Privacy Policy

1. Data we collect

We only collect data you actively provide or that is necessary to make the app work.

Account data

• Email address (used to create and identify your account)

Health and tracking data

• Daily activity logs and spoon costs
• Energy crash records
• Emotion and wellbeing entries
• Medication names and schedules
• Your conditions and default spoon budget

App preferences

• Display settings (dark mode, font preferences)
• Notification reminder times

Usage analytics

• Anonymous app usage events via Firebase Analytics (e.g. which features are used). No health data is sent to Firebase.

2. How we use your data

• To provide the core tracking features of the app
• To back up and sync your data across devices (when you are signed in)
• To send account-related emails (confirmation, password reset)
• To understand how the app is used so we can improve it (anonymous analytics only)

We do not sell your data. We do not use your health data for advertising.

3. Data storage

On your device: All data is stored locally using encrypted on-device storage. The app works fully offline without an account.

In the cloud: If you create an account and sign in, your data is synced to Supabase servers located in the European Union (Ireland). Data is encrypted in transit and at rest.

If you use the app without an account, no data ever leaves your device.

4. Third-party services

We use the following services to operate the app:

• Supabase — database and authentication (supabase.com/privacy)
• Firebase Analytics — anonymous usage analytics (firebase.google.com/support/privacy)
• Resend — transactional email delivery (resend.com/legal/privacy-policy)

None of these services receive your health or symptom data for their own purposes.

5. Your rights

You have full control over your data at any time:

• Export — download all your data as a JSON file from Settings → Export all data
• Delete data — permanently erase all your logs and settings from Settings → Delete all data
• Delete account — erase all your data and remove your account entirely from Settings → Delete account

If you are in the European Economic Area, you also have rights under GDPR including the right to access, rectify, or port your data. To exercise any of these rights, contact us at the address below.

6. Data retention

Your data is kept for as long as your account is active. If you delete your account, all associated data is permanently deleted from our servers within 30 days. Anonymised analytics data may be retained longer as it cannot be linked back to you.

7. Children's privacy

Pace is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

8. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you via the app or by email. The "last updated" date at the top of this page will always reflect the most recent version.

9. Contact

If you have any questions about this privacy policy or how we handle your data, please contact us at:

[email protected]