MyTrail respects your privacy and uses personal information only to provide, secure and improve your MyTrail account and virtual trail experience. This policy explains what we collect, why we use it, who may process it and the choices available to you.
Who is responsible for your information
MyTrail is the responsible party and data controller for personal information processed through this website and the MyTrail member application. Privacy questions and requests can be sent to joinmytrail@gmail.com.
Information we collect
Depending on how you use MyTrail, we may collect:
- Your name, email address, profile information and account status.
- Payment references and payment status. MyTrail does not store your full bank or card credentials.
- Delivery details when they are needed to send an earned medal or other item.
- Support messages and records of requests you make to us.
- Basic website usage information, including page views and join-button events, through Google Analytics.
- The Strava information described below, but only when you choose to connect Strava.
Connecting Strava
Connecting Strava is optional. When you select “Connect with Strava”, you are redirected to Strava to authenticate and choose whether to authorise MyTrail. MyTrail never receives your Strava password.
If you authorise the connection, MyTrail collects your Strava athlete identifier, athlete name, granted permission scope and the access credentials needed to maintain the connection. For eligible activities, MyTrail may collect the activity identifier, name, sport type, distance, moving time, start date, privacy indicator and trainer indicator. We use this information to calculate and show your own challenge progress, activity history, milestones and eligibility for completion.
MyTrail does not sell Strava data, use it for targeted advertising, train artificial intelligence systems with it or disclose an individual's Strava data to other members. Your Strava-derived activity information is intended to be visible only within your authenticated MyTrail experience and to authorised personnel where strictly necessary to provide support, maintain security or operate your connection.
You can review and change your Strava privacy choices in your Strava account settings. Strava's own processing is governed by the Strava Privacy Policy.
How we use personal information
We use personal information to:
- Create and secure your account and confirm your trail access.
- Provide your virtual trail, progress, activity history and milestones.
- Process and reconcile payments and arrange eligible medal delivery.
- Respond to support, privacy and account requests.
- Protect MyTrail, prevent abuse and meet legal obligations.
- Understand general website traffic and whether visitors begin the joining process.
We process this information where it is necessary to provide the service you request, where you have consented, where we have a legitimate operational or security interest, or where the law requires it. You may withdraw consent at any time, without affecting processing that was lawful before withdrawal.
Service providers and international processing
MyTrail uses carefully selected providers to operate the service. These may include Supabase for authentication and database hosting, Resend for transactional email, Stitch for payments, Google Analytics for website measurement, hosting and security providers, and Strava when you connect your account. They process information for their stated purpose and under their own terms and privacy commitments. Information may therefore be processed outside South Africa. Where required, we use appropriate contractual, organisational and legal safeguards for such transfers.
Cookies and analytics
MyTrail uses essential technologies to keep you signed in and protect your session. Google Analytics may place or read analytics identifiers to measure website usage, such as page views and clicks on a join button. Analytics data must not include your Strava activity information. You can restrict non-essential cookies through your browser controls where available.
Retention and deletion
We retain account, payment and support information only for as long as reasonably necessary to provide MyTrail, resolve disputes and meet legal or accounting duties. Strava data is retained only for the purpose of operating your authorised connection and must be refreshed, removed or deleted in accordance with Strava's requirements. If an activity is deleted from Strava, MyTrail will remove the corresponding cached data as soon as reasonably possible and no later than the period required by Strava.
You may withdraw Strava access through your Strava account settings or ask MyTrail to disconnect Strava and permanently delete your Strava data by emailing joinmytrail@gmail.com. After verifying the request, we will remove the relevant connection credentials, imported activities and information derived from those activities, and send you written confirmation when deletion is complete. We will also delete this information when we receive notice that you revoked MyTrail's access or deleted your Strava account.
Your privacy rights
Subject to applicable law, including South Africa's Protection of Personal Information Act, you may ask us to access, correct, export, restrict or delete your personal information, object to certain processing, or withdraw consent. You may also complain to the Information Regulator of South Africa or another competent data-protection authority. Email joinmytrail@gmail.com to exercise these rights. We may need to verify your identity before completing a request.
Security
We use reasonable technical and organisational safeguards, including access controls, encrypted connections and encrypted storage of Strava access credentials. No online service is completely risk-free, so please contact us promptly if you believe your account or information has been compromised.
Children
MyTrail is not directed to children under 13. A parent or guardian should contact us if they believe a child supplied personal information without the required consent.
Strava usage information
Strava may monitor and collect information relating to MyTrail's access to the Strava API and may use that information for support, compliance, security, platform improvement and other purposes described in Strava's terms.
Changes to this policy
We may update this policy when MyTrail, our providers or legal requirements change. The latest version and its effective date will always appear on this page. If a change materially expands the Strava data we collect or how we use it, we will notify affected members and request any additional consent required before applying that change.