1. Overview
This policy describes how PaceUp ("PaceUp", "we", "us") collects, uses, stores and shares the information you provide when you use the PaceUp mobile app and the website at paceupapp.com (together, the "Service"). PaceUp is a social fitness app for crew-based running, cycling and walking activities.
We designed PaceUp so that the minimum amount of personal information leaves your device. Location, health and workout data are kept on your device and in our secure servers only for as long as we need them to run the Service.
2. What we collect
We only collect what the Service needs to function. You can use most of PaceUp without providing any information beyond an email address.
| Category | Examples | Why |
|---|---|---|
| Account | Name, email, profile photo, date of birth (optional), password (hashed) | Create and secure your account |
| Profile | Display name, bio, sports, pace goals, crew memberships | Show the right stuff to your crew |
| Workouts | GPS route, distance, pace, duration, heart-rate, elevation, splits | Record and display your activity |
| Location | Live location during recorded activities; coarse location when the app is open for Discover | Track runs/rides and surface nearby crews and events |
| Health | Heart rate, VO₂ max, steps, calories — only what you grant via Apple HealthKit or Google Health Connect | Enrich your activity data and goals |
| Social | Messages in crew chats, reactions, RSVPs, photos you post | Power the crew experience |
| Device | Device type, OS version, app version, push token, crash logs, approximate IP-based region | Keep the app stable and secure |
3. How we use your data
- Run the Service — authenticate you, sync your data between devices, deliver push notifications, show you relevant crews.
- Crew features — display workouts and activity to the crews you belong to, with the visibility level you choose.
- Safety — detect abuse, spam and fraud; enforce our Terms.
- Product improvement — analyse aggregated and de-identified usage to improve features. We never sell your data and we do not use your personal data to train third-party AI models.
- Communication — send you transactional emails (sign-in codes, security alerts) and, only with your opt-in consent, occasional product updates.
4. When we share data
We share limited data only with the service providers that operate PaceUp on our behalf, under confidentiality and data-processing agreements. We do not sell personal data and we do not share it with advertisers.
| Provider | Role | Data shared |
|---|---|---|
| Apple / Google | App distribution, push notifications, HealthKit / Health Connect | Device identifiers, push tokens, health data you authorise |
| Firebase (Google) | Authentication, real-time chat, push, crash reports | Account ID, session logs, chat messages, device diagnostics |
| Mapbox / Apple Maps | Map tiles and routing | Coarse and precise location during use |
| Netlify | Website hosting | Request logs for paceupapp.com |
| Resend / Postmark | Transactional email | Email address, message content |
We may also disclose information when required by law, to protect the rights or safety of PaceUp users, or in connection with a merger, acquisition, or sale of assets (with notice to you).
5. Health & fitness data
PaceUp only reads and writes the specific HealthKit and Health Connect data types you explicitly grant. We never use your health data for advertising or sell it. You can revoke access at any time from iOS Settings → Privacy & Security → Health → PaceUp, or Health Connect on Android.
Health data is stored encrypted at rest and in transit. We apply additional access controls and audit logging to any system that stores health data.
6. Location data
PaceUp uses location in two modes:
- Recording — precise GPS tracking while an activity is in progress, including in the background when you've granted "Always" permission so we can keep recording when your screen is off.
- Discover — a coarse (city-level) location when the app is open, used to show nearby crews and public events. You can disable this in Settings.
We never sell location data, never use it for ads, and never share precise location with third parties outside the service providers listed above.
7. Storage & security
- All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
- Passwords are hashed with bcrypt. We never store them in plaintext.
- We use a least-privilege access model for our team. Production access is audited.
- Data is stored on servers in the United States and the European Union. For EU/UK users, we rely on Standard Contractual Clauses for any transfer outside the EEA.
8. Your rights
Depending on where you live, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Correct — update inaccurate information.
- Delete — delete your account and associated data (in-app: Settings → Account → Delete Account, or by emailing us).
- Object — object to specific processing activities.
- Portability — receive your data in a portable, machine-readable format.
- Withdraw consent — revoke permissions (Health, Location, Notifications) at any time.
To exercise any of these rights, email privacy@paceupapp.com. We respond within 30 days.
9. Retention & deletion
We keep your data for as long as your account is active. When you delete your account, we delete your personal data within 30 days, except where we are legally required to keep records (for example, financial records for tax purposes) or where the data has been de-identified and aggregated for analytics.
10. Children
PaceUp is not intended for children under 13 (or under 16 in the EEA). We don't knowingly collect data from children. If you believe a child has provided us with personal information, contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. When we make material changes, we'll notify you in the app and by email before the changes take effect. The "last updated" date at the top of this page always reflects the current version.
12. Contact us
Questions, requests, or privacy concerns — we'd like to hear about them.
- Email: privacy@paceupapp.com
- General: hello@paceupapp.com
- Web: paceupapp.com/contact