Effective date: 14 July 2026
Applies to: the Pace mobile apps (iOS and Android) and web app, bundle ID com.pacehq.pace, published by Pace, an independent developer (sole trader) established in the European Union.
Hosted at: https://kzaran54-a11y.github.io/pace-legal/
Pace is a personal day-planner — a calendar and tasks, notes, a journal of "moments" (with optional photos), nutrition logging, a daily mood/reflection log, recaps and personal records, a lightweight friends layer, and a map. This policy explains exactly what Pace does and does not do with your data. We have tried to keep it plain; where a section is legally required (GDPR, UK GDPR, CCPA/CPRA) we say so.
The short version
- Pace is local-first. The source of truth for your data lives on your device. If you never sign in, your data never leaves your phone through Pace.
- The cloud is optional. When you sign in, Pace mirrors your data to a private, per-user database so it can sync and survive a lost device. You control this by choosing whether to sign in.
- No tracking. No ads. No third-party analytics. Pace contains no advertising SDKs, no cross-app or cross-site tracking, and no third-party analytics. We do not sell or share your personal information, and we do not "share" it for cross-context behavioural advertising as those terms are defined under the CCPA/CPRA.
- You can delete everything from inside the app (Settings → Delete account), which erases both your cloud rows and your local data.
1. Who is responsible for your data (Controller)
The data controller is Pace, an independent developer operating as a sole trader ("Pace", "we", "us"), established in the European Union. This policy and any dispute arising from it are governed by EU law (GDPR), and by the law of the EU member state in which the developer is established.
Because Pace is a one-person project established inside the EU, no Article 27 representative is required and no Data Protection Officer is appointed (Pace does not carry out large-scale monitoring or large-scale processing of special-category data).
Privacy questions and requests: privacy@pacehq.com.
2. What data we collect, and why
We only collect what a feature needs to work. Each category below is tied to the feature that produces it. Everything you enter is created by you using the app — Pace does not buy data about you or pull it from data brokers.
| Data | Where it comes from | Why we have it |
|---|---|---|
| Account identifiers — email address, or the identifier returned by Sign in with Apple / Google; a user ID; authentication tokens | You, when you create an account or sign in | To create and secure your account and sync your data. Guest (anonymous) use requires none of this. |
| Profile & preferences | Settings you set | To personalise the app (name, display preferences, privacy settings) |
| Calendar events & tasks | You, in the planner | The core planning feature |
| Notes | You | The notes feature |
| Journal "moments," including any photos you attach | You; photos via your camera or photo library | To keep your journal. Photos are attached only to moments you create. |
| Nutrition entries | You | Nutrition logging |
| Daily logs — mood and reflection/journal text | You | The daily mood/reflection feature |
| Personal records & recap data | Derived from your own entries | To show recaps and personal records |
| Friends / social layer | You, when you connect with people | To provide the optional friends feature |
| Map | Your interactions with the in-app map | To render the map. See §7 on map tiles. Pace does not access your device's GPS location — location is not linked in this version. |
| Purchase status | The App Store / Google Play | To unlock Pace Plus. See §6. |
Sensitive data note. Mood, reflections, nutrition, and photos can be personal and, under GDPR, some may be "special category" data (e.g. inferences about health). We process this data only to provide the features you use it in. Under GDPR our lawful bases are: performance of our contract with you (to run the app you asked for), your consent for any special-category content you choose to enter (withdrawable by deleting the content or your account), and our legitimate interest in keeping the service secure. We do not use this data for profiling, advertising, or any automated decision-making with legal or similarly significant effects.
3. What we do NOT collect
- No advertising identifiers, no ad SDKs, no ads.
- No third-party analytics or telemetry SDKs.
- No device GPS/location, no HealthKit / Health Connect data, no microphone/voice, no contacts, no device calendar, and no Gmail/Google Calendar contents — none of these are linked in this version of the app. (If any of these ship later, this policy will be updated first and you'll be asked for the relevant permission.)
4. Local-first storage, and the optional cloud
- On device. Pace stores your data locally (in the app's storage / SharedPreferences) and treats that as the source of truth. This works with no account.
- In the cloud (only if you sign in). When you sign in, Pace mirrors your data to a Postgres database hosted by Supabase. Every table is protected by Row-Level Security (RLS), so each signed-in user can read and write only their own rows — you cannot see anyone else's data and they cannot see yours. Data in transit is encrypted (HTTPS/TLS); Supabase encrypts data at rest.
- The cloud mirror is only active when (a) you are signed in and (b) the app build is configured with Supabase keys. Guests get no cloud sync.
5. Sign in with Apple, Google, and email
- Sign in with Apple and Google sign-in are handled via Supabase OAuth. We receive an account identifier (and, if you allow it, an email) to create your account. If you use Apple's "Hide My Email," Pace works with the relay address Apple gives us.
- Email/password accounts store your email and an authentication credential managed by Supabase Auth.
- Guest use stores nothing that identifies you.
6. Payments and Pace Plus
The planner core is free forever. Pace Plus is an optional auto-renewable subscription (Monthly £1.99 / Yearly £14.99, with a 7-day free trial) that unlocks deep history and heavy-storage extras. All billing is handled by Apple's App Store and Google Play — Pace never receives or stores your card number or full payment details. We receive only enough entitlement information to know whether your subscription is active. Apple's and Google's own privacy policies govern the payment itself.
7. Sub-processors and third parties
We keep this list short on purpose.
- Supabase — authentication and database hosting for the optional cloud mirror (§4).
- Map tiles — the map is rendered using tiles from OpenStreetMap and/or Esri. Requesting a tile necessarily reveals your IP address and the map area you are viewing to the tile provider; this is a standard property of any online map and Pace sends no account data with these requests.
- Google Fonts — used for typography. [If fonts are bundled with the app, no request is made to Google. If loaded at runtime on web, your IP address is visible to Google for that request.]
- When enabled (not active today): if AI features and Gmail/Google-Calendar sync ship later, they will introduce an AI model provider and Google APIs as processors. These are not part of Pace today; we will update this policy and obtain any needed consent before they go live.
We do not sell or rent your data, and we do not share it with third parties for their own marketing.
8. Data retention
- Local data stays on your device until you delete it, delete your account, or uninstall the app.
- Cloud data is retained for as long as your account exists so the service can function. When you delete your account (§9) your cloud rows are erased. Backups, where they exist, age out on the provider's routine backup rotation and are not used to repopulate a deleted account.
9. Your rights and how to delete your data
In-app deletion (fastest). Go to Settings → Delete account. This erases your cloud rows and your on-device data. Deleting the app without doing this removes local data but, if you had signed in, may leave cloud rows — so use in-app deletion to erase everything.
Depending on where you live, you have rights to access, correct, delete, export (portability), object to, or restrict processing of your personal data, and to withdraw consent at any time (GDPR/UK GDPR). Under the CCPA/CPRA, California residents have the rights to know, delete, correct, and to opt out of sale/sharing — and because we do not sell or share your personal information, there is nothing to opt out of. We will not discriminate against you for exercising any right.
To exercise a right, email privacy@pacehq.com. We may need to verify that the request comes from you (typically by confirming control of the account email). We aim to respond within the timeframe the law requires (30 days under GDPR; 45 days under CCPA, extendable where permitted). If you believe we've mishandled your data you may complain to your local supervisory authority (in the UK, the ICO; in the EU, your national DPA).
10. International transfers
Your cloud data is hosted by Supabase in the European Union, so it stays inside the EEA by default. Where any processing nonetheless takes place outside the EEA (for example provider support or routine backups), we rely on appropriate safeguards such as the Standard Contractual Clauses (with the UK Addendum where UK data is involved) or an adequacy decision.
11. Children
Pace is a general-audience app and is not directed to children. You must be at least 16 — or, where your country sets a lower digital-consent age (EU member states may set it as low as 13, and it is 13 in much of the US), at least that age — to create an account. We do not knowingly collect data from children below that age. If you believe a child has given us data, email privacy@pacehq.com and we will delete it.
12. Security
We use TLS in transit, provider-side encryption at rest, and Row-Level Security so accounts are isolated from one another. No system is perfectly secure, but we work to protect your data and to keep the amount we hold small.
13. Changes to this policy
If we make a material change (for example, turning on AI or Google-Calendar sync), we will update this page and its effective date and, where appropriate, notify you in the app before the change affects you.
14. Contact
Pace — independent developer (sole trader), European Union. Privacy: privacy@pacehq.com
You also have the right to lodge a complaint with your national data protection authority.