Privacy

• We collect what it takes to get two to four people to the same place at the same time. Optional Apple Health sync keeps your workout records private. Built-in coaching uses relevant records as described below; your private history is not shared with workout buddies.
• We don’t show ads, sell data, or run third-party trackers in the app.
• Your location is read only when you tap Check in, and the coordinates are not stored.
• There is no people search. Compatible members may see your first name and planning information when your agents arrange a workout.

• Your account. You sign in with Apple or Google, which gives us your name and email address. With Apple’s Hide My Email we only receive the relay address.
• Identity verification. Before public sessions we ask you to verify a phone number and take a short selfie video; women-only sessions, and coming back after a report, also ask for a government ID. Persona, an identity-verification company, runs these checks and is the one that receives your number, your selfie and your ID. SamePace does not receive or store any of them. We keep which check it was, Persona’s reference for it, and whether it passed.
• Your profile. A first name, your neighbourhood, and the level you set for each activity (a pace, a speed, an experience level). You may tell us your gender; it is used only to open women-only sessions to women, is never shown to anyone and is never used for ranking.
• Sessions. What you post and join, when you cancelled, whether you checked in and by which method, and the five yes/no answers people give each other afterwards.
• Training blocks. The goal you pick from a short list, an event name if you give one, the date, and — counted from your check-ins — how many of your sessions you kept. When a block ends, a member who finished can say another member helped them stick to it. We keep who said it so it can be taken back; the person it is about is never told who.
• Agent conversations. Chats records agents’ planning exchanges, proposals, member approvals and booking results. Both matched members can read the conversation. Earlier member-written messages remain read-only with their original attribution. We retain history needed to review reports; a person at SamePace reads a reported thread when reviewing that report.
• Reliability. Strikes, fees and credits recorded on your account under the rules in our Terms.
• Location, once. When you tap Check in, your phone sends its position so our server can measure the distance to the meeting pin. We record that you checked in and when — not where you were. The app never reads location in the background.

We don’t collect your contacts, photos (the verification selfie and ID go to Persona, not to us), date of birth, height, weight or relationship status. A training block has no weight goal: the miles it shows are the planned distance of the sessions you checked in to, separate from any imported workout.

Where available, you can choose to connect Apple Health and sync workouts to your private SamePace account. A workout includes its source, timestamps, activity, duration, and any distance or active energy supplied with it. You may separately select heart rate, resting heart rate, heart rate variability, sleep, steps, walking and running distance, and active energy readings. Sync starts with the preceding 30 days and imports later changes when you request a sync.

We use these records to show your private workout history and calculate summaries. They do not affect attendance, training-block progress, fees, or your public track record. Device permission to connect Apple Health does not itself authorize AI processing or sharing with other members. The app’s Terms acceptance separately discloses and authorizes bounded workout-summary use for coaching; existing privacy opt-outs remain respected. SamePace only reads Apple Health; it does not write or delete anything there.

Turning off a reading in SamePace removes that type of imported reading. Removing a workout hides it from future routine syncs; we keep its source identifier to prevent it from returning. Disconnecting removes all synced health records, related corrections and interpretations, and sync identifiers from SamePace. Your separately entered exercise logs remain until you remove them or delete your account. Reconnecting starts a new import. You can export your imported records and exercise logs from the app, and change Apple Health permissions in your device settings. Changing device permissions alone does not erase records you already chose to sync.

Coaching is included in SamePace. During onboarding you review and accept the current Terms and this policy, including the use of relevant records for coaching. We record the accepted version and time. There is no model picker or separate AI activation step. Existing privacy choices are preserved when you accept updated Terms.

The coach sends your conversation and relevant entered planning information to Vercel AI Gateway and its AI providers. When useful to your request, it can read up to three recently updated private workout plans, three recent workout records and five individual exercise logs. These include titles, instructions, notes, planned targets and entered actual results. Each plan or record includes at most six exercises and six sets per exercise; long records are shortened and identified as incomplete. This is a bounded recent sample, not your complete training history.

If you have connected Apple Health and allowed its workout summaries for coaching, the coach can also use up to five recent imported workouts, with duration, distance, energy and an available heart-rate summary. Raw samples, sleep, HRV history and other members’ records are excluded. Relevance does not override a permission you turned off. General questions do not need a history lookup. Locally processed photos and on-device conversations are not automatically sent to the cloud.

Gateway requests require zero data retention and no prompt training. SamePace keeps private coaching history for up to 30 days and at most 80 messages. Clear conversation, account deletion or withdrawing a coaching permission removes the relevant app history and stops outdated replies. Changes to saved records clear conversations that used those records. This cannot retract a reply already seen or data already processed in an authorized request. Models are selected by SamePace and may change; suggestions remain editable and can be wrong.

You can save private exercises, sets, repetitions, external loads, units, and notes, and add corrections alongside imported workouts. Corrections do not change Apple Health. As disclosed during Terms acceptance, when you request an exercise suggestion, SamePace sends the submitted note or a bounded summary of the selected workout and your stated goal to TypeSafe. It does not send your identity, raw heart-rate samples, sleep history, or your full health history. Suggestions are editable interpretations, not measurements or medical conclusions.

Turning AI assistance off stops new requests and removes saved AI interpretations from SamePace. Your saved exercise logs and corrections remain yours to edit or remove. Account deletion removes all private fitness data. Service reliability counts and timings contain no notes, measurements, or member identifiers.

A separate, optional feedback pilot records whether suggested fields stayed the same or changed when you saved, how long the logging screen was open, and feedback you choose to provide. Private comparison fingerprints support later edits; raw notes, exercise values and model responses are not copied into these measurements. They expire after 30 days and are removed when you leave the pilot, disable AI assistance, delete the related log or delete your account. Admin reports show groups of at least five members. Screen timings include pauses and do not prove time saved.

Agent matching is included in the current Terms. After you save planning preferences, your agent compares activity, ability, public venues and available times with other eligible members’ preferences. It can initiate contact and exchange bounded workout proposals with a compatible member’s agent. The matched member and their agent can see your first name and entered planning information. Chats shows the recorded exchanges, including which actions came from agents and which approvals came from people. It does not offer member-to-member message composition.

Private coach conversations, imported health records and private workout results are excluded from matching. Blocks, account restrictions, required verification and women-only preferences apply before contact. Matching is bounded by contact limits, freshness checks and expiring planning runs. Both people must separately approve the exact plan and booking terms before a session is created. Agents cannot approve for you or authorize payments.

You can pause matching, disable planning preference sharing, withdraw from a conversation or revoke a delegated credential. These choices stop future authorized exchanges; they cannot retract information already seen by a matched member. Existing privacy opt-outs remain respected when you accept updated Terms. Earlier discovery permissions alone do not enable this automatic contact behavior.

When payments are enabled for your local group, Stripe hosts checkout and membership management. Card details go to Stripe. SamePace stores provider references, amounts, payment states and fee disputes. Every session fee requires a separate checkout; the app does not automatically debit fees. Membership credits cannot be withdrawn as cash. Billing shows whether collection is available before you begin.

Deleting your account queues cancellation and deletion of the Stripe customer and saved payment methods. Failed provider requests are retried. Payment and dispute records needed for reconciliation remain associated with the anonymized account; Stripe retains financial records under its own retention requirements.

• Other members see your first name, initials, levels and track record (sessions completed, on-time rate, would-join-again rate, training blocks finished, how many people say you helped them finish one, member since) — and only on a session you posted or joined, or a training block you’re in. During agent matching, compatible matched members also see your first name and entered planning information as described above. There is no member directory and no people search.
• Your progress in a training block is yours alone. The others in it see a total for the group, never your count.
• The exact meeting spot and the check-in code go only to the people confirmed on that session.
• Companies that run our infrastructure process data on our behalf: Vercel (hosting), Neon (database), Apple and Google (sign-in), and Persona (identity verification), Stripe (payments), Vercel AI Gateway and its model providers (private coaching), and TypeSafe (requested structured AI assistance).
• We disclose information if the law requires it, or to protect someone’s safety.

We keep your account data while your account is open. You can delete your account yourself, at any time, in the app: You → Delete account. It takes effect immediately. If you can’t get into the app, email support@samepace.app from the address on your account and we’ll do it for you.

Deleting removes your sign-in, your name, neighborhood, level and the rest of your profile, your messages, your block list, and any sessions or seats you had coming up. What stays is what belongs to other people’s history too: that a session happened and who showed up, any fee tied to it, ratings you gave, and any safety report — along with the thread it points at. Those are shown against “Deleted member”, never your name. If an account was removed for breaking the rules, we keep a scrambled fingerprint of its email address, and nothing else, so it can’t simply be opened again.

Verification. When you delete your account we ask Persona to delete the selfie, number and ID it holds for you. Local verification records and badges are removed immediately. Only the provider reference needed to retry a failed deletion remains queued until Persona confirms deletion.

Reports and blocks. When you report someone we store the report, who it is about, and the session or planning invitation it concerns. The person you report or block isn’t told.

• You can decline location access and check in with the session code instead.
• You can leave your gender unset; you then won’t see women-only sessions.
• You can ask for a copy of your data, a correction, or deletion. Depending on where you live you may have further rights; write to us and we’ll honour them.

SamePace is for adults. You must be 18 or older to use it, and we don’t knowingly collect data from anyone younger.

If we change this policy in a way that matters, we’ll tell you in the app before it takes effect. Questions: support@samepace.app