Privacy policy

1. Who is responsible for your data?

Paceo is a service published by Alexandre Blaise, an individual (“we”), who is the controller of the data collected through the application. For any question about your data or to exercise your rights, use the contact form.

2. What data do we collect?

Account data. Name, email address and, if you create an account with a password, a password (stored hashed, never in plain text). Where applicable: sex, date of birth and subscription status.

Sign-in through a third-party service (social login). If you choose to sign in with Google, that service sends us your name, your (already verified) email address and, where applicable, your profile picture. We never receive your Google password, and no health data is exchanged with this provider. This authentication connection is separate from the sports services you link to import your activities (see below).

Health data (special category — GDPR Art. 9). With your explicit consent, collected separately at sign-up:

• heart rate (resting, max, per-workout measurements) and related zones
• imported sports activities: distance, duration, pace, elevation gain, sample streams (HR, speed)
• perceived exertion (RPE) and any pain or discomfort you report
• race goals, training plans and their adjustments

Third-party service connection data. If you link a Garmin, COROS, Suunto or Strava account, we only store OAuth access tokens and your account ID on that service — never your login credentials or passwords. These tokens are encrypted at rest (AES-256-GCM) and can be revoked at any time from your settings or from the service concerned.

Billing data. If you subscribe to Kairn, the purchase is made through Lemon Squeezy, our authorised reseller (Merchant of Record): it takes the payment, issues the invoice and handles VAT. To do so, it collects your payment and billing details and is responsible for them, under its own privacy policy. We do not receive or store any card number; we only keep your subscription ID and status.

Technical logs. A log of transactional emails sent (verification, password reset and password change) and a log of requests to the AI coach, for security, billing and service-improvement purposes.

3. Why, and on what legal basis?

• Providing the service (performance of a contract): creating your account, importing and analysing your workouts, generating your training plan, exporting workouts to your watch.
• Processing your health data (explicit consent, Art. 9(2)(a)): the calculation of your HR zones, your training load and Kairn's advice rely on this data. You can withdraw this consent at any time; the service will then no longer be able to work and your account will be deleted on request.
• Managing the Kairn subscription (performance of a contract, legal accounting obligations).
• Securing the service (legitimate interest): technical logging, abuse prevention, auditing of administrative actions.

4. Kairn AI coach: what is sent to the model

Kairn's advice is produced by the Claude AI model, provided by Anthropic. Before anything is sent, your data is pseudonymised: no direct identifier (name, email, account ID) is passed to the model. Only the training data strictly necessary for the advice (HR, volumes, recent workouts, how you felt, goal) is included.

Data from Strava is never sent to Kairn, neither directly nor in aggregated or derived form (see section 6).

Data from Garmin is only sent to Kairn with your explicit consent. You are asked when you connect Garmin, and you can give or withdraw it at any time in Settings → Integrations. After a withdrawal, your Garmin activities are no longer sent to the model and Kairn's existing analyses of them are erased. Without this consent, your Garmin activities are imported and used to compute your plan, but never by the AI.

Neither Anthropic nor Paceo uses this data to train, evaluate or improve an AI model. Kairn is not a substitute for medical advice: if you have pain or any doubt, see a health professional.

5. Who has access to your data?

Your data is never sold, rented or shared for advertising purposes. It is only passed to the processors strictly necessary to run the service:

• hosting of the service and database on our own servers, in the European Union
• the social sign-in provider you choose to use (Google), which then sends us your email address and name — no health data
• authorised reseller (Lemon Squeezy) for the Kairn subscription: payment, invoicing and VAT
• transactional email provider
• Anthropic, AI provider for the Kairn coach (pseudonymised data only; Garmin data only with your consent)
• the services you connect yourself (Garmin, COROS, Suunto, Strava): importing your activities and, for watches that support it, exporting your planned workouts

Where a provider is located outside the European Union, the transfer is covered by appropriate safeguards (standard contractual clauses).

6. Data from Strava

If you connect your Strava account, Paceo imports the summary of your activities, including private ones (type, date, distance, duration, elevation gain, pace, average and maximum heart rate), as well as your Strava athlete ID. No GPS track, profile or followers are imported. Your explicit consent is requested before connecting.

• This data is only used to track your plan (workout score, load, form) and is only shown to you.
• It is never sent to the Kairn AI coach, never used to train, evaluate or run an AI model, never used for statistical analysis, and never sold or shared with third parties.
• An activity you delete on Strava is deleted from Paceo.
• You can withdraw your consent at any time, from Paceo (Settings → Integrations → Disconnect) or from your Strava settings. All your data from Strava is then deleted from Paceo, and you receive a deletion confirmation by email. You can also request this deletion through the contact form.

Strava and Paceo are separate and independent controllers. For the data Strava processes on its side, the Strava privacy policy applies; it prevails in the event of any conflict with this policy. Strava may monitor and collect usage data related to Paceo's access to the Strava API, and use it for any business purpose, in accordance with its API agreement.

7. How long do we keep your data?

• Account and training data: as long as your account is active.
• Data from Strava: as long as your Strava account is connected; deleted as soon as you disconnect it or revoke access, with an email confirmation (see section 6).
• Account deletion: immediate and permanent erasure of all your data (account, activities, plans, feedback, OAuth tokens, related logs) — deletion cascades, with no retained copy.
• Billing data: kept for the duration of legal accounting obligations (up to 10 years), by our reseller Lemon Squeezy.

8. Your rights

Under the GDPR, you have the rights of access, rectification, erasure, portability, restriction and objection, as well as the right to withdraw your consent at any time. Two of them are built directly into the application:

• Export your data (Art. 20): from your settings, download all of your data in a structured, machine-readable format.
• Delete your account (Art. 17): from your settings, permanently delete your account and all associated data.

For the other rights, use the contact form (subject “Personal data / GDPR”). You can also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr), or with your local supervisory authority.

9. How do we protect your data?

• encryption in transit (HTTPS) and of OAuth tokens at rest (AES-256-GCM)
• passwords stored hashed, never in plain text
• automatic sign-out of your other active sessions when you change your password
• authenticity checks on notifications from connected services (signature, or a check with the service when it does not sign its notifications)
• database hosting in the European Union
• audit log of administrative actions
• data access limited to what is strictly necessary

10. Cookies

Paceo uses no advertising cookies or third-party trackers. Two strictly necessary cookies may be set: a session cookie for your authentication when you sign in (it expires automatically), and a language preference cookie (“paceo_locale”) that remembers your chosen language for one year. They do not require consent.

11. Minors

Paceo is intended for people aged 15 and over (the age of digital consent in France). If you believe a child under 15 is using the service without parental consent, contact us to have the account deleted.

12. Changes to this policy

We may update this policy to reflect changes to the service or to the regulations. In the event of a substantial change — particularly regarding health data — you will be informed by email or in the application, and your consent will be requested again if necessary.