Privacy Policy

§1Data at a glance

The short version — read on below for the full detail on each row.

§2Information we collect

Account & role

When you create a Threshold account, we collect your name and email address, and either a password or your Google account identity if you sign in with Google. Your account is set up as a rower, coach, or parent, and belongs to one rowing club — which determines what you see and who can see your information.

Athlete details

Rowers can optionally add weight, height, birthdate, school, and grade, and select a training group set up by their club. Coaches use these to balance and rig boats and build lineups — none of it is required to use the app.

Workouts & performance

Erg pieces (meters, splits, watts, duration), on-water rows, seat race results, and personal records are logged either by you, your coach, or automatically through a connected app (below). This is the historical record the team's leaderboards and PR tracker are built from.

Location data

While a rower or coxswain is actively using Live Tracking during a practice, Threshold records GPS coordinates and speed at short intervals to show the boat's position on the coach's map in real time, compute splits and stroke rate, and let that row be replayed later. Location is only collected while a tracking session is running. In the iPhone app, a tracking session keeps recording your route if you lock your screen or switch to another app, so a row isn't interrupted — iOS shows a blue location indicator whenever this is happening, and recording stops as soon as you finish or stop the row. Threshold does not track your location outside of an active practice session.

Face ID, Touch ID & passkeys

If you turn on Face ID lock or passkey sign-in in the app, the face or fingerprint check is performed by iOS on your device. Threshold never receives, stores, or transmits your face or fingerprint data. A passkey stores only a public key with our sign-in provider — never a secret that could be used elsewhere.

Attendance & volunteering

Marked absences (and any reason you give) and volunteer event sign-ups or logged hours are stored so coaches can plan lineups and the team can coordinate events.

Push notification data

If you turn on notifications, your device is issued a push token (via Apple Push Notification service on iOS) so Threshold can send you practice reminders, schedule changes, and messages from your coach. The token identifies your device for delivery — it doesn't contain personal information on its own.

Connected third-party accounts (optional)

You can choose to connect a Concept2 Logbook account, a Strava account (used to pull in workouts synced from a Coros watch), or Apple Health (via the free "Health Auto Export" app) so your workouts import automatically. Threshold only receives the workout data those services are authorized to share, and only for as long as you keep the connection active — you can disconnect any of them at any time from Settings.

Club billing (billing owners only)

Threshold is paid for by the club. The coach who sets up a club's subscription (the billing owner) is redirected to Stripe's secure checkout page to pay. Threshold keeps the billing owner's name and email address, the club's subscription status (for example, trial, active, or past due), and a Stripe customer and subscription reference. Card numbers and other payment details are entered on Stripe's own pages and are never seen or stored by Threshold. Rowers and parents are never asked for payment information.

If you're a parent

We store which athlete(s) on the roster you're linked to, so your home screen and the Volunteer/Absences tools can act on their behalf.

§3How we use it

Threshold uses the information above to run the team: signing you in and routing you to the right home screen; building boat lineups and rigging boats; showing leaderboards, PR history, and route replays; letting coaches take attendance and plan around absences; coordinating volunteer events; and sending you practice or schedule notifications. We don't use your information for advertising, and we don't sell it to anyone.

§4Who can see it

• Coaches can see their own club's full roster profile details, performance history, attendance, and telemetry — the same way a coach would with a paper roster and stopwatch, digitized.
• Teammates see each other's names, results, and PRs on shared leaderboards and PR boards — that visibility is the point of a team leaderboard.
• Parents only see the athlete(s) they're linked to, plus the team calendar and volunteer sign-ups. A parent cannot see other families' athletes.
• Siblings can access each other's accounts only if you explicitly set up an Account Switch link between them from Settings — either side can remove that link at any time.
• Other clubs see none of it. Each club's data is kept separate from every other club's, and nobody outside your club's coaches, teammates, and linked parents sees your Threshold data. The people who operate Threshold can access the underlying database as needed to run and support the service. We don't share your data with advertisers or unrelated third parties.

§5Third-party services we use

Threshold is built on a small number of services that process data on our behalf, each only for the purpose below:

• Supabase — hosts our database, authentication, and backend functions. All Threshold data lives here.
• Google Sign-In — an optional way to create or log into your account without a separate password.
• Apple Push Notification service (APNs) — delivers notifications to the iOS app.
• Stripe — processes club subscription payments. Only a club's billing owner interacts with Stripe, and Stripe handles the card details under its own privacy policy.
• Concept2, Strava, and Apple Health — only exchange data with Threshold if you explicitly connect them, and only for your own workouts.
• OpenStreetMap — provides the map tiles shown behind Live Tracking and route replays. Your device requests the map images directly, so OpenStreetMap's servers see your IP address and which area of the map is being viewed (never your name or account).
• Google Fonts, jsDelivr, and unpkg — deliver the typefaces and a few code libraries the website loads. Like any web request, these services see your IP address and browser type when the files are downloaded. They don't receive any Threshold account information.

None of these services are permitted to use your Threshold data for their own advertising.

§6Cookies & local storage

Threshold doesn't use advertising or analytics cookies, and doesn't track you across other websites or apps. Threshold itself doesn't set any cookies at all.

To work, the website and the iPhone app keep a few small items in your browser's or device's local storage:

• Your sign-in session, so you stay logged in between visits. It's sent to our servers only to prove who you are.
• Which kind of account you last signed in as (rower, coach, or parent), so you land on the right screen.
• Display preferences you choose, such as phone or desktop layout, list filters, collapsed sections, the Live Tracking auto-pause setting, and reminders you've dismissed.
• Account Switch: if you switch into a sibling's account, your own session is kept on the device so you can switch back.

These items are strictly necessary for the service or simply remember choices you made, so we don't show a cookie consent banner. Logging out removes your sign-in session, and clearing your browser's site data (or deleting the app) removes everything else.

Pages run by other companies: if you sign in with Google or, as a club's billing owner, pay through Stripe Checkout, those pages are run by Google or Stripe and may set their own cookies under their own privacy policies.

§7Data retention & account deletion

We keep your information for as long as your account is active. You can delete your own account at any time from Settings → Delete my account (in the Coach Hub for coach accounts) — no need to email anyone first.

If you'd like your historical results removed entirely rather than anonymized, contact us at thresholdrowing@gmail.com and we'll take care of it.

§8Children & minors

Threshold is for people aged 14 and older. It is not directed to children under 14, and we do not knowingly collect personal information from them. Many rowing clubs include high school athletes, so Threshold is used by teenagers aged 14 to 17 under a coach's and parent's supervision as part of a team's normal operation. Accounts for athletes under 18 should be set up with a parent's knowledge, and a parent can link themselves to their athlete to see their absences, volunteer activity, and workout completion. If we learn that we have collected personal information from someone under 14, we will delete the account and that information. A parent who wants to review, correct, or delete their child's information, or who believes a child under 14 has an account, can contact us at thresholdrowing@gmail.com at any time, in addition to the in-app options above.

§9Your choices

• Update your profile details anytime from Settings.
• Turn notifications on or off from Settings.
• Disconnect Concept2, Strava, or Apple Health at any time — Threshold stops receiving new data immediately.
• Remove an Account Switch link to a sibling at any time.
• Delete your account at any time (see §7).

§10Security

Passwords are hashed, never stored in plain text, and all traffic between the app and our servers is encrypted in transit. New passwords must be at least 8 characters and are checked against lists of passwords exposed in known data breaches. Sign-in attempts, join-code guesses, and other sensitive actions are rate-limited to block automated guessing. Access to your data is restricted by row-level security policies scoped to your account, role, and club — a rower's own data, a coach's club roster, and a parent's linked athletes each have their own access rules enforced at the database level, not just in the app's interface.

§11Changes to this policy

If this policy changes in a meaningful way, we'll update the effective date above and let the team know through the app.

§12Contact

Questions, concerns, or a data request of any kind: thresholdrowing@gmail.com.