Roster — Privacy Policy

Last updated 8 August 2026

Roster runs private fitness competitions for clubs. This page describes exactly what the app collects, what it does with it, and what it shows to other people. It describes how the software actually behaves rather than what we reserve the right to do.

What we collect

What we never collect

What other people can see

Your club always sees your points, your rank, how many activities you have logged, your streak and any badges. Those are what a competition is.

Whether they see the workouts behind those points is your choice, and it is off until you turn it on. You are asked outright when you first sign in, and you can change it at any time in your account. With it on, your club sees the sport, duration, distance, climb and points for each activity.

Your heart rate is never shown to anybody else, whichever way that setting is left. Nor is the exact effort multiplier it produces, nor the step-by-step arithmetic behind an activity's points — both of those can be worked backwards into a heart rate. Other members see only a coarse band: none, some, or maximum effort.

One thing worth stating plainly rather than leaving implied: because your points depend partly on how hard you worked, somebody who compares your points against the distance and duration you have chosen to share, using the scoring rules that are published inside the app, could form a rough estimate of your effort. We do not show it to them and we do not help them do it, but we would rather tell you it is possible than claim otherwise. Turning activity sharing off removes the distance and duration that estimate would need.

Who else gets your data

Nobody. There is no advertising, no analytics service, no tracking, and no third party receiving your health information. Your data is used to run your club's competition and for nothing else.

The app stores its data on servers we operate, hosted by Railway, using a Neon Postgres database. Notifications are delivered through Apple's Push Notification service. These providers process data on our behalf and do not use it for their own purposes.

Clubs are private

Clubs cannot be browsed or searched. The only way into one is a join code given to you by whoever runs it, and only club administrators can see that code.

Deleting your account

You can delete your account from the account screen in the app, without contacting anybody. It removes your activities, your points, your badges and your club memberships permanently. It cannot be undone.

You can also sign out an individual device from that screen, which immediately stops it from syncing or receiving notifications.

How long we keep things

Activities and scores are kept while your account exists, so past competitions stay readable. Deleting your account removes them.

Children

Roster is not directed at children under 13 and we do not knowingly collect their data.

Changes to this policy

This page is versioned alongside the app's source code and changes in the same release as any change to the behaviour it describes. The date at the top is the last time it changed.

Contact

Questions about this policy or your data: Zfincham@finchamsystems.com