Privacy
Your position, your call.
Aster only knows where you are when you decide to share it. This page says what we collect, how location is used, and the controls you have over both — in plain English.
Last reviewed 19 June 2026
Aster is in pre-beta development and not yet publicly released. This page describes how the product handles data today and the principles that guide it. It will grow more formal as we approach launch; if anything here is unclear, email privacy@astertrack.app.
What we collect
- Account details. The email address and profile information you provide at sign-up, so we can identify your account and send transactional email (sign-in, race notifications you opt into).
- Location data — only during a ride you start. When you tap Start, the app records GPS positions (“pings”) for that ride. Nothing is recorded before you start or after you stop.
- Ride and event data. The events you register for, your routes, distances and times, and any posts or comments you choose to publish.
- Basic technical data. The minimum needed to keep the service running and reliable — we don’t sell it, and we don’t build advertising profiles from it.
How location is used
Location exists to do one job: show your live position and trail to the people you’re sharing with, and to record your ride so you can review it afterwards. It powers the live map, the leaderboard, your distance and time, and — if you ask for it — the Alert that lets an organiser find you.
Sharing is never on by default. A deliberate share action is always required, and you choose who can see you, what they see, and for how long.
Sharing & visibility controls
Off by default
Location sharing is never on until you turn it on. Nothing about where you are leaves the device until you decide it should.
One-tap revoke
Any active share can be stopped in one tap. No permanent shares run quietly in the background.
Time-bound
Shares are time-bound by default — for the next stretch, or until you stop — so exposure doesn't outlast the ride.
Watching needs no account
For public and unlisted events, anyone can open the link and watch — no login, no app to install. Watchers aren't asked to hand over an identity to spectate.
Private events are the exception — they require authentication, so only invited people can see the riders.
Data retention
Ride and trace data is kept so you can review your rides and so results stay accurate. Shared traces stop being visible when the share expires. When you delete your account, your location history is permanently removed.
We never sell or monetise location data, full stop.
Your rights
Aster already supports the core GDPR rights from inside the app:
- Access & export. Download a copy of your data.
- Deletion. Permanently delete your account and your location history.
- Correction. Edit your profile and ride details at any time.
Account deletion and data export live in the app under Settings → Privacy & data. For anything you can’t do yourself, email privacy@astertrack.app and we’ll handle it.
Data deletion
You can delete your Aster account, and everything held against it, at any time. To request deletion from inside the app:
- Open Aster and sign in.
- Go to Settings → Privacy & data.
- Tap Delete account.
- Confirm when prompted. The confirmation is a deliberate second step, because deletion cannot be undone.
If you have uninstalled the app, or you cannot sign in, email privacy@astertrack.app from the address on your account and we will action the request for you. We answer deletion requests within 30 days.
If an activity is still running, stop or finish it first. We refuse a deletion while tracking is live, so that a ride or run in progress is not destroyed underneath the device still recording it.
What is deleted. Your account and profile, your email address, every activity and its complete location history, your event entries, alerts, notifications, push registrations, follows, shared links, and any messages you wrote. Your sign-in identity is removed with them. This happens immediately, it is permanent, and there is no recovery period afterwards.
What is kept. Records of payments you made are held in anonymised form, with the link to your account removed, because transaction records have to be kept for accounting and tax. They no longer identify you. Nothing else is retained.