seshPrivacy
Plain language. Effective August 19, 2026. Sesh is young and this policy will evolve with it — when it changes, we'll post the new version here and bump this date.
What we collect
- On the waitlist: your email address and anything you write in the optional note. It goes on a list a person reads by hand — there's no automatic reply.
- Your account: your email, display name, rider color, and date of birth. Your date of birth is used once to apply age-appropriate privacy defaults and is never shown to other riders.
- Your rides: GPS tracks — position, altitude, speed, heading, accuracy — recorded while you ride, including in the background (see below). This is what makes Sesh work: your runs, your laps, your day.
- Device and app telemetry: in-app events (screens, recorder state) — and the app version, device model and OS version those events came from — used to debug problems, and crash reports sent to Sentry. When a ride starts we also record your phone’s power-management and location-permission settings, so a recording that fails can be told apart from a phone setting that blocked it. Crash reports pass through a scrubber that masks coordinates and credentials before anything leaves the server.
- Bug reports: what you write, plus the app context and a screenshot of the current screen attached to the report.
Aggregate usage counts. To understand which features riders actually use, we also keep running tallies across the app — how many rides get recorded, how many accounts exist, which features are used, and the like. These counts are aggregate and de-identified: they are not tied to your profile, they contain no location, and only an admin can see them. They exist to help us decide what to build next, not to track anyone.
Background location
While you're recording a ride, Sesh collects your GPS position in the background — including when your screen is off or you're in another app. We use it for exactly two things: recording your ride (so your runs and laps come out whole, not just the parts where the app was open) and showing your live dot to your crew while you're out. Background location stops when you stop recording. We do not sell your location, and we do not share it with data brokers or advertisers. Ever.
Who sees what
- Your live dot: only riders you've accepted as friends can see you live (plus you, seeing yourself). And a dot only broadcasts at all while you're actively recording, at the same park, on the same day, with live sharing on and ghost mode off. Live positions are held in memory and never stored.
- Your rides: every ride and every day has a visibility setting — public, friends, or private. "Public" means visible to Sesh members (the app is invite-only — there is no open internet audience). "Friends" means riders you've mutually accepted. "Private" means you, full stop. Marking a day private hides every run in it, whatever the runs are set to.
- Leaderboards: only show runs you've made visible, and you can opt out of leaderboards entirely — your rides stay visible where you've shared them, but you stop appearing in rankings.
- Your name and color: visible to other members, so friends can find you and filters work.
- Admins: privacy settings apply to admins too — there is no admin bypass on ride-data reads. An admin can issue a one-time sign-in code to help a locked-out rider, and every use of that power is written to an audit log.
How long we keep it
- Ride data: until you delete it or delete your account. One honest wrinkle: deleting a single ride day removes the processed version (runs, tracks, times), but the raw recording stream it was cut from is kept so a day deleted by mistake can be rebuilt. Deleting your account removes the raw streams too.
- Aggregate usage counts: the de-identified tallies above are not tied to your account, so they survive account deletion — they persist after you're gone, and they cannot be traced back to you.
- Raw recording streams: the GPS stream from each recording session is retained as uploaded so a day deleted by mistake can be rebuilt. Points inside your privacy zone are the exception — from the moment you set one, they are dropped at upload, before they are ever stored, using the same zone and radius your processed tracks use. Rides you recorded before setting a zone are covered too: setting or moving a zone deletes the in-zone points from your stored tracks and from the raw streams of every ride already on file, in the same request. That deletion is permanent and we cannot undo it — which is the point, but it also means a ride can no longer be re-cut through the part of it that was inside your zone. Whether and when raw streams get aged out generally is still an open decision [RAW-STREAM AGE-OUT — not yet decided].
- App telemetry: in-app events are automatically deleted 90 days after we receive them.
- Bug reports: the screenshot attached to a report is automatically deleted 30 days after we receive it — it can show your surroundings and other riders, and once the report has been looked at it has done its job. The report itself (your message and the app context) is deleted after 180 days. Deleting your account removes your reports immediately.
- Live positions: never stored in the first place.
Your controls
- Privacy zone: set a home zone and GPS points inside it are never written into your stored tracks — they're dropped both when your ride is processed and at raw-stream upload, with a radius that varies per ride so your track starts don't trace a neat circle around your house. Be clear-eyed about what this is: it raises the cost of finding your home from your tracks; it does not make it impossible for a determined observer.
- Ghost mode: go invisible on the live map with one tap, or set your account to always start rides invisible.
- Live sharing switch: turn live location sharing off entirely — the server drops your positions even if the app sends them.
- Visibility settings: set every ride and every day to public, friends, or private, and pick your default.
- Leaderboard opt-out: compete or don't. Your call.
- Export: download a ZIP of your profile, ride summaries, and your tracks as GPX files, any time.
- Deletion: delete your account yourself, permanently. See how to delete your account.
No ads. No selling your data.
Sesh has no ads, no trackers for advertisers, and no side business in your data. We don't sell your location or your riding data to anyone. If that ever changed, it wouldn't be quiet — we'd say so here first.
Not a safety device
Sesh is a recording and social app, not a safety service. Don't rely on the live map for emergencies or rescue — see our Terms for the full version.
Children
Sesh is not directed at children under 13, and you must be at least 13 to have an account. We don't knowingly collect personal information from anyone under 13 — signup asks for a date of birth, and under-13 signups are declined without storing anything. If we learn an account belongs to someone under 13, we'll deactivate it and delete its data. Riders under 18 start with the most protective settings: live sharing off and rides private by default.
Contact
Questions about your data: [SUPPORT ADDRESS — mailbox pending #569].