Privacy Policy
Last updated 18 August 2026
The short version. Cometrail has no account, no login, and no analytics. Your workouts and routes are stored on your device. Two things do leave it: map requests go to Mapbox so the map can draw, and Strava sign-in passes through a token exchange endpoint. Neither receives your Apple Health data.
Who we are
Cometrail is an iOS app built by Dinakar Tumu. This policy explains what the app does with your information. Questions go to dinakartumu@gmail.com.
What we collect about you
Nothing. Cometrail has no user accounts and no sign-up. There is no analytics SDK, no crash reporting service, no advertising identifier, and no tracking of any kind in the app. We do not operate a server that stores your data, and we cannot see your workouts.
Apple Health data
If you grant permission, Cometrail reads workouts and their route location samples from Apple Health. This is read-only — the app never writes to Apple Health.
- Health data stays on your device. It is not transmitted to us or to any third party.
- It is never used for advertising, marketing, or sold to anyone, and it is never shared with data brokers.
- You can revoke access at any time in iOS Settings → Privacy & Security → Health → Cometrail.
Strava
Connecting Strava is optional. If you connect it:
- You sign in on Strava's own website. Cometrail never sees your Strava password.
- The authorization code and subsequent refresh tokens are sent to a token exchange endpoint operated for Cometrail, which swaps them for an access token. This step exists because Strava requires a client secret that cannot safely be shipped inside an app. That endpoint handles authentication only — your activities do not pass through it, and tokens are not retained after the exchange.
- Your activities are then fetched directly from Strava to your device and cached locally so the app works offline.
- Disconnecting Strava in Settings removes the stored activities and tokens from your device.
Strava's own handling of your data is governed by Strava's privacy policy.
Maps
Maps are provided by Mapbox. To draw the map, the Mapbox SDK requests tiles for the geographic area you are viewing, which means Mapbox receives the map coordinates being displayed and standard request metadata such as your IP address. The Mapbox Maps SDK also collects its own usage telemetry. This is handled under Mapbox's privacy policy.
This is the one place where information related to where you have been can reach a third party, so it is worth stating plainly rather than burying.
Photos
When you export a video, Cometrail asks for add-only access to your photo library and writes the finished file there. It cannot read your existing photos.
What is stored on your device
Workouts and routes imported from Apple Health and Strava, your Strava access tokens, and your app settings — date range, map style, trail appearance, export options. All of it lives in the app's own storage.
Deleting your data
- Disconnect a source in Settings to remove what came from it.
- Delete the app to remove everything Cometrail has stored, including tokens and settings.
- Revoke Cometrail's access from your Strava account settings and from iOS Settings for Apple Health.
Children
Cometrail is not directed at children under 13, and we do not knowingly collect information from them. Since the app collects nothing, there is nothing for us to delete.
Changes
If this policy changes, the date at the top changes with it. Material changes will be noted in the app's release notes.