This page explains what information Pondera Pace processes, including the health and activity data read from Health Connect and Apple Health, how we use it and how you can delete it.
Last updated: 2026-10
Pondera Pace is a running training app that shows your sessions, recovery metrics and training plans.
This Privacy Policy applies only to Pondera Pace. Your Pondera Pace account and data are separate from those of Pondera Health: each app has its own account, its own storage and its own privacy policy.
Account data: name, email address, profile picture and sign-in method (email and password, Google or Apple).
Athlete profile data you enter: date of birth, sex, weight, height, unit preferences, training zones and running goals.
Health and activity data imported from Health Connect or Apple Health with your express permission (see sections 3 and 4).
Sessions you import from .tcx, .gpx or .kml files and those you enter manually, including their routes when the file contains them.
Purchase and subscription information: plan, status and store of purchase. We do not receive your card or payment method details.
Your device's push notification token, if you allow notifications.
Technical device information, such as app version, build, platform, device model and data related to errors or performance, and app usage statistics (see the service providers section).
On Android devices, Pondera Pace can integrate with Health Connect to read your training and recovery data. The integration is optional and requires you to grant the permissions explicitly in Health Connect.
Data types we may read:
• Exercise sessions and their recorded route (Exercise, Exercise Route)
• Steps and cadence (Steps, Steps Cadence)
• Distance, speed and elevation gained
• Heart rate, resting heart rate and heart rate variability
• VO2 max
• Total calories and active calories
• Sleep sessions
• Data history older than 30 days (Health Data History), needed to calculate trends and accumulated training load
Purpose: this data is used exclusively to show your sessions and their map, calculate your recovery and readiness, estimate training zones and VO2 max, build and adjust your training plans and present your history within the app.
Read-only access: Pondera Pace does not write, modify or delete data in Health Connect.
Limited Use: Pondera Pace's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements. This data is not sold, is not used for advertising or marketing purposes, is not used to determine eligibility for insurance, credit or employment and is not handed over to third parties for their own purposes.
It is only processed by the providers needed to operate the service (hosting on DigitalOcean) and, to show a session's weather, its rounded start coordinates are sent to Open-Meteo, without any account data.
User control: you can revoke the permissions at any time in Health Connect > App permissions > Pondera Pace, or from the Data sources section within the app. Once revoked, we stop importing new data; data already imported is deleted when you delete your account.
On iPhone, Pondera Pace can integrate with Apple Health (HealthKit) to read your training and recovery data. The integration is optional and requires you to grant access explicitly in the permission sheet shown by iOS.
Data types we may read:
• Workouts and their recorded route
• Steps, walking and running distance, and running speed
• Heart rate, resting heart rate and heart rate variability
• VO2 max
• Active energy and resting energy
• Sleep analysis
Purpose: the same as for Health Connect — showing your sessions and their map, calculating your recovery and readiness, estimating training zones and VO2 max, building and adjusting your training plans and presenting your history within the app.
Read-only access: Pondera Pace does not write, modify or delete data in Apple Health.
Use of HealthKit data: data obtained from Apple Health is not sold, is not used for advertising or marketing purposes, is not used to determine eligibility for insurance, credit or employment, is not handed over to third parties for their own purposes and is not stored in iCloud.
It is only processed by the providers needed to operate the service (hosting on DigitalOcean) and, to show a session's weather, its rounded start coordinates are sent to Open-Meteo, without any account data.
User control: you can revoke access at any time in Settings > Health > Data Access & Devices > Pondera Pace. Once revoked, we stop importing new data; data already imported is deleted when you delete your account.
When a session imported from Health Connect, Apple Health or a file includes a route recorded by the device or watch that recorded it, that route is stored with the session to show it on the map in the activity detail and to group your workouts by starting place.
Pondera Pace does not access your phone's location in real time and does not record workouts itself: the route comes only from the sessions you import.
Maps are shown with Google Maps on Android and Apple Maps on iPhone: your device downloads the map of the area and draws the route locally, without sending it to the map provider.
To show a session's weather, our servers send Open-Meteo the start coordinates rounded to two decimals (about 1 km) and the session's time period.
Information is used to provide the core features of Pondera Pace: daily dashboard, activity history, session maps and weather, recovery metrics, training plans and suggestions, notifications, management of your subscription and account settings.
It may also be used to resolve technical issues, respond to support requests and improve the stability, performance and quality of the service based on app usage statistics.
We do not use your health, activity or location data for advertising, sell it or hand it over to third parties for commercial purposes.
We do not sell your personal information or share it arbitrarily.
We only share information with the service providers in the next section, to the extent needed for their function, or when an applicable legal obligation exists.
We work with the following providers, which process data on our behalf and only for the stated purpose:
• DigitalOcean: hosting of our servers, database and files (San Francisco data center, United States).
• RevenueCat: subscription management. It receives an identifier of your account and the status of your purchases; it does not receive health data or card details.
• Apple and Google: Sign in with Apple or Google, if you choose those methods, and billing of subscriptions through the App Store or Google Play. Payment details are handled directly by the store; we do not receive them.
• Google Firebase (Analytics and Cloud Messaging): app usage statistics (screens viewed, app and notification opens and number of sessions imported, together with device data such as model, operating system and approximate region) linked to an internal identifier of your account, and delivery of push notifications through your device’s token. We do not send health measurements or routes to Firebase.
• Resend: delivery of transactional email (welcome, account and security). It receives your email address, your name and the content of the message.
• Open-Meteo: weather for your sessions. Our servers send the session’s start coordinates rounded to two decimals (about 1 km) and the time period requested; no account data is sent.
• Google Maps (Android) and Apple Maps (iPhone): maps of your sessions and places. Your device downloads the map of the area shown from the provider; the route is drawn on your device and is not sent to the map provider.
• Google Analytics: website usage statistics, only if you accept analytics cookies (see the cookies section). It is not used for your account data.
These providers may not use your information for their own purposes. Beyond them, we only share information when required by law or at your express direction.
Your data is stored on DigitalOcean servers located in the United States (San Francisco region). If you use Pondera Pace from another country, your information is transferred to and processed in the United States.
Some of the listed service providers may process data in other countries to perform their function. In every case we limit the information they receive to what that function needs.
We apply reasonable measures to protect information against unauthorized access, alteration, loss or misuse, including encryption in transit and per-account access control.
However, no system is completely infallible, so absolute security cannot be guaranteed in every scenario.
If a security breach affects health data or other personal information, we will notify affected users and the relevant authorities on the terms and timelines required by applicable law, including the U.S. Federal Trade Commission's (FTC) Health Breach Notification Rule.
We keep information while your account exists, because training and recovery metrics depend on the accumulated history. Sessions you delete within the app are deleted at that moment.
When you delete your account, the associated data is deleted from our systems. Infrastructure backups are renewed periodically, so deleted data may remain in them for a limited time.
If you allow notifications, we store your device's notification token to send you alerts about your training and your plan. You can turn them off in the app's or the device's notification settings; the token is deleted when you delete your account.
We also send you transactional email related to your account. We do not send third-party advertising email.
You can view and update your profile data from within the app, change your unit, language and notification preferences, delete sessions and revoke access to Health Connect or Apple Health at any time.
You can also email soporte [at] ponderahealth [dot] com to request a copy of your data or help with your information or privacy.
You can delete your account and the associated data directly from the app at any time, under Profile -> Delete account.
As a security measure, you will need to confirm your identity before the deletion is completed: your current password if the account was created with email and password, or signing in again with Google or Apple if you used one of those methods.
Detailed instructions are available at https://pace.ponderahealth.com/en/delete-account
You can also write to soporte [at] ponderahealth [dot] com for guidance, but the deletion must be confirmed and carried out by the user from within the app.
Pondera Pace is not intended for children under 16. If we find that an account belongs to someone under that age, we will delete it together with its data.
This Privacy Policy may be updated to reflect service improvements, regulatory changes or internal adjustments.
The version in force is the one published on this page and linked from the app.
If you have questions about this Privacy Policy or how your information is handled, you can write to soporte [at] ponderahealth [dot] com or use the Help section within the app.
This website uses analytics cookies from an external provider (Google Analytics) to collect aggregated usage statistics, such as pages visited, time on site, device type, browser and approximate location. This data may be processed on servers outside your country.
These cookies are only set if you accept them in the cookie notice. If you decline, the site works the same and no analytics information is sent. We do not use advertising cookies.
This section covers the website only. The website does not collect your account, health or training data.
You can change your choice at any time; withdrawing consent deletes this site’s analytics cookies.
If you live in California or another U.S. state with consumer privacy laws (such as the CCPA/CPRA or the laws of Virginia, Colorado, Connecticut, Texas or Oregon), this section supplements the rest of this notice.
Categories of information we collect: identifiers (name, email address, profile picture and sign-in method); athletic profile data; health and activity data imported with your authorization from Health Connect or Apple Health, from files you import or entered manually; session routes (location); purchase and subscription information (plan, status and store, without card details); the push notification token; technical device, error and app usage information; and, on the website, browsing data if you accept analytics cookies.
Sensitive personal information: health and activity data and session routes (precise location) are considered sensitive information. We use it only to provide the service you request and for purposes permitted by law, such as account security; we do not use it to infer characteristics about you. Even so, you can ask us to limit its use by emailing soporte [at] ponderahealth [dot] com.
We use this information for the purposes described in this notice and only share it with the service providers listed in this notice, who may not use it for their own purposes.
Sale and advertising: we do not sell your personal information or share it for advertising based on your activity across other sites or services, and we do not use health data for advertising. There is therefore nothing you need to opt out of; if you still send us an opt-out request, we will record it.
Your rights: to know what information we hold about you, to access it and obtain a copy, to correct it, to delete it, to limit the use of sensitive information and not to be discriminated against for exercising these rights.
How to exercise them: from the app or by emailing soporte [at] ponderahealth [dot] com. We will verify your identity by checking that the request comes from your account’s email address or by asking you to confirm details of it. If you act through an authorized agent, we will ask the agent for a permission signed by you and may ask you to confirm your identity directly with us.
Timelines: we will respond within 45 days of receiving the request. When reasonably necessary we may extend that period as permitted by your state’s law, and we will let you know within the initial period.
Appeals: if you live in a state that recognizes this right (such as Virginia, Colorado, Connecticut, Texas or Oregon) and we deny your request in whole or in part, you can appeal by replying to our decision with the subject “Appeal”. We will respond in writing within the period set by your state’s law and, if we uphold the decision, we will tell you how to contact your state attorney general.
Retention by category: account, profile, health and activity data, photos, conversations, notification tokens and bug reports are kept while your account exists and are deleted when you delete it; data you delete within the app is deleted at that moment. Infrastructure backups are renewed periodically, so deleted data may remain in them for a limited time. Purchase records kept by the app stores and the subscription provider are governed by their own policies.
Browser privacy signals: if your browser sends Global Privacy Control (GPC), the website treats it as declining analytics cookies. The site does not respond to Do Not Track (DNT) signals because there is no common standard for interpreting them; in any case, we do not track you across third-party sites.
This section is our consumer health data privacy policy under Washington’s My Health My Data Act, Nevada’s SB 370 and the Connecticut Data Privacy Act. Consumer health data is personal information linked to you that identifies your past, present or future physical health status.
Health data we process in Pondera Pace: workouts and their routes, heart rate, resting heart rate, heart rate variability, VO2 max, steps, cadence, calories, sleep, athletic profile data (birth date, sex, weight, height and zones) and the metrics we calculate from them, such as recovery, training load and zones.
Sources: Health Connect (Android) and Apple Health (iPhone) in read-only mode, with the permissions you grant; the .tcx, .gpx or .kml files you import; and what you enter manually in the app.
Purposes: showing your sessions, maps and history, calculating recovery, zones and VO2 max, building and adjusting your training plans and sending you the notifications you turn on.
Who it is shared with: DigitalOcean (hosting) and, for each session’s weather, Open-Meteo, which only receives the rounded start coordinates and the time period, without any account data. We do not share this data with anyone else.
Consent: we collect this data only when you grant Health Connect or Apple Health permissions, import a file or enter something manually. You can withdraw it at any time by revoking the permissions in Health Connect or in iOS Settings, deleting sessions or deleting your account.
We do not sell consumer health data, we do not use it for advertising and we do not use it for purposes other than those stated without asking for your consent again.
Your rights: to confirm whether we process your health data and access it, to delete it, to withdraw your consent and to obtain the list of third parties and providers we share it with (the one in this section and the one in “Service providers”). We will not treat you differently for exercising them.
How to exercise them: delete data or your account from the app, or email soporte [at] ponderahealth [dot] com with the subject “Health data”. We will verify your identity and respond within 45 days, extendable by another 45 when reasonably necessary, in which case we will let you know. If we deny your request, you can appeal by replying to our decision with the subject “Appeal”; if you disagree after the appeal, you can contact your state attorney general.
Pondera Pace imports your runs from Health Connect, measures your zones and recovery, and every morning tells you what today’s session is.
