Privacy policy

At YoPace, we believe a training tool is only useful if you trust what we do with your data. This policy explains, in plain terms, what we collect, why, how long we keep it, and the rights you have over it.

Data we collect

• Account information — email, display name, and (optionally) avatar, locale, and time zone. Required to run an account.
• Training data — activity summaries, GPS tracks, heart-rate samples, laps, perceived-effort ratings, and any free-text notes you write. Stored to power your dashboard, coach views, and analytics.
• Third-party tokens — when you connect Garmin Connect or any other integration, we store an encrypted access token so we can fetch your activities on your behalf.
• Technical logs — IP address, user-agent, and request timestamps for security, abuse detection, and basic troubleshooting. Retained for 30 days, then deleted.

How we use it

• To deliver the core service: render your dashboards, compute weekly aggregates, sync your activities, run training plans.
• To send you the operational emails you opt in to: invitations, password resets, important account notices.
• To improve the product — anonymised, aggregated metrics on how features are used. We never sell or share individual data for advertising.

Third-party processors

We rely on a small set of subprocessors to operate the service:

• Garmin Connect — when you opt in, your Garmin activities flow to us via Garmin's webhook API.
• Scaleway — primary hosting (database, media server, application servers) within the European Union.
• Cloudflare — edge caching and DDoS protection.
• Mailrelay — transactional email (account confirmations, password resets).

How long we keep your data

Your account and training data live for as long as your account is active. If you close your account we delete your personal identifiers within 30 days; aggregated, non-identifying training statistics may be retained longer for product analytics.

Your rights

Under the applicable data-protection law (GDPR for EU residents, FADP for Swiss residents), you can ask us at any time to access, rectify, export, or delete your personal data. Email [email protected] from your account email and we'll respond within 30 days.

Changes to this policy

If we update this policy in a way that affects how we process your data, we'll notify you by email and surface a banner in the app at next sign-in. The effective date at the top of this page reflects the most recent change.