StrideX
Record AJ
Settings

Security & privacy control centre

Every switch on this page does exactly what it says. Nothing is buried, nothing is a dark pattern, and everything saves the moment you change it.

2FA on Privacy zone active Premium Last changed 9 Jul 2026
👤

Account

Who you are, how you sign in, and how to leave.

Email addressUsed for sign-in, receipts and security alerts. Changing it needs your password.
aiman.jaleel@gmail.com Verified
Phone numberPowers SMS sign-in codes and is the fallback if you lose your authenticator.
+960 777 •••4 Verified
PasswordLast changed 9 July 2026. We'll sign out every other device when you change it.
••••••••••••

Connected sign-ins

Link a provider for one-tap sign-in. You always keep your password as a fallback — we won't let you unlink your last method.

Googleaiman.jaleel@gmail.com · linked 12 Jan 2024
Linked
AppleHide My Email relay · linked 4 Mar 2025
Linked
FacebookNot connected — link it for one-tap sign-in
Not linked

Delete account

This erases your profile, 1044+ km of activity history, your PRs, your club memberships and your race registrations. It is permanent — within 30 days it is gone from backups too, not anonymised. Export your data first if you might want it.

🛡️

Security

The four things that actually keep an account safe.

Two-factor authenticationA 6-digit code from your authenticator on top of your password. It stops 99.9% of account takeovers — this is the single highest-value switch on the page.
On
Authenticator · added 9 Jul 2026 8 backup codes unused
Biometric sign-inFace ID, Touch ID or a fingerprint. The biometric never leaves your device — we only ever see a signed assertion, never your face.
Alert me about new sign-insEmail + push the moment a new device or an unfamiliar country signs in.
Require password to change email or 2FAStops someone with a borrowed unlocked phone locking you out.

Active sessions

Everywhere you're currently signed in. Don't recognise one? Revoke it, then change your password.

DeviceBrowser / appLocationIPLast active
iPhone 16 ProiOS 19.2 StrideX app 8.4.1 Malé, Maldives 🇲🇻 27.114.132.18 This device
Apple Watch Ultra 2watchOS 12.1 StrideX watch app Malé, Maldives 🇲🇻 27.114.132.18 2 minutes ago
MacBook Air M3macOS 16.1 Safari 19 Malé, Maldives 🇲🇻 27.114.132.18 1 hour ago
Windows desktopWindows 11 Chrome 141 Hulhumalé, Maldives 🇲🇻 27.114.140.92 Yesterday
iPad Pro 13"iPadOS 19 StrideX app 8.4.0 Colombo, Sri Lanka 🇱🇰 175.157.44.201 6 days ago
Unknown AndroidAndroid 16 Chrome 140 Frankfurt, Germany 🇩🇪Unfamiliar 85.214.132.7 3 weeks ago

Login history

The last 90 days. Anything red is worth a second look.

  • Signed inFace ID · iPhone 16 Pro · Malé 🇲🇻
  • 2FA verifiedAuthenticator app · Malé 🇲🇻
  • Signed inPassword · Chrome 141 · Hulhumalé 🇲🇻
  • Failed sign-in ×3Wrong password · Frankfurt 🇩🇪
  • Password changedSettings · Safari 19 · Malé 🇲🇻
  • New device authorisediPad Pro 13" · Colombo 🇱🇰

Account recovery options

The way back in when the phone is at the bottom of the lagoon. Set at least two.

Recovery emaila•••@outlook.com · verified
Recovery phone+960 777 •••4 · verified
Backup codes8 of 8 unused · downloaded 9 Jul 2026
Hardware keyNot set — YubiKey / passkey supported
🔐

How your data is encrypted

Three different guarantees, and they are not the same thing.

At rest — AES-256Every activity, GPS trace and health record is encrypted on disk with AES-256-GCM. Keys are rotated every 90 days in a hardware security module; no engineer holds one.
In transit — TLS 1.3All traffic between your phone, your watch and us uses TLS 1.3 with certificate pinning in the app. TLS 1.0–1.2 are refused outright.
Medical notes — end-to-endInjuries, medication and clinician notes are encrypted on your device with a key only you hold. We cannot read them, we cannot recover them, and we cannot hand them to anyone — including a court.

End-to-end means exactly that: if you lose every device and every backup code, your medical notes are unrecoverable. That is the trade, and it is the right one.

🙈

Privacy controls

Who sees your activities, and — more importantly — where they start.

Default activity visibilityApplies to new activities. You can still override it per activity, and changing this doesn't touch anything already posted.
Profile discoverabilityWhether people can find you by name, handle, email or phone in search.
Hide me from leaderboardsYou'll still see your own rank on segments and challenges — nobody else will see you on theirs.
Exclude my activities from heatmapsGlobal heatmaps only ever use aggregated, privacy-zone-stripped tracks. This removes yours entirely anyway.
Flyby & nearby athletesLets athletes who crossed your route see that you passed. Convenient for finding training partners, uncomfortable if you'd rather not be findable.
Show my real name publiclyOff means only your @handle is shown to anyone who doesn't follow you.
Location privacy

Privacy zone around home

The most common way athletes get found is the map that starts on their doorstep every single morning. A privacy zone clips the start and end of every activity inside a radius you choose — the distance and time still count in full, the trace just begins after you've left the zone.

Zone radius400 m
200 m1 km
Also hide the zone on other athletes' activitiesIf a training partner's route passes your home, their trace gets clipped too.
This morning's 5.4 km loopHiding 11% of the trace
Home · only you Public start Clipped

Distance, time, pace and elevation are all unaffected — the segment inside the zone still counts toward every total and every challenge. Only the coordinates are withheld.

Blocked athletes

They can't see your profile, follow you, comment, or appear anywhere near you.

GR
ghost_runner_92Blocked 14 Jun 2026 · GPS spoofing + abusive comments
SF
spam_fit_dealsBlocked 2 May 2026 · supplement spam in club comments

Muted athletes

Quieter than blocking. They never find out, and nothing changes for them.

TW
Tom Whitfield @tom.5kMuted 20 Jun 2026 · still follows you, you just don't see the posts
KO
Kwame Osei @kwame.liftsMuted 8 Jul 2026 · 40 gym sessions a week is a lot
Muting hides feed posts only — you'll still see them on leaderboards and in clubs.

Coaches with access to your data

Read-only, scoped, revocable in one tap, and every single view is logged.

SN
Sara Nasheed Training only · no health data · granted 12 Mar 2026 · 46 views logged
MR
Mohamed Rasheed Training + health · granted 4 Mar 2026 · 214 views logged
🗄️

Data & GDPR

It's your data. These are the buttons that prove we mean it.

📦

Download all my data

Everything, in open formats: activities as GPX + FIT, health as CSV, profile, kudos, comments, club memberships, device logs and support tickets as JSON. No proprietary blob, no "contact support".

Activities1,284
GPS points4.2M
Est. size1.8GB

Prepared within 24 hours. Link is emailed to you and expires after 7 days.

Retention & deletion

How long we keep things, and how to make them go away.

Keep my activity history forApplies to raw GPS traces. Aggregate totals and PRs are always kept.
Auto-delete raw sensor logsSecond-by-second HR, accelerometer and barometer data after the activity is processed.
Delete my activity historyWipes every activity but keeps your account, profile and followers.

Your GDPR rights, in plain English

These apply wherever you live, not just in the EU. We didn't feel like maintaining two standards.

Right of accessGet a copy of every byte we hold on you — activities, GPS, health, device logs, support tickets, the lot. One click below, no email required.
Right to rectificationFix anything wrong. Edit activities, correct your profile, or tell us a metric imported wrong and we'll repair the record.
Right to erasure“Right to be forgotten.” Delete your account and everything tied to it is gone within 30 days, backups included — not anonymised, gone.
Right to portabilityYour export is open GPX/TCX/FIT/CSV/JSON, not a proprietary blob. Import it into any other platform without asking us.
Right to objectOpt out of model training, analytics profiling and any automated decision-making, without losing a single feature you pay for.

Data residency & DPA

Choose the region your data physically lives in. Moving it takes up to 72 hours and never loses a byte.

Storage regionCurrently Frankfurt (eu-central-1). Backups stay in-region.
Data Processing AgreementStandard DPA with SCCs for international transfers. Signable online for Organization plans.
SOC 2 Type II · ISO 27001 · GDPR Art. 28 processor · UK IDTA addendum available

Consent management

Every one of these is off-by-default for new accounts and none of them gate a feature.

Strictly necessarySign-in, security, fraud prevention. Cannot be disabled — the product does not work without them.
Product analyticsWhich screens get used, where people get stuck. Aggregated, never sold, never joined to your GPS.
Marketing cookiesAd measurement on the pages that brought you here. Off by default, and off is the default answer.
Use my data to improve AI modelsDe-identified physiology only — never GPS traces, never medical notes. Opting out costs you nothing.
🔔

Notifications

Ten events, three channels, thirty switches. Nothing is on that you didn't ask for.

Event Push Email In-app
Kudos on my activitiesSomeone claps for a session
Comments & repliesIncluding replies to your comments
New followersAnd follow requests if you're private
Club posts & eventsFrom the 4 clubs you've joined
Challenge milestones50%, 90% and finish of any joined challenge
Race remindersRegistration closing, bib ready, start time
AI insightsWhen the coach changes your plan
Weekly reviewMonday 06:00 local — what last week did
Safety & SOSIncident detection, live-track alerts
Product news & offersRare. Genuinely rare.
Quiet hoursNothing buzzes between these times — except Safety & SOS, which always gets through.
to
Group kudos into one notification"28 people gave kudos" instead of 28 buzzes at 06:15.
⚙️

Preferences

Units, language, theme, and the accessibility switches that should have been default.

Distance unitsChanges every number on the platform, retroactively.
TemperatureWeather, heat-index warnings and race-day forecasts.
Show speed asPace (min/km) suits runners; speed (km/h) suits riders. Set per sport if you do both.
Week starts onAffects weekly totals, challenges and the training calendar.
LanguageApp, emails and AI coach output. Dhivehi and Arabic render right-to-left.
Default map styleWhat loads first on Explore, routes and activity maps.
ThemeSystem follows your device's light/dark setting and switches with it.

Accessibility

These apply immediately, across every page, and persist on this device.

Reduce motionStops chart animations, ring fills and card transitions. Also honoured automatically if your OS asks for it.
High contrastPushes text and borders to maximum contrast against the background.
Larger textScales the whole interface up ~12%. Layouts reflow rather than clip.
🚨

Safety & SOS

The features you hope never fire.

Emergency contacts

If incident detection fires and you don't respond in 30 seconds, these people get your live location by SMS. Add at least two, and tell them you've done it.

Incident detectionUses the accelerometer to spot a crash or a hard fall. It asks you first — a 30-second countdown you can cancel with one tap — before it ever contacts anyone.
Start live tracking automaticallyEvery GPS activity begins sharing a live map with your safety contacts. The link dies when the activity ends.
Who can see my live trackBeyond your emergency contacts.
Beacon on open waterReef swims and kayaking. Pings your location to contacts every 3 minutes even if the phone stays on the boat.
🛑

Reporting abuse

Harassment, stalking, doping claims, GPS spoofing, spam — every report is read by a human within 24 hours, and by two humans if it involves someone's safety. You are never told to "just block them".

  • Reports are anonymous to the person reported — always, no exceptions.
  • Safety reports skip the queue and page an on-call moderator.
  • If you're in immediate danger, contact local emergency services first. In the Maldives that's 119.
Contact support

Every change on this page saves instantly to this device. Nothing here posts to a server in this demo — read how the real thing works.

Install StrideXTrack offline, get live GPS & watch sync.