LegalEffective 22 September 2026Last updated 9 October 2026
Privacy Policy.
Paceline is a coach that works from your real training data. That only works if you trust us with it. This page says, in plain language, what we collect, what we do with it, who else touches it, and what you can ask us to do. No hype, no hidden clauses.
- 1. Who we are
- 2. What this covers
- 3. What we collect
- 4. How we use it
- 5. AI processing
- 6. Who we share it with
- 7. What other people can see
- 8. Garmin, Strava and Apple Health rules
- 9. How long we keep it
- 10. Your rights and choices
- 11. Consumer health data notice
- 12. Security
- 13. Children and teens
- 14. Where your data lives
- 15. Changes to this policy
- 16. Contact
01Who we are
Paceline is made by Paceline Labs Inc., a company registered in the United States, at 527 W 27th St, Apt 5C, New York, NY 10001. We are the data controller for the personal data described here. You can reach us at hello@pacelinelabs.com.
02What this covers
This policy covers everything we run under the Paceline name:
- The Paceline web app and its share pages.
- The Paceline iOS app, including Apple Watch features, and the Paceline Android app.
- Coach conversations over messaging apps (Telegram and WhatsApp) once you link them to your account.
- The Paceline connector for AI assistants such as Claude, which lets an assistant you already use read and act on your Paceline data with your permission.
- This website, pacelinelabs.com.
Paceline is currently in beta. Some features described here may be turned on for some athletes and not others.
03What we collect
Account and profile
- Email address and password. Passwords are hashed by our authentication provider; we never see them in plain text.
- Phone number, if you sign up or verify with a phone number, plus the one-time codes we send to it.
- Telegram sign-in. If you sign in with Telegram, we receive your Telegram account ID and the name on your Telegram account.
- Invitations. If you join with an invite code, we record the code and who invited you. We also record the invitations you send.
- Profile details you give us: display name, full name, username, tagline, profile photo, date of birth, gender, height, weight, main sport and time zone. Height, weight, age and gender are used for physiology (training zones, load, recovery), not for anything else.
Training and health data from services you connect
You choose which services to connect. When you do, we receive data from them on an ongoing basis until you disconnect. Depending on the service and what you allow, that includes:
- Activities and workouts: sport, time, distance, GPS route, heart rate, pace, power, cadence, elevation, laps and splits, and the original activity file.
- Daily health summaries: steps, resting heart rate, heart-rate variability, stress and body-battery style metrics, VO2max estimates, respiratory rate.
- Sleep: sleep and wake times, sleep stages, sleep scores.
- Body measurements: weight and similar body metrics your device records.
- Planned workouts from your calendar or coaching platform, such as TrainingPeaks.
- Menstrual-cycle data, only if a service you connect sends it and you have allowed it there. We do not ask Garmin for it. See section 11.
Services we support today include Garmin, Strava, TrainingPeaks, COROS and Apple Health, with others (for example Oura, WHOOP, Polar, Suunto, Wahoo, Zwift) available through our connection provider Terra. Apple Health data is read directly from the Health app on your iPhone and only with the permissions you grant there. We keep the raw data each service sends us so we can reprocess it correctly when we improve our analysis.
Files you upload
You can give the coach files: activity files (FIT, GPX), spreadsheets (CSV), PDFs of training plans or lab results, screenshots and photos, and forwarded emails. We store the file and extract its contents so the coach can use them. PDFs and images are read by an AI model to pull out the text and structure. Upload only what you want the coach to know.
Your conversations with the coach
Everything you say to the coach, and everything it says back, is stored with your account so the coach has continuity and you can scroll back. This includes conversations over Telegram and WhatsApp. If you use voice dictation, speech is turned into text by your device or browser (Apple or Google speech services, under their terms); we receive the text.
Voice calls. If you talk to the coach on a live call in the iOS app, the call runs through our voice provider, ElevenLabs: your voice is streamed to ElevenLabs, which turns your speech into text, generates the coach's replies with an AI model, and speaks them back. We store the call transcript in your coach conversation. See section 5 for what ElevenLabs does with the call.
The coach also keeps a running memory about you: a written summary of your goals, history, injuries, preferences and constraints, built from your data and conversations and updated over time. You can read it, correct it, or ask us to reset it.
Race results
If you ask the coach about a race you ran, it can look up your public result on the organiser's or timing company's site (for example Race Roster, NYRR or Sportstats) using your name. Those sites see the search; we store the result with your account.
Technical data
Like any web service we receive your IP address, browser or device type, and timestamps in our server logs, and we record the tokens used by AI models on your behalf so we can manage cost and quality. We do not use advertising SDKs, ad tracking, or third-party analytics trackers in the app or on this website. The only cookies and local storage we use keep you signed in and remember your interface preferences. This website loads its typefaces from Google Fonts, which means Google sees your IP address when the page loads.
04How we use it
We use your data for one thing above all: to coach you. Concretely, that means:
- Analysing each completed session against what was planned.
- Tracking training load, fitness, fatigue and recovery over time.
- Building and adapting your training plan, and explaining the reasoning behind every session.
- Sending planned workouts to your Garmin device or Apple Watch when you ask us to, or automatically if you turn that on.
- Answering your questions in chat with your actual numbers.
Beyond coaching, we use data to run the service (accounts, sync, security, debugging), to prevent abuse, and to improve the product. During the beta, our team reviews coach conversations and their underlying data to find and fix mistakes the coach makes. That review is done by Paceline staff only, is limited to what is needed to fix the product, and is never used for marketing. If you would rather your conversations were excluded from this review, tell us and we will exclude them.
We do not use your data for advertising, we do not build profiles of you for anyone else, and we do not sell it. We do not train machine-learning models on your data.
05AI processing
The coach is built on large language models from Anthropic (Claude) and Google (Gemini). To produce a coaching response, we send the relevant parts of your data to one of these providers: your recent activities, plan, profile, the coach's memory of you, the conversation so far, and any file you attached. You can choose which model family the coach uses in your settings.
We use these providers under their commercial API terms: they act only as our processors, do not use your data to train their models, keep what we send them for a limited period for abuse monitoring and then delete it, and may not use it for any purpose of their own. We do not share your data with any AI service for that service's own purposes, and nothing from a connected service such as Garmin is made available to anyone other than these processors. When the coach searches the web to answer you, the search query is run through Anthropic's search tool; the query text, not your training data, is what leaves for the web.
Live voice calls work differently. They run through ElevenLabs, which receives your voice, what you and the coach say, and your name and intake answers so far, and uses an AI model it provides to generate the coach's replies. ElevenLabs handles the call under its own terms, which allow it to keep call audio and transcripts and to use call data to improve its models. If you would rather avoid that, type to the coach instead of calling.
The coach can make mistakes. It is a training tool, not a medical device, and nothing it says is medical advice.
06Who we share it with
We share personal data only with companies that process it on our behalf to run Paceline, with services you connect, and with people you choose to share with. We do not sell it and we do not share it with advertisers or data brokers.
| Provider | What they do for us |
|---|---|
| Supabase | Database, authentication and file storage. Hosted on Amazon Web Services in the United States. |
| Vercel | Hosts the web app and this website; serves share-link previews. |
| Google Cloud | Runs the messaging bridge (Telegram, WhatsApp) and the AI-assistant connector. |
| Cloudflare | DNS for pacelinelabs.com. |
| Terra | Connects your Garmin, TrainingPeaks, COROS and other device accounts and forwards their data to us. Terra also carries planned workouts from us to your COROS training calendar. |
| Anthropic, Google | AI models that generate coaching responses and read uploaded documents (see section 5). |
| ElevenLabs | Runs live voice calls with the coach: speech recognition, the AI model that generates the coach's spoken replies, and speech synthesis (see section 5). |
| Twilio | Sends the one-time verification codes when you sign up or sign in with a phone number. |
| Meta, Telegram | Carry messages if you chat with the coach over WhatsApp or Telegram. Your messages are also subject to their terms. |
| Apple, Google, Expo | Distribute and update the iOS app (App Store, TestFlight) and the Android app (Google Play; test builds through Firebase App Distribution). |
Services you connect. When you connect Strava, Garmin or another service, that service shares data with us under your agreement with them, and we may send data back to them where the feature requires it: planned workouts to your Garmin Connect™ calendar, for example. When you connect an AI assistant such as Claude through our connector, that assistant's provider receives whatever Paceline data the assistant requests on your behalf, under your agreement with them.
Legal and corporate. We will disclose data if the law requires it, or to protect the rights and safety of athletes or the public. If Paceline Labs is acquired or merges, your data would transfer with the service, and we would tell you before that happens.
07What other people can see
- Your training data is private by default. Your activities, plans, conversations, health data and the details of your profile are visible only to you unless you share them.
- Your profile card. Other Paceline athletes can find you by name or username and open your card: your display name, username, tagline and profile photo. The same card appears as the author on anything you share by link, so anyone viewing a shared item sees it too. Nothing else from your profile is on the card.
- Programs. If you set a program to appear on your profile, other athletes can see it there. If you share a program by link, anyone with the link can see it and follow it. When someone follows your program, you can see who follows it; when you follow someone else's, its owner can see that you do.
- Share links. You can share a workout, plan, scheduled session or completed activity by link. Anyone with the link can see that item, including its title, description, structure, date, distance and duration, together with your display name. A preview card with the same information is generated for messaging apps. You can set an item back to private at any time.
- Profile photo. If you upload one, it is served from a public URL so it can appear on share pages. Anyone who has the URL can view it.
- Workouts you push to Garmin appear in your Garmin Connect account and are governed by Garmin's privacy settings there.
08Garmin, Strava and Apple Health rules
The services you connect have their own rules about how their data can be shown and used. We follow them, and some of them give you extra protections:
- Garmin. Data from Garmin devices is labelled as such wherever it appears in Paceline, and the coach's analysis says when it draws on Garmin device-sourced data. We use Garmin data only to provide Paceline to you.
- Strava. We only ever request read access to your Strava activities. Strava data is used only to coach you and is displayed with attribution to Strava. It is never sold, never used for advertising, and never shared with other users without your action.
- Apple Health. Health data is read only with the permissions you grant on your iPhone. We never use it for advertising, never sell it, and never disclose it to third parties except the processors above, strictly to provide the coaching you asked for. Disconnecting Apple Health stops new reads; you can also revoke access in the Health app at any time.
09How long we keep it
We keep your data for as long as you have an account, because a coach that forgets your history is not much of a coach. Specifically:
- Disconnecting a service stops new data from arriving but keeps what was already imported. If you also want the imported data removed, ask us.
- Deleting your account removes your profile, activities, plans, conversations, memory, uploaded files and connection tokens, and disconnects the services you connected. You can delete your account yourself from your Profile, in the app or on the web. Deletion is immediate and cannot be undone, and anything you shared by link or published as a program goes with it. If you cannot sign in, email hello@pacelinelabs.com from your account address and we will complete deletion within 30 days and confirm.
- Backups and logs are retained for a limited period after deletion and then expire.
- AI providers retain inputs only as long as their API terms allow for abuse monitoring, then delete them.
10Your rights and choices
Wherever you live, you can ask us to:
- Access the data we hold about you, or get a copy in a portable format.
- Correct anything that is wrong, including the coach's memory of you.
- Delete your account and data, or specific data such as everything imported from one service.
- Restrict or object to particular processing, including excluding your conversations from staff review.
- Withdraw consent at any time by disconnecting a service or revoking permissions on your device.
Email hello@pacelinelabs.com and we will act within 30 days. We will verify that the request comes from the account holder. A parent or guardian can make these requests for a teen under 18. If you are in the EU, UK or Switzerland, our legal basis for coaching you is the contract you have with us, and for health data it is your explicit consent, given when you connect a service. You also have the right to complain to your local data-protection authority. If you are in California, you have the rights above under the CCPA, and we do not sell or share personal information as those terms are defined there.
11Consumer health data notice
Some of what we collect is health data under laws such as the Washington My Health My Data Act and Nevada SB 370: heart rate, heart-rate variability, sleep, body measurements, and where a connected service provides it, menstrual-cycle information. This section is our notice under those laws.
- What we collect: the training and health categories listed in section 3, from the services you connect and the files you upload.
- Why: to provide the coaching you asked for. Nothing else.
- Sources: your connected services and devices, and you.
- Who receives it: the processors in section 6, strictly to provide the service, except that anything you say on a voice call is handled by ElevenLabs under its own terms (section 5). We do not sell consumer health data and we do not share it for advertising.
- Your rights: to access, delete and withdraw consent as in section 10. We will not treat you differently for exercising them.
12Security
Data is encrypted in transit and at rest. Every database query from the app is scoped to your account by row-level security, so one athlete cannot read another's data. Tokens for connected services are stored server-side and never exposed to the browser or the phone. Administrative access is limited to Paceline staff and logged. No system is perfectly secure; if we ever learn of a breach affecting your data we will tell you promptly.
13Children and teens
Paceline is not for children under 13. We do not knowingly collect data from anyone under 13; if you believe a child under 13 has an account, tell us and we will delete it.
Teens aged 13 to 17 can use Paceline. Where the law of your country sets a higher age for agreeing to the use of your data online (in the EU and UK this is between 13 and 16), you need a parent or guardian to agree before you use Paceline or connect a service that sends us health data. We handle teens' data exactly as this policy describes for everyone: for coaching, never for advertising, and never sold. A parent or guardian can ask us to access or delete a teen's data (section 10).
14Where your data lives
Paceline is operated from the United States and your data is stored there. If you use Paceline from outside the US, your data is transferred to and processed in the US. For athletes in the EU, UK and Switzerland we rely on standard contractual clauses with our processors for those transfers.
15Changes to this policy
When we change this policy we will update the date at the top and, for anything material, tell you in the app or by email before it takes effect. Earlier versions are available on request.
16Contact
Questions, requests, complaints: hello@pacelinelabs.com, or by post to Paceline Labs Inc., 527 W 27th St, Apt 5C, New York, NY 10001, United States.