Privacy Policy

The short version

The app keeps your health information on your phone. No account, no sign-up, nothing sent to us. We cannot see your sessions, your symptoms, or your scores, because they never reach us.

The website is separate and collects very little. No advertising, no tracking across sites, no selling anything to anyone.

You can take everything with you or delete it, in one action, at any time.

The rest of this explains that in detail.

1 · Who we are

Pacecraft is made by Pacecraft App LLC, Boise, ID

Privacy questions: hello@pacecraftapp.com Postal: Boise, ID 83702

2 · What this policy covers

The Pacecraft app on iOS and Android, and pacecraftapp.com.

They work very differently and this policy treats them separately, because what happens in the app is not what happens on the website.

3 · The app: what stays on your phone

Everything you enter stays on your device. That includes:

• Your answers to the screening questions

• Which program you’re on and where you’ve reached

• Every session — completed, stopped, missed, or rested

• Symptoms you record and any notes you write

• Symptom questionnaire scores

• Anything in the pacing track: activities, energy, crashes

• Your settings

We do not receive any of it. Not in aggregate, not anonymized, not as statistics. There is no server holding it, so there is nothing for us to look at, nothing to sell, nothing to hand over, and nothing to lose in a breach of ours.

Health information on your device is encrypted, with a key held in your phone’s secure hardware storage (Keychain on iOS, Keystore on Android).

This does not protect a stolen unlocked phone. Your device passcode is that layer, and no app can substitute for it.

4 · The app: what we don’t do

No account. No email, no password, no name, no phone number. You can use the entire app without telling us who you are.

No analytics on health data. No analytics SDK receives anything about your sessions, symptoms, or scores.

No advertising. No ad networks, no ad identifiers, no profiling.

No selling or sharing your data. Not with insurers, employers, data brokers, researchers, or anyone else. There is no arrangement under which this could happen.

No tracking you across other apps or websites.

5 · The app: the few times something leaves your phone

Only three, and you control all of them.

The clinician report

The app makes a report on your phone. You send it, through your phone’s normal sharing — email, messages, printing, saving a file.

We never receive it, never see it, and keep no copy. Once you’ve shared it, what happens to it depends on how you sent it and who you sent it to.

Weather

If the temperature note is enabled, the app asks a weather service for the temperature in your general area. This uses a coarse, city-level location — not your precise position.

No health information is sent with that request. The weather service is told approximately where, and nothing else. The temperature is stored with your session on your phone.

You can turn this off, and if it fails the app carries on without it.

Calendar feed, if you turn it on

If you subscribe to session reminders in your calendar app, that subscription contains session times only — no symptoms, no scores, no notes.

There is no sync. There is currently no way to back your data up to us or move it between devices through us, because there is no account and no server holding your information.

6 · The website

pacecraftapp.com collects the minimum a website needs to work.

Our host records standard server information — IP address, browser type, pages requested, timestamps. This is ordinary web-server logging and is retained briefly for security and reliability.

No advertising trackers, no cross-site tracking, no advertising cookies.

If we later add website analytics, this section will be updated and the effective date changed.

7 · The website assistant

The assistant on our website answers questions about Pacecraft.

What happens when you use it: your message is sent to our server, which passes it to Anthropic’s API to generate a reply. The reply comes back to you.

We do not log, store, or retain those conversations. They are not saved on our server, not associated with you, and not reviewed by us.

Anthropic processes the message to produce a reply, under their terms as a service provider to us.

Please don’t type personal health details into it. It is a website assistant that answers questions about the product. It cannot give medical advice, it doesn’t know anything about you, and it is not a place to describe your symptoms.

When you close the page, the conversation is gone.

8 · Children and young people

Pacecraft is for people aged 13 and over.

We do not knowingly collect anything from anyone under 13. If someone tells us they are under 13 during setup, the app stops and saves nothing — no partial answers, no age, no contact details.

People aged 13 to 17 need a parent or guardian to set the app up with them.

The exercise programs Pacecraft runs were developed for children and young people, and some are used from around age ten. Our minimum age is a decision about data protection, not about whether the programs would suit a younger child. A clinic can run these programs with a younger child directly.

If you believe a child under 13 has used the app, contact us at hello@pacecraftapp.com and we will help make sure nothing was retained.

9 · Your rights

Because your health information stays on your phone, you already have complete control of it:

Take it with you. Export everything, in one action, in Settings.

Delete it. Delete everything, in one action, in Settings. It is removed from your device. Deleting the app also removes it.

Correct it. Everything you entered can be changed in the app.

We cannot do any of these for you, because we don’t hold your data. If you email us asking us to delete your health information, the honest answer is that we don’t have any.

Depending on where you live — including California, Washington, and other states with health-privacy or consumer-privacy laws, and the UK and EU — you may have additional statutory rights regarding personal information. To exercise any of them, or to ask what we hold, contact hello@pacecraftapp.com.

We will not treat you differently for exercising any right.

10 · Legal notes

Pacecraft is not a HIPAA-covered entity. HIPAA applies to healthcare providers, health plans, and their business associates. A direct-to-consumer app is none of those. Any app claiming to be “HIPAA compliant” in this context is telling you something that doesn’t mean what it sounds like.

Pacecraft is subject to the FTC Health Breach Notification Rule. If health information were ever disclosed without authorization, we would be required to notify affected users and the FTC. The architecture is designed so that there is very little we could disclose.

Pacecraft is not a medical device and is not FDA-cleared. It does not diagnose or treat anything.

11 · If something goes wrong

If we discover any unauthorized access to or disclosure of health information, we will notify affected users and the relevant authorities as required by law, and we will explain what happened and what to do.

12 · Changes to this policy

We will post any changes here and update the effective date.

If a change materially affects how your information is handled — particularly anything that would cause health information to leave your device — we will tell you in the app before it takes effect, and it will require your agreement.

13 · Contact

hello@pacecraftapp.com | Boise, ID 83702

We aim to reply within 3 business days.

Pacecraft is currently in beta.