Privacy Policy
Introduction
Paced ("we", "our", "us") operates the Paced platform — a free bike-ride tracking app where you log your rides and view your personal stats. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under applicable data protection law.
By using Paced, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the platform.
Who we are
Paced is an independent software product. You can review, edit, and permanently delete your account and ride data at any time from your account settings within the app.
What we do not track
We do not collect analytics, tracking, or any personal data from visitors to the Paced marketing website. If you browse the site without signing up, nothing about your visit is recorded or stored by us.
Our data collection applies only to:
- Users who create a Paced account (see account data below).
- The ride data you choose to log within the app.
Data we collect
We collect the following categories of data:
1. Account data
When you create and use a Paced account, we collect:
- Account information: the email address you use to sign up and authenticate.
- Technical data: IP address (not stored beyond request handling), browser type, and device type for security and error logging purposes.
2. Ride data
When you log a ride, we store the information you enter, which may include:
- Ride distance and duration.
- Elevation gained.
- Route name.
- Ride type.
- Any notes you choose to add.
This data is used solely to display your ride history and calculate your personal statistics and records. It is stored under your account and is not shared with or visible to other users.
How we collect data
- Directly from you: when you sign up or log a ride.
- Automatically: limited technical data (such as IP address and device type) is processed when you make requests to our servers, for security and error logging.
Legal bases for processing
| Purpose | Legal basis |
|---|---|
| Providing the Paced service (storing rides, showing stats) | Contract performance |
| Account management and authentication | Contract performance |
| Service improvement | Legitimate interests (improving our platform) |
| Security monitoring and fraud prevention | Legitimate interests |
| Responding to support requests | Contract performance / legitimate interests |
| Compliance with legal obligations | Legal obligation |
How we share your data
We do not sell your personal data. We share data only with the following parties:
- Google Firebase / Google Cloud: for authentication and database storage (Cloud Firestore). Firebase processes data on our behalf under Google's data processing terms.
- Vercel: for hosting and serverless compute. Vercel processes request data on our behalf.
- Legal authorities: where required by law, court order, or to protect the rights and safety of Paced, our users, or others.
A full list of our subprocessors is available on our Subprocessors page.
International data transfers
Our subprocessors (Google Firebase, Vercel) may process data outside your country. Where they do, they rely on Standard Contractual Clauses or other recognised transfer mechanisms. Google Cloud maintains a GDPR-compliant data processing agreement.
These safeguards are designed to ensure your data receives an adequate level of protection wherever it is processed.
Data retention
| Data type | Retention period |
|---|---|
| Account profile data | Duration of account + 30 days after deletion |
| Ride data | Until you delete it or close your account |
| Support tickets | 2 years |
| Security and access logs | 90 days |
Your rights
Depending on applicable law, you may have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure: request deletion of your data (subject to legal retention obligations).
- Restriction: request that we limit how we process your data in certain circumstances.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interests.
- Withdraw consent: where processing is based on consent, you may withdraw it at any time.
You can exercise several of these rights directly in the app: edit your profile and email in your account settings, add, edit, or remove rides from your dashboard, and permanently delete your account and all associated data at any time. Deleting your account erases your data from our systems.
Cookies and consent
We use a minimal set of cookies, limited to what is strictly necessary to keep you signed in and to secure the service. No third-party cookies, advertising cookies, or marketing cookies are used.
See our Cookie Policy for full details.
Security
We implement technical and organisational measures to protect your data, including HTTPS encryption in transit, Firebase Authentication, and server-side token validation. See our Security & Trust page for details.
No transmission over the internet is 100% secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security.
Children's privacy
Paced is not directed at individuals under 18. We do not knowingly collect personal data from children.
Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the platform after changes constitutes acceptance of the revised policy. We recommend reviewing this page periodically.
Contact
You can manage and permanently delete your data at any time from your account settings. For more about how Paced works, see our support page.