Privacy policy
This policy explains what personal data LifePace processes, why, and what rights you have. It covers the LifePace app for iPhone, the planned connection to Garmin Connect, and this website.
1. Who is responsible
The controller under the EU General Data Protection Regulation (GDPR) is:
[FILL IN: full name or company name]
[FILL IN: street and number]
[FILL IN: postcode and city, country]
Email: privacy@lifepace.eu [FILL IN: check this address works]
2. In short
- Your training plan is made on your iPhone. The app has no account and no server, and it sends nothing to us.
- The app reads from Apple Health only with your permission, and never writes to it.
- There is no advertising, no tracking and no analytics in the app or on this website.
- We do not sell or share your data.
3. The LifePace app
What you enter
Your running level and experience, the days and time you have for training, your goal and race date, your answers to the health questions (for example known heart, metabolic or kidney disease, symptoms, a doctor's clearance, eating habits, stress fractures, periods, pregnancy or a recent birth), and your daily check-in (how you feel).
What the app reads from Apple Health
Only if you allow it, and only these types:
| Data | Used for |
|---|---|
| Running workouts, distance, heart rate | Your recent training and your easy pace, the starting point of your plan; comparing planned with completed runs |
| Sleep | Suggesting an answer to the morning check-in |
| Date of birth, sex | Your age; which health questions are asked |
| Height, weight | How your plan starts |
| Blood pressure (last reading) | The plan's safety checks; you can switch this off in the app |
LifePace never writes to Apple Health. Data from Apple Health is not used for advertising or sold, in line with Apple's rules for HealthKit.
Where it is stored
Everything above stays on your iPhone, in the app's own storage, and is protected by your device's encryption. The plan engine runs inside the app, so no data is sent to us or to anyone else to make your plan. If you use iCloud or device backups, the app's data may be part of those backups under Apple's terms.
Legal basis
Your health data (Apple Health data and your health answers) is processed on your device on the basis of your explicit consent (Art. 9(2)(a) GDPR), which you give by granting the Apple Health permissions and answering the questions. Other data is processed to provide the app you asked for (Art. 6(1)(b) GDPR).
Deleting it
In the app, Profile → Start over deletes your profile, answers and plan. Deleting the app removes all its data. You can withdraw Apple Health access at any time under Settings → Health → Data Access & Devices → LifePace.
4. Garmin Connect (planned)
We plan to let you connect a Garmin account. This section describes how that data will be handled. The connection is not available yet, and we will update this policy before it is.
- What: once you connect, Garmin sends us your activities (date, distance, duration, pace, heart rate) and, only if you consent separately, health data such as sleep, resting heart rate, heart rate variability (HRV) status and stress.
- Why: only to build and adapt your own training plan and to show it to you.
- Legal basis: providing the service you asked for (Art. 6(1)(b) GDPR); for health data, your explicit consent for each category (Art. 9(2)(a) GDPR), which you can withdraw at any time.
- Where: on servers in the European Union, encrypted. Health data is additionally encrypted with a key per user.
- How long: raw data from Garmin is kept for 90 days, after which only what your plan needs is kept. Everything is deleted 24 months after your last sign-in, and at once when you delete your account or disconnect Garmin. Backups are deleted within their rotation (35 days).
- Who else: our hosting provider, as a processor bound by a data processing agreement [FILL IN: provider and location]. Nobody else.
5. This website
This website is hosted by GitHub Pages (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA). When you visit it, the host processes your IP address and technical request data (such as browser, time and requested page) in server logs, to deliver the site and keep it secure. The legal basis is our legitimate interest in a working and secure website (Art. 6(1)(f) GDPR). GitHub may process this data in the USA. It is certified under the EU-U.S. Data Privacy Framework. See GitHub's privacy statement.
The website sets no cookies and uses no analytics, tracking or external fonts.
6. Your rights
You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16) or deleted (Art. 17), to restrict its processing (Art. 18), to receive it in a portable format (Art. 20), and to object to processing based on legitimate interest (Art. 21). You can withdraw consent at any time, with effect for the future (Art. 7(3)). Because the app keeps your data on your iPhone, most of these you can exercise directly in the app.
To exercise a right, write to the address in section 1. You also have the right to complain to a data protection supervisory authority, in particular in the EU country where you live or work.
7. Who LifePace is for
LifePace makes plans for adults only (18 and over) and is not directed at children. It gives training guidance, not medical advice. If in doubt, ask a doctor before you start.
8. Changes
We will update this policy when the app or our processing changes, for example before the Garmin connection launches. The date at the top shows the current version.