Privacy trail · effective August 25, 2026
Eighteen markers.
One quiet route.
This policy describes the delivered Riverstride Android app under package org.cedarriverracers.riverstride and the static files in this two-page website package. The app and website are separate surfaces, and future hosting behavior is not invented here.

Scope of this privacy policy
This policy covers the signed Riverstride Android application and the static files packaged for its introduction and privacy website. Android behavior described here was checked against the local release build. A hosting provider, public domain, server configuration, and publisher account have not been selected in this delivery, so host logs, cookies, and operational contacts must be reviewed before publication.
Intended audience and adult guidance
Riverstride is a visual conversation tool for young runners and supportive adults. It can be explored without entering a name or age. Children should use real-world running prompts with a parent, guardian, qualified coach, educator, or other responsible adult. The app is not a child social network, team roster, school service, medical product, or emergency channel.

Riverstride purpose and unofficial status
The Trailhead Compass, fictional terrain stories, eighty Field Deck cards, Stride Ribbon, and Camp reflections are original Riverstride editorial tools. They are not Cedar River Racers’ official registration system, training plan, roster, schedule, route map, coaching channel, athlete record, safety plan, medical advice, donation surface, or emergency service.
Information collection
The Android app has no remote form, telemetry client, analytics SDK, advertising SDK, account service, or Internet permission. It does not ask for or transmit a name, email address, phone number, address, precise location, advertising identifier, contact list, photograph, microphone recording, or device identifier. Riverstride and Cedar River Racers do not receive a user’s in-app choices from this build.

Local ribbons and reflections
If the user pins a ribbon at Camp, the app stores the four selected card identifiers, one reflection category—Noticed, Learned, Helped, or Next time—and a local timestamp in app-private storage on that Android device. These values exist only to render the Camp board. They are not synchronized, uploaded, publicly posted, or associated with an online identity.
Health, location, and sensitive data
Riverstride does not request diagnoses, symptoms, medical clearance, injury histories, disability information, home or live location, race results, school details, contact information, photographs, or free-form personal notes. Its safety cards are general educational reminders. Do not use selected cards or reflection categories as a health record, incident report, athlete evaluation, attendance record, or substitute for speaking with a responsible adult or clinician.

Device permissions
The delivered Android manifest requests no Internet, location, camera, microphone, contacts, calendar, files, Bluetooth, activity recognition, body sensor, phone, notification, or advertising permission. Riverstride reads bundled artwork and writes saved ribbons through ordinary app-private local storage. A later build that adds a permission requires a matching policy review before release.
Accounts and identity
Riverstride has no sign-up, sign-in, password, social login, user profile, athlete profile, guardian profile, team membership, public handle, avatar upload, follower system, direct message, cloud account, or identity-verification flow. Local Camp ribbons belong to the app installation, not to a person’s online account.
Analytics, advertising, and tracking
The app includes no analytics, advertising, attribution, behavioral profiling, remarketing, cross-app tracking, session replay, tracking pixel, remote crash-reporting SDK, or sale of identifiers. This packaged website contains no analytics or advertising script; its small local script only reveals page elements and highlights the visible policy marker.
Network and offline behavior
The Android application does not declare the Internet permission and works from bundled code, copy, and Grok-generated artwork. Source addresses shown inside the app are informational text rather than live in-app browsing. If an authorized publisher later hosts these pages, ordinary access logs, security services, or host cookies may depend on that provider and must be disclosed here before the public URL is used.

Retention, deletion, and reset
A saved ribbon remains on the device until the user removes that ribbon, uses the Camp control to clear every ribbon, clears Riverstride storage in Android settings, or uninstalls the app. Riverstride has no server copy to retrieve or erase. Website-file retention after hosting is a publisher and hosting-provider operation outside this local delivery.

Children and family use
Riverstride does not knowingly collect personal information from children or anyone else. Younger users should explore the app with an appropriate adult and should never treat a fictional terrain card as permission to enter a route or begin activity. Adults remain responsible for supervision, consent, current conditions, venue rules, and decisions about whether an activity is appropriate.
Security and shared devices
Android app-private storage limits routine access by other apps, but Riverstride does not add a separate passcode or encryption interface. A person with access to an unlocked, rooted, transferred, backed-up, or compromised device may be able to access local app state. Clear Camp and app storage before sharing, transferring, or disposing of a device.

User and guardian controls
A user can explore without saving, change any Ribbon choice, discard a readback, select a non-text reflection category, remove one Camp ribbon, clear all Camp ribbons, clear app storage, or uninstall Riverstride. A parent or guardian can use Android device controls outside the app. There is no remote privacy-request workflow because this build has no Riverstride server or account.
External links, safety, and coaching limits
The introduction links to organization and public-health sources. Those independent sites may collect information under their own policies. Registration, schedules, eligibility, coaching, route access, weather calls, event rules, medical clearance, incident response, and emergencies must go through the relevant organization-controlled or qualified real-world channel. Stop and seek adult help for weakness, faintness, pain, confusion, or any concerning change.
Changes to this policy
The effective date and text must change when the app’s actual permissions, data behavior, features, dependencies, publisher identity, public domain, hosting configuration, or third-party services change. The revised policy must be checked against the changed build and deployed surface. Updating prose alone does not make a mismatched product accurate.
Contact and publisher details
This private release identifies the product as Riverstride, package org.cedarriverracers.riverstride. A verified public publisher name, support address, and live privacy URL were not supplied for this local package and are therefore not invented. Before publication, the authorized publisher must add a current contact method, confirm its authority, review hosting behavior, and place this policy at the listing URL.

End of the privacy trail. Eighteen indexed sections describe the delivered behavior.
Return to marker 01 Return to Riverstride