Privacy Policy

Effective Date: March 27, 2026

At VertHurt, we take your privacy seriously. This Privacy Policy explains what information we collect, how we use it, and the choices you have. We’ve written this in plain language so you can actually understand it.

1. Information We Collect

a) Information You Provide

If you choose to create an account, we may collect:

• Name and email address
• Password (stored securely using industry-standard encryption)
• Profile information you choose to add (e.g., fitness goals, preferences)
• Workout and route/course data you upload

b) Information Collected Automatically

When you use the Service, we automatically collect certain information:

• Device information (device type, operating system, browser type)
• Usage data (pages visited, features used, session duration)
• IP address and approximate location (city-level, not precise)
• Cookies and similar tracking technologies (see Section 5)

c) Information from Third Parties

We offer sign-in through Google and Strava using OAuth. When you authenticate through these services, we may receive:

• Your name and email address (Google)
• Your name, profile photo, and activity data you choose to share (Strava)

We only request the minimum permissions needed to provide the Service. You can review and revoke access at any time through your Google account settings or Strava account settings. Your use of these services is governed by their respective privacy policies.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Personalize your experience and deliver relevant content
• Communicate with you about your account, updates, or support requests
• Analyze usage trends to improve our product
• Ensure the security and integrity of the Service
• Comply with legal obligations

Route and course data: We may save anonymized versions of route or course data you upload for the purpose of training our systems and improving the product. This data is stripped of all personally identifiable information and cannot be linked back to you.

3. What We Don’t Do

We do not use your personal workout data for advertising. We do not share your information with data brokers.

4. How We Share Your Information

We only share your information in the following limited circumstances:

• Service providers: We work with trusted third-party companies that help us operate the Service (e.g., hosting, analytics, email delivery). These providers only have access to information needed to perform their services and are contractually obligated to protect your data.
• Legal requirements: We may disclose information if required by law, subpoena, or court order, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• With your consent: We may share information with your explicit permission for purposes not described in this policy.

5. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Essential cookies: Keep you signed in and remember your preferences. These are necessary for the Service to function.
• Analytics cookies: Understand how people use the Service so we can improve it. We use tools like Google Analytics for this purpose.
• Performance cookies: Monitor the performance and reliability of the Service.

You can control cookies through your browser settings. Disabling certain cookies may limit your ability to use some features of the Service.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes.

Anonymized route and course data (which cannot be linked back to you) may be retained indefinitely for product improvement purposes.

7. Data Security

We take reasonable technical and organizational measures to protect your personal information, including encryption of data in transit and at rest, regular security assessments, and access controls. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights & Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a portable, machine-readable format
• Opt-out: Opt out of analytics tracking and non-essential cookies
• Withdraw consent: Where we rely on consent, you may withdraw it at any time

To exercise any of these rights, contact us at support@verthurt.com. We will respond to your request within 30 days.

9. Children’s Privacy

The Service is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If we learn that we have collected personal data from a child, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on the Service and updating the effective date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:

VertHurt
Email: privacy@verthurt.com