How PaceMate handles your personal data. Last updated 12 August 2026.
Who controls your dataPaceMate is operated by NEVER RUN ALONE LIMITED, a company registered in England and Wales. We are the data controller for the information described below.
What other runners can seeYour first name, derived age, city, rough distance band, public profile text, approved profile photo, running preferences and verification badge. Full date of birth, exact coordinates, trusted contact details, report notes and moderation records are not public.
What PaceMate collectsEmail login, date of birth, profile answers, rough city, precise matching coordinates, photos, messages, matches, run plans, check-ins, completion events, trusted contact details, reports, blocks and privacy-minimised analytics.
Why it is usedTo run the account, match compatible runners, protect users, moderate photos and reports, prevent abuse, keep basic product analytics and meet legal obligations.
Who it is shared withOther users only see public profile and match/run information they need. Supabase and Netlify process data as hosting/auth/database providers. Admin reviewers can see moderation, report and verification data when needed.
LocationPrecise coordinates are used server-side for compatibility. The app returns only broad distance bands and public meeting points.
PhotosPhotos stay private until approved. Replacing an approved photo sends it back to pending moderation.
Our lawful basesWe process your account, profile and matching data to perform our contract with you. We rely on legitimate interests for safety, moderation, abuse prevention and basic product analytics. Where you give us optional information, such as a profile photo or a trusted contact, we rely on your consent and you can withdraw it at any time.
How long we keep itAccount and profile data is kept while your account is open and erased within 30 days of a deletion request. Messages are kept for 12 months. Safety reports, blocks and moderation records are kept for up to 3 years so we can act on repeat behaviour. Analytics events are kept for 24 months.
Your rightsYou can ask us for a copy of your data, correct it, delete it, restrict or object to how we use it, or ask for it in a portable format. Use Delete account in Settings, or email us. We respond within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk.
Deleting your accountDelete account removes your profile from discovery, erases your private matching data, cancels any active Run Now post and clears this device. Photos and login records are erased within 30 days. Messages you sent may remain visible to the other runner, and safety records are kept for the period above.
Where your data is heldOur hosting and database providers, Supabase and Netlify, process data on our behalf. Some processing may take place outside the UK under appropriate safeguards such as the UK International Data Transfer Addendum.
Contact usEmail privacy@getpacemate.app for anything about your data, including access and deletion requests.