Privacy Policy

Last updated: March 20, 2026

Empace ("we", "our", "us") is an AI-powered running coach that connects to your fitness accounts to provide personalized coaching. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Account information from Strava or Garmin Connect:

• Name and profile image
• City, state, and country
• Account ID

Activity data from Strava or Garmin Connect:

• Activity name, sport type, date, and timezone
• Distance, duration, elevation, pace, and speed
• Heart rate, cadence, and power data (when available)
• Start/end GPS coordinates and location
• Device information and gear used

Data you provide in the app:

• Chat messages with your AI coach
• Training goals and target dates

Technical data:

• Push notification tokens (for sending notifications)

2. How We Use Your Data

• AI coaching: Your activity data, goals, notes, and chat history are sent to Google Gemini (our AI provider) to generate personalized coaching advice. This data is used only for inference — it is never used to train AI models.
• Activity sync: We sync your activities from Strava or Garmin Connect via their APIs to provide coaching insights.
• Notifications: We use push notifications to send you training reminders and coaching check-ins.

Your activity data is only ever shown back to you. It is never sold, shared for advertising purposes, or disclosed to other users.

3. Third-Party Services

We share data with the following services to provide our functionality:

• Strava — to authenticate your account and sync activity data. Strava Privacy Policy
• Garmin Connect — to sync activity and health data from your Garmin devices. Garmin Privacy Policy
• Google Gemini — your activity data, profile information, chat history, and goals are sent to generate AI coaching responses. Data is processed under Google's API terms and not used for model training. Gemini API Terms
• Expo — push notification tokens are sent to deliver notifications. Expo Privacy Policy

4. Data Storage

Your data is stored on servers hosted by Railway. Strava OAuth tokens are stored securely to maintain your connection. Chat messages and coaching notes are retained to provide continuity in your coaching experience.

5. Data Retention

We retain your data for as long as your account is active. When you delete your account, your profile is deactivated and you can no longer access the service. You may also disconnect Empace from your Strava account at any time via Strava's settings.

6. Your Rights

• Delete your account — available in the app under Profile settings.
• Revoke Strava access — disconnect Empace in your Strava connected apps. When you revoke access, we receive a notification and deactivate your account.
• Revoke Garmin access — disconnect Empace in your Garmin Connect connected apps.
• Request your data — contact us to request a copy of your data.

7. Children's Privacy

Empace is not intended for children under 16. We do not knowingly collect data from children.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes through the app.

9. Contact

If you have questions about this privacy policy, contact us at support@empace.app.