ChangePace privacy policy
Last updated: [date]
ChangePace is a running coach app. This policy says what we collect, why, who it goes to, and what you can do about it. "We" means [legal name of the business], [address], the controller of your data. Questions: [support email].
What we collect
Your account. Your email address and password. Passwords are stored as a secure hash by our database provider; we never see them.
What you tell your coach when you set up. Your name, age, running goals, races, current and best times, how many days you can train, your experience, and your health: current and past injuries and any warning signs you tick (for example chest pain or dizziness). Health details are special category data, so we only use them with your explicit consent, which you give on the first screen of set-up.
Your runs. When you record a run: the GPS route, distance, time, pace and splits, plus how it felt and any notes. Location is used only while you're recording, including when your screen is locked or you're in another app; it stops when you finish. Runs you log by hand have no route.
Your coach chat and feedback. Messages you send your coach and its replies, thumbs up / down on replies, and anything you send through Send feedback.
Settings. Notification choices, appearance, Strava upload settings, and a push notification token for your phone if you allow notifications.
How the app is used. Which screens and features you use (for example "finished set-up", "started a run"), your device type and app version, through PostHog. This is linked to your account so we can see what helps runners stick with training. We don't use it for advertising.
If you register interest on changepace.ai. Your email address, which page you signed up on, and a scrambled code made from your internet address so we can stop spam signups (never the address itself).
Visiting changepace.ai. Which pages are viewed and whether someone registered interest (and from which page), through PostHog, with no cookies or other storage on your device and no email address, run or link in the event. We don't use it to identify you or for advertising.
We don't collect your contacts, photos, microphone or Apple Health / Health Connect data.
Why we use it
| What | Why | Legal basis |
|---|---|---|
| Account, set-up answers, runs, chat | To write your plan, adjust it, answer you, and show your progress | Contract (providing the app you signed up for) |
| Health details | So your coach keeps training safe, and suggests seeing a GP or physio when something needs it | Explicit consent |
| Sending your data to Anthropic | Your coach is written by Claude, Anthropic's AI | Your consent, given in the app |
| Your email from changepace.ai | To send your download link when your wave opens, and launch news | Consent (you asked us to; unsubscribe any time) |
| Usage analytics | To fix problems and improve the app | Legitimate interests |
| Notifications | Session reminders, race week, "next week is ready" | Consent (you can turn them off in Profile or your phone's settings) |
Who we share it with
We don't sell your data and we don't share it for advertising. These providers process it for us:
- Supabase — our database, sign-in and server functions. Data is stored in London (UK).
- Anthropic — runs Claude, the AI behind your coach. When your coach writes a plan, a summary or a reply, it receives what it needs for that: your set-up answers, recent runs, races, your plan and the conversation. Anthropic processes it to give us the reply, under its commercial terms. [Phil: confirm Anthropic's current data retention and no-training terms for API use and state them here, and where it processes data (US) — see "International transfers".]
- PostHog — usage analytics, hosted in the EU.
- Expo — delivers app updates and push notifications.
- Strava — only if you connect it in Profile. We send the runs you choose (automatically or when you say yes) with a title and your coach's summary. We don't read anything from Strava. Once there, Strava's privacy policy applies.
- Apple and Google — when you download the app or get notifications.
We may also share data if the law requires it.
International transfers
Some providers (including Anthropic and Expo) process data in the United States. Where data leaves the UK, we rely on [UK International Data Transfer Agreement / UK Extension to the EU-US Data Privacy Framework / standard contractual clauses — Phil to confirm per provider].
How long we keep it
As long as you have an account. When you delete your account (Profile → Delete my account), everything we hold about you is deleted straight away — profile, answers, runs, plans, chat and feedback — and your Strava connection is revoked. Copies in backups are gone within [Supabase backup window, e.g. 7 days]. Analytics events are kept for [PostHog retention period]. Runs already sent to Strava stay there until you delete them on Strava.
If you registered interest on changepace.ai, we keep your email until you unsubscribe or ask us to remove it, or [period, e.g. 12 months after launch], whichever is first.
Your rights
You can ask to see, correct, export or delete your data, object to how we use it, or withdraw consent at any time. Most of this you can do in the app: edit your running profile, edit or delete runs, and delete your account. For anything else, email [support email]. If you're unhappy with how we've handled your data you can complain to the Information Commissioner's Office (ico.org.uk).
Withdrawing consent for your data to go to Anthropic means your coach can't work, so the way to withdraw it is to delete your account.
Security
Data is encrypted in transit and at rest, and each runner can only reach their own data. No system is perfectly secure; if something goes wrong we'll tell you and the ICO when the law requires it.
Children
ChangePace is for people aged [16 / 18] and over. [Phil: pick the age, and decide whether set-up should stop anyone younger — today it asks your age but doesn't block.]
Your coach isn't a doctor
Your coach gives training guidance, not medical advice. For pain, injury or anything medical, see a GP or physio.
Changes
If we change this policy we'll update the date above, and tell you in the app if the change is significant.