Privacy Policy
Last updated September 24, 2026
Mile Club ("Mile Club", "we", "us") provides a running shoe rotation and mileage tracking service. This policy explains what we collect, why we collect it, and the control you have over your data.
1. Information we collect
- Account data. Your email address and, if you sign in with Google, your name and avatar URL.
- Gear data. Shoes you add — brand, model, nickname, target lifespan and accumulated mileage — plus any automation rules you configure.
- Activity data from Strava. For each run we import the activity title, distance, average pace, date and Strava activity ID.
- Technical data. Basic logs needed to operate and secure the service.
2. Third-Party Integrations (Strava)
Mile Club connects to Strava using Strava OAuth 2.0. We never see or store your Strava password. With your authorization, we securely pull activity data, including distance, pace, activity title, date, average speed and heart rate where available, solely to calculate shoe lifespan, mileage and efficiency decay.
We do not write, edit or delete anything in your Strava account, and we do not post on your behalf. Access credentials are stored securely and are not exposed in the browser. Users can revoke Strava access at any time through their Strava settings. They can also disconnect Strava from Mile Club's Connections panel.
Data received from Strava is used solely to power your own dashboard. It is not sold, and it is not shared with advertisers or data brokers. Your use of Strava remains governed by Strava's own terms and privacy policy.
3. How we use your data
- To calculate shoe mileage, wear and retirement alerts.
- To run the automation rules you create (keyword and pace based assignment).
- To authenticate you and keep your account secure.
- To diagnose faults and improve the reliability of the service.
We do not use your activity data for automated advertising profiling.
4. Storage, security and retention
Your data is stored in a managed, access-controlled database with row-level security so that each account can only read its own records. Data is encrypted in transit. We retain your data for as long as your account exists, and delete it when you delete your account.
5. Legal basis and international processing
We process account and service data to perform our agreement with you, protect the service, comply with legal obligations, and pursue legitimate interests such as reliability and fraud prevention. Where consent is required, you may withdraw it at any time. Our providers may process data outside your country using appropriate contractual and security safeguards.
6. Your rights and data deletion
Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, and to withdraw consent at any time.
You can permanently delete your account and all associated data — shoes, activities, automation rules, profile and Strava tokens — from Dashboard → Account → Delete Account. Deletion is immediate and irreversible. You may also email us and we will action a full deletion request.
7. Third-party processors
We rely on a small number of providers to operate the service: Strava (activity import), our cloud database and authentication provider, and Google (optional sign-in). Each processes data only as needed to deliver their part of the service.
8. Cookies and local storage
Mile Club uses essential browser storage and authentication cookies to keep you signed in, remember preferences and support app installation. We do not use your Strava activity data for advertising cookies or cross-site behavioral profiling.
9. Children
Mile Club is not intended for children under 16, and we do not knowingly collect their data.
10. Changes
We may update this policy as the product evolves. Material changes will be reflected in the "last updated" date above.
11. Contact
Questions or requests: mevans.global@gmail.com. See also our Terms of Service.