Privacy policy.

DigiMedal (“we”, “our”) helps runners catalogue race medals and personal records across iPhone and the web. This policy explains what we collect, why, who we share it with, and your choices.

What we collect

• Account info: email, display name, profile photo (optional). Provided by you, or by Apple/Google when you sign in with those providers. Apple Sign In may give us a private relay address — we treat that as your email.
• Race + medal data: race name, date, distance, finish time, city/country, GPS coordinates (when you opt in to location), elevation gain, medal photos, race-day photos, bib photos, and any notes you add.
• Apple Health workouts (iOS, Pro): running workouts you choose to sync — distance, duration, start/end time, GPS route, elevation. Data is pulled on-device through HealthKit and uploaded to your DigiMedal account.
• Third-party imports (Pro): AthLinks results (chip times, race events) and Strava activities, when you connect those accounts.
• Subscription status: Apple in-app purchase transaction ids and expiry dates so we can grant Pro features to your account.
• Diagnostic logs: minimal request logs for troubleshooting (timestamps, anonymised IP, error codes). No advertising trackers.

We do not collect contacts, calendar, microphone, health data beyond running workouts, or financial information beyond what Apple sends us as an in-app purchase receipt.

How we use it

• Run the service: store your races, render your library, sync your runs, generate share cards.
• Authenticate you (Supabase Auth + Sign in with Apple/Google).
• Run AI digitisation: medal photos you upload are sent to Anthropic Claude Vision to extract race name, date, distance, and other fields. The image and extracted data are tied to your account; we do not use your data to train models.
• Operate subscriptions and grant Pro entitlements.
• Diagnose problems — error logs only, with the smallest amount of data needed.

We do not sell your data, and we do not run advertising profiling.

Who we share with

• Supabase — managed Postgres, Auth, Storage, Edge Functions. They host the database and files we save on your behalf.
• Anthropic — Claude Vision processes medal photos for OCR. Anthropic does not train on this data per their commercial terms.
• Apple — Sign in with Apple, In-App Purchases, HealthKit. Apple sees only what their SDKs require.
• Google — Sign in with Google, when you choose that flow.
• AthLinks / Strava — only when you explicitly connect those accounts, and only to fetch your own runs.
• Mapbox — map tiles on the Atlas page. Mapbox sees the bounding box of the map you render, not the underlying race data.
• Vercel — hosts the web app.

Where it’s stored

User data is stored in Supabase (Postgres + S3-style storage). Files (medal photos, race photos, bibs, avatars) live in private storage buckets and are accessed via short-lived signed URLs. Row-level security rules ensure each user can only read and write their own rows.

Your rights

• Access: use the app to read everything we store about you.
• Edit / delete: edit or delete medals, races, photos, and your profile from inside the app at any time.
• Account deletion: email support@silicondevs.com from your account email and we will delete your account and all associated data within 30 days. We may retain anonymous aggregate analytics that no longer identify you.
• Data export: on request, we will email you your race + medal data as JSON/CSV.

Children

DigiMedal is not directed to children under 13. We do not knowingly collect data from children under 13. If you believe we have, contact us and we will delete it.

Security

Connections use TLS. Authentication uses Supabase Auth with industry-standard password hashing and OAuth flows. Storage buckets are private with per-user access policies. We do not store payment card data — Apple processes all payments.

Changes

We may update this policy. Material changes will be flagged in the app or by email. The “last updated” date above reflects the most recent revision.

Contact

Questions or requests: support@silicondevs.com.