Legal

Privacy Policy

Last updated: 1 October 2026

Brick & Brew is a private crew app for friends training for a triathlon. It is not a public social network.

Who we are

Brick & Brew is provided by the app developer who invited you to TestFlight. Contact them through App Store Connect / TestFlight if you have questions about this policy.

Data we collect

• Account. Sign in with Apple gives us an opaque user identifier and, if you share it, your name. We store a display name you choose so teammates can recognize you on the leaderboard.
• Crew membership. Invite code and team name so you can share one private board.
• Training. When you connect Strava, we read activity summaries (sport, start time, distance, moving time, elevation, average and max heart rate). We do not post to Strava and we do not download heart-rate streams.
• Beers. An optional log: count, timestamp, optional note, and optional photo you take with the camera. Teammates on your crew can see a photo on the Index. The app does not use location, and it does not send reminders to drink.
• Technical. Strava tokens live in the iOS Keychain. Crew records live in Apple CloudKit.
• Waitlist. If you join from the website, we store the email you submit so we can send a TestFlight invite. We do not use it for a newsletter or ads.

Why we collect it

Account, training, optional pint logs, and crew data are used only to sign you in, sync your training, let you log a pint, and show the crew leaderboard (including optional profile photos and pint photos). We do not sell data, run ads, or track you across other companies' apps or websites.

Where it is stored

Strava tokens stay on-device. Profiles, activities, beers, pint photos, and the team record are stored in CloudKit (public database, filtered by crew invite code). That is a small private-crew design, not bank-level isolation.

The Cloudflare Worker used for Strava OAuth exchanges a one-time code or refresh token with Strava. It does not keep an athlete database.

Waitlist emails are stored in a separate Cloudflare Worker (Cloudflare KV), keyed by a hash of the address, until we send the invite or you ask us to delete it.

Sharing

We share data with Apple (Sign in with Apple, CloudKit, and TestFlight) and, if you connect it, Strava. Waitlist storage uses Cloudflare. We do not share the crew board or waitlist with advertisers.

Retention and choices

Disconnect Strava in the Me tab to delete tokens from Keychain. Sign out removes the local session only. To delete your account, open Me and choose Delete account. That immediately removes your CloudKit profile, activities, beers, and pint photos from the crew board and signs you out. The crew stays for teammates. Skipping Strava and logging a pint only is supported.

You can skip a profile photo, skip a pint photo, disconnect Strava, sign out, or delete your account from Me at any time.

To leave the waitlist, email the developer listed on the App Store Connect record for Brick & Brew and we will delete that address.

Children

The app is for adults on a private crew and is not directed at children under 13.

Contact

Open a TestFlight feedback ticket or email the developer listed on the App Store Connect record for Brick & Brew.