The Pursuit · Bud Labs
Effective date: August 25, 2026 · Contact: lukelew@stanford.edu
Who we are
The Pursuit is a training log for track & field athletes and coaches, operated by Bud Labs (“we”). This policy covers The Pursuit iOS app and the web app at throws-log.vercel.app.
What we collect
- Account information: your email address and a password (stored as a hash by our authentication provider). Sign-in is email/password only — no social logins.
- Date of birth: collected once when you set up your account, used to confirm eligibility and, for adults who opt in, research participation; never visible to coaches.
- Training data you log: session marks, throw counts, lift work, RPE (effort), sleep and readiness ratings, technical cue tags, and plan notes. This data is yours; we store it so it syncs across your devices and, if you join a coach’s roster, so your coach can view it.
- Coach–athlete links: if you join a roster via a join code, we store the link between your account and the coach’s. Coaches see linked athletes’ training data read-only. You can leave a roster at any time in the app.
- Diagnostics: our servers use crash/error monitoring (Sentry) with personal information scrubbed from messages, tags, and breadcrumbs.
Wearables (WHOOP and Oura)
Connecting a wearable is optional and off by default. We read nothing from WHOOP or Oura unless you connect them yourself in the app and approve it on the vendor’s own sign-in page.
- What we read: for each night, your sleep duration and stages (light, deep, REM, awake), time in bed, how long you took to fall asleep, heart-rate variability, resting and lowest heart rate, respiratory rate, blood-oxygen percentage, and skin-temperature deviation; and for each day, your recovery score, strain, and calories burned. We read only what the vendor provides under the permissions you approve — we never read your location, workouts logged in the vendor’s own app, or anything you have not connected.
- Why: so your sleep and readiness sit beside the training you logged, and so the app can relate the two. It is the same “show its receipts” idea as the rest of your log — the numbers stay yours and stay attributed to the device that measured them.
- Where it lives: with Supabase, alongside the rest of your training data. The access keys that let us talk to WHOOP or Oura on your behalf are encrypted before they are stored and are never sent to your phone or browser.
- Who can see it: you. A coach whose roster you have joined can see your sleep only if you turn sleep sharing on in the app — it is off by default and you can turn it off again at any time. Recovery, strain, calories and the rest are never visible to a coach.
- Age: you must be 18 or older to connect a wearable. This is enforced on our servers, not just in the app.
- Disconnecting: disconnecting in the app deletes the device data we have stored for that provider and asks WHOOP or Oura to revoke our access. You can also revoke our access directly in your WHOOP or Oura account at any time.
- If you delete your account: we ask WHOOP and Oura to revoke our access before anything is deleted, then delete your account and its data. If that request to the vendor fails, we still delete your account — you are never left with an account you asked us to remove.
What we don’t collect
No location, contacts, photos, camera, microphone, browsing history, or advertising identifiers. We do not sell or share your data with third parties for marketing, and we do not use your data for cross-app tracking.
Research participation
Adults may optionally opt in to share a de-identified copy of their training data to help build population baselines for the sport. Participation is off by default; you choose it explicitly and can turn it off anytime in your Profile. Shared data carries no name, no email, and no exact date of birth — your account identifier is replaced with an irreversible pseudonym and your date of birth is reduced to a coarse age band. Free-text notes are never included. Minors are never enrolled. If you turn participation off, your data is removed from the research store on the next update.
Where your data lives
Training and account data are stored with Supabase (our database and authentication provider). Data in transit is encrypted (HTTPS). Logging works offline on your device and syncs when you’re back online.
AI features
The “Bud” analysis in the app is computed from your own training data. When phrasing insights, a summary of already-computed, de-identified findings (never your raw session dates or personal details) may be sent to an AI provider (Anthropic) to generate wording. The numbers you see are always computed deterministically from your data, not by the AI.
Data retention & deletion
Your data is retained while your account is active. You can delete your account and all associated training data from within the app (Profile → Delete account); deletion is immediate and irreversible.
Children
The Pursuit is intended for athletes 13 and older. If our age screen indicates a user is under 13, we do not create the account and we delete anything entered during signup. We do not knowingly collect data from children under 13.
For athletes under 18
If you are under 18, the data a linked coach can see is limited to the training entries you log and the season goal you set in the app; coach links are athlete-initiated by join code and revocable from either side at any time. We do not use your data for research without adult consent (a guardian consent flow is not offered yet).
Changes
We’ll post any changes to this policy at this URL and update the effective date above.