Privacy Policy

Last updated: May 1, 2025

1. Introduction

Paceboard is a small independent app. This policy is written plainly — it says what data I collect, why I need it, and what I don't do with it. I built this for runners, not to harvest data.

Using Paceboard means you agree to this policy. If anything here is unclear, email me at matt@mypaceboard.com and I'll explain it.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

Name
Email address
Profile picture (if signing in with Google)

2.2 Workout Data

When you use our services, we collect:

Workout names and descriptions
Workout segments (intervals, paces, durations, distances)
Training pace preferences

2.3 Health & Fitness Data

With your explicit permission, the iOS app reads the following data from Apple Health (HealthKit):

Heart rate variability (HRV)
Resting heart rate
Sleep duration

This data is used solely to compute your daily readiness score and personalise training guidance. It is never sold, shared with advertisers, or used for any purpose unrelated to coaching you within Paceboard.

The app also writes completed workout plans to Apple Health so they can sync to Apple Watch and the native Workout app.

2.4 AI Coaching Data

When you use the AI coaching chat or quick-entry features, your messages and relevant workout context are sent to Anthropic's API to generate responses. We do not use this data to train AI models. Anthropic's privacy policy can be found at anthropic.com/privacy.

2.5 Usage Data

We automatically collect certain information when you access our service:

IP address
Browser type and version
Pages visited and time spent
Device information

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain our services
Create and manage your account
Save and sync your workouts
Generate TCX files for export to GPS watches
Compute your daily readiness score from Apple Health data
Generate personalised AI coaching responses
Process payments and subscriptions
Send you service-related communications
Respond to your inquiries and support requests
Improve and optimize our services

4. Third-Party Services

4.1 Authentication

We support sign-in via Google and Apple. When you sign in with Google, we receive your name, email, and profile picture. When you sign in with Apple, we receive your name and email (Apple may hide your email address). Privacy policies:

4.2 Payments

We use Stripe to process payments. We do not store your credit card information on our servers. Stripe's privacy policy can be found at stripe.com/privacy.

4.3 GPS Watch Integration

If you choose to sync workouts to your Garmin device, we will share your workout data with Garmin. Garmin's privacy policy can be found at garmin.com/privacy/connect.

4.4 AI Processing

AI coaching features are powered by Anthropic. Chat messages and workout context are transmitted to Anthropic's API to generate coaching responses. Anthropic's privacy policy can be found at anthropic.com/privacy.

4.5 Subscription Management

In-app purchases and subscription management on iOS are handled by RevenueCat. RevenueCat receives purchase history and subscription status. RevenueCat's privacy policy can be found at revenuecat.com/privacy.

4.6 Hosting and Infrastructure

Our application is hosted on Vercel and our database is hosted on Neon. Both services maintain their own privacy policies and security measures.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

With your consent: When you explicitly authorize sharing (e.g., syncing to Garmin)
Service providers: With third parties who assist in operating our service
Legal requirements: If required by law or to protect our rights
Business transfers: In connection with a merger, acquisition, or sale of assets

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. You can request deletion of your account and associated data at any time through your account settings.

After account deletion, we may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance).

7. Data Security

Passwords are never stored — sign-in is handled entirely by Google or Apple. All data travels over HTTPS. The app is hosted on Vercel and the database on Neon, both reputable providers with their own security practices. Stripe handles all payment processing — I never see your card details.

No system is 100% secure. If you ever discover a security issue, please email me directly at matt@mypaceboard.com.

8. Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of your personal data
Correction: Request correction of inaccurate data
Deletion: Request deletion of your data
Export: Download your data in a portable format
Objection: Object to certain processing of your data

You can exercise these rights through your account settings or by contacting us.

9. Cookies and Tracking

We use essential cookies to maintain your session and preferences. We do not use tracking cookies or sell data to advertisers.

10. Children's Privacy

Paceboard is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at matt@mypaceboard.com.