Trail & Ultra Race Planner — Privacy Policy

Last updated: September 21, 2026

Will to Run Coaching LLC ("we", "us") is committed to protecting your privacy. This policy explains what information the Trail & Ultra Race Planner iPhone app and the web app at app.willtorun.com (together, the "Service") collect, how we use it, and the choices you have. We do not sell your personal information, we do not show ads, and we do not track you across other companies' apps or websites.

1. Information we collect

Account information

• Email address and password. Your password is stored only as a one-way cryptographic hash, so we can't see it.
• Optional first and last name, shown to people you share a race plan with instead of your email.
• Your role (athlete or coach), unit preference, email preferences, and the dates you accepted our legal documents.

Strava data, if you connect Strava

• Activity summaries: date, distance, duration, pace, heart rate, power, cadence and elevation.
• GPS route data: latitude, longitude and altitude for each recorded point.
• Activity details such as name, type, gear and device.
• We access Strava through its API with read-only permission and keep the access tokens needed to sync your activities.

Files and plans you add

• Course and run files you upload (such as GPX and FIT files), the race plans you build, aid station and crew points, and your nutrition selections.

Information we generate

• Terrain classification for your routes, terrain-adjusted metrics (TerraPace, TerraPower, TerraScore), race predictions, splits and course analysis.

Subscription information

• Whether your subscription is active, and whether you subscribed through Stripe (web) or Apple (iPhone). We keep the identifiers that link your account to Stripe or to Apple's in-app purchase system. We never receive your full card number or Apple payment details.

Usage and technical information

• The times you log in and periodic activity signals while the app is open, which we use to understand how the Service is used. We use our own systems for this, not a third-party analytics service.
• Your IP address, for rate limiting and security. We don't keep it long term.
• Browser or device type, and, from uploaded FIT files, the watch manufacturer and model.
• Error and performance diagnostics, which help us fix problems.

What we don't collect
The iPhone app does not ask for or use your device's location, contacts, photos or advertising identifier. GPS data in the Service comes only from your Strava account or files you upload.

2. How we use your information

• To provide the Service, including analyzing your activities, predicting finish times and building splits and nutrition plans.
• To process your subscription and give you access to paid features.
• To send account emails (verification, password reset, invitations) and, unless you turn it off, a daily digest email.
• To generate optional AI coaching insights from a summary of your training.
• To keep the Service secure, prevent abuse and fix errors.
• To improve our algorithms using aggregated data that doesn't identify you.

3. Who we share information with

We share information only with the service providers below, and only what each needs to do its job. They are bound by their own privacy and security commitments.

Provider	Purpose	What it receives
Railway	Hosting and database (United States)	All Service data, stored on our behalf
Strava	Source of your activity data	Your authorization; we read data from it and send nothing back
Stripe	Web subscription payments	Your email and payment details, which you enter with Stripe
Apple and RevenueCat	iPhone in-app subscriptions	Your account ID and purchase and subscription status
Resend	Email delivery	Your email address and the content of emails we send you
Anthropic	Optional AI coaching insights (limited beta)	A text summary of your training statistics (totals, trends and notable workouts). It does not include raw GPS tracks, your name or your email.
Sentry	Error tracking	Technical error details
OpenStreetMap (Overpass API), elevation data services and public elevation datasets on Amazon Web Services	Identifying terrain and elevation along a course	Course coordinates, without your name, email or account ID
Google Fonts and Cloudflare cdnjs	Loading fonts and code libraries	Your IP address and browser details, as with any web request

We also share information:

• With people you choose. When you invite a coach, crew member or pacer, they can see the race plans and, for coaches, the dashboard access you grant.
• When the law requires it, such as a valid court order or legal process.
• In aggregate. We may share statistics that cannot identify you.

4. Where your information is stored

Your data is stored in the United States. If you use the Service from another country, you understand your information will be transferred to and processed in the United States.

5. How long we keep it

We keep your information while your account is active. Disconnecting Strava stops new data from syncing and revokes our access on Strava, but doesn't delete data already synced. To have it removed, delete your account. When you delete your account in the app, your account and data are removed immediately. If you ask us to delete it by email instead, we do so within 30 days. Payment records are also held by Stripe and Apple under their own policies and legal obligations.

6. Your choices and rights

• Access and correction. View your data in the Service, and update your name, email and password in Account Settings.
• Disconnect Strava at any time in Account Settings.
• Email preferences. Turn the daily digest off in Account Settings or with the unsubscribe link in any digest.
• Delete your account and data. Use Account Settings › Delete Account in the app or on the web. This also cancels a web subscription. If you subscribed through Apple, cancel in iPhone Settings, since we can't cancel Apple subscriptions for you. If you can't sign in, email support@willtorun.com from the address on your account.

Depending on where you live, you may have additional rights, such as to receive a copy of your data or to object to certain processing. To exercise any right, contact us using the address below.

7. Security

We protect your information with industry-standard measures, including salted one-way password hashing, encryption of data in transit over HTTPS, protection against cross-site request forgery, rate limiting on sign-in attempts, and server-side session management. No system is completely secure, so we can't guarantee absolute security.

8. Cookies and local storage

We use a session cookie to keep you signed in. Your browser or the app also keeps local storage to cache your activity data for faster loading, save dashboard preferences and remember that you've dismissed the Getting Started guide. We don't use third-party advertising or tracking cookies.

9. Children

The Service is for people 18 and older. We don't knowingly collect information from anyone under 18. If you believe a child has given us information, contact us and we'll delete it.

10. Changes to this policy

We may update this policy from time to time. If we make a material change we'll notify you by email or in the Service. The date at the top shows when it was last updated.

11. Contact us

Questions about this policy or your information: support@willtorun.com