Privacy Policy

PostMyPace turns your workout numbers and photos into stories you can share. It is available for iPhone, on the App Store, and for Android, on Google Play. This policy covers both and explains what data the app handles, why, where it is kept and how you control it. It is written to comply with Brazil's General Data Protection Law (LGPD, Law 13.709/2018).

1. Who we are

PostMyPace is operated by Pixel Boom Comunicação Ltda, Av. Maurilio Biagi 800, Sala 1302, Ribeirão Preto, SP, 14096-075, Brazil ("we", "us"). We are the controller of the personal data described here. For any privacy request, write to contato@pixelboom.studio.

2. What we collect

Account

• When you sign in with Apple or Google: your name and email address, as shared by that provider, and a unique account ID. If you choose to hide your email with Apple, we only receive Apple's private relay address.
• The display name you set in the app, if you change it.

Profile (optional)

• A profile photo, if you add one. It is stored on our servers at an unlisted web address so the app can show it.
• Your Instagram handle, if you add it. We do not verify it or connect to your Instagram account.
• The sport you practice, if you answer. We use it only to understand who uses the app and which templates to design next.

Story history

• For each story you save or share: the numbers you enter or read from a screenshot (distance, time, pace, elevation, title and date), the template and colour you picked, where you shared it (Instagram Stories or Photos) and when.
• The story images themselves stay on your device. They are not uploaded, except for reposts (below).
• For stories made from an Apple Health or Health Connect workout or a Garmin run, we record no workout numbers in your story history (see Apple Health, Health Connect and Garmin Connect, below).

Reposts (only if you opt in)

• If you allow a story to be reposted on our Instagram account (@postmypace), we upload that story image and keep your Instagram handle, the version and date of your consent, and the repost status. You give this consent story by story, and you can ask for removal at any time.

Subscription

• Whether you have PostMyPace Pro and when it expires. Payments are processed entirely by Apple, on the App Store, or by Google, on Google Play. We never receive your card or payment details.

Photos, screenshots and camera

• Photos you pick and photos you take with the camera are used on your device to build your story. When you add a screenshot of a workout, its text is read on your device (with Apple's Vision framework on iPhone, or Google's ML Kit on Android) to fill in your numbers. None of these images leave your device unless they become your profile photo or a repost.
• The app saves stories to your photo library or gallery only when you tap Save.

Apple Health (iPhone, only if you connect it)

• With your permission, the app reads your running workouts from Apple Health: distance, time, elevation and date. We use them for one thing, to fill in the numbers of your story.
• These numbers stay on your device. They are not sent to our servers, and we do not use them for marketing, reposts, advertising or sale. A story made from an Apple Health workout is not offered for repost.
• The app does not put them in iCloud: images of stories made from a workout are kept out of device backups, including iCloud Backup.
• The image of a story made from a workout leaves your device only when you choose to share it or save it to Photos. After that, the app you shared it to, or your photo library settings, apply.
• You grant access in the iPhone permission prompt and can turn it off at any time in the iPhone Settings app, under Health → Data Access & Devices → PostMyPace.

Health Connect (Android, only if you connect it)

• With your permission, the app reads your running workouts from Health Connect: exercise sessions with their date and duration, distance and elevation gained. If you also allow access to past data, it reads workouts older than 30 days, so you can pick any past run. We use them for one thing, to fill in the numbers of your story.
• These numbers stay on your device. They are not sent to our servers, and we do not use them for marketing, reposts, advertising or sale. A story made from a Health Connect workout is not offered for repost.
• The app keeps nothing in Android device backups.
• The image of a story made from a workout leaves your device only when you choose to share it or save it to your gallery. After that, the app you shared it to, or your gallery settings, apply.
• You grant access in the Health Connect permission screen and can turn it off at any time in Health Connect, under App permissions → PostMyPace.
• The use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

Garmin Connect (coming soon, only if you connect it)

• Garmin Connect is not available in the app yet. This section applies once it is, and only if you connect your account. Until then, we receive no Garmin data.
• You connect on Garmin's own page, where you choose what to share. We never see your Garmin password. We keep the user ID Garmin gives us and the access tokens that keep the connection working, encrypted.
• After you connect, Garmin sends the running activities you sync from then on to our servers. We keep only the start date and time, duration, distance, elevation gain, activity name and device model. We discard everything else Garmin sends, such as location and heart rate, and any activity that is not a run.
• We use this data for one thing: to list your runs in the app and fill in the numbers of your story. A story made from a Garmin run shows the Garmin device model on the image, as Garmin requires, and is not offered for repost.
• We do not sell this data, use it for marketing or advertising, or share it with anyone except the providers listed in section 4. It is not processed by artificial intelligence systems or used to train them.
• You can disconnect at any time in Profile → Garmin Connect, or in your Garmin Connect account settings. Either way, we stop receiving your runs and delete the Garmin data we stored.

Notifications (only if you opt in)

• If you turn on notifications, we keep your device's push token, your app version, and the version and date of your consent. We use them only to send you news and offers about PostMyPace, such as new templates and features.
• We never use your Apple Health, Health Connect or Garmin data to decide who gets a notification, and notifications never contain them.
• You can turn notifications off at any time in Profile → Notifications or in your phone's settings. Turning them off in the app, signing out or deleting your account removes your token from our servers. If you only turn them off in your phone's settings, it is removed the next time you open the app.

Google libraries (Android)

• The Google libraries that read screenshots (ML Kit) and deliver notifications (Firebase Cloud Messaging) send Google technical data, such as device model, Android version, app version and an identifier for the installation, to keep them working and measure their performance. This data does not include your photos, screenshots, numbers or account details.

What we do not collect

• We do not track you across other apps or websites, we do not use advertising, and we do not use analytics services to study how you use the app.
• Our hosting provider keeps short-lived technical logs (such as IP address and request time) for security and to keep the service running.

3. Why we use it (legal bases)

• To provide the app (performance of a contract): sign-in, your profile, your story history and your subscription.
• Reposts (consent): posting your story on @postmypace, only for stories you allowed.
• Apple Health (consent): reading your running workouts on your device, only after you allow it in the iPhone permission prompt. You can withdraw it at any time in Settings.
• Health Connect (consent): reading your running workouts on your device, only after you allow it in the Health Connect permission screen. You can withdraw it at any time in Health Connect.
• Garmin Connect (consent): receiving and storing your running activities, only after you connect your account. You can withdraw it at any time by disconnecting.
• Notifications (consent): sending you news and offers, only after you turn them on.
• Security and service quality (legitimate interest): technical logs and fraud prevention.
• Legal obligations: records we must keep by law, including proof of consent.

4. Who we share it with

• Supabase, our database, file storage and authentication provider, and Amazon Web Services, which hosts it. They process data on our behalf, including Garmin data if you connect Garmin Connect.
• Apple and Google, when you sign in with them, and for subscription payments: Apple on the App Store, Google on Google Play.
• Apple, on iPhone, and Google, through Firebase Cloud Messaging on Android, also deliver notifications, if you turn them on. On Android, Google also receives the technical data described under "Google libraries (Android)".
• Garmin: if you connect Garmin Connect, Garmin sends data to us, and we tell Garmin when you disconnect. We do not send Garmin your story content or other data.
• Instagram (Meta): when you share a story, the app hands it to the Instagram app on your device and you post it yourself. Reposts you allowed are published on our @postmypace account, mentioning your handle.

We do not sell your personal data.

5. Where it is stored

Our servers are located in Canada (Supabase, region ca-central-1). Transferring data outside Brazil is done under the safeguards required by the LGPD, including contractual commitments from our provider to protect it.

6. How long we keep it

• Your data is kept while your account exists.
• When you delete your account (in the app, under Profile → Delete account, or by request as described on our account deletion page), we delete your account, profile, profile photo, story history and repost files. Reposts already published are marked for removal and taken down from @postmypace. Story images saved on your device by the app are deleted from it.
• If you connect Garmin Connect, your Garmin data is kept until you disconnect or delete your account, whichever comes first, and then deleted.
• A record of each repost consent (Instagram handle, consent version and date), no longer linked to your account, is kept for as long as needed to prove that the repost was authorized.
• Stories you already shared on Instagram or saved to your photo library are under your control; deleting your account does not remove them.

7. Your rights

Under the LGPD you may confirm whether we process your data, access it, correct it, have it anonymized or deleted, receive a copy in a portable format, know who we share it with, and withdraw consent at any time. You can edit your name, photo and Instagram handle in the app, cancel or remove reposts in Profile → My reposts, disconnect Garmin Connect in Profile, and delete your account in Profile → Delete account or on our account deletion page. To get a copy of your Garmin data, or for anything else, email contato@pixelboom.studio. You may also contact Brazil's data protection authority (ANPD).

8. Children

PostMyPace is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

9. Security

Data is encrypted in transit, access to it is restricted by account, and each person can only read and change their own records. No system is perfectly secure, so we also keep the data we collect to what the app needs.

10. Changes

If we change this policy in a way that matters, we will update the date above and let you know before the change takes effect.