Privacy Policy
Pace is a tool for people using GLP-1 medications. We built it with privacy as a product decision, not a compliance checkbox. This page explains what we collect, what we don't, and what rights you have.
The short version
- On the free tier, everything you log — symptoms, weight, injections, protein — is stored in your browser via
localStorage. It never leaves your device, and we never see it. - On Premium, data syncs encrypted across your devices. We store ciphertext; we cannot read your entries.
- We do not sell data. We do not run ad networks. We do not share with third parties beyond the subprocessors listed below.
- You can export or delete everything any time.
What we collect
Account data (Premium only): email address, authentication tokens, and subscription status via Stripe.
Health data you enter: medication, dose, injection dates, weight, symptoms, protein intake, notes. On free tier this stays in your browser. On Premium it syncs encrypted.
Usage analytics: we use Vercel Analytics and Vercel Speed Insights for aggregate, privacy-friendly stats (page views, performance). No cookies, no cross-site tracking, no personal identifiers.
What we don't collect: we do not track location, contacts, advertising identifiers, or device fingerprints. We do not integrate Facebook Pixel, Google Ads, or any ad SDK.
Subprocessors
- Vercel — hosting, analytics, speed insights
- Supabase — authentication and encrypted data sync (Premium only)
- Stripe — payment processing (Premium only)
Your rights
Regardless of where you live, you can request a copy of your data, ask us to delete it, or revoke your account. Email privacy@thepen.club and we'll respond within 30 days.
EU/UK residents: we rely on legitimate interest for minimal analytics and contract performance for Premium account data. California residents: we do not sell personal information.
Medical data & HIPAA
Pace is a consumer wellness tool, not a covered entity under HIPAA. We are not a substitute for medical advice. Never enter information that would compromise your safety if exposed — treat Pace like any other health-tracking app.
Children
Pace is not intended for anyone under 18. We do not knowingly collect data from minors.
Changes
If we change this policy, we will update the date at the top and notify Premium members by email at least 14 days before the change takes effect.
Contact
Questions about privacy: privacy@thepen.club. General contact: hello@thepen.club.
See also: Terms of Service.