Privacy Policy

Who we are

Stride Hub is run by Stride Technologies Limited, a company registered in Ireland (company number 820026), with its registered office at 2 Kindlewood, Fire Castle Lane, Kildare Town, Co. Kildare, R51 CY22, Ireland. In this policy, "we" and "us" mean Stride Technologies Limited.

For any question about your personal data, email hello@stridehub.app. Stride Hub has appointed a Data Protection Officer. To reach them, email hello@stridehub.app, for the attention of the Data Protection Officer.

This policy covers the Stride Hub apps for iPhone, iPad and Android, the Stride Hub web app, and the stridehub.app website. We launch in Ireland.

Organisations and us

Stride Hub is used by riding schools, livery yards, show organisers, equestrian professionals, racing yards and studs ("organisations"), and by riders, owners and parents with their own accounts.

• Your own account. As a rider, owner or parent, we decide how your account data is used. We are its controller.
• An organisation's records. When an organisation keeps records in Stride Hub about its customers, members, staff, horses and bookings, the organisation decides how those records are used and is their controller. We process them on its behalf. For records a yard, school or show keeps about you, contact that organisation first; we will help it answer.
• Show entries and results. The show organiser and Stride Hub each use entry and result data for their own purposes, and each is a controller for its own use.

What we collect

Account

Name, email address, phone number, sign-in method (email, phone, Google or Apple), language, and a profile photo if you add one. Passwords are held by our sign-in provider and are never readable by us.

Rider profile

First and last name, date of birth, nationality, the country you're based in, federation and club memberships with their expiry dates, an emergency contact, and a parent or guardian for riders under 18. Organisations may record a photo consent date.

Nationality is chosen from a list of countries and, like the membership expiry dates, is kept so your profile holds the eligibility details competitions ask for. These fields are visible only to you; they are not shown to organisations or other riders.

Health

A rider's medical notes, allergies and medications, only where you or an organisation choose to record them. Horses' health, vaccination, medication and passport records.

Horses

Names, passport and registration details, ownership, care records, documents, photos, show entries and results.

Organisations

Business details, staff and roles, members and customers, bookings, lessons, livery, invoices, stock, documents and messages.

Shows

Entries, classes, start times, scores, placings, stabling bookings, and health documents an organiser asks you to submit.

Payments

What you paid, for what, when, and refunds. Card details go straight to Stripe and never reach us. Organisations that take payments give Stripe their business and bank details.

Messages

Emails, texts and in-app conversations with an organisation, marketplace conversations with other users, delivery records for messages we send, and conversations with Sam.

Reports and blocks

When you report a message, listing or Sam answer, we keep the report, your note and a copy of the reported item as evidence. When you block someone, we keep the block. See Reporting, blocking and moderation.

Support messages

Your name, email address, topic, organisation name if you give it, and your message, when you use the support form. We do not store your IP address; a keyed, daily-changing hash of it is kept for up to a day to limit abuse. The form sets no cookies.

Photos and files

Photos and documents you choose to upload with the camera or photo library.

Technical

Push notification tokens if you allow notifications, app attestation data that confirms requests come from a genuine Stride Hub app, server logs, and error reports from the web app and our servers.

The mobile app does not collect your location, contacts or browsing history, and contains no advertising or third-party analytics.

How we use it, and our lawful basis

The GDPR only lets us use personal data where we have a lawful basis. These are ours, for the data we control.

Why we use personal data, and the lawful basis for each use

Purpose	Lawful basis (GDPR)
Creating your account, signing you in, providing the features you use	Contract, Article 6(1)(b)
Entering shows and publishing start times and results	Contract; keeping published results as a sporting record: legitimate interests, Article 6(1)(f)
Taking payments and refunds	Contract
Keeping financial records of payments made through Stride Hub	Legal obligation, Article 6(1)(c): Irish company and tax law
Recording a rider's medical notes, allergies and medications	Explicit consent, Article 9(2)(a)
Recording emergency contacts and guardians for young riders	Legitimate interests: rider safety
Service emails, text reminders and push notifications	Contract; legitimate interests for reminders
News and offers from Stride Hub	Consent, Article 6(1)(a), which you can withdraw at any time
Answering your questions through Sam	Contract: Sam is a feature you choose to use
Handling reports of content, blocking people and moderation	Legitimate interests, Article 6(1)(f): keeping people safe and the service lawful
Answering messages sent through our support form	Legitimate interests, Article 6(1)(f); for a privacy request or an account-deletion request, also legal obligation, Article 6(1)(c)
Keeping the service secure, preventing abuse, fixing errors	Legitimate interests
Counting visits to stridehub.app	Legitimate interests, without cookies

We do not sell personal data or use it for advertising. We do not make decisions with legal or similarly significant effects about you by automated means alone.

Health information

A rider's medical notes, allergies and medications are special category data under the GDPR. We record them only on the basis of explicit consent, Article 9(2)(a). When you add your own health information, or an organisation adds a rider's, a confirmation window first asks the person to confirm their explicit consent. For a rider under 18 that is a parent or guardian, and when staff record it they confirm the rider (or guardian) has consented. You can withdraw consent at any time: the information is hidden at once and deleted 90 days later unless consent is given again.

• Inside an organisation, staff access to medical and clinical records depends on their role. By default, front-desk, groom and read-only staff cannot see them.
• A rider's medical notes reach a show only when that show requires them.
• Push notifications never carry health information.

Horse health records are not special category data, but horse passports can show an owner's name and address, so we treat them with the same care.

Children and guardians

You must be 16 or older to create your own Stride Hub account, in line with the Data Protection Act 2018. A younger rider takes part as a rider managed from a parent's or guardian's account. This is stated as a notice at sign-up; it is not enforced by our servers.

For riders under 18, a parent's or guardian's contact details are recorded on the rider's profile. Organisations that teach or host children are responsible for the consents they collect from parents, such as photo consent. Show organisers see only whether an entrant is a minor and whether consent was given, not the guardian's details.

Sam, our assistant

Sam answers questions and helps with tasks for organisations using Stride Hub. It is not available on personal accounts. To answer, Sam reads the records the person asking already has access to. Sam's requests are processed by Google Vertex AI in European Union regions only, by default in Belgium; our code refuses any region outside the EU. Before a request is sent, email addresses, phone numbers and card numbers are removed from it. Show organisers can also use Sam to read photographed score sheets. Google does not use this data to train or fine-tune its models without our permission (Google Cloud Service Specific Terms, "Training restriction"). Sam conversations are kept for 12 months after the last message.

Reporting, blocking and moderation

You can report a message, a marketplace listing or a Sam answer, and you can block another user or stop messages from an organisation. How it works, and how fast we respond, is on our support page.

• Who sees a report. A report, your note and the evidence copy are visible only to Stride Hub's moderators, who work for Stride Technologies Limited. The person you report is not told who reported them.
• What we keep. Reports and moderation records are kept while a report is open and for 12 months after it is resolved. Then the reporter's identity and note are deleted, and only an anonymised outcome is kept.
• Blocks. If an organisation has blocked you and you delete your Stride Hub account, the block stays in place, so it still applies if you return with the same verified email address or phone number. It ends 24 months after you deleted your account or, if later, 24 months after the block last stopped a message from that email address or phone number. We keep only that email address or phone number with the block (no name and no messages), use it for nothing else, and the organisation can lift the block at any time. To ask for it to be lifted, contact the organisation or hello@stridehub.app.

Contacting us

If you email hello@stridehub.app or use the form on our support page, your message reaches our support mailbox. The mailbox is hosted by Google Workspace in Europe, and the form's message is delivered by Amazon SES in Ireland. Both are on our sub-processors page. We reply within 2 working days.

• We keep a record of each form message for 12 months, and for 24 months if it is a privacy request or a request to delete your account, so we can show we answered you in time.
• If you ask us to erase the record of a privacy request, we blank your name, organisation and message and keep the rest (your email address, the topic and the dates) for the 24 months, as evidence of the request.
• The form asks for your name and email so we can answer you. We will not use them for anything else, and we never add you to a mailing list.

Who we share it with

• Organisations you deal with. When you book with a yard or enter a show, that organisation sees what it needs to run the booking or the show.
• The public. Show listings, start times and published results, including rider and horse names, placings and scores, can be seen by anyone.
• Other users you talk to. A marketplace conversation is visible to the other person in it.
• Services an organisation connects. If an organisation connects accounting software such as Xero, QuickBooks or Sage, invoice and payment data goes to it under the organisation's own agreement.
• Authorities, where the law requires it.
• Our sub-processors, which run parts of the service for us: Google Cloud and Firebase: servers, databases and file storage; Firebase Authentication and App Check (Google); Firebase Cloud Messaging (Google); Google Vertex AI (Gemini models); Google Maps Platform; Stripe; Amazon Web Services (Amazon SES and SNS); Twilio; Sentry; Plausible Analytics; Google Workspace (our support mailbox). What each does and where, with its safeguard, is on our sub-processors page. Organisations get 30 days' notice by email before we start using a new sub-processor, and may object by cancelling their subscription.

Stride Hub does not currently share entries or results with Horse Sport Ireland, Dressage Ireland, Showjumping Ireland, Eventing Ireland, the Association of Irish Riding Clubs or the Irish Pony Club. Each show organiser sets its own policy for sharing entries and results with those bodies, and is the controller for that sharing. If Stride Hub ever shares directly with them, it will be on the basis of legitimate interests (Article 6(1)(f)), and we will update this policy first.

Where your data is processed

Our servers and main databases run in Google Cloud in Belgium (One legacy function that sends text messages (sendSms) is also deployed in us-central1 (United States) until it is removed.), emails are sent from Ireland, and Sam uses EU regions only. Production file storage (uploaded documents, photos, invoices and waivers) is held in europe-west1 (Belgium).

Some providers may process data outside the European Economic Area, for example for sign-in, push notifications, text messages or payments. Where they do, the transfer is covered by the European Commission's Standard Contractual Clauses or another safeguard the GDPR allows. Some providers process data in the United States: Firebase Authentication (Google), Twilio (text messages), and Stripe for some processing. Those transfers rely on the EU-US Data Privacy Framework and the European Commission's Standard Contractual Clauses (Twilio also has Binding Corporate Rules). Each provider's location and safeguard are on our sub-processors page.

How long we keep it

This is the full schedule. Deletion on this schedule is currently carried out manually, not automatically.

How long each kind of data is kept

Data	How long
Your account and personal records	As long as you keep your account
An organisation's business records	As long as the organisation uses Stride Hub
Records of payments made through Stride Hub	6 years from the end of the financial year (Irish company and tax law), with names and contact details removed once an account is deleted
Published competition results	Kept as a sporting record; after account deletion the name is replaced with "Rider (erased)"
Signed waivers and entry conditions	6 years from signature
Health documents submitted for a show	90 days after the show ends
A rider's health information (medical notes, allergies, medications)	While consent is active, and for 90 days after it is hidden because consent was withdrawn or not confirmed
Email and text delivery records	12 months
Sam conversations	12 months from the last message
Marketplace conversations	Deleted 12 months after the last message
Reports and moderation records	While a report is open and for 12 months after it is resolved; then the reporter's identity and note are deleted and only an anonymised outcome is kept
A block set by someone else that names you	Until they remove it. If you delete your account, the block is kept for up to 24 months from the deletion or from the last message it stopped (see "Reporting, blocking and moderation")
Messages sent through the support form	12 months; 24 months for a privacy request or an account-deletion request
Server logs	30 days
Error reports	90 days
Backups	Up to 30 days; deleted data leaves backups as they expire
A request to stop emailing you	Kept, so we never email you again

Your rights

Under the GDPR you can access, correct, erase and take a copy of your personal data; restrict or object to how we use it, including uses based on legitimate interests; and withdraw consent at any time without affecting what we did before.

Do it yourself in the app

• Download your data. Mobile app: More, then Privacy & data, then Export my data. Web app: Settings, then Privacy & data.
• Delete your account. From the same screen, choose Delete my account. What happens next is under When you delete your account. Full steps, and how to ask without the app, are on our account deletion page.
• Organisation data. An organisation's owner can download an export of its data. To close an organisation and delete its data, email us.

Or ask us

Email hello@stridehub.app from the address on your account, for the attention of the Data Protection Officer, or use the "Privacy request" topic on our support page. We reply within one month, or up to two more months for complex requests, and tell you why. Requests are free.

When you delete your account

We remove your sign-in immediately and delete your profile, personal horses, records and preferences. Records that must stay, such as payments you made or results you were placed in, stay with your name and contact details removed. If you are the only owner of an organisation that still has other members, transfer or close it first. Some records belong to other people or to organisations, and stay:

• Deleting your Stride Hub account does not delete the records an organisation keeps about you as its customer or member of staff, such as your name, contact details, bookings, invoices and messages. The organisation decides what it keeps and for how long; we only remove the link between those records and your deleted account. To have them deleted, ask the organisation, or write to hello@stridehub.app and we will pass your request on.
• If you delete your account, your marketplace conversations stay visible to the other person, with your name and contact details removed, until they are deleted 12 months after the last message.
• If another Stride Hub user has shared a horse with your email address, that share is part of their records and stays until they remove it. It only ever gives access to someone signed in with that verified email address. To ask for it to be removed, contact that person or write to hello@stridehub.app.

If an organisation has blocked you, what happens to the block is set out under Reporting, blocking and moderation.

Device storage, cookies and analytics

The apps store data on your phone or browser so you stay signed in and can keep working without a signal, for example scoring at a show. This storage is essential and is not used for advertising or tracking. The stridehub.app website, including the support form, sets no cookies; we count visits with Plausible Analytics, which does not use cookies or follow you across other sites. The web app also loads Google Fonts, Google reCAPTCHA and OpenStreetMap map tiles, each of which receives your IP address. Google reCAPTCHA sets a cookie named _GRECAPTCHA. They are listed on our sub-processors page.

Complaints

If you are unhappy with how we handled your personal data, tell us first at hello@stridehub.app. You can also complain to the Data Protection Commission in Ireland (dataprotection.ie), or to the data protection authority where you live or work.

Changes to this policy

We will update this policy when what we do with personal data changes, and change the date at the top. If a change matters to you, we will tell you in the app or by email before it takes effect.

See also our Terms of Use and support page. Reports are reviewed within 24 hours.