Privacy Policy

1. What Data We Collect

Kåduka handles your runs and the places you go, so we collect more data than a typical service. The tables below show what we collect, why, and whether it is required.

One thing worth knowing up front: Kåduka does not record your runs itself. There is no start or stop button here. Your runs arrive from a watch you connect, or from a GPX or FIT file you upload. See Section 9, Connected devices and services.

1.1 Information You Give Us Directly

1.2 Data That Arrives With Your Runs

When you connect a watch or upload a file, this is what comes with each workout:

We never collect sleep, resting heart rate, daily step counts, stress, blood oxygen or body composition from a connected watch. We only ever see workouts, never your day to day health data, and we never see your watch account password.

1.3 Your Location in the Browser

Kåduka asks your browser for your location in two places only: when you tap 'Current location' while planning a route, and when you ask a map to show where you are. Your browser asks your permission first, and you can refuse and still use Kåduka. We use that position to answer the question in front of you. We do not store it as an activity, and we do not track you in the background.

1.4 Technical Data

Kåduka is a website, so our hosting provider receives the ordinary technical information every website receives with a request: your IP address, your browser and device type, and the page you asked for. We also keep error and performance logs so we can fix what breaks. If you turn on phone notifications, we store the push subscription your browser gives us, so we can send them.

1.5 Payment Information

All payments are processed by Stripe (stripe.com/privacy). We never see or store your card number. What we keep is a Stripe customer reference and the status of the payment, which is what lets us tell whether your Kåduka Plus subscription or your race entry is paid.

2. How We Use Your Data

We use your data only for the purposes below. We do not sell your personal information to advertisers, data brokers, or any third party; ever.

3. Location Privacy: Threats, Research & Our Protections

Why location privacy deserves its own section:

Peer-reviewed security research (Mink et al., CHI 2022) studied how well 'privacy zones' actually protect fitness app users. Their finding was striking: even with a privacy zone enabled, 68% of guesses by ordinary, non-technical participants fell within 50 meters of a user's hidden home address, after viewing just three activities. In plain terms: the start/end point hiding that most fitness apps offer provides weaker protection than users assume. A motivated burglar, stalker, or other bad actor does not need technical skills to narrow down where you live: they just need to look at a few of your runs. We take those documented, real-world risks seriously, and the protection we lean on most is structural rather than a toggle you have to remember: your runs start Private and stay that way until you choose otherwise. The rest of this section is honest about what we have built and what we have not.

3.1 Your Activities Start Private

When you create an account, your activities are set to Private. That covers the whole run, including the GPS route and its start and end points. Nothing is visible to anyone else until you choose to share it, either by changing the default for future runs or by changing one run on its own.

Your profile is a separate setting, and it does not start private. See 4.3.

3.2 Protected Zone (Start/End Obfuscation): Not Built Yet

A Protected Zone would be a radius around a sensitive address, such as your home, your workplace or a regular trailhead, and routes would be trimmed inside it before anyone else could see them.

This does not exist yet. There are no controls for creating a zone, no zone exists on Kåduka today, and nothing is being trimmed. We are describing it here only so you know it is not protecting you right now, and we will update this section when it ships. Until then, treat any run you make Public as showing exactly where you started and finished.

3.3 We Do Not Mine Your Routes for Your Home Address

Kåduka does not analyze your routes to work out where you live, and we never send your stored GPS coordinates to anyone as data.

One honest exception, because it is easy to miss: our analytics provider records your screen (see 6.1), and a run's route line is drawn on the page, so looking at your own run puts that route line into the recording. What that provider receives is more than aggregate numbers, so please read 6.1 rather than assume.

3.4 There Is No Live Tracking

Kåduka has no live tracking and no way to broadcast where you are. Nobody can follow you in real time, and there is no link you could share that would let them. When you ask a map to show your position, that position is used to draw the map in your own browser and is not sent to other users.

3.5 You Control Deletion of Your Runs

You can delete any individual activity, including its complete GPS route, at any time from within the app. See Section 16 for a full copy of your data and for deleting your account.

3.6 Photo Location Is Removed From the Image File

Photos often carry the coordinates of where they were taken, buried in the image file. When you upload a photo to Kåduka, we strip that metadata out of the file before we store it, and if the strip fails we refuse the upload rather than store an image we have not cleaned. So a photo someone else views or downloads does not carry your location.

To be straight with you about the limit of this: we read those coordinates before we remove them, and we keep them on your photo's record so the photo can appear in the right place on your map. The image file is cleaned. Kåduka still knows where the photo was taken, and that location follows the same sharing setting as the run it belongs to.

4. Social Sharing: Opt-In, Always

Sharing a run is never automatic. Your activities start Private and stay that way until you choose otherwise. Your profile is the one thing that does not start private, and 4.3 says so plainly.

4.1 Activity Visibility Levels

You can also control the parts of a run separately, so your map, photos, stats or the date can each be narrower than the run itself. Kåduka staff can reach data in the database in order to run the service and to help you when you ask, which is covered by 10.

4.2 Friend Connections Are Always Opt-In

No one is added to your friends list without your explicit acceptance of a request. We do not auto-add friends, create social connections on your behalf, or suggest friends based on your physical proximity to another user during a run.

4.3 Your Profile Starts Visible to Other Runners

We want to be straight about this one, because it is the exception to everything above. When you create an account, your profile is set to Public, which on Kåduka means visible to any signed-in runner. Your name, your @handle, your photo and your bio can be seen by other runners, and you can be found when someone searches for people.

Signed-out visitors are a different matter: they are not shown your name, your @handle or your photo at all.

You can change this at any time in Privacy Settings. Narrowing it to Friends shows your profile only to runners you have accepted, and setting it to Anonymous means everyone except you sees the name 'Anonymous' with no photo, no bio, no location and no stats. Your activities are a separate setting and are Private either way.

4.4 Clubs and Organization Pages

If you join a club or appear on a race organization, coaching, trail work or shop page, your membership can be visible to other people who can see that page, and the page's managers can see you by name. Managers can hide a person's card, and you can hide your own.

Kåduka has no segment leaderboards and no group challenges. If we build them, we will say here what they would show before they ship.

4.5 There Is No Tagging

Other runners cannot tag you in activities or photos, because Kåduka has no tagging feature at all. Nobody can attach your name to someone else's run or photo. You can record who you ran with for your own log, and that is yours: it does not appear on their profile or notify them.

5. Legal Bases for Processing (Including GDPR)

European data protection law (GDPR) and many other privacy frameworks require us to identify a specific legal basis for each type of data processing. The table below explains this in plain language.

Withdrawing consent: Where we rely on your consent, you may withdraw it at any time through Privacy Settings or by emailing [email protected]. Withdrawal will not affect the lawfulness of any processing that took place before you withdrew.

6. Who We Share Your Data With

We do not sell, rent, or trade your personal information. The only third parties who receive your data are service providers who help us operate Kåduka, and they are contractually prohibited from using it for any other purpose.

6.1 Service Providers

These are the outside companies that actually receive your data, what each one is for, and what each one gets. We have named them all rather than writing 'a hosting provider' or 'an analytics provider'.

Each of these companies receives only what it needs for its job, is required to protect it, and may not use it for anything else. We do not sell your data and we never share it for advertising.

6.2 Legal Requirements

We may disclose your information when required by a valid court order, subpoena, or government investigation. Where permitted by law, we will notify you before complying with any such request.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of substantially all assets, your information may be transferred as part of that transaction. You will be notified in advance and given the opportunity to delete your account before any transfer occurs.

6.4 Other Users (Only What You Choose to Share)

If you set an activity to Friends Only or Public, certain information becomes visible to the audience you selected. Choose your sharing level carefully, as we cannot control what users do with content they can legitimately view.

7. Cookies and Tracking Technologies

Kåduka sets very few cookies, and we have listed every one of them. We set no advertising cookies and no personalized-content cookies, and we do not let anyone else drop a cookie on our site to follow you elsewhere. That is also why you have never seen a cookie banner here.

Our analytics provider also stores an identifier in your browser so it can tell one session from the next.

How to switch our analytics and session recording off. In each browser you use, open these two addresses once: kaduka.app/?kdk_analytics=off and run.kaduka.app/?kdk_analytics=off. Both are needed, because each site address keeps its own setting. Your browser remembers the choice until you clear its site data, so if you use another browser or another device, open the two addresses there too. To turn it back on, open them with ?kdk_analytics=on instead. If you would like help, email [email protected].

You can also block cookies and scripts in your browser's own settings. Note that our site does not act on your browser's Do-Not-Track setting, which Section 17 explains.

8. AI and TrailIQ

We plan to use AI to power TrailIQ, which recommends trails and routes for you. To do that, it may look at your profile, your preferences and your activities, including activities imported from a connected device such as a Garmin watch.

Here is what we promise about that, before any of it starts:

• The AI will only use your data to make recommendations for you.
• Your data will not be used to train AI models.
• We will update this policy first, to name the AI provider and explain exactly what data it uses and why. We have not chosen a provider yet, which is why none is named here.
• We will ask for your explicit permission. Nothing is processed without it.
• You can turn it off at any time in your settings.

EU and EEA users: you have the right under GDPR Article 22 not to be subject to solely automated decision-making that produces significant effects. Kåduka makes no automated decisions about you at all today.

9. Connected Devices and Services

Your runs reach Kåduka in one of two ways: you connect a watch and they arrive on their own, or you upload a file. You connect and disconnect yourself, and you can use Kåduka without connecting anything.

9.1 How Each Connection Works

We are also applying for direct access to Garmin's API. If that is granted, your Garmin data will come straight to Kåduka and Stridee will no longer handle it. We will update this section when that changes.

9.2 What We Take From a Connected Watch

Your history comes too. Connecting brings over your past workouts, not just the new ones. Depending on the watch and how long you have used it, that can be years of runs arriving at once. We say so here because it surprises people.

What we add. Once a workout arrives, we look up the weather where and when you ran and give it a place name, so your log reads like somewhere you went. That lookup sends the coordinates and the time to our weather provider (see 6.1).

9.3 Disconnecting, and What Happens to What Is Already Here

You can disconnect at any time from your device settings in Kåduka. When you do, we revoke the permission at the provider first, so the connection is genuinely withdrawn and not just hidden from you, and new workouts stop arriving.

Activities already imported stay in your account.Disconnecting does not delete your run history, because for most people that history is the reason they are here. If you want imported runs gone, delete them individually, or delete your whole account as described in Section 16. You can reconnect at any time.

9.4 We Never Sell This Data

Data from Garmin, COROS, Suunto or any other connected device is never sold, never rented, and never used for advertising or shared with advertisers. There is no advertising anywhere in Kåduka. It is used to show you your own runs, to show them to whoever you have chosen to share them with, and for the purposes in Section 2.

10. How Long We Keep Your Data

You can ask us to delete any or all of your data at any time. See Section 16.

11. How We Keep Your Data Secure

Kåduka is a small team, so rather than list every measure a large company would claim, here is what is actually true:

• Everything travels over an encrypted connection (HTTPS, TLS 1.2 or higher). There is no way to reach Kåduka without it.
• Your data sits in our database behind per-row rules, so one runner's account cannot read another's. Every read that shows someone else's content goes through those rules rather than trusting the app.
• There is no password to steal: you sign in with a code we email you, so we never hold a password for your account.
• Location data is stripped out of the photo files you upload, as described in 3.6.
• Kåduka staff can reach data in the database in order to run the service and to help you when you ask. We keep that to the people who need it.

12. Children's Privacy

Kåduka is for runners aged 16 and older. When you sign up you confirm that you are 16 or older, which is also what our Terms of Service require. We do not ask for your date of birth, so that confirmation is what we rely on. We do not knowingly collect personal data from children under 16, and if you believe we have, contact [email protected] and we will delete it promptly.

Runners aged 16 and 17: we recommend a parent or guardian read this policy with you. Your activities start Private, and the setting worth looking at is your profile, which starts visible to other runners (see 4.3).

Race registration is different and stricter. A runner under 18 cannot sign themselves up for a race through Kåduka today. An adult must enter them.

13. Your Rights at a Glance: All Regions

Regardless of where you live, the following rights apply to your data. How to exercise them is covered in Sections 14 to 16.

14. European Residents: Full GDPR Rights

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and equivalent national laws apply to your data. This section supplements Sections 5 and 13.

14.1 Data Controller

Kåduka, LLC is the data controller for your personal data. Contact: [email protected] | 9611 SW Bank Rd, Vashon, WA 98070, United States.

14.2 Special Categories of Data (GDPR Article 9)

Health data is a 'special category' under GDPR and requires explicit consent. The only health data we hold is what your watch sends with a workout, so we hold it only because you connected that watch or uploaded that file, and you can disconnect at any time without penalty. We hold no biometric data: Kåduka has no fingerprint or face login.

14.3 International Data Transfers

Kåduka is based in the United States. When we transfer your data outside the EEA or UK, we rely on one or more of the following approved safeguards:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Adequacy decisions where the destination country provides adequate protection.
• Binding Corporate Rules or other legally approved transfer mechanisms.

You may request a copy of the applicable safeguards by contacting [email protected].

14.4 Additional GDPR-Specific Rights

• Right to object to processing for direct marketing (Art. 21). We will honor this immediately, without exception.
• Right not to be subject to solely automated decision-making with significant effects (Art. 22).
• Right to lodge a complaint with your EU supervisory authority. A full list is available at edpb.europa.eu.

14.5 Response Timelines Under GDPR

We will respond to all GDPR rights requests within 30 days of receipt. For complex or numerous requests, we may extend this by up to two additional months, but we will inform you within the first 30 days if an extension is needed.

14.6 Our Legal Bases

Every kind of processing we do is listed in Section 5, and each one relies on one of: Art. 6(1)(a) consent; Art. 6(1)(b) contract; Art. 6(1)(c) legal obligation; Art. 6(1)(f) legitimate interests. For health data, which is a special category, we rely only on Art. 9(2)(a) explicit consent.

15. United States Residents: State Privacy Rights

Depending on your state of residence, you may have additional rights under state privacy laws including the California Consumer Privacy Act (CCPA/CPRA), Virginia CDPA, Colorado Privacy Act, Connecticut Data Privacy Act, and equivalent laws enacted in other states.

15.1 Categories of Personal Information Collected (CCPA Reference)

15.2 Your California and State-Specific Rights

• Right to Know: what categories of personal information we collect, use, and disclose (we do not sell).
• Right to Delete: request deletion of your personal information (subject to limited legal exceptions).
• Right to Correct: request correction of inaccurate personal information we hold.
• Right to Opt Out: opt out of any 'sale' or 'sharing' of personal information. We do not sell data, but you may contact us to confirm your status.
• Right to Limit Use of Sensitive Information: restrict our use of sensitive personal information to only what is necessary to provide the service.
• Right to Non-Discrimination: we will never deny service, charge you more, or provide lower quality service because you exercised a privacy right.

To exercise these rights, email [email protected] from the address associated with your account. We will verify your identity and respond within 45 days, or the period required by your state's law.

16. Downloading and Deleting Your Data

16.1 Getting a Copy of Your Data

You can ask us for a complete copy of your personal data at any time. There is no button for this in the app yet, so today it is an email and we handle it by hand. Your copy will include:

• Your full run and route history, including the GPS routes, in a machine-readable format.
• Your account profile, preferences, and privacy settings.
• Your health and activity metrics.
• Your friends, clubs, badges and race entries.

How to ask: email [email protected] with 'Data Export Request' as the subject, from the address on your account. We will send your copy within 30 days, in a format you can import into other services.

16.2 Deleting Individual Activities

You can delete any individual activity, including its full GPS route, directly from within the app at any time. This one you can do yourself, right now, with no need to ask us.

16.3 Deleting Your Entire Account

You can have your Kåduka account and the personal data in it permanently deleted at any time. There is no button for this in the app yet either, so today you ask us and we do it:

• Email [email protected] with the subject 'Account Deletion Request', from the address on your account.
• We confirm it is you, delete the account, and tell you when it is done.

Account deletion is permanent and cannot be undone. Upon deletion:

• Your profile, activities, GPS routes, health metrics, photos and friend connections are permanently removed within 30 days.
• Aggregate counts your runs contributed to, such as how many people have run a trail, may remain, because they cannot be linked back to you.
• Payment and race-entry records are kept for 7 years where tax law requires it, and are not reachable through the app.
• Copies in our providers’ backups age out according to their retention windows.

16.4 Verification

For security, we will verify your identity before processing any export or deletion request. This typically means confirming access to the email address associated with your account. We will respond within 45 days, or the period required by applicable law.

17. Do-Not-Track

Some browsers send a Do-Not-Track or Global Privacy Control signal. Kåduka does not detect either signal today, so we want to be clear that turning it on in your browser does not currently change what we collect.

What it would normally be asking us to stop, we do not do anyway: there is no advertising on Kåduka, no ad network, no targeted marketing and no data sold or shared with advertisers. The one thing a DNT signal would reasonably cover is our product analytics, including session replay, and you can switch that off yourself: open kaduka.app/?kdk_analytics=off and run.kaduka.app/?kdk_analytics=off once in each browser you use. Section 7 explains this in full.

18. Policy Updates

We may update this Privacy Policy as our practices, technology, or legal obligations evolve. When we do:

• The 'Effective Date' at the top of this document will change.
• For significant changes, we will provide at least 30 days' advance notice via the app and by email.
• Your continued use of Kåduka after the effective date constitutes acceptance of the updated policy.
• If you do not agree with a change, you may delete your account before the effective date at no penalty.

We will never reduce your privacy rights through a policy update without giving you the opportunity to opt out or delete your account first.

19. Contact Us

If you have any questions, concerns, or requests about this policy or your personal data, please reach out:

We aim to respond to all enquiries within 30 days, or as required by applicable law.