Privacy Policy

Pace Perks is operated by Pace Perks Pty Ltd, a company registered in New South Wales, Australia (ACN 700 657 969 · ABN 93 700 657 969). In this policy, "we", "us" and "our" refer to Pace Perks Pty Ltd. "You" means anyone who visits or uses paceperks.com.au or any service we operate from it.

We are bound by the Australian Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs).

We collect:

• Email address. Required so we can sign you in and contact you about your account.
• Full name. Provided when you complete your profile, or imported from Google when you sign in with Google.
• Phone number. Optional. Useful when we need to reach you about a redemption issue.
• Strava activity data. If you connect a Strava account, we receive activity records (distance, duration, type and start time) so we can verify the activity and issue vouchers. We do not store GPS traces or routes. Where an activity includes a start point, we round it to a coarse suburb-scale area (roughly a kilometre across) before storing it, together with the general locality name Strava provides — never a street address or a route. We do not currently use this location information for anything else.
• Health Connect activity data (Android). If you choose to connect Health Connect in the Android app, we import your exercise sessions — type, distance, duration, start time and the app or device that recorded them — so we can verify the activity and issue vouchers. This is health information; we use it only for verification and rewards, and you can disconnect Health Connect at any time from your device settings.
• Screenshot uploads. If you upload a screenshot as proof of activity, we store the image and a perceptual hash of it (used to prevent duplicate submissions).
• Voucher and redemption history. Which vouchers you earned, where you redeemed them, when and for how much.
• IP address. Briefly retained for rate-limiting, abuse prevention and security logging. Where a business owner accepts our merchant agreement, the accepting IP address is kept as part of that agreement record.
• Push notification token. If you turn on notifications in the app, we store the device token needed to deliver them.
• Enquiries and waitlist details. If you join a waitlist or send an enquiry, we keep the details you submit and our working notes from contacting you.
• Technical telemetry. Browser type, approximate request timing and error reports — used to keep the service running.

We do not request or store payment card details. You never pay us — Pace Perks is free for athletes. We invoice participating businesses directly by bank transfer.

• To create and operate your Pace Perks account.
• To verify activities and issue vouchers.
• To prevent abuse — including rate-limiting, fraud detection and identifying duplicate submissions.
• To send you service notifications — sign-in links, voucher and screenshot updates, expiry reminders, badge and event results, and account changes.
• To deliver announcements that participating businesses send to athletes through Pace Perks (for example, a new deal or an event). These are delivered by us — businesses never see your contact details.
• To show your place on the in-app leaderboard — other signed-in athletes see your first name, last initial and monthly activity distance.
• To bill participating businesses for redemptions you make at their venue.
• To diagnose problems and improve reliability.

We do not sell your personal information. We do not share it with third parties for marketing purposes, and we do not use it for third-party advertising. Announcements from participating businesses are delivered by us as part of the service, as described above.

We collect information directly from you when you sign up, upload a screenshot, redeem a voucher or join a waitlist. We collect activity data from Strava only after you explicitly authorise our app through Strava’s OAuth flow — after that, Strava sends us new activities automatically until you disconnect. On Android, Health Connect activity is imported only after you grant the app permission on your device. You can revoke either authorisation at any time.

We use a small number of third-party service providers to run Pace Perks. They process your information only as our data processors, only to perform their role, and only under agreements that require them to protect it. By category:

• Cloud database, authentication and storage providers, hosted in Sydney, Australia.
• Web hosting and content-delivery providers.
• Transactional email delivery providers.
• Push notification delivery services.
• Error monitoring services (personal information is stripped where possible).

We also connect to services you choose to link to your account:

• Strava (activity data source). If you connect a Strava account, we exchange the OAuth credentials needed to read your activities (including private ones, so every activity counts) and your basic Strava profile. This is your own connection and you can revoke it at any time from your Strava account settings.
• Google (Sign-in with Google). If you choose Google sign-in, Google provides us your name and email through its OAuth flow.

We may also disclose information where required by Australian law or court order, or to investigate suspected fraud or abuse.

Pace Perks is not endorsed by, affiliated with or sponsored by Strava. We use Strava activity data in accordance with Strava’s API terms.

The bulk of your information is stored in Australia (the Sydney region). Some of our service providers may process information outside Australia, including the United States. By using Pace Perks you consent to that cross-border processing.

We keep your information for as long as your account is active. When you delete your account, we permanently erase your personal information straight away — we do not keep a hidden copy of your profile or your activity. A minimal internal audit entry records that the deletion was carried out. Redemption records we must keep for business billing are anonymised (unlinked from you), not retained against your identity. Deleted data also clears from our backups as they rotate on their normal retention cycle. Some information may be kept longer only where Australian law requires it (for example, financial records related to business invoicing).

If you disconnect Strava — whether you disconnect it in the app or revoke our access from Strava’s side — we immediately and permanently delete the Strava-sourced activity data we hold, and stop collecting any further activity data from Strava. This happens automatically; you do not need to email us to request it. You can still reach us at hello@paceperks.com.au with any question. Vouchers you have already earned remain in your history as records of verified activity.

You have the right to:

• Ask what personal information we hold about you.
• Ask us to correct information that is inaccurate or out of date.
• Ask us to delete your information (subject to legal retention obligations).
• Withdraw consent for the Strava or Google integrations at any time.
• Make a complaint about how we handle your information.

To exercise any of these rights, email us at hello@paceperks.com.au. We respond within 30 days.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We use a small number of strictly-necessary cookies to keep you signed in while you use the site. Some display preferences are kept on your device (local storage), not in cookies. We do not use advertising cookies. We do not use cross-site tracking.

Pace Perks is not directed at or intended for anyone under 16. If you believe we have inadvertently collected information from someone under 16, contact us and we will delete it.

We may update this policy from time to time. The "Last updated" date at the top tells you when the most recent change landed. For material changes, we will also notify active users by email.

Pace Perks Pty Ltd (ACN 700 657 969 · ABN 93 700 657 969)
Email: hello@paceperks.com.au