Legal

Privacy Policy

Effective March 3, 2026

1. Who We Are

PaceKit is developed by CPKM ("we", "us", "our"). PaceKit is a free iOS application that provides AI-powered race day coaching for marathon runners.

2. Data We Collect

We do not collect any personal data. PaceKit has no backend servers, no user accounts, and no analytics infrastructure. We do not know who downloads or uses the app.

3. Data Stored on Your Device

The following data is accessed and stored locally on your device only:

• HealthKit Data — Heart rate, VO2 max, resting heart rate, date of birth (for age), body mass, stride length, active energy, and workout history. Read with your permission. Never transmitted to CPKM.
• Location Data — GPS coordinates during an active race for distance and pace calculations. Kept in memory only and not persisted after the race ends.
• API Keys — Your Anthropic, OpenAI, and/or ElevenLabs API keys, stored in the iOS encrypted Keychain.
• Preferences — Onboarding status and voice selection, stored in UserDefaults.
• Race Data — Elapsed time, distance, splits, heart rate metrics, and coaching messages. Stored in memory during the race only. Not persisted after the session ends.

4. Data Sent to Third-Party Services

When you enable AI coaching, PaceKit sends data directly from your device to third-party API providers using your own API keys. CPKM does not proxy, intercept, or store this data.

Anthropic (Claude) / OpenAI (ChatGPT):

• Race metrics: current pace, heart rate, distance, elapsed time, mile splits
• Health profile: age, weight, VO2 max, resting heart rate, stride length
• Voice transcripts: if you speak to your coach during the race
• Coaching context: race phase, music currently playing

ElevenLabs (Voice Synthesis):

• Coaching message text only (no health data, no personal information)

What is NOT sent to any third party:

• GPS coordinates or location data
• Device identifiers (no IDFA, no UUID, no device model)
• Your name, email, or any personal identifiers
• Raw HealthKit data

These third-party services have their own privacy policies governing how they handle API requests. We encourage you to review them:

• Anthropic Privacy Policy
• OpenAI Privacy Policy
• ElevenLabs Privacy Policy

5. Analytics & Tracking

PaceKit contains zero analytics, telemetry, crash reporting, or tracking of any kind. No Firebase, no Mixpanel, no Sentry, no SDKs that phone home. We have no way to identify you or monitor your usage.

6. Speech Recognition

Voice commands are processed using Apple's on-device speech recognition (SFSpeechRecognizer) when available. Transcribed text may be included in AI coaching requests as described in Section 4. Audio recordings are not stored.

7. Children's Privacy

PaceKit is not directed at children under 13. We do not knowingly collect data from children. Since we collect no data at all, this is inherently satisfied.

8. Data Security

API keys are stored in the iOS Keychain using kSecAttrAccessibleAfterFirstUnlock protection. All API calls to third-party services use HTTPS/TLS encryption. No data is stored on external servers controlled by CPKM.

9. Your Rights

Since PaceKit does not collect, store, or transmit personal data to CPKM servers, there is no personal data for us to access, modify, or delete. Your API keys and preferences can be cleared by deleting the app.

10. Changes to This Policy

If we update this policy, the revised version will be posted at this URL with an updated effective date. Continued use of PaceKit after changes constitutes acceptance.