Privacy Policy

Effective August 28, 2026

Who we are

Milepost Athletics ("Milepost," "we," "us") is a coaching platform for runners, operated by Miles Victors. This policy explains what information we collect through the Milepost Athletics app and website, why we collect it, and the choices you have.

Information we collect

Account information. Your name, email address, and password (stored securely by our authentication provider — we never see or store your password in plain text).

Training and health-adjacent information you provide. Your intake answers (experience level, goals, recent race history), goal race and distance, self-reported perceived effort and wellness check-ins, and anything you write in messages to your coach or your training group.

Strava data, if you connect your account. Connecting Strava is entirely optional. If you connect it, we receive activity data for your runs — type, distance, duration, pace, heart rate, cadence, power, and elevation — plus a smoothed time-series stream of those same metrics for the Activity Detail charts. We deliberately do not request or store your GPS route (latitude/longitude) from Strava. Strava data is used only to power your own coaching experience: auto-completing scheduled workouts, your training charts, and your fitness metrics. It is never sold, never shared with advertisers, and — per Strava's own developer policy — never fed into any AI or machine-learning feature of this app (see below). You can disconnect Strava at any time from Settings, which stops future syncing; see "Data retention and deletion" below for what happens to data already synced.

Photos. If you upload a profile photo, we store it in a private file storage bucket and only ever share it with people you're actually visible to (your coach, and — if you're in one — members of your training group).

Payment information. Subscription and purchase payments are processed by Stripe. We never receive or store your full card number — only what Stripe tells us (e.g., subscription status, plan, and renewal date) to manage your access.

Basic technical information. Standard web request data (like IP address and browser type) collected automatically by our hosting provider for security and abuse prevention. We do not use third-party advertising trackers or sell any data to data brokers.

How we use your information

We use your information to: build and adapt your training plan; calculate your adherence, points, streaks, and badges; let your coach review your progress and adjust your plan; enable messaging between you, your coach, and your training group; process payments and manage your subscription; send transactional emails (confirmations, coach alerts, password resets); and improve the reliability and usability of the app.

Our Coach AI Assistant is a feature that helps your coach review your progress and draft recommendations. It only ever reads non-Strava-derived information — your intake and onboarding answers, your prescribed (not actual) plan, coach notes, and coach↔athlete messages. Strava-sourced data (or anything computed from it) is never sent to this or any AI feature, full stop — this is a hard technical rule in how the app is built, not just a policy statement.

How we share your information

We share information only with the service providers that make the app work — our database and authentication provider (Supabase), our payment processor (Stripe), our hosting provider (Vercel), our transactional email provider (Resend), and Strava (if you connect it, for syncing your own activities back to you). Your coach can see your training data, messages, and progress as part of coaching you. If you're in a training group, fellow group members can see your display name, avatar, About Me, goal summary, total points, and badges — never your individual workout schedule or raw Strava metrics. We do not sell your personal information, and we do not share it with advertisers.

Data retention and deletion

We keep your information for as long as your account is active, so your training history and progress stay intact. If you disconnect Strava, we stop syncing new activities, but activities already synced remain (they're now part of your training history). If you'd like your account and associated data deleted entirely, contact us at the email below and we'll process that request.

Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal information, or to receive a copy of it. You can update most of your own information directly in Settings; for anything else, contact us and we'll help.

Children's privacy

Milepost Athletics is not directed at, and is not intended for use by, anyone under 18. We do not knowingly collect information from children.

Security

We use industry-standard practices to protect your information: encrypted storage for sensitive tokens, row-level database security so your data is only ever visible to you (and, where you've agreed to it, your coach or group), and private file storage for photos. No system is perfectly secure, but we take this seriously.

Changes to this policy

If we make material changes to this policy, we'll update the effective date above and, where appropriate, let you know directly.

Contact us

Questions about this policy or your data? Email us at privacy@milepostathletics.com.

See also our Terms of Service.