Privacy Policy — Pacewalk

Updated: August 2026

This Privacy Policy describes how Pacewalk collects, uses, and discloses your information when you use the Service, explains your privacy rights, and how the law protects you. We use Personal Data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

Interpretation and definitions

Capitalized words in this policy have the meanings below, whether singular or plural.

• Account: a unique account created for you to access the Service or parts of the Service.

• Affiliate: an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of shares, equity interest, or other securities entitled to vote for directors or other managing authority.

• Application: the Pacewalk software provided by the Company on iOS (and other mobile platforms if released).

• Company ("We", "us", "our"): Pacewalk.

• Country: Vietnam.

• Device: any device that can access the Service, such as a computer, mobile phone, or tablet.

• Personal Data (or "personal information"): any information relating to an identified or identifiable individual. These terms are used interchangeably unless applicable law uses a specific term.

• Service: the Pacewalk Application and pacewalk.io.vn website (landing page, deep links, legal pages).

• Service Provider: a natural or legal person who processes data on behalf of the Company, such as third parties that help operate, provide, or analyze the Service.

• Usage Data: data collected automatically when using the Service or from Service infrastructure (for example page visit duration, IP address, server logs).

• You: the individual accessing or using the Service, or the legal entity on whose behalf that individual accesses or uses the Service, if applicable.

Scope

This policy applies when you use the Pacewalk Application on a mobile device and when you visit pacewalk.io.vn. If you do not agree, please do not use the Service. Pacewalk is designed privacy-first: walk history, steps, and GPS routes are stored primarily on your device. We do not sell Personal Data.

Types of data collected

Personal Data

When using the Service, we may ask you to provide personally identifiable information that can be used to contact or identify you, including:

• Email address

• First and last name (or a display name you choose)

• Profile photo (if you upload one)

Usage Data

Usage Data is collected automatically when you use the Service. It may include IP address, browser type, browser version, pages you visit, time and date of visit, time spent on pages, device identifiers, and other diagnostic data.

When you access the Service from a mobile device, we may collect additional device type, operating system, mobile browser type, mobile device IP address, and mobile device identifiers. Your browser or app may also send information when you visit the Service.

In production app builds (not development builds), we may send analytics events via PostHog and Firebase Analytics. These events describe feature interactions (for example normalized screen names, login completion, paywall views) and do not include step counts, GPS coordinates, email, or display names. Firebase Analytics uses a limited event list for Google ad measurement; Pacewalk does not use IDFA. We do not enable session replay, surveys, or cross-app tracking in PostHog.

Information from app permissions

When using the Application, to provide features we may collect (after you grant permission):

• Location information: to draw GPS routes during mapped walk/run sessions

• Photos from camera and photo library: for day photos or profile photos

• Motion data (Motion & Fitness): to count steps and record walk sessions

This information is used to provide and personalize the Service. Some may be uploaded to Supabase servers when you sign in and sync; the rest stays on your device only. You can enable or disable permissions anytime in device Settings.

On-device walk data

Pacewalk stores locally on your phone: walk/run session history, total steps and distance, streaks, badges, daily goals, day photos (if you add them), body metrics (if you enter them), appearance preferences, and notification settings. You can use the app without signing in; in that case walk data is not backed up to the cloud unless you create an account and sync.

Pacewalk feature details

Motion & Fitness: Pacewalk only requests permission when you turn on step counting on the Home screen, not during initial setup. Motion data is used to count steps and record sessions on device; raw step counts and motion data are not sent to analytics.

Location and GPS: when you start a mapped walk/run session, Pacewalk may use foreground and background location to draw the route during an active session. Coordinates are stored locally with the session. We do not send GPS coordinates or routes to PostHog, Firebase, or any analytics tool. If you sign in and enable sync, GPS routes may be transmitted encrypted (HTTPS) to Supabase for backup and restore on another device.

Apple Health (HealthKit): on iOS, you may allow Pacewalk to write completed walk or run workouts to Apple Health. This is optional; you can decline or revoke permission in iOS Settings. Pacewalk does not read health data from Health for analytics or advertising.

Account and authentication: sign-in via Supabase (email/password or Apple Sign In on iOS). Login sessions are stored securely on device (Secure Store). Internal account identifiers are used for sync and analytics; email and display names are not included in analytics events.

Cloud sync (Supabase): when signed in, Pacewalk may back up walk/run sessions (up to the most recent 12 months), GPS route points, photos by day, streaks, badges, goals, profile, body metrics, and push notification tokens. Data is tied to your account and protected by server-side access rules (only you can read/write your data). Premium allows viewing longer on-device history (up to 24 months); cloud sync still limits walk sessions to the most recent 12-month window.

Stepboard and leaderboards: optional social features. You create or join friend circles and share monthly step totals with members in the circle. Members may see each other's display names and profile photos. Leaderboards are also optional; you must opt in before your step totals appear on a board.

Push notifications: if you enable notifications and are signed in, push tokens (Expo/APNs) are stored on Supabase to send walk reminders and Stepboard notifications (for example when a friend starts walking). You can disable them in iOS Settings or in the app.

Premium: purchased via the App Store, managed by RevenueCat (subscription status, restore purchases). Payment is processed by Apple; we do not store card numbers. RevenueCat receives an anonymous identifier or Supabase account ID (if signed in) to verify Premium access.

pacewalk.io.vn website: the landing page and deep links may use PostHog to count page views, App Store download clicks, and deep link opens. Walk data from the app is not sent through this website.

Use of personal data

The Company may use Personal Data for the following purposes:

• Provide and maintain the Service, including monitoring how the Service is used

• Manage your Account: manage your registration and grant access to features available to registered users

• Perform a contract: develop, comply with, and carry out purchase contracts for products, goods, or services you have purchased, or other contracts with us through the Service

• Contact you: by email, phone call, SMS, or push notifications about updates, features, products, or services you signed up for, including security updates when necessary

• Provide news, offers, and general information about goods, services, and events similar to what you have purchased or inquired about, unless you opt out

• Handle your requests: receive and respond to requests you send us

• Business transfers: evaluate or conduct mergers, restructuring, reorganization, dissolution, or sale or transfer of assets, where Personal Data of Service users may be among transferred assets

• Other purposes: data analysis, identifying usage trends, evaluating promotional campaign effectiveness, and improving the Service, products, services, marketing, and your experience

Sharing personal data

We may share Personal Data in the following situations:

• With Service Providers: to monitor and analyze Service use, contact you, or operate infrastructure. Key providers include Supabase (authentication, database, file storage), RevenueCat (subscriptions), PostHog (product analytics), Google Firebase Analytics (ad measurement on iOS), and Apple (App Store, HealthKit, APNs). They process data only under service agreements and for purposes described in this policy.

• Business transfers: during negotiations or completion of a merger, sale of Company assets, financing, or acquisition of all or part of our business.

• With Affiliates: we require affiliates to honor this policy.

• With business partners: to offer certain products, services, or promotions.

• With other users: if the Service has public areas (for example Stepboard, leaderboards), information you share in a circle or on a board may be visible to other members.

• With your consent: for any other purpose when you consent.

We do not sell your Personal Data.

Retention of personal data

The Company retains Personal Data only as long as necessary for the purposes in this policy. We retain and use Personal Data to the extent needed to comply with legal obligations, resolve disputes, and enforce agreements and legal policies.

Where possible, we apply shorter retention periods and/or reduce identifiability by deleting, aggregating, or anonymizing data. Unless stated otherwise, the periods below are maximum ("up to") and we may delete or anonymize sooner when no longer needed:

• Account information: for as long as you have an Account, plus up to 24 months after account closure to handle post-termination issues or disputes

• Customer support data: support tickets and correspondence up to 24 months from ticket closure; conversation records (if any) up to 24 months for quality assurance and training

• Usage Data: app usage statistics up to 24 months to understand feature adoption and improve the service; server logs (IP address, access times) up to 24 months for security monitoring and incident response

• Pacewalk sync data: walk/run sessions on servers limited to the most recent 12-month window; local on-device data exists until you uninstall the app or delete data

Usage Data may be retained longer only when needed for security, fraud prevention, or legal compliance.

We may retain Personal Data beyond the periods above because of: legal obligations (for example tax records); legal disputes (establishing, exercising, or defending claims); your explicit request to retain; or technical limitations (backups deleted on a schedule).

You may ask how long we retain your Personal Data by contacting us.

When retention periods end, we securely delete or anonymize:

• Deletion: remove Personal Data from active processing systems

• Backups: copies may remain in encrypted backups for a limited backup schedule period; not restored except for security, disaster recovery, or legal compliance

• Anonymization: in some cases we convert Personal Data into statistical data that cannot be linked back to you; anonymized data may be kept indefinitely for research and analysis

International data transfers

Your information, including Personal Data, is processed at the Company's operating offices and at other locations where participating parties are based. It may be transferred to and stored on computers located outside your state, province, country, or other jurisdiction where data protection laws may differ.

When required by law, we ensure international transfers of Personal Data have appropriate safeguards. The Company takes reasonable steps so data is treated securely under this policy; Personal Data is not transferred to an organization or country unless adequate controls are in place, including data and personal information security. Some Service Providers (for example Supabase, PostHog, RevenueCat, Google Firebase) may process data in the United States or other regions.

Data deletion and your rights

You have the right to delete or request that we help delete Personal Data we have collected about you.

The Service may let you delete some information in the app. You can update, amend, or delete information by signing in to your Account (if you have one) and using account settings, or by contacting us to request access, correction, or deletion of Personal Data you provided.

Quick actions in Pacewalk: delete your account in the app (calls server deletion to remove cloud data tied to your account), leave Stepboard, disable leaderboards, revoke Motion/Location/Health/Notification permissions in iOS Settings, or uninstall the app to remove local data.

Depending on applicable law, you may have additional rights to access, correct, restrict processing, object to processing, or complain to a supervisory authority. The app does not currently offer an in-settings analytics opt-out; contact us if you have privacy-related requests.

Note: we may need to retain some information when we have a legal obligation or legitimate legal basis to do so.

Disclosure of personal data

Business transactions

If the Company is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before Personal Data is transferred and becomes subject to a different privacy policy.

Law enforcement

Under certain circumstances, the Company may be required to disclose Personal Data if required by law or in response to valid requests by public authorities (for example a court or government agency).

Other legal requirements

The Company may disclose Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation

• Protect and defend the rights or property of the Company

• Prevent or investigate wrongdoing related to the Service

• Protect the personal safety of Service users or the public

• Protect against legal liability

Security of personal data

The security of your Personal Data is important to us. No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect Personal Data using commercially reasonable measures (HTTPS encryption in transit, Supabase server-side access rules, secure session storage on device), we cannot guarantee absolute security.

Children's privacy

The Service is not directed to anyone under 16. We do not knowingly collect personally identifiable information from anyone under 16. If you are a parent or guardian and know your child has provided Personal Data to us, please contact us. If we discover we collected Personal Data from someone under 16 without verified parental consent, we will remove that information from our servers.

If we need to rely on consent as a legal basis for processing information and your country requires parental consent, we may require parental consent before collecting and using that information.

Links to other websites

The Service may contain links to other websites operated by third parties (for example the App Store, analytics or payment provider pages). If you click a third-party link, you will be directed to that site. We recommend reviewing the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of third-party websites or services.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of changes by posting the new policy on this page, updating the "Updated" date at the top, and, when appropriate, by email and/or a prominent notice in the Service before changes take effect.

You should review this policy periodically. Changes are effective when posted on this page.

If you have questions about this Privacy Policy, contact us:

• Email: blife.mobile@gmail.com

You can also use the feedback feature in the About section of the app.