Privacy Policy.

• Account information: your name and email address. We sign you in with one-time email codes, so we never store a password.
• Onboarding and profile details: what you tell us when setting up your plan, including your goal (for example losing weight or preparing for an event), sex, birth year, height, weight, target weight, activity level, primary sport, and unit preference. We use these to compute your calorie, macro, and training targets.
• Training and nutrition data: workouts, planned sessions, logged activities, food diary entries, recipes, and nutrition targets you create or import.
• Health data, only with your permission: if you enable Apple Health sync, we read the metrics you authorize (such as workouts, heart rate, and body measurements) to power readiness and progress features. If you connect Strava, we import the activities you authorize.
• Chat and voice input: the messages you send to the Paceo coach. If you record a voice message, the audio is sent for transcription and the resulting text becomes part of the conversation.
• Subscription status: whether you have an active subscription or trial, which product, and when it renews or expires. Payment itself is handled entirely by Apple; we never see your card or bank details.
• Device and diagnostic information: device model, operating system version, and app version, together with crash reports and error diagnostics when something goes wrong.
• Product usage events: a small set of in-app events, such as completing onboarding or logging a first workout, recorded against your account so we can see which parts of the app work and which don't. See "Analytics and crash reporting" below.
• Notification token: if you enable notifications, a push token for your device so we can deliver reminders you asked for.
• Conversion measurement: if, and only if, you allowed ad measurement, our payments provider shares with the advertising platform that you started a trial or a subscription. See "Advertising measurement" below.

• Location data. We never request location permission, and the activities we import from Strava carry no route or GPS data
• Advertising identifiers, unless you allow them. Paceo asks once, during sign-up before you subscribe, and never reads your device's advertising identifier if you decline. See "Advertising measurement" below
• Data from third-party sources without your explicit permission
• Contacts, photos, or microphone input outside a voice message you deliberately record

• Compute your calorie, macro, and training targets and generate your plans
• Show your progress, readiness, and history
• Sync your data across your devices
• Power the in-app coach when you use it (see "AI features" below)
• Send the notifications and reminders you enable
• Manage your subscription and trial
• Improve app stability, performance, and the product itself

• PostHog records a deliberately small set of product events, for example finishing onboarding or logging a workout, associated with your account identifier. Automatic capture of every tap and screen is switched off, so we only receive the events we chose to instrument. We use this to see where the app is confusing or broken, never to build an advertising profile.
• Sentry collects crash reports and errors so we can fix them. A report includes your device model, operating system and app version, a technical stack trace, and your account identifier so we can tell whether a problem affects one person or everyone.

Neither tool receives your food diary, your training data, your body measurements, or the contents of your conversations with the coach.

We ask first, in plain words, and then iOS asks you formally. Whichever way you answer changes nothing about what you can do in Paceo. There is no reduced version of the app, and we never ask twice.

• If you allow it: your device gives our payments provider, RevenueCat, an advertising identifier. When you start a trial or a subscription, RevenueCat tells Meta that it happened, so Meta can tell which of its ads worked. Only those two facts are ever sent. This is tracking as Apple defines it, and it happens only because you allowed it.
• If you decline, or your device does not support the choice: no advertising company receives anything from us at all. No advertising identifier is read, and Meta's software never even starts. Measurement falls back to Apple's SKAdNetwork, where Apple, not us, sends the platform a delayed and deliberately coarse summary that cannot be traced back to you.
• Direct advertising measurement is limited to two facts: you started a trial or a subscription. Nothing else is shared with Meta.
• Trial and subscription signals are confirmed with Apple's App Store or with our payment processor before they are sent, so they reflect real transactions rather than anything your phone claims.

On our website, the marketing pages and the sign-up flow use Meta's pixel, a standard measurement cookie, so that if you arrived from an ad we can tell Meta the ad led to a trial or a subscription. Those reports carry the pixel's own browser identifiers, never your name or email, and the signed-in parts of Paceo carry no advertising pixels at all.

Your training, nutrition, body measurements, Apple Health data, conversations with the coach, name, email, and payment details are never sent to an advertising platform, under any setting. No receipts are shared; a conversion report can carry the list price of the plan you chose, which is public information about Paceo, not about you.

You can change your mind at any time in iOS Settings under Privacy & Security → Tracking. Turning it off stops the direct sharing from the app.

• Application hosting, and database hosting in the European Union
• Transactional email delivery, for your sign-in codes
• RevenueCat, for subscription status
• Stripe, for payments made on our website
• OpenAI, Anthropic, and Google, for the coach and voice transcription
• Expo, for delivering push notifications
• PostHog and Sentry, as described above
• Strava, only if you choose to connect it
• Meta, for the conversion measurement described above, and only if you allowed it