Privacy Policy

1. Who we are

Paced ("we", "us", "our") is an adaptive running coach application. We are operated by Wildfire Social Ltd, registered in England and Wales. If you have questions about this policy, contact us at privacy@getpaced.app.

2. What data we collect

We collect the following categories of personal data:

• Account data: email address, name, and profile information provided when you sign up via Clerk.
• Fitness data: running activities, pace, distance, and heart rate data from Strava, Garmin Connect, or other connected exercise platforms.
• Health and recovery data: sleep duration, sleep stages, heart rate variability (HRV), resting heart rate, recovery scores, and strain data from WHOOP and/or Oura Ring.
• Nutrition data: food diary entries, calorie and macronutrient intake logged within the app.
• Onboarding data: training history, race goals, injury history, dietary preferences, menstrual cycle information (if voluntarily provided).
• Usage data: pages visited, features used, and interactions with the coach. We do not use third-party analytics trackers.

3. How we use your data

• To generate and adapt your personalised training plan based on your biometric and activity data.
• To provide AI coaching responses tailored to your profile, goals, and current readiness.
• To generate post-workout nutrition suggestions based on your dietary profile and training load.
• To improve the accuracy of our training algorithms and coaching quality.
• To communicate with you about your account and service updates.

4. Third-party services

We integrate with the following services. Each has its own privacy policy:

• Strava: exercise activities and athlete profile, plus optional write access to update your own Strava activity descriptions with Paced plan notes when you trigger a sync.
• WHOOP: sleep, recovery, strain, and workout data. We request read-only access.
• Oura Ring: sleep, readiness, activity, and heart rate data. We request read-only access.
• Clerk: authentication and account management.
• Anthropic (Claude): AI coaching responses. Your training context is sent to generate coaching advice. Anthropic does not use API inputs for model training.
• Vercel: hosting and infrastructure.

5. Data storage and security

Your data is stored securely on Vercel infrastructure. Connected platform tokens (Strava, WHOOP, Oura) are stored server-side and never exposed to the browser. We use HTTPS for all data transmission. We do not sell, rent, or share your personal data with third parties for marketing purposes.

6. Data retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days. Anonymised, aggregated data may be retained for service improvement.

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Withdraw consent for optional data processing (e.g., menstrual cycle tracking).
• Disconnect any connected platform at any time from your settings.
• Export your data in a portable format.

To exercise these rights, email privacy@getpaced.app.

8. Health data

Some data we process (heart rate, HRV, sleep, menstrual cycle) is classified as special category health data under UK GDPR. We process this data based on your explicit consent, which you provide when connecting your devices and during onboarding. You can withdraw consent at any time by disconnecting the relevant platform or deleting your account.

9. Cookies

We use essential cookies only, required for authentication and session management. We do not use advertising or tracking cookies.

10. Changes to this policy

We may update this policy from time to time. We will notify you of material changes via email or in-app notification. Continued use of Paced after changes constitutes acceptance.

11. Contact

Wildfire Social Ltd
Email: privacy@getpaced.app