Privacy.
What we collect, why, who else touches it, and how to delete it.
Last updated 24 October 2026
Who we are
Stayer is run by Nikola Stamatovic, Belgrade, Serbia. Email contact@getstayer.com. We answer within 30 days, usually much sooner.
We decide how your data is used, which makes us the controller under UK and EU data protection law.
What we collect
- Your email address, and your name if you give one or sign in with Google.
- From the briefing: your year of birth, weight, sporting background, current training, the hours and days you can train, and your race.
- From the health check: your answers to the screening questions, and any injuries you tell us about.
- Everything you log: how sessions felt, morning check-ins, injuries and illness, gear, fuelling, race results.
- Workout files you upload.
- If you add it, the town you train in, for the weather forecast.
- If you join the community: your display name, posts, photos and comments.
- For keeping your account safe: the IP address and browser of each signed-in device.
- If you joined the waiting list before opening an account, the address you left.
- If you joined through a friend's invite, or invited someone, that the invite happened. Neither of you is shown the other's name or anything else about them.
We don't ask for your height, sex or medical history, because the plan doesn't use them.
Why we use it
| What | Why | Legal basis |
|---|---|---|
| Account and training data | To build your plan, change it and show it to you | Contract: it's the service you signed up for |
| Health check answers and injuries | To keep the plan safe for you | Your explicit consent, which you can withdraw |
| Training emails | Reminders and weekly summaries you can turn off | Contract, and you can switch each one off |
| Waiting-list address | One email when the app opens | Your consent |
| Device IP and browser, error reports | Keeping accounts secure and fixing bugs | Legitimate interest in a safe, working service |
| Page view and usage counts | Knowing which pages and features people use, and where sign-up gets stuck | Legitimate interest. No cookies, nothing that identifies you |
Health information
Your health check answers and anything you tell us hurts are health data, which UK and EU law treats as special category data. We only store them with your explicit consent, which the health check asks for. You can skip it. The plan still works; it just knows less about you. We use this data only to decide what your plan asks of you. We don't share it, sell it or use it to profile you.
To withdraw consent, clear your health answers in Settings. That removes them from our database straight away.
Who else processes it
These companies run parts of Stayer for us. Each has a contract with us that only lets them use your data to provide that service.
| Company | What they do | Where |
|---|---|---|
| Neon | Stores your account and training data | Frankfurt, Germany |
| Vercel | Runs the site and counts page views and usage without cookies | Frankfurt, Germany, with a US parent company |
| Vercel Blob | Stores community photos | United States |
| Resend | Sends our emails, including sign-in codes | Ireland, with a US parent company |
| Sentry | Records technical errors, without your email or training data | United States |
| Signs you in, only if you choose Continue with Google | Global | |
| WeatherAPI.com | Weather forecasts. Receives only your town's name and coordinates | United Kingdom |
| Polar (Polar Software, Inc.) | Takes payment as the seller on your receipt and handles tax. Receives your name, email, country and payment details. We never see your card | United States |
| Have I Been Pwned | Checks a new password against known breaches. Receives the first 5 characters of its hash, never the password | Global |
Where data goes to the United States, it's covered by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses, and the UK equivalents.
The community
Joining the community is optional. If you join, your display name, posts, photos and comments, and the race you're training for (unless you turn that off) are visible to other signed-in Stayer athletes. They aren't public on the internet. Photos are shrunk in your browser before upload, which removes the location data phones store in them.
Cookies
We only use cookies that keep you signed in or remember a choice you made. There are no tracking or advertising cookies. The full list is on the cookies page.
What we never do
Sell your data. Share it with advertisers. Use your training or health data to train AI models. Put third-party tracking on this site.
How long we keep it
- Your account and training data: until you delete your account.
- Health answers: until you clear them or delete your account.
- Waiting-list addresses: deleted when you open an account, 30 days after the launch email, or when you ask.
- Sign-in codes: 10 minutes. Signed-in devices: 60 days after last use.
- Error reports: 30 days.
- On Free, notes on what Pro would have changed in your plan, used in your weekly email: 30 days.
- A record that an account was deleted, holding only an internal ID and no personal details, so we can show we did it.
Your rights
You can see, download, correct and delete your data, object to how we use it, ask us to stop using it while a question is sorted out, and take it elsewhere. Download everything we hold, or delete your account, from Settings. Deletion is immediate and removes your photos too.
Can't sign in? Email contact@getstayer.com from the address on your account and we'll do it for you within 30 days. If you're unhappy with how we handle your data, you can complain to your data protection authority. In the UK that's the ICO.
Age
Stayer is for people aged 18 and over. We don't knowingly hold data about anyone younger. If you think we do, email us and we'll delete it.
Changes
If we change how we use your data, we'll update this page and email you before the change takes effect.