Privacy Policy

Last updated: 3 October 2026

This policy explains what PaceMates (“we”) collects when you use the PaceMates app and website, why, and the choices you have. We follow India’s Digital Personal Data Protection Act, 2023. Questions: support@pacemates.in.

What we collect

• Account: your email address (to sign you in with a 6-digit code or a link).
• Profile: name, username, optional photo, city, bio, running level and goal, and that you confirmed you are 18 or older.
• Activities: GPS routes, distance, time, pace, splits, elevation, notes, photos you add, and how the activity felt. Location is only recorded while you record an activity (“While using the app”); we never ask for background location.
• Social: follows, cheers, comments, posts, messages, clubs, events, challenges, blocks and reports.
• Device: a push-notification token (if you allow notifications) and your app version.
• Purchases: if you buy Pro, Google Play and RevenueCat tell us whether your subscription is active. We never see your card or UPI details.
• Optional diagnostics: crash reports (Sentry) and anonymous usage counts (PostHog). These never include your location, routes, email, name, notes or messages.
• Ads (free plan): Google AdMob may use your device’s advertising ID. Ads are non-personalised unless you turn on “Personalised ads” in Settings → Ads & data.

How we use it

• To run the app: show your activities, streaks, feed, clubs, events, challenges and messages.
• To keep it fair and safe: anti-cheat checks, reports and moderation.
• To send notifications you switched on (cheers, comments, streak reminders, events).
• To fix crashes and improve the app (only if diagnostics are switched on).

We do not sell your personal data or your location.

Who can see what

• You choose who sees each activity: everyone, followers, or only you. A private account limits everything to approved followers.
• Privacy zones cut your route near a place you choose (e.g. home), and you can hide the start and end of every route.
• The full GPS track stays on your phone; only a simplified, privacy-trimmed route is uploaded.
• Blocked people can’t see your activities, profile details or message you.

Where it is stored

Your data is stored with Supabase in Mumbai, India (AWS ap-south-1), encrypted in transit and at rest. Service providers we use: Supabase (database, sign-in, storage), Expo (app updates and push delivery), Google (maps, Smart route, AdMob, Firebase push), RevenueCat (subscriptions), Sentry and PostHog (optional diagnostics). Each only gets what it needs.

How long we keep it

As long as you have an account. When you delete your account, your data is deleted straight away and removed from backups within 30 days. See Delete your account.

Your rights

You can see and edit your data in the app, withdraw consent (for example turn off notifications, personalised ads or location), and delete your account at any time. To make any request or a complaint, email support@pacemates.in. We reply within 7 days.

Children

PaceMates is for people aged 18 and older. We don’t knowingly collect data from children.

Changes

If we change this policy we’ll update the date above and tell you in the app for important changes.