Privacy

We respect your privacy and only process the minimum data needed to operate ShoeReminder.

Who we are

ShoeReminder is a simple tool that helps you manage and rotate your running shoes by using your Strava activities and gear. For privacy questions or requests, contact us at shoes-support@davebarr.dev.

Data controller

For users in the EEA/UK, the data controller is ShoeReminder (shoes-support@davebarr.dev). If we appoint an EU/UK representative, we will update this page with their contact details.

What we collect

• Strava account details you approve via OAuth: your athlete ID, display name, and your shoes (gear). We do not request more scopes than needed.
• Strava OAuth tokens to read your gear and, when you ask us to, set the selected shoes on your activities.
• Minimal activity metadata for reminders (for example, activity ID, title, start time, sport type, current gear ID). We do not store GPS routes.
• Web Push subscription endpoints so we can send optional reminders you enable.
• Preferences stored in your browser (for example, theme). We do not use analytics or advertising cookies.
• Basic service logs for reliability and security (for example, error codes, timestamps). No precise location or sensitive categories are collected.

How we use your data

• To show your Strava gear and let you choose shoes for activities.
• To update the selected shoes on your Strava activities when you request it.
• To deliver optional push reminders that you enable.
• To secure, maintain, and improve the service.

Data we do not collect

• We do not store GPS routes or detailed activity streams.
• We do not collect precise geolocation from your device.
• We do not use advertising identifiers or third‑party trackers.

Legal bases (GDPR)

• Consent: your connection to Strava via OAuth and enabling push notifications.
• Contract: providing the core ShoeReminder features you request.
• Legitimate interests: securing our service and preventing abuse.

Sharing and processors

• We do not sell your data and we do not share it with advertisers.
• Strava: When you connect your account, Strava is an independent controller for data in your Strava account. See the Strava Privacy Policy and the Strava API Agreement.
• Infrastructure providers acting as our processors (for example, Cloudflare for hosting and Web Push delivery). They process data on our behalf under appropriate safeguards.

Retention

We keep data only as long as needed to provide ShoeReminder or as required by law, then delete or anonymize it. When you log out or revoke access in Strava, we delete your Strava tokens immediately and remove cached gear and activity metadata in a timely manner.

Security

We use industry‑standard protections, including HTTPS encryption in transit, signed session cookies, limited data access, and least‑privilege keys. No method of transmission or storage is 100% secure, but we work to protect your data.

Your rights

If you are in the EEA/UK or a similar jurisdiction, you have the right to:

• Access, correct, or delete your personal data.
• Restrict or object to processing in certain cases.
• Data portability.
• Withdraw consent at any time without affecting prior processing.
• Lodge a complaint with your local supervisory authority.

To exercise these rights, email shoes-support@davebarr.dev.

International transfers

We may process data outside your country. Where required, we use appropriate safeguards (such as standard contractual clauses) to protect your data.

Cookies and local storage

We use only strictly necessary storage such as your theme preference and your Web Push subscription. We do not use analytics or advertising cookies.

Your choices and data deletion

• Disconnect: You can revoke ShoeReminder’s access in Strava at any time at strava.com/settings/apps.
• Remove data: Use “Log out” in ShoeReminder to clear your data from our systems. You may also request deletion by emailing shoes-support@davebarr.dev.
• Push notifications: You can disable push in your browser settings or within ShoeReminder. Deleting your subscription stops all messages.

Children

ShoeReminder is not intended for children under 16. If you believe a child has provided us data, contact us to delete it.

About Strava data

This application uses the Strava API but is not endorsed by Strava. We only request scopes needed for the features you use, and we use Strava data solely to provide those features to you. If you revoke access or Strava notifies us of deauthorization, we stop processing and promptly delete cached Strava data associated with your account.

Changes

We may update this policy from time to time. We will post the updated version here and update the “Last updated” date.

Last updated: 2025-10-25