Privacy Policy

Pacewell Ltd is a Canadian company that develops and operates the Pacewell mobile application and website.

Questions, requests, or concerns about this Privacy Policy or your personal information may be directed to:

Pacewell LtdPrivacy contact: privacy@getpacewell.comWebsite: getpacewell.com

We collect information that you provide directly to Pacewell and, where you choose to enable an integration, health and fitness information made available through Google Health Connect.

Account InformationWhen you create and maintain a Pacewell account, we may collect:

•your email address;•your name;•your age;•your activity level;•your selected health and wellness goals; and•a profile image if you choose to upload one.

Your email address is used for account authentication, account-related communications, security, and support.

Daily Check-in DataWhen you complete a daily check-in, Pacewell may collect information you choose to provide about:

•mood;•energy;•stress;•sleep quality;•sleep duration;•nutrition quality;•water intake; and•optional written notes.

Written notes are free-form. You should avoid entering information about another person or information you do not want included in your wellness data.

Activity informationWhen you manually record activities, or import supported activity information, Pacewell may process information such as:

•activity type;•date;•duration;•perceived exertion;•source of the activity; and•identifiers used to prevent duplicate imports.

Health Connect informationIf you choose to connect Google Health Connect and grant Pacewell permission to access supported data, Pacewell may process health and fitness information such as:

•step count;•heart-rate information, including resting, minimum, maximum, or average heart rate where available;•heart-rate variability where available;•body weight; and•exercise or workout information.

Pacewell only receives Health Connect information for which you grant permission and that is used to provide Pacewell's user-facing health, activity, recovery, and insight features.

You can manage or revoke Pacewell's Health Connect permissions through Android and Health Connect settings.

Google treats information accessed through Health Connect permissions as personal and sensitive user data and requires apps to limit access to data necessary for their approved functionality.

Notification preferencesIf you choose to enable notifications, Pacewell stores the settings required to provide reminders you select, such as daily check-in or evening insight reminders.

Pacewell does not enable these reminders without your choice.

We use personal information only for purposes related to providing, securing, maintaining, and improving Pacewell.

These purposes may include:

•creating and authenticating your account;•maintaining your profile and preferences;•storing and displaying daily check-ins;•recording and displaying activities;•importing health and fitness information you authorize through Health Connect;•calculating health, activity, and wellness trends;•generating personalized AI-supported wellness insights;•sending reminders you have chosen to enable;•providing account and security communications;•troubleshooting and maintaining the service;•responding to support or privacy requests;•preventing unauthorized access or misuse; and•meeting applicable legal obligations.

We do not sell your personal information.

We do not sell your health information.

We do not use Health Connect data for advertising, credit decisions, employment decisions, insurance eligibility, or data-broker purposes.

These restrictions are also consistent with Google's requirements governing Health Connect data.

Pacewell uses Anthropic's Claude API to generate personalized wellness insights from recent Pacewell data.

When an insight is generated, Pacewell may send relevant information to Anthropic for processing, including:

•age;•activity level;•selected health goals;•daily check-in information;•activity information;•Health Connect-derived metrics; and•written check-in notes, if you have entered them.

Pacewell does not intentionally include your email address or name in the prompt sent to Anthropic for insight generation.

However, because check-in notes are free-form, information that you personally enter into those notes may be included when an insight is generated. You should therefore avoid entering names, contact details, or other personally identifying information in notes unless you are comfortable with that information being processed for insight generation.

Anthropic processes this information as a service provider through its commercial API. Anthropic states that standard API inputs and outputs are automatically deleted from its backend within 30 days, subject to exceptions such as legal requirements, abuse prevention, or a different contractual retention arrangement.

AI-generated insights may contain errors or incomplete interpretations. They are provided for general wellness purposes and are not medical advice.

We do not sell or rent your personal information.

We share or process information with service providers only where required to operate Pacewell.

Current service providers include:

SupabaseUsed for authentication, database storage, server-side functions, and file storage such as profile images.

AnthropicUsed to process selected Pacewell data for AI-generated wellness insights.

Google Health ConnectUsed on supported Android devices to allow you to authorize Pacewell to access selected health and fitness information.

Expo / EASUsed as part of Pacewell's mobile application development, build, and distribution infrastructure.

Service providers may process information in jurisdictions outside Canada. Their processing is subject to their own contractual, security, legal, and privacy obligations.

We may also disclose information where required by applicable law, court order, regulatory requirement, or where reasonably necessary to protect Pacewell, our users, or others from fraud, security threats, or unlawful activity.

Pacewell treats health and wellness information as sensitive information.

Access to Health Connect information is optional. You choose whether to connect Health Connect and which available permissions to grant.

Pacewell attempts to limit collection and use of health information to the information necessary to provide its health, activity, recovery, and insight features.

Pacewell does not provide your health information to employers, insurers, advertisers, or data brokers for their independent use.

Canadian privacy guidance requires organizations to limit collection to what is necessary for identified purposes, use or disclose information only for those purposes unless otherwise authorized, and apply safeguards appropriate to the sensitivity of the information.

Pacewell uses Supabase infrastructure to store account and application data.

We use technical and organizational measures intended to protect personal information, including:

•encrypted network connections;•authenticated access;•user-scoped database access controls;•database Row Level Security;•restricted server-side administrative credentials;•controlled storage access; and•account authorization checks for sensitive operations.

No internet-connected system can guarantee absolute security. We therefore cannot guarantee that unauthorized access, loss, alteration, or disclosure will never occur.

If we become aware of a privacy or security incident, we will respond in accordance with applicable legal requirements.

Some Pacewell service providers may process or store information outside Canada.

When personal information is processed in another country, it may be subject to that country's laws and may be accessible to courts, law-enforcement agencies, or governmental authorities in accordance with those laws.

We use service providers for the purposes described in this policy and seek to limit the information provided to what is reasonably necessary for those purposes.

Pacewell retains information while your account remains active and for as long as reasonably necessary to provide the service, fulfil the purposes described in this Privacy Policy, meet legal obligations, resolve disputes, or protect the security and integrity of the service.

You may delete your Pacewell account through the App.

When account deletion succeeds, Pacewell deletes your authentication account and associated active application records, including information associated with your profile, check-ins, activities, AI insights, and stored health metrics. A stored Pacewell profile image associated with the account is also removed from Pacewell's active storage.

Deletion from Pacewell does not necessarily cause information already processed by an independent infrastructure or service provider to disappear from that provider's systems immediately. Limited residual information may temporarily remain in backups, logs, fraud-prevention systems, legal records, or service-provider systems where retention is required for security, legal, or operational purposes.

For example, Anthropic currently states that standard commercial API inputs and outputs are normally deleted from its backend within 30 days, subject to stated exceptions.

The current Pacewell account-deletion implementation verifies the authenticated user, removes the associated avatar object where present, and deletes the Supabase authentication user, which triggers deletion of associated database records.

Depending on the privacy law applicable to your relationship with Pacewell, you may have rights relating to your personal information, including the ability to:

•request access to personal information Pacewell holds about you;•request correction of inaccurate or incomplete information;•withdraw consent where processing is based on consent, subject to legal or contractual limitations;•change or revoke Health Connect permissions;•disable notifications;•request information about how your personal information has been used or disclosed;•delete your Pacewell account; and•raise a concern about Pacewell's handling of your personal information.

The Office of the Privacy Commissioner of Canada identifies access, correction, openness, safeguards, consent, and the ability to challenge an organization's compliance among the core principles of PIPEDA.

To make a privacy request, contact us using the information in Section 1.

You may also contact the Office of the Privacy Commissioner of Canada if you believe your privacy rights have not been respected.

Pacewell is intended for adults aged 18 and older.

We do not knowingly offer Pacewell to children or knowingly collect personal information from individuals under 18.

If we learn that information belonging to a person under 18 has been collected contrary to this policy, we will take reasonable steps to delete it.

Pacewell is a general wellness and fitness application.

Pacewell is not a medical device and is not intended to diagnose, treat, cure, prevent, or monitor a disease or medical condition.

AI-generated insights, trends, scores, observations, reminders, and other information provided by Pacewell are for general wellness and informational purposes only.

They are not a substitute for advice, diagnosis, or treatment from a qualified healthcare professional.

Do not delay seeking professional medical care because of information provided by Pacewell.

We may update this Privacy Policy as Pacewell evolves, our service providers change, or applicable legal and regulatory requirements change.

When we make material changes, we may notify users through the App, by email, or through another appropriate method.

The "Last updated" date at the top of this policy identifies the most recent revision.

Where required by law, we will request consent before using personal information for a materially different purpose.

For questions, access requests, correction requests, deletion questions, or other privacy concerns, contact:

Pacewell LtdPrivacy contact: privacy@getpacewell.comWebsite: getpacewell.com

You may also obtain information about Canadian privacy rights from the Office of the Privacy Commissioner of Canada.