Privacy Policy

Beta version 2026-11-beta-1

Outpost helps runners and their crews plan backyard ultras. This page explains what we collect, why, who sees it, and how you stay in control. We've tried to keep it plain.

What we collect

• Account: your email address, a password (stored only as a hash by our authentication provider), or your Google account identifier if you sign in with Google, and the display name you choose.
• What you enter: race details, gear lists (including any photos you add), crew names and shift schedules, notes, nutrition products, pacing plans, and documents you upload for a race — a course GPX file, for instance, includes GPS coordinates of the route itself.
• During a race: loop times, how you felt, any notes you leave on a loop, what you ate or drank, and which gear is charged, worn, or with the crew.
• Push notifications: if you turn alerts on, we store the push subscription your browser gives us (an address and keys) and a short device label, so we can send you a notification — nothing else is tied to it, and turning alerts off removes it. Notifications are delivered through your browser's own push service (for example Google, Apple, or Mozilla), the same as any website's notifications; we never see or need your phone number.
• Invite requests: if you ask for an invite on our website, we keep your email, how you'd use Outpost, and anything you add (a race, a date, a note) so we can reply. We email a notification with those details to our team through our email provider (Resend), use it for nothing else, and will delete it if you ask.
• Consent record: the invite code you used and when you accepted these terms.
• Technical data: IP address and request logs kept by our hosting and database providers for security and reliability.

Information about how you felt, any notes you leave on a loop, and what you consumed during a race can reveal health-related details. We treat all of it as sensitive: it's visible only to you, the crew you add to that race, and anyone you choose to give a share link, and we never use it for advertising or sell it.

Crew and other people

When you add a crew member by name, you're entering information about another person. Please only add what they'd be comfortable with, and don't enter their contact details or health information. We don't collect crew phone numbers or emails through the planner.

Who can see your data

• You.
• Crew you invite to a race with an account can view that race's plan and log entries. You can remove them at any time.
• Anyone with a share link you create sees a trimmed, read-only version of the plan — pacing, crew schedule, course map with an estimated live position, and crew notes — plus lessons carried over from a past race if you've chosen to share them. It never includes weather, other uploaded documents, or crew identities beyond the names you've entered. You can revoke a link at any time.
• A tracking link, if you add one, opens the runner's own GPS watch service (like Garmin or COROS) for anyone who clicks it. Once there, you're under that service's privacy policy, not ours.
• The Outpost team can technically open the data we store. We only do that when it's needed to help you or fix something, for example if you ask for support or something breaks, and never just to browse.
• Our service providers, only as needed to run Outpost (below).

We don't sell your data and we don't run third-party advertising or tracking.

Service providers

• Supabase — database, authentication, file storage, and email delivery.
• Our web hosting provider — serves the app.
• Google — only if you choose “Continue with Google”.
• OpenStreetMap, and Stadia Maps once configured — load a route map's tiles; viewing one sends your IP address to whichever is active, the same as any site with an embedded map.

Cookies

We use only the cookies needed to keep you signed in. No analytics or advertising cookies. Fonts are served from our own domain rather than a third party.

Your choices

• Download your data as a JSON file from Settings.
• Delete your account from Settings. This permanently deletes your profile and every race you own, which also removes those races for any crew you shared them with. Backups age out on our providers' normal rotation.
• Correct anything you've entered by editing it in the app.

Retention

We keep your data until you delete it or your account. Unused accounts may be removed at the end of the beta, with notice.

Children

Outpost is for people 16 and older.

Changes

If this policy changes in a meaningful way, we'll ask you to review and accept it again next time you sign in.

Contact

Questions or requests: hello@runoutpost.app.