1. Scope and controller

This policy covers the Paceva iOS and Android apps and paceva.analyticszone.app. Paceva is a wellness and sports-analysis product, not a medical device. The controller is ArnoHealth S.L., Gran Via de les Corts Catalanes 699, 2-2, 08013 Barcelona, Spain. Contact: [email protected].

2. Data processed on your device

With your permission, Paceva reads training and health information from Apple HealthKit or Health Connect. This can include workouts, dates, duration, distance, speed or pace, heart rate, energy, laps, splits and route information. Imported FIT, GPX or TCX files can also contain power, cadence and elevation.

Paceva uses these records to display multi-sport history and calculate load, trends and sport-specific metrics. Platform-health records and the main analysis database are processed and stored locally. Paceva does not sell them or use them for advertising. Removing a platform-health permission stops future access but does not automatically delete records already stored locally.

3. Optional Garmin connection

Garmin sync is optional. If you explicitly connect it, a secure backend completes Garmin authorization and retrieves the workouts you request. It may process and store:

• a random per-installation identifier;
• Garmin account and authorization identifiers and OAuth tokens;
• connection status, synchronization cursors and technical timestamps;
• workout identifiers, sport, date, duration, distance, heart rate, energy and splits; and
• precise route points when available.

This information is used only to connect Garmin, import and deduplicate workouts, and deliver routes. It is not sold, used for advertising or shared with data brokers. Requests use encrypted transport. Declining Garmin does not prevent Apple Health, Health Connect or manual imports.

4. Crash and diagnostic data

Release versions may send Sentry limited crash logs and technical diagnostics needed to identify and fix errors. Reports can include app and operating-system version, device model, error stack, timestamps and recent technical breadcrumbs. Paceva disables screenshots and performance tracing and does not intentionally attach workouts, health records, names, email addresses or advertising identifiers. This information is used for reliability and security, not advertising or cross-app tracking.

5. Purchases, website and contact

Apple or Google processes purchases. Paceva receives product, transaction and entitlement information needed to unlock access, but not full payment-card details. If you contact us, we process the details and message you provide to answer. Do not send passwords, security codes or unnecessary health records.

6. Deleting your data

Paceva does not create a Paceva user account. To delete data collected through optional Garmin sync:

1. Open Paceva and go to Data sources.
2. Select Withdraw Garmin consent and delete server data while online.
3. If it cannot be completed, email [email protected], identifying the affected Paceva installation without sending passwords or security codes.

A successful request deletes that installation's active Garmin connection, credentials, imported server workouts and route caches. Workouts already imported into the app remain locally until you delete local data or uninstall the app. The random identifier stays on the device so a failed deletion can be retried. Revoking Garmin or uninstalling alone does not send a server-deletion request.

7. Retention, providers and transfers

Local data remains until you clear it or uninstall the app, subject to operating-system backups you control. Active Garmin data remains until a successful deletion request. Ordinary Google Cloud service logs have a 30-day retention setting and mandatory audit logs may be retained for 400 days; they can contain request IP addresses, technical identifiers, timestamps and errors. Backups are not individually removed and expire through provider rotation. Sentry retains technical reports for the configured service-retention period.

The Garmin service runs on Google Cloud Run in Belgium and active PostgreSQL records are hosted by Supabase in the United Kingdom. Sentry processes crash diagnostics and Cloudflare serves the website. Apple, Google and Garmin also process information under their own terms. Applicable contractual transfer safeguards apply.

8. Your choices and rights

• Revoke Apple Health or Health Connect access in device settings.
• Disconnect Garmin and request deletion as described above.
• Delete local data using the operating system where available or by uninstalling Paceva.
• Request access, correction, deletion, restriction, objection or portability where applicable.

You can withdraw consent at any time. You may complain to the Spanish Data Protection Agency (AEPD) or your local supervisory authority.

9. Security, children and changes

We use reasonable safeguards, but no system is completely secure. Paceva is not directed to children below the minimum age required to consent in their country. We may update this policy when features, providers or legal requirements change.

10. Contact

ArnoHealth S.L., Gran Via de les Corts Catalanes 699, 2-2, 08013 Barcelona, Spain. Privacy requests: [email protected].