Privacy Policy

Information we collect

• Account & profile: email, password (stored securely by our auth provider), display name, username, and date of birth (used to confirm you're 13+ and to apply the right protections), plus optional details like a bio, city, sports, and avatar.
• Activity & fitness data (sensitive): events you create or join, RSVPs, logged activities and runs (including distance, duration, and GPS routes when you actively use run tracking), streaks, milestones, and — for Pro — nutrition logs and AI coaching plans.
• Location (sensitive): approximate location to show games near you, and precise GPS only while you actively use run tracking, with your device's permission. Location is off until you turn it on.
• Content: comments, reactions, invitations, and reports you submit.
• Communications: your email preferences and consent choices.
• Payments: if you subscribe to Pro, payment is processed by Stripe. We do not see or store your full card details.
• Usage data: privacy-respecting, first-party analytics about which features and pages are used. We do not put names, emails, precise location, or free text into analytics, and we do not use third-party advertising trackers.

How we use your information

• Provide and operate the app — find games, track activity, connect with friends.
• Keep the community safe (moderation, reports, blocking, age enforcement).
• Send account and security emails (always), and optional emails you've opted into.
• Power Pro features like the AI coach and nutrition logging.
• Understand and improve the product through aggregate analytics.

We collect only what we reasonably need to provide these features (data minimization), and we do not use your information for behavioral profiling or targeted advertising.

Consent & sensitive data

Because our users are minors, we treat your personal data — including location and health/fitness data — as sensitive. We process it to provide the features you ask for. Optional emails are sent only with your opt-in, which you can withdraw anytime in Settings. We do not knowingly process data of anyone under 13 (see “Athletes 13–17” below).

How we share information

We do not sell your personal information, we do not “share” it for cross-context behavioral advertising, and we do not serve targeted ads to you. We disclose data only to service providers that help us run Outshine, under contract and only as needed:

• Supabase — database, authentication, and storage.
• Netlify — application hosting.
• Mapbox — maps and location lookup.
• Stripe — payment processing for Pro.
• Anthropic — powers the AI coach (your activity summary is processed to generate plans; it is not used to train third-party AI models).
• Resend — delivers our emails.

We may also disclose information if required by law or to protect the safety of our users. Residents of Oregon and Minnesota may request the specific third parties to which we disclosed their personal data.

Location data

Location is collected only when strictly necessary to provide a feature you choose to use: approximate location to surface nearby games, and precise GPS while a run is actively being tracked. It is off by default and controlled by your device permissions. We do not use location for profiling or advertising, we do not sell it, and we retain precise route data only as long as needed for your activity history (you can delete activities at any time).

AI features

The AI coach uses a summary of your activity to generate training suggestions. It is informational only and is not medical, health, or professional advice. We do not use your content to train third-party AI models. Where applicable law provides it, you may opt out of profiling that produces legal or similarly significant effects (the coach does not make such decisions about you).

Athletes 13–17 (and a note for under-13)

Outshine is built for teens and is not directed to children under 13; we do not knowingly collect information from anyone under 13. We use a neutral age screen at sign-up and apply minor-protective defaults (location off, private-leaning settings, no targeted ads). If we learn that a user is under 13, we lock the account and delete their information unless we have verifiable parental consent. If you believe a child under 13 has an account, contact us and we will remove it.

Florida residents

Under the Florida Digital Bill of Rights, because Outshine is predominantly accessed by minors we: process a known minor's sensitive data only with appropriate authorization; never serve targeted advertising to users we know are under 18; collect precise geolocation only when strictly necessary and for a limited time; minimize the data we collect; and do not use deceptive “dark pattern” designs. Florida law also restricts social-media accounts for the youngest minors; where it applies, account creation for users under 16 may require verified parental consent or may not be permitted.

Your privacy rights

Depending on where you live, you may have the right to:

• Know and access the personal data we hold about you;
• Correct inaccurate data;
• Delete your data;
• Obtain a portable copy;
• Opt out of sale, “sharing,” targeted advertising, and profiling (note: we do none of these to begin with);
• Limit the use of sensitive data to providing the features you requested.

How to exercise them: email [email protected] or edit/delete data directly in the app. We respond within 45 days (extendable once as allowed by law). You may use an authorized agent to submit a request on your behalf with proof of authorization. Appeals: if we deny a request, you may appeal by replying to our decision; we will respond within the time your state allows and tell you how to contact your state attorney general. We honor recognized universal opt-out signals such as Global Privacy Control (GPC).

Data retention

We keep personal data only as long as needed for the purpose we collected it, then delete or anonymize it:

• Account, profile & date of birth: while your account is active; deleted within 30 days of account deletion.
• Activities, GPS routes, nutrition logs, AI plans: while active and viewable in your history; you can delete individual entries anytime; removed when your account is deleted.
• Analytics: aggregated/pseudonymous, kept up to 24 months.
• Backups: purged on a rolling cycle (about 30 days) after deletion.

We may retain limited records longer where the law requires (for example, payment records or safety reports).

Security

We use encryption in transit, access controls, and database row-level security, and we maintain reasonable safeguards appropriate to the sensitivity of the data. No system is perfectly secure, but we work to protect your information and will notify you and regulators of a breach as required by law.

Changes

We may update this policy and will revise the date above. We'll communicate significant changes in the app or by email.

Contact

Questions or requests: [email protected] — Outshine Fitness LLC, Orlando, FL.