1. Introduction
Pace ("we," "us," or "our") operates the Pace mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and handle your information when you use the App.
2. Information We Collect
2.1 Account Information
When you create an account, we collect your email address and a password. Authentication is handled by Supabase. We send a one-time code to your email to confirm it belongs to you. We do not collect a phone number.
2.2 Age Eligibility
- Purpose: Pace is for people 18 or older. During onboarding we ask for your date of birth so we can enforce that rule and power optional age-range matching filters.
- How we collect it: You enter your date of birth yourself. On supported devices we may also request an age range from Apple's Declared Age Range API or Google Play Age Signals. Those APIs return a range (for example, 18+), not a selfie or an exact age. Sharing the OS signal is optional; if it is unavailable or you decline, we rely on the date of birth you provided.
- Usage: We store your date of birth on your profile. Other users may see an approximate age derived from it. We do not collect or store a verification selfie.
2.3 Profile Content
You may provide a display name, bio, gender, and interests. We do not collect profile photos. Profile content you save is visible to other Pace users.
2.4 Location Data
- When we ask: We request location while you use the App (When In Use). We do not request Always location.
- Purpose: To match you with nearby walking and running partners, show you in the lobby, suggest a public meeting point, and — during an active session — share your position with people in that session.
- Usage: Precise location is used for grouping and live session maps. Other members do not see your exact coordinates unless you open the opt-in live map for that session. We do not keep a long-term precise location history.
2.5 Push Notifications
- Purpose: Updates about matches, sessions, and account activity.
- Usage: If you grant permission, we store a device push token and send messages through Firebase Cloud Messaging. Push is optional; the App still works if you decline.
2.6 Device Identifiers
We store a device identifier (for example, an iOS identifierForVendor or Android ID) so we can prevent banned accounts from immediately returning on the same hardware. This is used only for safety and abuse prevention, not advertising.
2.7 Reports and Session Activity
If you report or block someone, we store the report reason, optional details, and related session or profile context so our safety team can review it. We also store session history, friend connections, and in-session descriptions or pings you choose to send.
3. How We Use Your Information
We use the information we collect to:
- Provide and maintain the App's core functionality (accounts, matching, sessions, friends)
- Confirm you meet the 18+ eligibility requirement before you can be grouped with others
- Enable grouping and connect you with other users
- Send push notifications you have opted in to receive
- Investigate safety reports and enforce our Terms of Service and Safety Guidelines
- Prevent fraud, ban evasion, and abuse
- Comply with legal obligations
We do not use your data for third-party advertising or cross-app tracking. We do not sell your personal information.
4. Data Sharing
We may share information with:
- Service providers who help operate the App, under contracts that require them to protect it to the same standard as this policy: Supabase (authentication, database, file storage) and Firebase (push notifications). Map tiles are loaded from CARTO using OpenStreetMap data; your device's IP address is sent to those providers as part of loading the map.
- Platform age APIs: Apple or Google, only when we request an OS age-range signal on a supported device.
- Other users: what you put on your profile, plus approximate proximity for grouping. Exact live location is shared only with people in your active session, and only while that session is running.
- Legal requirements: when required by law, or to protect the rights, safety, or property of Pace, our users, or the public.
Those providers are required to provide the same or equal protection of user data as stated in this policy. We do not share personal data with third-party advertising networks.
5. Data Security
We implement industry-standard security measures including encryption in transit (HTTPS/TLS), secure authentication through Supabase, and limited internal access to personal data. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
6. Data Retention and Deletion
- Account and profile data: kept while your account is active. You can delete your account in the App at any time (Profile → Settings → Delete account). See Delete My Account.
- Location data: used for real-time grouping and sessions; we do not keep a permanent precise location history.
- Push tokens: removed when you sign out or delete your account, or when the token is no longer valid.
- Safety reports: we may retain limited report records as needed to investigate abuse and protect other users, as described in Delete My Account.
7. Your Rights and Consent
Depending on your location, you may have the right to access your personal information, correct inaccurate data, request deletion of your account, and withdraw consent. You can:
- Edit your profile in the App
- Turn off location or notifications in your device settings
- Delete your account and data from Profile → Settings, or email privacy@pacesocial.net
Paid features are not required to grant location, notifications, or other optional permissions. For any other request, contact privacy@pacesocial.net.
8. Children's Privacy
The App is intended only for users 18 years of age or older. We confirm eligibility with a date of birth you provide during setup, and — where available — an OS age-range signal (see 2.2 above). We do not knowingly collect information from anyone under 18, consistent with our Terms of Service, and we remove accounts we identify as belonging to a minor. See our Child Safety Standards for our full policy on preventing child sexual abuse and exploitation (CSAE), including how to report a concern.
9. Third-Party Services
- Supabase — authentication, database, and file storage (Privacy Policy)
- Firebase Cloud Messaging — push notifications (Privacy Policy)
- OpenStreetMap / CARTO — map tiles
- Apple Declared Age Range API / Google Play Age Signals — optional OS age-range check on supported devices
- Apple App Store / Google Play — app distribution
10. Changes
We may update this Privacy Policy from time to time. We'll update the "Last Updated" date above, and for material changes, we'll provide notice in the App or by email before they take effect.
11. Contact Us
Questions about this policy or your data? Email privacy@pacesocial.net. You can also open this policy anytime in the App from Profile → Settings → Privacy Policy.