P01 — PRIVACY · DATA HANDLINGLAST UPDATED: 2026-09-12
PRIVACY
This service is operated by Finisher Pro LLC, Atlanta, Georgia. Every garment Finisher (“we”) sells ships with a patch; verification decides which one — blank, or a mark earned at your pace — from best efforts tracked via sources you connect — Strava, or Apple Health through the Finisher iOS app. This document describes what we collect, how we use it, and how to remove it.
WHAT WE COLLECT
When you connect Strava, we receive: your Strava athlete ID, name, profile image URL, your best-effort times for the 5K, 10K, half marathon, and marathon distances, and the activity references that produced those efforts (activity ID, name, date, GPS polyline, pace, elevation). We do not request access to activities marked private on Strava — we honor your Strava privacy settings.
YOUR ACCOUNT AND IDENTITY
An account is an email address. Beyond it we hold what you give us on your own pages: the competition standard your tiers use (M, F or X), a home ZIP code (nearby races on your dashboard, optional), and, from your first verification, your identity for verification: the name as it appears on race results, your date of birth, and optionally your city and state and other names you have raced under.Purpose, and the only purpose: matching an official result row to you. Results directories publish a name, an age on race day, a sex and often a city; we compare those to what you gave us so a common name does not pin someone else’s finish on you, or yours on them. None of it feeds advertising, models, or anyone else.Your date of birth is never displayed anywhere — not to other athletes, not on your clear card, not back to you beyond “on file” — and no API returns it. Public surfaces show first name and last initial only. Everything here is editable on your account page and deleted with your account.
APPLE HEALTH (THE iOS APP)
When you enable Apple Health sync in the Finisher iOS app, we read one thing: your running workouts — date, distance, and duration. Nothing else, and nothing is ever written back to Apple Health. We never read routes or GPS from Apple Health, and workouts entered by hand are excluded at the source.From those workouts we keep your best-effort time per distance and a dated list of your distance-matched runs — that is what draws your tier and trajectory. Health data is never used for advertising or marketing, never sold, never shared with third parties, and never used to train models.Turn sync off anytime in iOS Settings → Privacy & Security → Health → Finisher. Deleting your account (in the app: PROFILE → delete, or email below) removes the derived efforts with it.
THE iOS APP: USAGE EVENTS
The app sends us usage events — which screen was opened, which onboarding step was completed or left — so we can see where the flow loses people. Each event carries a random install id, the event name, and a small fixed set of values (a step id, a count, a yes/no). Never a time, a name, a date of birth, a ZIP, a race, or anything from Apple Health.Events from an installation that never signs in are deleted after 90 days. Once you sign in, they are tied to your account and go with it when you delete it.
HOW WE USE IT
We compute your target from your best efforts and persist that target and the activities that produced it. Every garment ships with a patch; if a purchase clears verification, the threshold time of the target you cleared goes on the patch instead of a blank one. We never sell your data, never share it with advertisers, never train models on it.
WHERE IT LIVES
Athlete data is stored in Supabase (Postgres, US-East region). Application hosting is Vercel.Payments are processed by Stripe; orders are fulfilled by Finisher Pro LLC. See Stripe’s privacy policy. For a pre-order, Stripe stores your card and charges the full balance when your apparel ships. We never see the number.
HOW LONG WE KEEP IT
While your account is active, we keep your athlete record and qualifying activities. If you deauthorize Finisher in your Strava settings, we delete the synced activity data within 30 days. You can request immediate deletion by emailing the address below. App usage events without an account are deleted after 90 days; with one, they are deleted with the account.
YOUR CONTROLS
· Disconnect at strava.com/settings/apps — revokes our access immediately.· Email contact@finisher.pro for full data deletion (account, activities, orders).· Community visibility (whether your clearance appears on the public feed) and GPS sharing are separate opt-ins, off by default.· Your identity for verification (results name, date of birth, city, other names) is editable on /account and removed with your account.
STRAVA ATTRIBUTION
Activity data displayed on Finisher is provided by Strava. Strava’s terms of service and privacy policy at strava.com govern the collection of that data. Finisher’s use of Strava data is subject to the Strava API Agreement.
LEGAL BASIS
We process your Strava data on the basis of your explicit consent, granted via Strava OAuth and the privacy toggles described above. We process order and shipping information on the basis of contract performance. You may withdraw consent at any time; withdrawal does not affect the lawfulness of processing carried out before it.
YOUR RIGHTS (GDPR / UK GDPR)
· Right to access — request a copy of the personal data we hold about you.· Right to rectification — ask us to correct inaccurate data.· Right to erasure — ask us to delete your data (“right to be forgotten”).· Right to data portability — receive your data in a machine-readable format.· Right to object or restrict — limit how we process your data.· Right to withdraw consent — at any time, via Strava settings or by emailing us.· Right to lodge a complaint — with your local data protection authority (e.g., the ICO in the UK).Email contact@finisher.pro to exercise any of these rights. We aim to respond within 30 days.
CONTACT
Questions, deletion requests, or anything else: contact@finisher.pro.