Privacy Policy

Information We Collect

Information You Provide to Us

• Account: your email address. You sign in with a one-time code we email you; there is no password. An account is optional in the app.
• Purchases: if you buy a Race Plan on racecast.io, our payment processor handles the payment. We receive your name, email address and what you bought. We never receive or store card or bank details. The app sells nothing.
• Race and training preferences: races you save, goal time, pacing strategy, start wave, body weight, fuel brand, dietary and caffeine preferences, bib number and what you’ll be wearing (for spectators), and entries you log in tools such as the carb-load tracker and heat sessions.
• Race chat questions: questions you ask the race chat, and anything you include in them.
• Weather alerts: your email address or phone number if you sign up for race weather alerts by email or text.
• Reviews and posts: race reviews, comments and posts you publish on racecast.io. These are public.
• Communications with us: support emails, survey responses and feedback.

Location

• In the app, with your permission: your device’s precise location, used to show the weather and run conditions where you are. It is sent to our servers to fetch the forecast and is not stored with your account. You can use the app without it by searching for a city instead, and you can turn it off at any time in your phone’s settings.
• Daily run brief: if you turn on the daily run brief notification, we store an approximate location (rounded to about 1 km) with your device’s notification registration, so the brief can use your local forecast.
• On the website: an approximate location (country or region) from your IP address, used to pick default units and for aggregate analytics.

Fitness Data from Services You Connect

If you connect a fitness service (such as a running app or watch platform), we receive your activities from it with your permission: date and time, type, distance, duration, pace, elevation, heart rate, and the GPS route and data streams recorded during the activity (position, altitude, heart rate, speed and distance over time), plus the activity’s title and description, the device and shoe recorded with it, cadence and temperature readings, and the other details the service sends with each activity. We store the access tokens the service gives us in encrypted form.

We use this data only to show your training back to you and to estimate how ready you are for a race (for example heat adaptation, hills and conditions). We don’t sell it, use it for advertising, share it with other users, or send your raw activity data to AI services. Disconnecting the service, or deleting your account, deletes the activity data we hold from it and revokes our access to it.

Information Collected Automatically

• Notifications (app): if you allow notifications, a push token for your device, plus your time zone, unit preference, the races you follow and your notification settings, so we can send the alerts you chose at sensible local times.
• Crash reports and diagnostics: when the app or site hits an error, a report with technical details (device and OS version, app version, what went wrong). Reports are not linked to your email address.
• Log information: IP address, browser or app version, device type, operating system, language, referring page and time of access, which our servers record when you use the Services.
• Website analytics: pages viewed and actions taken on racecast.io, measured with cookie-free analytics and, for visitors in the United States, Microsoft Clarity, which records how pages are used (clicks, scrolling) to help us fix design problems. Microsoft collects this data under the Microsoft Privacy Statement. The app does not include these tools.
• Cookies and device storage: racecast.io uses cookies to keep you signed in and to remember your units. The app stores your sign-in token in your phone’s secure storage and your settings, saved races and tool inputs on the device. We may use pixel tags in emails to see whether they were opened.

How and Why We Use Information

• To provide the Services: forecasts, pace and race plans, training readiness, sign-in, purchases, and the notifications and emails you asked for.
• To answer your questions: support requests and race chat.
• To fix and improve the Services: crash reports, error monitoring and aggregate usage.
• To keep the Services safe: preventing abuse, fraud and spam, and meeting legal obligations.
• To communicate with you: account and purchase emails, and updates you can opt out of at any time.

We don’t use your information for third-party advertising, and we don’t build advertising profiles.

AI Features

Race chat answers are generated by a third-party AI model provider. Your question, the earlier messages in the same chat, and our information about the race are sent to that provider to produce the answer. We keep chat transcripts for 30 days and read incoming questions to improve answers and follow up when you ask us to. Race weather summaries are written by AI models from forecast data, not from your personal information.

Legal Bases (EU/GDPR)

For users in the European Union, our use of your information is based on: (1) necessity to fulfill our commitments under our terms of service; (2) compliance with legal obligations; (3) protection of vital interests; (4) legitimate interest in providing, improving, and securing our Services; or (5) your consent, which you can withdraw at any time (for example location, notifications or a connected fitness service).

Sharing Information

We don’t sell your information or exchange it for money. We share it only in these cases:

• Service providers that process data on our behalf to run the Services, under contracts that limit their use of it: hosting, database and storage providers; our payment processor; email and text-message delivery services; push notification services (including Apple and Google, which deliver notifications to your phone); crash reporting and monitoring services; website analytics services; AI model providers; weather data providers, which receive only the coordinates of the place being forecast from our servers, not your identity; and team messaging tools we use to handle chat questions and support requests.
• Services you connect: when you connect a fitness service, we exchange data with it as described above. That service’s own privacy policy applies to your account there.
• Legal and regulatory requirements: in response to subpoenas, court orders or other lawful government requests.
• To protect rights, property and others when disclosure is reasonably necessary.
• Business transfers: in connection with a merger, sale or acquisition. This Privacy Policy would continue to apply.
• With your consent or at your direction, for example a spectator link you share.
• Aggregated or de-identified information that can no longer reasonably be used to identify you.

Information Shared Publicly

Reviews, posts and comments you publish on racecast.io are public and may be indexed by search engines. Please keep this in mind when deciding what to share.

How Long We Keep Information, and Deleting It

• Account data (email, preferences, saved races, tracker entries, training data) is kept while your account exists.
• Deleting your account (in the app under Profile, Delete account; on the web at racecast.io/account; or by emailing us) permanently deletes your account, preferences, race plan settings, training data and connected-service tokens, revokes our access to connected services, and removes your devices from notifications. Reviews and posts you published are not removed by this; email us and we’ll delete them too.
• Records we must keep: purchase and payment records may be kept as long as tax and accounting law requires.
• Race chat transcripts are deleted automatically after 30 days.
• Crash reports, server logs and backups are kept for a limited period by us and our providers and then deleted.
• Data on your phone (settings, saved races and tool inputs used without an account) stays on the device and is removed when you delete the app.

Security

All data sent between the Services and our servers is encrypted in transit (HTTPS). Sign-in tokens and connected-service tokens are encrypted, and payment details never reach our servers. No online service is 100% secure, but we take reasonable measures to protect your information from unauthorized access, use, alteration or destruction, and we monitor the Services for vulnerabilities and attacks.

Children

The Services are not directed to children under 13 (or under 16 in the European Economic Area), and we don’t knowingly collect their personal information. If you believe a child has given us personal information, email us and we’ll delete it.

Choices

• Use the app without an account. Signing in is optional.
• Control permissions for location and notifications in your phone’s settings, and choose which alerts you get in the app.
• Disconnect a fitness service at any time, which deletes the activity data we hold from it.
• Opt out of marketing emails by following the instructions in them.
• Block cookies in your browser. racecast.io needs cookies to keep you signed in and remember your units. We do not respond to “do not track” signals.
• Delete your account as described above.

Your Rights

If you are located in certain parts of the world, including California and countries under the scope of the GDPR, you may have certain rights regarding your personal information.

GDPR Rights

• Request access to your personal data
• Request correction or deletion of your personal data
• Object to our use and processing of your personal data
• Request that we limit our use and processing of your personal data
• Request portability of your personal data

CCPA Rights (California)

We do not sell or share your personal information for cross-context behavioral advertising. California residents have the right to: request to know the categories of personal information collected; request deletion; opt out of any sale of personal information; and not receive discriminatory treatment for exercising rights under the CCPA.

Contacting Us About These Rights

See “How to Reach Us” below. We’ll need to verify your identity before disclosing or deleting information.

Data Controller

The Services are operated by Moss and Metric LLC, based in Massachusetts, United States, which is the data controller for personal information processed through the Services. Contact: contact@racecast.io.

How to Reach Us

If you have a question about this Privacy Policy, or would like to contact us about any of the rights mentioned above, please email us at contact@racecast.io. This is the fastest way to get a response.

Other Things You Should Know

Transferring Information: We and our service providers process information in the United States and other countries. We take appropriate measures to protect information transferred from the EEA and UK in accordance with this Privacy Policy.

Other sites and services: links to race websites, registration pages and connected services take you to services with their own privacy policies, which apply there.

Privacy Policy Changes

We may change this Privacy Policy from time to time. We will note each change in the change log below, and for significant changes we will also tell you in the app or by email. Your continued use of the Services after a change means you accept the updated policy.

Change log

• September 30, 2026: Fitness data from connected services now lists activity titles and descriptions, the device and shoe, cadence and temperature readings, and the other details a service sends with each activity.
• September 29, 2026: Covers the Racecast app for iPhone and Android. Names Moss and Metric LLC as the operator. Added device location, notification data, fitness data from connected services, the race chat and AI features, crash reporting, and the types of service providers we use. Sign-in is by emailed code. Describes in-app and web account deletion and how long we keep data. Added a children’s section.
• March 10, 2026: Added Premium purchase data details, updated third-party service providers, updated cookie usage for premium sessions, updated data controller section, added link to Terms of Service.