Dash — Privacy Policy

Last updated 20 August 2026

The short version

Dash records what you do so it can tell you something useful about it. We do not sell your data, we do not track you across other companies' apps or websites, and there is no advertising in Dash.

What we collect, and why

Your account

Your email address, a username you choose, a display name, and an optional photo and bio. The email address identifies your account and is how we send you a verification code when you sign up or reset your password. Authentication is handled by Google Firebase; your password is never stored by us.

Where you go, while you are recording

When you start a session, Dash records your location — including while the app is in the background and your screen is off, because a run continues when your phone is in your pocket. This is the most sensitive thing Dash holds, so:

• Recording only happens during a session you started. Dash does not track you in the background at any other time.
• You can hide areas around places you do not want revealed, such as your home. Routes are trimmed inside those areas before anybody else can see them.
• You choose who sees each activity. Private is private.
• Location is never used for advertising, and never sold.

What you record

Distance, duration, pace, elevation, an effort score, and the workouts and sets you log. This is fitness data about you and is used to show you your own progress and to decide what a coach or programme suggests next.

What you post

Anything you publish: captions, photos, videos, comments, voice cheers, crew and club names, challenge titles. Who can see it depends on the audience you pick for it.

Your device and your app

Your time zone and language, so weeks and dates are counted on your calendar rather than ours. The app version, so we can tell whether a build is out of date. Crash and error information, so faults can be fixed.

Who else sees it

We use a small number of processors, and they act on our instructions:

• Google Firebase — authentication.
• Railway and Cloudflare R2 — hosting, the database, and storage for photos, videos and audio.
• RevenueCat, with Apple and Google — subscriptions. We never see your card.
• Resend — sending verification and password-reset email.
• Anthropic — checking public posts for content that breaks our rules. Text and images from public posts are sent for that check. Raw location traces are never sent to any AI provider.

We do not sell personal data, and we do not share it with data brokers or advertisers.

What you can do

• Delete your account, from inside the app — Profile, then Delete account. This erases your account and the personal data attached to it. It cannot be undone.
• Get a copy of your data — ask us at privacy@join-dash.app.
• Correct anything — most of it you can edit yourself; for the rest, write to us.
• Object or complain — write to us, and you may complain to your national data protection authority.

How long we keep it

Your account data lasts until you delete your account. Deleting your account removes it. Backups roll off within 30 days. Some records — a receipt, or a moderation decision about a report someone made — are kept where we are required to.

Children

Dash is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has an account, write to us and we will remove it.

Where your data is

Dash is operated from the European Union and data is stored in the European Union. Some processors listed above may process data elsewhere under standard contractual clauses.

Changes

If this policy changes materially we will say so in the app before the change takes effect.

Contact

Privacy questions: privacy@join-dash.app
Anything else: support@join-dash.app