Version 0.2 · Last updated 2026-10-09
The data controller is Paul Olyslager, a sole trader established in Germany, operating PacePilot. Registered address: Goethestr. 29a, 13086 Berlin, Germany. For any privacy question, or to exercise your rights, contact contact@pacepilot.cc.
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Provide the coaching service — build and adapt your plan, generate workouts, analyse rides, answer training questions | Account, activity, usage | Art. 6(1)(b) — performance of our contract with you |
| Factor recovery, sleep and physiological signals into your coaching | Health / special-category data | Art. 9(2)(a) — your explicit consent, given when you set up your account and confirm the health-data notice |
| Take payment for the subscription | Billing data | Art. 6(1)(b) — contract |
| Keep legally required financial records | Transaction records | Art. 6(1)(c) — legal obligation (German tax law) |
| Understand, in aggregate, how the service is used | Anonymised, non-identifying statistics | Art. 6(1)(f) — our legitimate interest in improving the service |
You can withdraw your consent for health-data processing at any time by deleting your account, which permanently erases that data. Withdrawing consent means the coaching features can no longer function. [The consent step in signup is being updated to a separate, explicit opt-in to satisfy GDPR Art. 9 "explicit consent" — pending counsel's confirmation of the required wording and UX.]
| Provider | Location | Role / what they process |
|---|---|---|
| Supabase | EU (Frankfurt) | Database and authentication hosting — stores all account, activity and health data |
| Anthropic | United States | Generates the AI coach's responses. Receives the messages you send and a summary of your recent training context (recent rides, FTP, planned sessions, recovery score). Per Anthropic's commercial terms, this data is not used to train models and is not retained beyond serving the request. EU→US transfer under Standard Contractual Clauses. |
| Vercel | EU + global edge | Application hosting. Processes HTTP requests. Also provides cookieless visitor statistics for the public website (page views, referring site, campaign tags, country, device type) — no cookies, no cross-site tracking, no personal profile. |
| PayPal | United States / EU | Payment processing and recurring billing. Receives the information needed to take payment and manage your billing agreement. EU→US transfer under Standard Contractual Clauses. |
| Whoop | United States | Optional. If you connect Whoop, we receive the recovery and sleep data you authorise via OAuth. EU→US transfer under Standard Contractual Clauses. |
| intervals.icu | EU | Optional. Connected with an API key you provide. We read your completed rides and power / heart-rate streams to analyse your training, and write planned workouts back so they reach your head unit or Zwift. |
We do not sell your data and do not share it for advertising. [A transfer impact assessment and signed data-processing agreements for the US processors above are being confirmed with counsel.]
When you chat with Elena or trigger an AI-generated recommendation, your message and a training-context summary are sent to Anthropic (see §4). Elena is instructed to refuse medical, mental-health and clinical-nutrition questions and to direct you to a qualified professional.
Your training plan and its day-to-day adaptations are generated with AI, but they are advisory: you review and approve schedule changes, and no decision producing legal or similarly significant effects is taken about you solely by automated means.
We keep your personal data for as long as your account is active. When you delete your account (Profile → Account) we permanently erase the personal data that identifies you — your profile, training and health data, rides, chats, and connected-service tokens — with no recovery period.
Two things are kept beyond deletion:
Under the GDPR you have the right to access, correct, export (data portability), restrict, and object to the processing of your data, to delete it, and to withdraw consent at any time. Contact contact@pacepilot.cc; account deletion and data export are also available in the app.
If you believe we have not handled your data properly, you can lodge a complaint with your local data-protection authority, or with the competent German supervisory authority (for an operator in Berlin: the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, datenschutz-berlin.de).
We use your browser's local storage to cache your data on-device for fast loading, and authentication cookies to keep you signed in. We do not use tracking or advertising cookies. On the public website we count visits with Vercel Web Analytics, which sets no cookies and does not follow you across sites. Before you sign up, your browser remembers which site or link brought you to PacePilot (stored locally, sent to us only when you create an account) so we know which channels work.
PacePilot is not directed to anyone under 16. Account creation requires a date of birth of 16 or older. If we learn that we have collected data from someone under 16, we will delete it.
We may update this policy. Material changes are notified in the app and require your re-acceptance before continued use.
Questions about your privacy: contact@pacepilot.cc.