and find problems

Who sees it: in a friend Battle, the person you invited sees your name, photo and score. In a Random Battle, a stranger matched with you sees your name, photo and score, and may see your name in a notification inviting them to a Battle. Your photo is shown through a private link that stops working within two days, or as soon as you change or remove the photo. Sometimes the person matched with you is the Stride developer, playing as a normal player.

Usage analytics

Stride sends usage analytics to a telemetry server we operate, and it is on by default. The events are a fixed list: app opened, first launch, a feature used (a name from a list we define, such as starting a walk or viewing the Random Battles upgrade screen), and errors (an error domain and a numeric code). Each event includes a random install ID created on your device, which is not an Apple device identifier, plus your app version, iOS version, device model, language and two-letter country. There are no free-text fields, and analytics never includes Health data, location, Battle scores or your display name.

We don't store IP addresses. An IP address is hashed with a key that changes every day, used only to limit abuse, and then thrown away. Raw events are deleted after 90 days. The install record keeps your device model, country and first and last seen dates, and is deleted 13 months after your install was last seen.

Your choice: from version 1.3.5, in the EU, EEA, UK and Switzerland, Stride asks before sending any analytics, and sends nothing unless you tap Allow. Everywhere else, analytics are on by default. On any version from 1.3.5 onwards you can turn them off in Settings → Privacy → Share Usage Data, which also deletes the analytics already collected from your install. Settings → Privacy → Delete My Analytics Data deletes them without turning analytics off. On earlier versions, email us and we will delete your analytics on request.

Feedback

If you send a message with the in-app Feedback form, your text, app version and iOS version go to our telemetry server. They are stored there and forwarded to our private Slack workspace so that we can read and answer them. Nothing is sent unless you press Send. Feedback stored on our server is deleted after 180 days.

Slack

We use Slack (Slack Technologies, USA) to receive operational alerts. Messages there include: new Random Battle searches and invitation opt-ins, with display name, Battle user ID, account age, Battle and win counts, Pro status, device count, preferences and weekly goal; Random Battle reports, with both users' Battle IDs, the reason and the reported display name; new installs, with device model and country; daily app opens, with a shortened install ID; and feedback messages. Slack never receives Health data, location or Battle scores.

Service providers and transfers

• Railway: hosts our Battle and telemetry servers and databases.
• Slack: internal alerts, as described above (United States).
• Apple: push notifications, Live Activities and App Store purchases.
• GitHub Pages: hosts this website.

Some of these providers are in the United States. Where EU or UK data protection law applies, transfers rely on the providers' Standard Contractual Clauses or the EU–US Data Privacy Framework.

Why we use your data (legal bases)

• To run Battles you join, including matching, scores, notifications and Pro access: to provide the service you asked for (contract).
• To keep Battles safe, including reports, blocks, moderation and abuse limits: our legitimate interest in a safe service, and in protecting other users.
• Analytics and operational alerts: outside the EU, EEA, UK and Switzerland, our legitimate interest in understanding how the app is used and fixing problems. You can turn analytics off in Settings at any time.
• Notifications and photos: your choice. You can turn notifications off in iOS Settings and remove your photo at any time.
• Battle step scores: some laws may treat step counts as health data. We only share your Battle score with an opponent after you choose to take part: when you create or accept a friend Battle, or when you tap “I'm old enough and agree” before your first Random Battle, which tells you that strangers see your score. That is your explicit consent. You can withdraw it at any time by not starting new Battles and deleting your Battle profile. Your daily Health totals are never sent.
• Usage analytics in the EU, EEA, UK and Switzerland: your consent, asked for before anything is sent.

How long we keep it

• Battle profile, Battle history, reports and purchase links: until you ask us to delete them. We don't delete old Battles automatically yet.
• Raw analytics events: 90 days. Install records: 13 months after your install was last seen. Feedback messages: 180 days.
• Slack messages: as long as our Slack workspace keeps them.
• Encrypted database backups are kept for 35 days, so deleted data can remain in a backup until it expires.

Deleting your data

From version 1.3.5, you can delete your Battle profile in the app: Settings → your Battle profile → Delete Battle Profile. This deletes your name, photo, scores, settings, tokens, transfer codes and the reports you filed. Past Battles stay in your opponents' history without your name or photo, and you can't use the deleted identity again. You can also remove just your photo there. On older versions, or if anything is left over, email us and we will finish the deletion and confirm when it's done. Deleting the app does not delete your Battle profile, because the identity stays in your Keychain.

Your rights

Depending on where you live, you can ask us to access, correct, delete or export your data, to restrict how we use it, or to stop using it. You can also object to analytics. Email us and we will answer within one month. We may ask you to confirm the request comes from you, for example with a screenshot of your Battle profile, because we hold no email or account details for you. You can complain to your data protection authority. In the EU, that is the authority in your country. In the UK, it is the ICO. In Israel, it is the Privacy Protection Authority. California residents have the right to know, delete and correct their data, and won't be treated differently for using these rights. We do not sell or “share” personal information, as those words are defined in the CCPA, and we don't use it for targeted advertising.

Security

All connections use HTTPS. Device secrets and transfer codes are stored only as hashes, and your Battle credentials are kept in the iOS Keychain. No system is perfectly secure. If a breach affects you, we will tell you and the relevant authorities as the law requires.

Children

Stride is not directed at children under 13. Random Battles, which connect you with people you don't know, are for users aged 13 and over, and 16 and over in the EU and UK. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

We will update this policy before we release any change to the data we collect, and we will change the date at the top. For significant changes, we will also tell you in the app.