Legal

Privacy Policy

Last updated 3 August 2026

This explains what Segment Hunter collects when you connect your Google and Strava accounts, why, and what say you have over it. It's written in plain English on purpose — if anything's unclear, get in touch.

01Who this covers

Segment Hunter (“we”, “us”) is a small, UK-run app that connects to your Strava account to help you find KOM/QOM segments within reach and compare yourself against friends. This policy covers anyone who signs in at segmenthunter.co.uk.

02What we collect

From Google, when you sign in: your name, email address, and profile photo. We use this only to identify your account — we never see or store your Google password.

From Strava, when you connect it: your athlete ID, sex (used only to decide whether to compare you against the KOM or QOM), profile photo, and OAuth access/refresh tokens. Those tokens let us fetch your activities and segment efforts on your behalf, in the background, without you needing to be present. We never see your Strava password.

Activity and segment data: for segments you've actually ridden or run, we store the segment name, sport, distance, grade, your personal best time, the current KOM/QOM time, and the gap between them. We do not import your full GPS tracks — only a simplified route outline already provided by Strava's API for the segments involved.

Head-to-Head data: if you challenge another Segment Hunter user and they accept, your segment times become visible to each other for shared segments, so we can show a win/loss tally. Nothing is shared until both sides have accepted.

Push notifications: if you opt in, we store your browser's push subscription endpoint and keys so we can deliver alerts. You can revoke this at any time from your device or in-app settings.

Payment data (Segment Hunter Pro): if you subscribe, payment is handled entirely by Stripe. We never see or store your card details — we only keep a Stripe customer/subscription reference and your subscription status, so the app knows what you're entitled to.

Cookies: a session cookie that keeps you signed in, and a short-lived cookie used only during the Strava connection handshake to prevent forgery. No advertising or tracking cookies.

03How we use it

  • To authenticate you and keep you signed in.
  • To fetch your Strava activities and compute your KOM/QOM gaps.
  • To run Head-to-Head comparisons you and a friend have both agreed to.
  • To send the notifications you've opted into.
  • To process and manage a Segment Hunter Pro subscription, if you have one.

We don't use your data for advertising, and we don't sell it to anyone.

04Who we share it with

Only the services that need it to make Segment Hunter work: Strava (to fetch your activity data), Google (to sign you in), and Stripe (to process a Pro subscription, if you have one). Your data is also stored with our hosting/database provider, Supabase, on servers in the UK/EU.

We share your name, photo, and shared-segment times with another Segment Hunter user only once you've both mutually accepted a Head-to-Head challenge.

We don't share your data with anyone else, and we don't sell it.

One thing to be aware of: because Segment Hunter is built on Strava's API, Strava may monitor and collect data about our use of its API (such as request volumes and which endpoints we call) and may use that usage data for its own business purposes, as described in the Strava API Agreement.

05How long we keep it

Per Strava's own API terms, we don't hold cached segment data for longer than seven days without refreshing it against Strava directly — anything older is automatically refreshed or deleted on your next sync.

If you disconnect Strava from within the app, your Strava tokens and all cached segment data are deleted immediately. Your account (name, email) remains so you can reconnect later, unless you ask us to delete it entirely.

Want everything gone? Email us (below) and we'll delete your account and all associated data.

06Your rights

Under UK GDPR, you can ask us to: give you a copy of your data, correct anything inaccurate, delete your data, restrict or object to how we use it, or move it elsewhere. To exercise any of these, just email us. If you're not satisfied with our response, you can complain to the UK Information Commissioner's Office (ico.org.uk).

07Security

All traffic to and from Segment Hunter is encrypted (HTTPS). OAuth tokens are stored server-side only and are never exposed to your browser. As with any online service, no method of storage or transmission is 100% guaranteed, but we take reasonable, standard precautions to protect your data.

08Age

Segment Hunter isn't directed at children, and you must be old enough to hold a Strava account in your own right to use it.

09Changes

If this policy changes materially, we'll update the date at the top of this page. Continuing to use Segment Hunter after a change means you accept the update.

10Contact

Questions, requests, or concerns about your data: hello@segmenthunter.co.uk.