Privacy Policy

Last updated: 2025-10-30

Kaze (kaze.run) is an activity data management and automation platform. This policy explains how we collect, use, and protect your personal information.

Information We Collect

Based on your permissions and settings, we collect and store the following data:

  • Your name, username, and profile photo from Strava, along with account identifiers and OAuth tokens for connected Strava and Garmin accounts
  • Activity records, GPS routes, workout metrics such as pace and heart rate, activity photos, and gear models and usage records
  • Health data from Garmin, including sleep, resting heart rate, heart rate variability (HRV), steps, and body composition such as weight and body fat
  • The email address you bind in Settings, public-key credentials for passkey sign-in (biometric verification stays on your device), and session cookies required to keep you signed in

How We Use Information

We use this data solely to provide and maintain Kaze:

  • Process Strava activities according to your automation rules (Bots) or manual edits, and write updated titles, descriptions, or gear back to your Strava account
  • Aggregate, display, and calculate statistics from your activity, gear, and health data
  • Send email verification and one-time sign-in links (Magic Links), verify active sessions, and secure accounts and APIs

Sharing and Service Providers

We do not sell, rent, or trade your personal information, and we do not use your data for advertising or marketing.

Writing data back only happens on Strava when your rules or edits update an activity. Garmin connections are strictly read-only; we never write to or modify data in your Garmin account.

Infrastructure providers for hosting, databases, and transactional email process data only as needed to run Kaze and are bound by confidentiality and security obligations.

Data Security

Data in transit is encrypted with TLS. Database access is restricted through access controls and row-level security, and platform OAuth tokens are stored only on our servers.

No internet transmission or electronic storage can be guaranteed to be completely secure. Please keep your account session secure and do not forward one-time sign-in links to others.

Your Rights

You can stop data synchronization at any time by disconnecting Strava or Garmin in Kaze Settings, or by revoking Kaze’s access in your Strava or Garmin account settings.

To request access to, correction of, or deletion of your personal data, or for any other privacy questions, email privacy@kaze.run.

Data Retention

We retain this data only for as long as needed to provide the service. When you delete your account, disconnect a platform, or request deletion, we delete or anonymize the relevant personal data within 30 calendar days.

Policy Changes

When we update this policy, we revise the "Last updated" date at the top of this page. If a change materially affects how we handle your data, we will notify you via an in-app notice or the email address bound to your account.