Privacy Policy

This Privacy Policy describes how Finisher Wall (“we”, “us”, or “our”) handles information when you use the Finisher Wall mobile application (the “App”). Our goal is simple: collect as little as possible, keep it secure, and let you delete it whenever you want.

1. Information we collect

Account information

When you create an account or sign in, we receive an account identifier from your chosen sign-in provider (Apple, Google, Strava, or email and password). Depending on the provider, this may include your email address and display name. We do not receive your password.

Strava sign-in information

If you choose to connect or sign in with Strava, we receive the Strava athlete identifier and basic profile information needed to create or connect your Finisher Wall account. We request Strava's basic read permission for sign-in. We do not request activity permissions for this sign-in feature.

Strava activity import data

Finisher Wall allows you to optionally connect your Strava account through Strava OAuth for activity import. If you connect Strava for import, we may access activity data authorized by you, such as activity name, sport type, date, distance, elapsed time, race tag status, and related activity metadata, solely to let you review and import activities into your own Finisher Wall account.

Strava activity archive data is displayed only to the authenticated user who connected the Strava account. When you choose to save an imported activity, Finisher Wall stores the resulting race entry in your account. Raw Strava activity archive data is cached only temporarily, for up to three days, to make the import experience faster and is not retained as a permanent Strava data archive.

Profile information you choose to add

You may optionally enter profile details such as your name, country, and a profile photo. These are stored only because you entered them.

Race history and medal photos

When you add a race, the details you provide (such as race name, date, distance, finish time, location) and any medal photo you attach are stored as part of your account so they can be synced to your other devices.

Technical information

Standard technical signals required to deliver the service may be processed by our infrastructure provider (such as approximate request metadata and crash diagnostics). We may use Firebase/Google Analytics in the App and on our website to understand basic product usage, such as sign-in, import, wall publishing, and account-deletion events. These analytics events do not include Strava activity details, race names, finish times, locations, notes, medal photos, or other Strava Data. We do not use analytics for advertising targeting.

2. How we use information

• To create and operate your account.
• To store and sync your race history and medal photos across your devices.
• To let you review and import Strava activities that you authorize.
• To keep the service secure and prevent abuse.
• To respond to support and account-related requests.

We do not sell your personal information. We do not use your content for advertising.

We do not use Strava Data for AI model training, machine learning, fine-tuning, embeddings, retrieval-augmented generation, analytics, advertising targeting, customer insight generation, or product improvement.

3. How information is stored

Account, profile, race and medal data is stored using Google Firebase (Firebase Authentication and Cloud Firestore). Medal images are compressed on your device before sync to keep them lightweight and to reduce storage and bandwidth.

For faster relaunches, the App also keeps a local copy of your data on your device using on-device storage. Removing the App removes that local copy.

4. Sharing

We do not share your personal information with third parties except:

• With our infrastructure provider (Google Firebase) strictly to operate the service.
• With Strava only as needed to operate the Strava OAuth and API integration that you authorize, including sign-in, requests to list activities for import, and requests to disconnect or revoke your Strava account connection.
• When required by law, legal process, or to protect rights and safety.

We do not sell, share, disclose, or transfer Strava Data to other users, advertisers, data brokers, AI providers, model developers, or other third parties. Strava may monitor and collect API usage data for its own business purposes, including developer support, compliance, security, and improvements to the Strava API or platform.

When you choose to share a medal or profile card from inside the App (for example to Instagram Stories), the share happens through your device’s native share sheet. We do not see or store what you share.

5. Your choices

• You can edit your profile and race entries at any time.
• You can sign out at any time.
• If you connected Strava, you can revoke Finisher Wall's access from your Strava account settings. Deleting your Finisher Wall account also removes the Strava connection data we store.
• You can disconnect Strava at any time from Settings in the App. You may also request deletion of Strava-related data by emailing finisherwall@gmail.com. Upon request, revocation of Strava authorization, or account deletion, we will delete Strava Data and Personal Data derived from Strava Data in accordance with the Strava API Policy and confirm deletion where required.
• You can permanently delete your account and synced data from inside the App (Settings → Delete Account), or by following the instructions on our Delete Account page.

6. Children

Finisher Wall is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us so we can delete it.

7. International users

Data is processed by Google Firebase, which may store and process data in regions outside your own. By using the App you consent to that processing.

8. Security

We rely on industry-standard security provided by Google Firebase, including encryption in transit and at rest, and access rules that restrict each user’s data to that user’s own account. No system is perfectly secure, so we encourage you to use a strong, unique password and a trusted sign-in provider.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of the App after changes means you accept the updated policy.

10. Contact

Questions about this Privacy Policy or your data? Email us at finisherwall@gmail.com.