VENTURE PHYSIOLOGY LLC

Privacy Policy

Last updated August 26, 2026

Venture Physiology LLC operates the Tour de Goizueta website and mobile app. This policy explains what information the Tour collects, why it is used, how it may be seen by others, and the choices available to participants.

Information we collect

We collect the information participants provide when they create an account and join the competition, including name, email address, program affiliation, industries, organization and role, city and time zone, shirt size, activity level, team preferences, LinkedIn URL, profile picture, privacy choices, notification preference, team membership, calendar-invitation preference, Grand Départ potluck-volunteer preference, optional donation-interest response, and competition actions.

During registration, participants answer whether they want calendar invitations for in-person events and whether they will volunteer to bring food to the Grand Départ potluck. The Tour stores each Yes or No response and its timestamp so organizers can coordinate invitations and event logistics.

During registration, participants may answer whether they would like instructions for supporting the Goizueta Physiology & Leadership Program. The Tour stores only the Yes or No registration response and its timestamp for organizer registration administration. It does not collect a gift amount, payment information, transaction details, donation-page activity, or confirmation that a donation occurred.

When a participant connects Apple HealthKit, Android Health Connect, or Strava, or submits a manual workout, the Tour accepts only a scoring summary: activity type, start and end time, distance, elevation gain when available, source platform and device or application label, source workout identifier and modified time, synchronization time, review status, and whether the entry was manual. Automatically recorded connected-source summaries are accepted automatically; any workout marked as manually entered requires organizer review. A participant may optionally submit a photo or PDF with a manual workout for organizer review.

With separate permission, the mobile app reads an aggregate Apple Health Step Count or Android Health Connect Steps total for each exact stage window supplied by the Tour server. The Tour stores the stage, source platform, aggregate step count, synchronization and review status, and audit timestamps. It does not use step counts to calculate individual or team points. A participant who cannot synchronize steps may submit one JPG, PNG, or WebP screenshot and a stage total for organizer review; that evidence is stored privately.

For Strava, the Tour uses the participant-authorized activity identifier, sport type, start time, elapsed time, distance, total elevation gain, and manual-entry status. Strava's activity-summary response may contain additional fields; the Tour ignores those fields and does not persist or display them.

A participant independently chooses Apple Health, Google Health Connect, or Strava for workout distance and elevation, and Apple Health or Google Health Connect for aggregate stage-window steps. Connected but unselected source copies may be retained for synchronization audit and duplicate prevention without contributing distance, elevation, points, milestones, or step standings.

When an Apple workout summary does not include ascent, the iPhone app may temporarily read workout-route altitude and accuracy data to calculate total elevation gain. Processing occurs entirely on the device. Route coordinates are never transmitted, uploaded, logged, or stored by Tour de Goizueta; only the final elevation-gain total and calculation version are sent.

The Tour does not transmit or store GPS coordinates, maps, heart rate, calories, speed samples, per-sample step history, or full raw workout payloads. Only aggregate stage-window step totals and optional evidence screenshots are transmitted.

When participants use the competition feed, the Tour stores their kudos reactions and comments with the participant account, feed item, and submission time. Organizer comment-moderation actions, reasons, and timestamps are also retained.

For a leadership activity that requires submitted work, the participant can choose to type a written response or upload a PDF, Word document, PowerPoint presentation, or image. Written responses and files are stored privately and are available only to the submitting participant and competition organizers for completion review.

How information is used

We use participant, workout, and approved step information to authenticate accounts, operate teams, calculate points and tokens, determine stage and Tour Finisher status, prevent duplicate scoring, assign stages, resolve reviews, display standings and jersey leaders, manage tactics, coordinate calendar invitations and event volunteers, support participants, send opted-in competition updates, protect the service, and maintain an auditable competition record.

We use competition-feed information to display verified Tour activity, maintain kudos counts, support participant conversation, enforce workout-summary visibility choices, and allow organizers to hide or restore comments.

The Tour is a fitness competition and leadership program, not a medical service. It does not provide medical advice, diagnosis, treatment, insurance decisions, credit decisions, employment decisions, or advertising profiles.

Visibility and sharing

Scores, standings, team results, jersey leaders, milestone achievements, and cumulative approved step totals used for the Steps leaderboard are visible to competition participants. A participant can view their own per-stage step details and qualification route. Other participants do not receive another person's detailed step submissions, screenshots, or leadership activity files. Participants choose whether workout-summary details are visible to all participants, their team only, or only themselves and organizers. Organizers can view submitted workout, step, and leadership activity evidence when needed to administer the competition. Calendar-invitation, potluck-volunteer, and donation-interest responses are visible only to competition organizers and are not shared with other participants.

After an organizer assigns a participant to a team, that participant's name, Tour account email address, and provided LinkedIn profile are shared with the active members of that team in the organizer-sent team introduction and team-captain volunteer page so teammates can communicate. The signed-in Tour networking directory also displays an email action and any provided LinkedIn profile to eligible participants from other teams so they can schedule Tour Networking Chats. Contact details are not published on the public website and should be used only for Tour-related communication.

Competition-feed kudos and visible comments are attributed to the participant who submitted them and are visible to participants who may view the related feed item. Organizers can review all comments and hide or restore them. A participant may permanently remove their own comment from the feed.

We use service providers to run the Tour, including Supabase for authentication, database, and file storage; Vercel for website hosting; Expo and the Apple or Google distribution services for the mobile app; Resend for email delivery; and participant-selected workout providers such as Strava. Connected workout providers receive only the authorization and requests needed for participant-selected synchronization. These providers process information under their own security and privacy terms.

Strava may monitor and collect usage data concerning the Tour's use of the Strava API and may use that information for purposes described in the Strava API Agreement and API Policy, including platform improvement, developer support, and compliance.

We do not sell personal information, use health or fitness data for advertising, or share it with data brokers. We do not permit advertising platforms to use Tour workout data.

Security and retention

Data is transmitted over encrypted connections. Cloud-provider access and refresh tokens are encrypted before storage. Access is limited by authenticated participant and organizer roles. No online service can guarantee absolute security, but we use safeguards designed for the sensitivity and limited purpose of this data.

We retain account-linked information while the account is active and as needed to operate or resolve the competition, subject to provider-specific requirements. Stage step totals, private evidence screenshots, leadership activity files, kudos, comments, and comment-moderation records follow this competition retention period. During the Strava pilot, the Tour may re-fetch up to 45 days of competition history, but each cached Strava-originated activity summary and its derived score is removed unless it has been successfully refreshed from Strava within the last seven days. Any longer cache retention or cross-participant display will be enabled only if permitted through Strava's applicable developer review and terms. When an account is deleted, the participant profile, workout and step records, source connections and credentials, uploaded photos and workout, step, or leadership evidence, team membership, kudos, comments, and other account-linked records are removed from active systems. Anonymous numeric team-token entries and organizer actions may remain when needed to preserve the integrity of shared competition results, but the deleted participant is no longer identified in those entries. Service-provider backups and security logs may persist temporarily under provider retention schedules or where retention is legally required.

Your choices

Participants can change workout visibility, competition-email preferences, their workout source, and their step source in Settings. The workout choice is Apple Health, Google Health Connect, or Strava; the separate step choice is Apple Health or Google Health Connect. Apple Health and Health Connect permissions can be granted or revoked separately in device settings. Revoking step access stops future step synchronization but does not remove previously approved competition totals; account deletion removes them. Strava can be disconnected from Tour Settings. Disconnecting Strava or revoking the Tour in Strava deletes Strava-originated workouts, related evidence, and derived scoring and recalculates affected standings.

You can initiate account deletion in the website or mobile-app Settings. Instructions and an access-recovery option are available on the Delete Account page.

Children

The Tour is intended for university students, alumni, faculty, staff, and invited adult community participants. It is not directed to children under 13, and we do not knowingly collect their information.

Changes and contact

We may update this policy as the Tour or its data practices change. The current version and update date will remain posted here. Questions, privacy requests, or account-access problems may be sent to eric.james.holshouser@emory.edu.