Last updated: October 15, 2026
Pacexis collects running data from connected services (Apple Health, Health Connect) including distance, pace, heart rate, cadence, splits, and route data. We also collect information you provide: shoe details, workout plans, feel ratings, pain logs, and notes.
Pacexis is for people 18 and over. We ask for your date of birth when you sign up, and we do not accept one under 18.
If you sign in but never give your date of birth, we keep what we received when you signed in: your name, email address, profile picture and the link to your Google or Apple account, plus any consent choices you made (with the IP address and device you made them from), a record of each reminder email we try to send you (its type and whether it was delivered), and any data export you ask for. We email you a reminder after 3 days and a final warning after 14 days. At least 16 days after the final warning is sent (about 30 days after you signed in, later if an email could not be sent), the account is deactivated: your sign-in sessions (with their IP address and device) are deleted, so you are signed out everywhere, and we stop emailing you, except a data export you ask for. An account is never deactivated before that warning has been sent. Signing in and giving your date of birth reactivates it. A deactivated account is kept until you delete it.
Pacexis can use AI to write your run insights, race briefing notes, race recaps, weekly and monthly summaries, pain-pattern summaries, shoe suggestions, morning briefs and the overview after your first import. To do that, we send your health and fitness data to our AI provider, Anthropic (the Claude API), which runs the model behind every AI feature. Anthropic's servers can be outside the EU, mainly in the US. That data is run dates and times, distance, duration, pace, splits, heart rate and cadence, feel ratings and tags, race notes, pain logs, planned workouts, shoe names and mileage, race goals and course profile, and race-day weather.
We only do this with your explicit consent(GDPR Art. 9(2)(a)), which we ask for separately from these terms: in onboarding, or the next time you open Pacexis. If you say no, Pacexis still works, and your insights are written by rules instead of AI. You can withdraw or give consent at any time in Settings → Privacy → “AI insights from your health data”. Withdrawing stops future AI requests. It does not affect processing done before, and insights that were already written stay until you delete the run or your account.
We don't send your name, email address or account ID. Notes, shoe names and workout titles are sent as you wrote them. Anthropic processes the data under its data processing terms and its commercial (paid) terms, which do not allow it to train its models on your data. It uses the data only to answer Pacexis and to detect abuse, and it can keep requests for a limited time. Anthropic can keep a request it flags as abuse for up to 2 years. Anthropic's standard data processing terms do not list health data among the categories of personal data they describe. We send the health data described above to Anthropic only with that consent. The AI processing can happen outside the EU, mainly in the US. These transfers rely on the Standard Contractual Clauses in Anthropic's data processing terms. You can ask us for a copy of these safeguards at [email protected].
Not covered by that consent: workout text, screenshots or calendar events you give Pacexis to read (plan parsing, workout decoding, a calendar feed you connect) are always sent to the AI, because reading them is the feature you asked for. They carry only what you submitted.
Open in Claude.If you choose Open in Claude on a race briefing, Pacexis shows you the exact text first and sends nothing itself: opening the link sends that text from your device to Claude (Anthropic), under Anthropic's terms. Copy text sends nothing.
The full list of providers is on our sub-processors page.
Sign in with Google. Google gives Pacexis your name, email address and profile picture. We use them to create your account and sign you in.
Google Calendar (optional).If you connect Google Calendar, Pacexis asks for permission to create one calendar of its own, called “Pacexis”, and to manage the events on it. Pacexis writes your planned workouts there: the date, the workout title and the distance. Pacexis cannot see or change your other calendars or their events. We keep the access tokens encrypted. Disconnecting in Settings deletes the Pacexis calendar and the tokens. You can also remove Pacexis's access at any time in your Google Account, under Security → Third-party apps.
We do not send data from Google APIs to AI providers, use it for advertising, or sell it. Pacexis's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Your data is stored in the European Union (PostgreSQL on Hetzner servers in Falkenstein, Germany). File storage (photos) uses Cloudflare R2 with global edge distribution. All data is encrypted in transit (HTTPS/TLS).
Emails from Pacexis (account, billing and reminder messages) are sent through Scaleway (France, EU), under its data processing agreement. Scaleway receives your email address and the message content, and reports back whether each message was delivered. Reminder and summary emails carry an unsubscribe link. Messages about your account or billing (a finished data export, a failed payment) do not, and each says why it was sent.
Besides the providers above, these services process data for Pacexis on our behalf:
Where each one is and what it receives is on our sub-processors page.
Active accounts: data retained indefinitely (you control deletion). Deleted accounts: for 30 days after you delete it, the account can still be restored; after 30 days, the account and its data are permanently deleted, except a keyed hash of an email address that bounced or was reported as spam. Unfinished sign-ups (no date of birth): deactivated at least 16 days after the final reminder email is sent; kept until you delete the account.
Server logs are kept for up to 14 days in Grafana Cloud (EU, Ireland), then deleted. The short copy on the server itself is overwritten as it fills, so it has no fixed number of days. They can carry your pseudonymous internal user ID, but no IP addresses, cookies, auth headers or query strings, and tokens in URL paths are replaced with a placeholder.
For privacy questions, contact us at [email protected]