Privacy Policy

treadlasso is a personal training dashboard. This policy explains what information the service collects, how it is used, and the choices you have.

Information we collect

• Account information: when you sign in with Google or GitHub, we receive your provider account identifier, verified email address, and basic profile information, such as your name and profile picture when supplied. We store this information to create your account and recognize you when you return.
• Garmin information: if you choose to connect Garmin, we store your Personal API key in encrypted form. Our server decrypts it to retrieve your activities, original activity recordings, GPS routes, training metrics, and health data such as heart rate, sleep, steps, and heart rate variability, as available from Garmin.
• Preferences and technical information: we store your account preferences and changes you make, such as custom place names and activity classifications. The service and its hosting providers may record IP addresses, browser information, request times, and error or security logs as part of operating the service.

Google sign-in and limited use

Google access is limited to your basic profile and email address for authentication and account management. We do not request access to Gmail, Google Drive, Calendar, or other Google account content. We do not receive your Google password or persist Google OAuth access or refresh tokens.

treadlasso's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not sold, used for advertising, or used to train generalized artificial intelligence or machine learning models.

How we use information

We use your information to authenticate you, keep accounts separate, import and analyze the Garmin data you authorize us to access, display your private dashboard, provide activity exports, and maintain and secure the service. Your training and health data is associated with your account and is not displayed in the public demo, which uses synthetic data.

Sharing and service providers

We do not sell your personal information or share it for targeted advertising. Hosting, database, and storage providers process information as needed to run the service. Authorized operators may access information when needed for support, security, or maintenance. We may also disclose information when required by law or to protect users and the service.

Connecting Garmin sends your credential to Garmin to authenticate requests. When weather information is fetched for an outdoor activity, its coordinates and dates are sent to Open-Meteo. When you view maps, your browser requests map resources from OpenStreetMap or CARTO, depending on the site's configuration; these providers receive your IP address and the map areas requested. These third-party services have their own privacy policies.

Cookies and browser storage

We use cookies for sign-in sessions and protection against forged requests. Browser storage remembers display preferences such as theme and distance units. The app does not use advertising cookies or third-party analytics trackers. You can clear cookies and browser storage in your browser settings; doing so may sign you out or reset preferences.

Storage, security, and retention

Account and training information is stored in the service's database and private recording storage. Garmin keys are encrypted at rest, and account access controls restrict access to training data. No method of storage or transmission can guarantee complete security.

We retain account and imported training information while your account is in use or until you request deletion, subject to legal and security needs. Disconnecting Garmin removes the saved key and stops future imports, but keeps data already imported. Revoking Google access does not automatically delete your account or previously stored information. Backup retention may delay complete removal of deleted information.

Your choices and requests

You can download individual activity exports and manage your Garmin connection from your account. You can revoke a Garmin key in Garmin and remove treadlasso's Google access through your Google Account connections. Revoking a sign-in provider may prevent you from signing in unless another provider is connected.

To ask a privacy question or request access, correction, or deletion of your account and stored information, contact the operator using the support email shown on treadlasso's Google sign-in consent screen. We may need to verify that you own the account before fulfilling a request.

Children

The service is not intended for children under 13, or under the minimum age required to consent to data processing where they live. We do not knowingly collect personal information from children below that age.

Changes to this policy

We may update this policy as the service changes. The date above identifies the latest revision. Material changes to how personal information is used will be communicated as required by applicable law.