Trailhead is a local-first activity tracker. This policy explains how the Trailhead mobile app and website handle information. Trailhead does not sell personal information, show behavioral ads, or build a server-side history of your workouts.

Information kept on your device

Your profile, activities, routes, preferences, connections, blocks, sharing history, and recovery material are stored encrypted on your device. They remain there unless you choose to export, back up, share, or delete them. Trailhead does not require a Trailhead account for local activity tracking.

Location information

Trailhead uses precise location while you record an activity so it can calculate and display your route, distance, pace, speed, and elevation. A recording you start may continue while the screen is locked or another app is open. Trailhead does not use location for advertising and does not upload a readable route merely because you recorded it.

You can deny location access, stop a recording, delete an activity, or remove Trailhead's location permission in your device settings. Denying location prevents GPS recording but does not prevent access to existing local data.

Premium sharing and the relay

When you choose to share with a trusted Trailhead connection, the activity is encrypted on your phone before it is sent. The relay temporarily holds encrypted packets and cannot read the enclosed profile, route, or activity details. Ordinary pending delivery is retained for up to seven days from relay acceptance and then expires.

The relay necessarily handles limited delivery and security information, such as request timing and size, network information during a request, app-installation signing information, opaque delivery addresses, packet identifiers, and expiry. Trailhead's dedicated relay operational logs are designed to exclude message bodies and readable workout information and are retained for no more than seven days. Cloud providers may separately process account, billing, audit, or security records under their own policies.

Removing a connection stops future sharing and starts deletion or expiry of pending relay work where possible. Trailhead cannot recall a copy that another person has already received, exported, or copied.

Purchases

Apple and Google process purchases and payment details. Trailhead does not receive your full card or bank information. The app and relay may receive product, transaction, entitlement, renewal, expiration, refund, revocation, and store-environment information needed to provide and verify Premium access. Purchases initially restore only through the store where they were made.

App integrity

Trailhead uses Apple App Attest and Google Play Integrity to help verify that requests to the private relay come from a genuine, unmodified app on an eligible device. Apple and Google process technical app and device-integrity information under their own policies. Trailhead uses the resulting proof for security and abuse prevention, not to create a Trailhead identity directory.

Website, feedback, and support

A Trailhead invitation may use a trailhead.fit link so an installed app can open it. If the app is not installed and the fallback webpage opens instead, Cloudflare necessarily receives the requested link, network information, and request timing to deliver that page. The page does not decode the signed invitation or send it to an advertising or deferred-linking service. Invitation links are single-use, expire, and should be shared privately.

You may send feedback without a name or email address. If you include a name, email address, diagnostic details, or other information in a message, Trailhead uses it to respond, investigate the issue, and improve the service. Do not include route details, recovery codes, private keys, pairing links, receipts, or backup files in feedback.

Cloudflare Turnstile processes technical and network information to check that a submission is legitimate. The message then passes through Amazon Web Services and Amazon Simple Email Service to the Trailhead support mailbox. The feedback service does not keep a separate database copy. Support correspondence is retained only as long as reasonably needed to respond, investigate, prevent abuse, or meet legal duties.

Service providers

Trailhead uses Apple and Google for app distribution, purchases, and app-integrity checks; Google Cloud for the encrypted sharing relay; Amazon Web Services for feedback delivery; and Cloudflare for website delivery and bot protection. These providers process limited information needed to provide their services and apply their own privacy policies.

Your choices and deletion

  • Export your readable activity data from the app.
  • Create a user-controlled encrypted backup and keep its recovery code separately.
  • Delete individual activities, clear activity history, remove connections, or erase all local Trailhead data.
  • Stop Premium sharing by ending the purchase or allowing it to expire; free local tracking remains available.
  • Ask about or request deletion of support correspondence by emailing Trailhead.

Deleting the app or its local data does not delete backup files you placed elsewhere or copies already received by another person. Temporary encrypted relay packets expire automatically, although limited records may be retained when required for security, fraud prevention, legal compliance, or dispute handling.

Security and backups

Trailhead uses encryption in transit and encrypts sensitive local state. No system is perfectly secure. A Trailhead backup and its separate recovery code together can restore your identity and data, so keep them in separate safe places and do not send them to Trailhead support.

Children

Trailhead is intended for active adults ages 18 and older. The app is not directed to children, and Trailhead does not knowingly collect personal information from children through an account or advertising profile. If you believe a child sent personal information through feedback or support, contact us so we can address it.

Changes to this policy

This policy may change as Trailhead's features or providers change. The effective date above will be updated when a revised policy is published. Material changes will be communicated through an appropriate app, website, or store notice.

Contact

For privacy questions or requests, email support@trailhead.fit.