Privacy Policy

Last updated: April 2026

This Privacy Policy explains how PaceMates ("we", "us", "our") collects, uses, shares, and protects your personal information when you use our website, applications, and related services (collectively, the "Service"), including where you use community features, training tools, organiser ticketing, participant administration, admissions or scanning support, and official transfer or swap workflows.

By using PaceMates, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Service.

1. Who we are and how to contact us

PaceMates is operated from Ireland. Email: privacy@pacemates.ie

We are the "data controller" of your personal data for the purposes of applicable data protection laws (including the GDPR, where it applies).

For community and account features, PaceMates generally acts as the data controller of your personal data. For ticketed events, organisers may also act as independent data controllers of participant data they receive through PaceMates for their own event administration, communications, legal compliance, and safety obligations. In some circumstances, PaceMates and an organiser may separately determine different aspects of processing for related event services.

2. Information we collect

We collect and process information in three main ways: information you provide, information collected automatically, and information from third parties.

2.1 Information you provide to us

When you create or use an account, you may provide:

  • Account details – Name, username, email address, password.
  • Profile information – Profile photo, bio, gender (optional), date of birth (optional), preferred paces/distances, running preferences, availability, home city/county.
  • Biometric and performance information – Weight, height, date of birth, maximum heart rate, resting heart rate, heart-rate zone thresholds, and related performance settings you choose to provide.
  • Content and communications – Messages, posts, run descriptions, group or club descriptions, RSVPs, feedback or support requests, and any other content you choose to share.
  • Clubs, groups, and events – Information about clubs, groups, parkruns, or events you create, manage, or claim (including descriptions, schedules, locations, and contact details).
  • Training and coaching – Training goals, plan selections, session edits, and feedback.
  • Partner and advertiser information – If you are a partner or advertiser, we may collect business contact details, invoices, payment details (via our payment processor), and campaign settings.
  • Ticketing and participant information – When you buy, hold, receive, list, transfer, swap, or refund a race entry or ticket, we may collect and process details such as purchaser name, participant name, contact details, ticket type, event category, pricing, payment status, organiser-specific registration answers, waiver acknowledgements, eligibility information, bib or entry status, and any other information required to issue, validate, transfer, or manage the entry.
  • Event administration information – Depending on the event, we may collect information needed for race administration, such as club affiliation, estimated finish time, emergency contact details, date of birth, gender category, medical or accessibility information you choose to provide, and other event-specific information requested by the organiser.
  • Transfer, listing, and swap information – If you use official ticket listing, transfer, resale, or swap features, we may collect information about the listing, the outgoing and incoming participant, timestamps, fees, acceptance status, transfer status, replacement ticket issuance, refund status, related communications, and operational audit events tied to those workflows.

2.2 Information we collect automatically

When you use the Service, we may automatically collect:

  • Usage data – Pages viewed, features used, buttons clicked, date/time of visits, referral URLs, approximate time spent, and similar analytics information.
  • Device and technical data – IP address, browser type and version, device type, operating system, language settings, and connection information.
  • Approximate location – Where allowed by your settings, we may infer approximate location (for example, from your selected city/county, IP-based geolocation, or GPS coordinates you share). We use this to sort nearby runs and clubs and to display local content.
  • Cookies and similar technologies – We use cookies, local storage, and similar technologies to remember your preferences, keep you logged in, protect your account, and analyse how the Service is used.

2.3 GPS data and route information

If you upload GPS files or use location-based features, we process:

  • Activity data – Distance, time, pace, elevation, timestamps, and other metrics derived from your device or file.
  • Route data – We process raw GPS points temporarily in memory to calculate metrics and create privacy-trimmed routes.

We do not permanently store your raw home start/end coordinates. After processing, we store only privacy-trimmed polylines and aggregated segments used for route popularity and mapping. Historical records have been scrubbed so we no longer retain prior home coordinates.

2.4 Information from connected services and third parties

We may receive information about you from:

  • Authentication or payment providers – For example, from our payment processor (such as Stripe) when you buy credits, and from email or verification tools we use.
  • Connected fitness services – If you choose to connect Apple Health, Apple Fitness, Garmin Connect, Strava, or similar services, we may receive workout, activity, training, and related health or performance data according to the permissions you grant.
  • Partners and organisers – If a club, group, event organiser, or parkrun contact provides your email or name (for example, when assigning you as a manager or inviting you).
  • Organisers and event operators – We may receive participant information, validation information, event status updates, refund instructions, transfer approvals, admission results, and related event-administration data from race organisers and their authorised staff or service providers.
  • Public sources – Publicly available information about clubs, parkruns, or events, which we use to populate community listings.

3. How we use your information

We process your personal data for the following purposes and legal bases:

3.1 To provide and maintain the Service

  • Create and manage your account.
  • Allow you to discover and join runs, parkruns, clubs, groups, and events.
  • Handle RSVPs, "Who's going" lists, training plans, messages, and notifications.
  • Provide organiser tools (for example, for club administrators, race ticketing, participant management, partners, and advertisers).

Legal bases: performance of a contract, legitimate interests (running and improving our Service).

3.2 To personalise your experience

  • Show nearby and relevant runs, parkruns, clubs, and groups based on your approximate location and preferences.
  • Suggest training plans, events, or partners that may be useful.
  • Tailor content and recommendations.
  • Use your biometric and training data to estimate pace guidance, training load, and personalised performance insights.

Legal bases: legitimate interests, consent (where required).

3.3 To ensure safety, security, and integrity

  • Enforce our Terms and Safety Guidelines.
  • Detect and prevent spam, abuse, fraud, and other harmful activity.
  • Investigate reports, handle blocks and moderation actions.
  • Protect the rights, property, and safety of users, third parties, and PaceMates.

Legal bases: legitimate interests, compliance with legal obligations.

3.4 To communicate with you

  • Send transactional emails (verification, password resets, RSVP confirmations, important changes).
  • Notify you of relevant activity (messages, join requests, updates from clubs/groups you are part of).
  • Respond to support enquiries and feedback.

Legal bases: performance of a contract, legitimate interests.

You can manage many notification types in your account settings. Some essential emails (for example, about security, changes to terms, or critical service issues) cannot be opted out of.

3.5 For analytics, improvement, and internal model training

  • Monitor usage to understand which features are used and how the Service performs.
  • Debug issues, improve reliability, and develop new features.
  • Produce aggregated, anonymised statistics about the running community and platform usage.
  • Improve our internal training and prediction models using data from users who have opted in.

Where you have consented, we may use de-identified or pseudonymised training, performance, and activity data to improve our internal models, calibration systems, and training plan logic.

Legal bases: legitimate interests, consent (where required).

3.6 For payments, partners, and advertising

  • Process payments for advertiser credits or other paid features via third-party processors.
  • Provide reporting and analytics to partners and advertisers in aggregated or pseudonymous form.
  • Ensure campaigns are delivered and billed correctly.

Legal bases: performance of a contract, legitimate interests, legal obligations (for accounting and tax).

3.7 For ticketing, event operations, and official transfers

We use personal data to issue and manage race entries and tickets, support organiser dashboards and admissions tools, validate eligibility, process official transfers, listings, or swaps, invalidate and reissue tickets where necessary, send event-related transactional communications, process refunds, investigate disputes, and maintain audit trails for support, compliance, fraud prevention, and operational integrity.

Legal bases: performance of a contract, legitimate interests, compliance with legal obligations.

4. How we share your information

We do not sell your personal data. We may share your information in limited circumstances:

4.1 With other users

Depending on your activities and privacy settings:

  • Your profile (name, username, photo, approximate location, club/group membership, and running preferences) is visible to other users.
  • When you RSVP to runs or parkrun occurrences and choose to appear in "Who's going", your first name and selected details may be visible to others.
  • Organisers of clubs, groups, or events you join may see additional information (for example, your attendance and membership status).

You can control some of this visibility through privacy settings.

4.2 With organisers and partners

When you register for, purchase, hold, transfer, list, swap, or attend a race or other event through PaceMates, we may share relevant information with the organiser and its authorised staff or service providers so they can administer the event and related services. This may include your name, email address, phone number where provided, participant information, ticket or booking status, category or wave, eligibility information, waiver or registration responses, attendance or admission status, refund status, transfer or swap status, operational audit history relevant to your booking, and support information relevant to the event. Organisers with authorised access to an event may see participant and ticket workflow information needed to operate that event, including bookings, transfer or swap status, and admission validation, in line with our Terms and the organiser's own legal obligations.

When you interact with clubs, groups, parkruns, or events in ways that do not involve ticketing, relevant information (such as your name, email, or RSVP status) may still be shared with organisers so they can manage attendance and communication.

If you redeem a perk or partner offer, we may share limited information with the partner to validate eligibility and measure performance.

4.3 With connected services at your direction

If you choose to connect Apple Health, Apple Fitness, Garmin Connect, Strava, or another compatible service, we may exchange data with that service as needed to provide syncing, import, export, activity analysis, and related features.

You can disconnect a connected service at any time, subject to the permissions and controls offered by that service.

4.4 Service providers

We use trusted third-party providers to help us operate the Service, such as:

  • Hosting and infrastructure providers.
  • Email delivery and communication tools.
  • Payment processors (for example, Stripe).
  • Analytics and logging services.
  • Storage providers for images and files (for example, S3-compatible storage).

These providers only process your data on our instructions and under appropriate contractual safeguards.

4.5 Internal model operations

Where you have opted in, we may process data internally to train, evaluate, calibrate, and improve our prediction and planning models.

We do not share your data with third-party generative AI providers for the purpose of generating race predictions or training plans.

4.6 Payment, fraud, and dispute providers

We may share relevant personal data and transaction information with payment processors, fraud-prevention providers, identity or verification providers, banks, card schemes, and professional advisers where necessary to process payments, issue refunds, investigate suspicious activity, respond to chargebacks or disputes, enforce our terms, or protect users and the platform.

4.7 Legal and safety

We may disclose information if required to do so by law or in good faith belief that such action is necessary to:

  • Comply with legal obligations, requests from public authorities, or court orders.
  • Protect the rights, property, or safety of PaceMates, our users, or the public.
  • Detect or address fraud, security, or technical issues.

4.8 Business transfers

If we are involved in a merger, acquisition, reorganisation, or sale of assets, your information may be transferred as part of that transaction, subject to appropriate confidentiality protections. We will notify you of any material change in control or ownership affecting your data.

5. Internal model improvement and consent

We may offer you the option to opt in to the use of your data for internal model improvement.

If you opt in, we may use your training, performance, profile, and related data in de-identified, pseudonymised, or aggregated form to improve our own prediction, calibration, and training systems.

This processing is carried out by PaceMates for its own services and does not involve third-party AI providers for core prediction functions.

You can withdraw your consent at any time in your account settings or by contacting us. Withdrawal will not affect the lawfulness of processing based on consent before withdrawal.

6. International transfers

Your information may be processed and stored in countries outside your country of residence, including within and outside the European Economic Area (EEA) or United Kingdom. Where data is transferred outside the EEA/UK, we will ensure appropriate safeguards are in place, such as:

  • Adequacy decisions by the European Commission or UK authorities; or
  • Standard contractual clauses and equivalent mechanisms.

7. Data retention

We keep your personal data only for as long as necessary for the purposes described in this Policy or as required by law.

Examples:

  • Account data is retained while your account is active. If you delete your account, we will delete or anonymise personal data, subject to limited retention for legal, security, or legitimate business reasons.
  • Messages and content may be retained for a period to support safety, moderation, and legal obligations. We periodically purge older messages according to our retention policy.
  • Logs, analytics, and backups are kept for limited periods and then deleted or anonymised.
  • Biometric and training data is retained while needed to provide the Service, subject to your account settings, consent choices, and deletion requests.
  • Ticketing, transfers, refunds, and audit records – Ticketing, transfer, refund, and audit records may be retained for as long as necessary to administer events, provide customer support, maintain financial and tax records, investigate disputes, prevent fraud, enforce legal rights, and comply with legal obligations. Some transaction and audit records may be retained after account deletion where required for those purposes.

We may retain anonymised or aggregated data that does not identify you for longer periods.

8. Your rights

Depending on your location and applicable law (for example, under GDPR), you may have the following rights:

  • Access – Request a copy of the personal data we hold about you.
  • Rectification – Request correction of inaccurate or incomplete data.
  • Erasure – Request deletion of your personal data in certain circumstances ("right to be forgotten").
  • Restriction – Request restriction of processing in certain circumstances.
  • Portability – Receive your data in a structured, commonly used, machine-readable format and/or request that we transmit it to another controller where technically feasible.
  • Objection – Object to processing based on legitimate interests or to direct marketing.
  • Withdraw consent – Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

You can exercise many of these rights directly in the app (for example, profile editing, settings, and account deletion). For other requests, please contact us at privacy@pacemates.ie. We may need to verify your identity before responding.

Please note that deletion of your account may not require immediate deletion of ticketing, transaction, organiser, fraud-prevention, or audit records where retention is necessary for legal, security, accounting, dispute-resolution, or legitimate business purposes.

You also have the right to lodge a complaint with your local data protection authority, for example the Data Protection Commission in Ireland, if you believe your data protection rights have been violated.

9. Cookies and similar technologies

We use cookies and similar technologies to:

  • Keep you signed in and manage your session.
  • Remember your preferences (such as language, map settings, filters).
  • Protect your account and our Service (for example, preventing abuse).
  • Measure and improve the performance and usage of PaceMates.

You can control cookies through your browser settings and, where required by law, through consent banners or in-app preferences. Disabling certain cookies may affect the functionality of the Service.

10. Children's privacy

PaceMates is intended for adults. We do not knowingly collect personal data from children under 16 (or the equivalent minimum age in your jurisdiction) without appropriate consent.

If you believe we have collected personal information from a child, please contact us so we can delete it or take appropriate action.

11. Security

We use appropriate technical and organisational measures to protect your personal data, including:

  • Encryption in transit (HTTPS).
  • Access controls and authentication mechanisms.
  • Regular updates and security monitoring.
  • Logical separation of environments and backups.

However, no system is completely secure. You are responsible for keeping your login credentials confidential and for choosing a strong password. If you suspect any unauthorised access to your account, please contact us immediately.

12. Third-party links and services

Our Service may contain links to third-party websites, apps, and services, including parkrun, Athletics Ireland, partners, and advertisers. We are not responsible for the privacy practices of these third parties.

We encourage you to read the privacy policies of any third-party services you visit or use.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top and may provide additional notice in-app or by email.

Your continued use of PaceMates after any changes become effective means you accept the updated Policy.

14. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please contact:

Email: privacy@pacemates.ie