Privacy Policy

Pace Perks is operated by Pace Perks Pty Ltd, a company registered in New South Wales, Australia (ACN 700 657 969 · ABN 93 700 657 969). In this policy, "we", "us" and "our" refer to Pace Perks Pty Ltd. "You" means anyone who visits or uses paceperks.com.au or any service we operate from it.

We are bound by the Australian Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs).

We collect:

• Email address. Required so we can sign you in and contact you about your account.
• Full name. Provided when you complete your profile, or imported from Google when you sign in with Google.
• Phone number. Optional. Useful when we need to reach you about a redemption issue.
• Strava activity data. If you connect a Strava account, we receive activity records (distance, duration, type and start time) so we can verify the activity and issue vouchers. We do not store GPS traces or routes. Where an activity includes a start point, we round it to a coarse suburb-scale area (roughly a kilometre across) before storing it, together with the general locality name Strava provides — never a street address or a route. We do not currently use this location information for anything else. We keep the full record for seven days from the day it arrives. After that we keep only the outcome: the date, the activity family, the tier it unlocked and the vouchers it earned. The distance, the duration, the Strava identifier and the start area are deleted.
• Apple Health workouts. If you turn on Apple Health in the iPhone app, we read your workouts only: the workout type, distance, duration, start and end time, and the name of the app that recorded it. We never read heart rate, routes, sleep or any other health data, and we never write to Apple Health. The same seven-day rule applies: we keep the full workout record for seven days, then only the outcome (the date, the activity family, the distance, the tier it unlocked and the vouchers it earned) and your monthly distance totals; the duration, the end time and the name of the recording app are deleted. Apple Health data is used only to verify activity and issue vouchers, is deleted with your account, and is never sold, shared with businesses or used for advertising. You can turn Apple Health off at any time in the iPhone Settings app or in Pace Perks.
• Health Connect workouts. If you turn on Health Connect in the Android app, we read your exercise sessions only: the exercise type, the distance your device recorded, duration, start and end time, whether the session was entered by hand, and the name of the app that recorded it. We never read heart rate, routes, steps, sleep or any other health data, and we never write to Health Connect. On Android 15 and later, if you allow it, the app reads new sessions in the background so a reward can follow a workout without opening the app. The same seven-day rule applies: we keep the full session record for seven days, then only the outcome (the date, the activity family, the distance, the tier it unlocked and the vouchers it earned) and your monthly distance totals; the duration, the end time, whether it was entered by hand and the name of the recording app are deleted. Health Connect data is used only to verify activity and issue vouchers, is deleted with your account, and is never sold, shared with businesses or used for advertising. You can turn Health Connect off at any time in Pace Perks or in Health Connect's own settings, which stops all reading.
• Uploaded photos. If you upload a photo as proof of activity, we store the image and a perceptual hash of it (used to prevent duplicate submissions). A photo that is still waiting for review seven days after you uploaded it is deleted and not counted. The photo behind a verified activity stays with that activity until you delete your account.
• Voucher and redemption history. Which vouchers you earned, where you redeemed them, when and for how much.
• IP address. Briefly retained for rate-limiting, abuse prevention and security logging. Where a business owner accepts our merchant agreement, the accepting IP address is kept as part of that agreement record.
• Push notification token. If you turn on notifications in the app, we store the device token needed to deliver them.
• Enquiries and waitlist details. If you join a waitlist or send an enquiry, we keep the details you submit and our working notes from contacting you.
• Technical telemetry. Browser type, approximate request timing and error reports — used to keep the service running.
• Your location, if you allow it. When you choose “Show perks near you” in the app, we read your phone’s location while the app is open and send it with the request so Deals and your Wallet list the nearest perks first and show how far each venue is. It is used for that ordering only, never stored or logged, never linked to your account and never shared with venues or anyone else. You can decline and pick a suburb instead; the suburb name is used the same way.

We do not request or store payment card details. You never pay us — Pace Perks is free for athletes. We invoice participating businesses directly by bank transfer.

• To create and operate your Pace Perks account.
• To verify activities and issue vouchers.
• To prevent abuse — including rate-limiting, fraud detection and identifying duplicate submissions.
• To send you service notifications — sign-in links, voucher and screenshot updates, expiry reminders, badge and event results, and account changes.
• To deliver announcements that participating businesses send to athletes through Pace Perks (for example, a new deal or an event). These are delivered by us — businesses never see your contact details.
• To show your place on the in-app leaderboard. Other signed-in athletes see your first name, last initial and your monthly distance from uploaded-photo, Apple Health and Health Connect activities. Activity data that comes from Strava is shown only to you. It never appears on the leaderboard or in any other comparison with other athletes.
• To bill participating businesses for redemptions you make at their venue.
• To diagnose problems and improve reliability.

We do not sell your personal information. We do not share it with third parties for marketing purposes, and we do not use it for third-party advertising. Announcements from participating businesses are delivered by us as part of the service, as described above.

We collect information directly from you when you sign up, upload a screenshot, redeem a voucher or join a waitlist. We collect activity data from Strava only after you explicitly authorise our app through Strava’s OAuth flow. After that, Strava sends us new activities automatically until you disconnect. You can revoke that authorisation at any time.

We use a small number of third-party service providers to run Pace Perks. They process your information only as our data processors, only to perform their role, and only under agreements that require them to protect it. By category:

• Cloud database, authentication and storage providers, hosted in Sydney, Australia.
• Web hosting and content-delivery providers.
• Transactional email delivery providers.
• Push notification delivery services.
• Error monitoring services (personal information is stripped where possible).

We also connect to services you choose to link to your account:

• Strava (activity data source). If you connect a Strava account, we exchange the OAuth credentials needed to read your activities (including private ones, so every activity counts) and your basic Strava profile. This is your own connection and you can revoke it at any time from your Strava account settings. Strava may collect usage data about how our app uses its API, under Strava’s own privacy policy. We do not control Strava’s service and are not responsible for it.
• Google (Sign-in with Google). If you choose Google sign-in, Google provides us your name and email through its OAuth flow.

We may also disclose information where required by Australian law or court order, or to investigate suspected fraud or abuse.

Pace Perks is not endorsed by, affiliated with or sponsored by Strava. We use Strava activity data in accordance with Strava’s API terms.

The bulk of your information is stored in Australia (the Sydney region). Some of our service providers may process information outside Australia, including the United States. By using Pace Perks you consent to that cross-border processing.

We keep your information for as long as your account is active. When you delete your account, we permanently erase your personal information straight away — we do not keep a hidden copy of your profile or your activity. A minimal internal audit entry records that the deletion was carried out. Redemption records we must keep for business billing are anonymised (unlinked from you), not retained against your identity. The internal notices that tell our operator about a sign-up, a connection or an upload name you; they are deleted seven days after they are sent. Deleted data also clears from our backups as they rotate on their normal retention cycle. Some information may be kept longer only where Australian law requires it (for example, financial records related to business invoicing).

If you disconnect Strava — whether you disconnect it in the app or revoke our access from Strava’s side — we immediately and permanently delete the Strava-sourced activity data we hold, including any Strava activity still waiting for a person to review it, and stop collecting any further activity data from Strava. This happens automatically; you do not need to email us to request it. We email you to confirm the deletion. Before any disconnection, a Strava activity record keeps its full detail for seven days from the day it arrives, then only the outcome stays, as section 2 describes. You can still reach us at hello@paceperks.com.au with any question. Vouchers you have already earned remain in your history as records of verified activity.

You have the right to:

• Ask what personal information we hold about you.
• Ask us to correct information that is inaccurate or out of date.
• Ask us to delete your information (subject to legal retention obligations).
• Withdraw consent for the Strava or Google integrations at any time.
• Make a complaint about how we handle your information.

To exercise any of these rights, email us at hello@paceperks.com.au. We respond within 30 days.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We use a small number of strictly-necessary cookies to keep you signed in while you use the site. Some display preferences are kept on your device (local storage), not in cookies. We do not use advertising cookies. We do not use cross-site tracking.

Pace Perks is not directed at or intended for anyone under 13. We do not knowingly collect personal information from anyone under 13 and we delete it on request. If you believe we have inadvertently collected information from someone under 13, contact us and we will delete it.

We may update this policy from time to time. The "Last updated" date at the top tells you when the most recent change landed. For material changes, we will also notify active users by email.

Pace Perks Pty Ltd (ACN 700 657 969 · ABN 93 700 657 969)
Email: hello@paceperks.com.au