Privacy Policy

Who we are

PACE SESH is operated by Michael Klein, based in Berlin, Germany. You can reach us at hello@pacesesh.com.

What data we collect

When you use PACE SESH, we collect:

Account information

• Email address and password, or sign-in with Google (see Sign in with Google below)
• Your display name and optional bio

Profile information you choose to share

• Profile picture
• Bikes you ride (brand and model)
• Instagram and Strava profile links
• FTP, weight, and preferred pace (optional)
• Home area and coordinates (for showing nearby rides)

Ride information

• Rides you create: title, description, date, time, location, route links
• Rides you join and your participation status
• Chat messages within ride groups

Technical data

• Your approximate location (only when you use the location search feature, and only with your browser's permission)
• Standard server logs (IP address, browser type, access times) maintained by our hosting provider Vercel
• Usage events (which pages you visit, which features you use) to improve the product — visible only to admins and never shared with third parties

Sign in with Google

When you sign in or sign up using your Google account, we receive the following information from Google:

• Your email address
• Your name
• Your profile picture (if available)
• A unique Google identifier used to recognize your account

We use this information to:

• Create and maintain your PACE SESH account
• Display your name and profile picture to other riders (you can change these anytime)
• Send you transactional emails about rides you host or join (you control which emails via your profile settings)

We do not access any other data from your Google account (we do not read your Gmail, access your Google Drive, see your contacts, or use any Google services beyond authentication).

You can revoke PACE SESH's access to your Google account at any time:

• Visit https://myaccount.google.com/permissions
• Find "PACE SESH" in the list of connected apps
• Click "Remove access"

Revoking access through Google does not automatically delete your PACE SESH account. To fully delete your account and all associated data, use the "Delete account" option in your PACE SESH profile settings.

Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Strava Integration

If you choose to connect your Strava account, PACE SESH will import the following data from Strava via their official API:

• Your Strava display name and profile photo
• Your bike list (brand, model, type)
• Your activity statistics (total rides, distance, elevation, average speed)
• Your activity disciplines (e.g. road, gravel, mountain bike)

What we store: This data is saved to your PACE SESH profile in our database (Supabase, servers in the EU).

Who can see it: Your Strava activity statistics are only visible to you when you are logged in to your own profile. Other riders on PACE SESH cannot see your Strava activity data. Your name, photo, bikes, and disciplines — which you may also set manually — are visible to other signed-in users as part of your public rider profile.

Ride verification:When you upload a Strava activity to verify attendance at a group ride, we use the activity's GPS data (polyline) and stats (distance, duration, elevation) to confirm participation. This verification data is stored against the ride record and is visible to the ride host and other verified participants of that specific ride.

We do not: Use your Strava data to train AI or machine learning models. Share your Strava data with third parties. Display your Strava activity data to any user other than yourself.

Disconnecting Strava: You can disconnect your Strava account at any time from your profile settings. This removes your Strava access tokens from our system. Your imported profile data (name, photo, bikes) remains on your PACE SESH profile unless you manually change or delete it.

This integration uses the Strava API and complies with the Strava API Agreement and Strava API Policy.

Why we collect it

We use your data — including information you enter directly, data imported from Strava (if you connect it) (see Strava Integration above for full details), and information from Google when you use Sign in with Google — to:

• Let you create an account and sign in (by email and password or through Google)
• Show you rides near your location
• Let hosts manage who joins their rides
• Enable group chat between confirmed riders
• Display your profile to other signed-in users
• Show weather forecasts for ride locations (using your ride's coordinates, not your personal location — weather data comes from Open-Meteo, a public API)

We do NOT:

• Sell your data to anyone
• Use your data for advertising
• Share your data with third parties for marketing
• Track you across other websites
• Use cookies beyond what's necessary for authentication

Where your data is stored

• Supabase (database and file storage) — servers in the EU
• Vercel (web hosting) — servers in the EU and US
• Mapbox(location search) — receives your search queries when you type a location; subject to Mapbox's own privacy policy

How long we keep it

We keep your data as long as your account exists. If you delete your account, we remove your personal data within 30 days. Some data may be retained in encrypted backups for up to 90 days.

Ride data (titles, dates, locations) from rides you hosted may be retained in anonymized form after account deletion.

Your rights under GDPR

As a user in the EU, you have the right to:

• Access your data — request a copy of everything we store about you
• Correct your data — edit your profile at any time
• Delete your data — request account deletion
• Export your data — request a machine-readable copy
• Object to processing — contact us to discuss
• Withdraw consent — you can delete your account at any time

To exercise any of these rights, email us at hello@pacesesh.com.

Data shared with other users

When you use PACE SESH, other signed-in users can see:

• Your display name, bio, profile picture, bikes, and social links
• Rides you host (title, date, location, pace)
• Your membership in rides you've joined

Your email address is never shown to other users. Only platform administrators can see your email for account management purposes.

Children

PACE SESH is not intended for users under 16 years of age. We do not knowingly collect data from children.

Changes to this policy

We may update this policy. If we make significant changes, we'll notify users via the app. The "last updated" date at the top always reflects the current version.

Contact

For privacy questions or data requests: hello@pacesesh.com