Privacy Policy

Pace Perks is operated by Pace Perks Pty Ltd, a company registered in New South Wales, Australia (ABN to be confirmed). In this policy, "we", "us" and "our" refer to Pace Perks Pty Ltd. "You" means anyone who visits or uses paceperks.com.au or any service we operate from it.

We are bound by the Australian Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs).

We collect:

• Email address. Required so we can sign you in and contact you about your account.
• Full name. Provided when you complete your profile, or imported from Google when you sign in with Google.
• Phone number. Optional. Useful when we need to reach you about a redemption issue.
• Strava activity data. If you connect a Strava account, we receive activity records (distance, duration, type, start time) so we can verify the activity and issue vouchers. We do not store GPS traces.
• Screenshot uploads. If you upload a screenshot as proof of activity, we store the image and a perceptual hash of it (used to prevent duplicate submissions).
• Voucher and redemption history. Which vouchers you earned, where you redeemed them, when, and for how much.
• IP address. Briefly retained for rate-limiting, abuse prevention, and security logging.
• Technical telemetry. Browser type, approximate request timing, and error reports — used to keep the service running.

We do not request or store payment card details for customers. Payments between merchants and Pace Perks are processed by Stripe (see section 5).

• To create and operate your Pace Perks account.
• To verify activities and issue vouchers.
• To prevent abuse — including rate-limiting, fraud detection, and identifying duplicate submissions.
• To send you transactional notifications (sign-in links, voucher confirmations).
• To bill participating merchants for redemptions you trigger at their business.
• To diagnose problems and improve reliability.

We do not sell your personal information. We do not use it for advertising. We do not share it with third parties for marketing purposes.

We collect information directly from you when you sign up, upload a screenshot, or redeem a voucher. We collect activity data from Strava only after you explicitly authorise our app via Strava's OAuth flow — you can revoke that authorisation at any time from your Strava account settings.

We use a small number of third-party service providers to run Pace Perks. They process your information only as our data processors and only to perform their role:

• Supabase (database, authentication, file storage). Hosted in Sydney, Australia.
• Vercel (web hosting, application runtime, edge cache). Application servers run primarily in the Sydney region.
• Strava (activity data source). We share with Strava only the OAuth credentials needed to read your activity feed.
• Stripe (merchant invoicing). Used to bill participating merchants. We do not send Stripe any customer-side personal information.
• Resend (transactional email delivery). We share your email address so we can deliver sign-in links and notifications.
• Google (Sign-in with Google). If you choose Google sign-in, Google provides us your name and email per its OAuth flow.
• Sentry (error monitoring). We attempt to strip personal information from error reports before sending them.
• Cloudflare (DNS only, no proxying of application traffic).

We may also disclose information where required by Australian law, court order, or to investigate suspected fraud or abuse.

The bulk of customer information lives in our Supabase project, hosted in the ap-southeast-2 (Sydney) region. Some of our service providers (Stripe, Resend, Sentry, Google) operate globally and may process information outside Australia. By using Pace Perks you consent to that cross-border processing.

We keep your information for as long as your account is active. If you delete your account, we soft-delete the associated records within 30 days and remove backups within the next backup-retention cycle. Some information may be retained longer where Australian law requires it (for example, financial records related to merchant invoicing).

You have the right to:

• Ask what personal information we hold about you.
• Ask us to correct information that is inaccurate or out-of-date.
• Ask us to delete your information (subject to legal retention obligations).
• Withdraw consent for Strava or Google integrations at any time.
• Make a complaint about how we handle your information.

To exercise any of these rights, email us at kevin.lee0992@gmail.com. We respond within 30 days.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We use a small number of strictly-necessary cookies to keep you signed in and to remember your preferences while you use the site. We do not use advertising cookies. We do not use cross-site tracking.

Pace Perks is not directed at or intended for use by anyone under 18. If you believe we have inadvertently collected information from a minor, contact us and we will delete it.

We may update this policy from time to time. The "Last updated" date at the top tells you when the most recent change landed. For material changes, we will also notify active users by email.

Pace Perks Pty Ltd
Email: kevin.lee0992@gmail.com