Privacy Policy

Last updated: September 6, 2026

Empace ("we", "our", "us") is an AI-powered running coach that connects to your Strava account to provide personalized coaching. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Account information from Strava:

Name and profile image
City, state, and country
Account ID

Activity data from Strava:

Activity name, sport type, date, and timezone
Distance, duration, elevation, pace, and speed
Heart rate, cadence, and power data (when available)
Start/end GPS coordinates and location
Device information and gear used

Data you provide in the app:

Chat messages with your AI coach
Training goals and target dates
Answers you give to in-app feedback questions, including anything you write in your own words. These are linked to your account so we can follow up and so the same question isn't asked twice.

Subscription data:

A pseudonymous user identifier and subscription status (active plan, trial state, renewal date) received from the app store via our subscription processor. We do not receive or store your payment details — those are handled entirely by Apple or Google.

Technical data:

Push notification tokens (for sending notifications)
The device you use the app on — its type (for example "iPhone 15 Pro"), operating system version, and which version of Empace is installed. We use this to support you, to reproduce problems you report, and to know which app versions are still in use. It is never used for advertising or shared with anyone.

2. How We Use Your Data

AI coaching: Your activity data, goals, notes, and chat history are sent to Google Gemini (our AI provider) to generate personalized coaching advice. This data is used only for inference — it is never used to train AI models.
Activity sync: We sync your activities from Strava via their API to provide coaching insights.
Location lookup: When an activity has GPS coordinates, we send those coordinates to OpenStreetMap's Nominatim service to look up the city and country it took place in. We store only the resulting city and country names; these (not the coordinates) may then be included in coaching messages.
Notifications: We use push notifications to send you training reminders and coaching check-ins.
Subscriptions: We use your subscription status to determine which features (free, Pro, Pro Plus) are available to you in the app.

Your activity data is only ever shown back to you. It is never sold, shared for advertising purposes, or disclosed to other users. The one exception is a link you create yourself — see Sharing.

3. Third-Party Services

We share data with the following services to provide our functionality:

Strava — to authenticate your account and sync activity data. Strava Privacy Policy
Google Gemini — your activity data, profile information, chat history, and goals are sent to generate AI coaching responses. Data is processed under Google's API terms and not used for model training. Gemini API Terms
OpenStreetMap (Nominatim) — your activity's GPS coordinates are sent to reverse-geocode them into a city and country name. We store only the resulting city and country. OSM Foundation Privacy Policy
RevenueCat — to manage subscription state across devices. We share a pseudonymous user identifier; RevenueCat receives subscription events from the app store on our behalf. RevenueCat Privacy Policy
Apple App Store / Google Play — purchases, billing, and refunds are processed entirely by the platform store. We never see your payment details. Apple Privacy Policy · Google Privacy Policy
Expo — push notification tokens are sent to deliver notifications. Expo Privacy Policy

You can choose to share a training plan or a coaching note by creating a link for it in the app. Nothing is shared unless you create such a link.

The link is public. Anyone who has it can open the page without signing in. The address contains a long random code, so it cannot be guessed or found by searching, and we ask search engines not to index it — but it is not password-protected, so treat it as public once you send it.
A shared training plan is live, and tied to that one plan. The page shows the plan as it currently stands, so changes your coach makes to it appear on a link you have already sent. It only ever shows the plan you shared: when that plan ends and a new one is started, the new plan is not shared unless you create a link for it.
A shared coaching note is a frozen copy. The page shows what the note said at the moment you shared it. Later changes never appear on a link you have already sent.
A shared training plan shows the schedule, not your record. It carries the weeks and sessions your coach wrote with their instructions and targets, the readiness checkpoints the plan is building toward, the plan's title and overview, your race and goal time, and your first name. It never carries what you actually ran, which sessions you completed or skipped, which checkpoints you have reached, your goal outlook, or your coach's private notes about you. No activity data, and no GPS data, ever appears on a shared training plan. (A shared coaching note is different: it shows whatever you and your coach wrote in it, which may mention your runs.)
You can revoke a link at any time from the same screen you created it on. The page then stops working, and for a shared note we erase the copy behind it.
Link previews. When a shared link is pasted into a messaging app, that app may fetch a preview card from us showing the title and your first name. The card never contains the plan itself.

5. Data Storage

Your data is stored on servers hosted by Railway. Strava OAuth tokens are stored securely to maintain your connection. Chat messages and coaching notes are retained to provide continuity in your coaching experience.

6. Data Retention

We keep your data for as long as your account is active. When you delete your account — in the app, or by disconnecting Empace on Strava — everything we hold about you is erased straight away: your profile details, the activity data we synced from Strava, your Strava connection, your chat messages with the coach, your goals, coaching notes and insights, your gear, your training plans, any share links you created, your feedback answers, your push notification registrations and the record of which devices and app versions you used.

Three things are kept, and nothing else. We keep your subscription and billing record, because we have to account for what you paid and it is what stops a returning athlete being handed a second free trial. We keep a tally of how much AI work your account used, which holds no part of what was written. And we keep a stripped account record — your Strava athlete ID, when you joined and when you left, and your notification and units preferences, with your name, photo, location and Strava tokens removed — which is how we recognise you if you sign in again with the same Strava account. Signing in again gives you a fresh start rather than your old one back. If you want that last record gone as well, email support@empace.app and we will remove it.

7. Your Rights

Delete your account — available in the app under Profile settings. Section 6 says what is erased and the two things that are kept.
Revoke Strava access — disconnect Empace in your Strava connected apps. When you revoke access, we receive a notification and delete your account the same way.
Manage your subscription — open Manage Subscription from the Profile screen, or go directly to your Apple App Store or Google Play subscriptions.
Request your data — contact us to request a copy of your data.

8. Children's Privacy

Empace is not intended for children under 16. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes through the app.

10. Contact

If you have questions about this privacy policy, contact us at support@empace.app.