Privacy Policy

Pacepin is operated by Applied Ego Software LLC (appliedego.com) (“Pacepin”, “we”). Contact: hello@pacepin.app. Pacepin is offered in the United States, and your data is stored and processed in the United States.

Pacepin needs an account. What you record is saved on your phone first and copied to your account on Pacepin's server, so a lost or replaced phone does not lose your records. Your data is never sold, never shared with advertisers or data brokers, and never used to track you across other apps or websites. Nothing in Pacepin reads or analyses your photos.

Location during a shift

Position, time, speed, heading and accuracy while a shift you started is running, including in the background with the phone locked, so mileage can be measured from the route you drove. Recording stops when you end the shift or start a break, and when you sign out.

Location when automatic detection is on

Automatic detection is off unless you turn it on, and it is turned on for one phone at a time. When it is on, that phone watches in the background for you leaving the place you last stopped, even when Pacepin is closed. When that happens, Pacepin starts recording the drive's route and sends a notification asking whether you are working. Until you answer, the drive is kept as unconfirmed and counts toward nothing; its route is still recorded and backed up. If you say you are not working, it is kept as a personal drive, separate from your work records, and you can delete it. If notifications or Always location are turned off, detection pauses and nothing is recorded. Turning it off, or signing out, stops the watching.

The town a work shift ended in

When a work shift ends, your phone's built-in map service turns its last position into a city and state for your mileage log. Only the city and state are kept.

Your records

What you enter: shift times and breaks, the vehicle, odometer readings, pay and tips and which app paid them, expenses, notes, registration renewal dates, and corrections you make to past shifts, with the value before and after.

Photos

Only photos you choose to take or attach to an expense or an odometer reading. They are resized on your phone. Nothing reads, scans or analyses them.

Account details

Your email address and name. A password, stored only as a salted hash, or, if you use Sign in with Apple, the identifiers Apple provides (which may be a private relay address) and a token used to revoke Pacepin's access when you delete your account. The date you agreed to the Terms of Use, and which version.

Device and connection

When you sign in, the server keeps the sign-in session with your IP address and the app's user agent, which includes a random id for this install of the app. It is used to keep one sign-in per phone and to list your signed-in devices.

Subscription

If you subscribe to Pacepin Pro, your subscription status and the subscription event records the App Store sends through RevenueCat: product, price, currency, country or storefront, dates and transaction identifiers. Apple handles payment; Pacepin never sees your card.

Tax estimate details

If you add a filing status and other household income for the income tax estimate, they are kept only in your phone's keychain and never sent to Pacepin.

It comes from you (what you enter and choose), from your phone (location, and the town from its map service), and from Apple and RevenueCat (sign-in and subscription status). There is no advertising identifier, no analytics or crash-reporting SDK and no third-party tracker in the app or on this website.

To provide the service you asked for: to measure your mileage, total your earnings and expenses, produce records you can give a tax professional, keep your records backed up and restore them onto a new phone, provide Pro if you subscribe, keep your account secure, and answer you when you contact us. We do not profile you, sell access to you, or build an audience from your driving.

Emails are only about your account: confirmation and sign-in codes, password resets and security notices. There is no marketing email. Reminders, such as a weekly summary, are notifications on your own phone, which you can turn off in the app or in Settings.

Service providers that process data for Pacepin to run the service, and nothing else. None of them receives your data to use for their own purposes from us.

Hosting and database

A cloud hosting provider runs the website and server, and a cloud database provider stores your records, both in the United States.

Photo storage

A cloud storage provider keeps receipt and odometer photos in private storage: they are only ever fetched by Pacepin's server, for your account.

Email

An email delivery provider sends account emails, such as confirming your address or resetting your password.

Subscriptions

Apple (the App Store) and RevenueCat, which confirms subscriptions with Apple using your Pacepin account id.

Sign in with Apple

Apple, if you choose it.

Maps

Apple Maps shows your routes on iPhone, and the phone's own map service looks up the town a work shift ended in.

We may also disclose information if the law requires it, to protect someone's safety, or as part of a transfer of the business, in which case this policy would continue to apply to it.

We do not sell your personal information, share it for cross-context behavioural advertising, or use it for targeted advertising, as those terms are used in U.S. state privacy laws. Your precise location is used only to provide the service you asked for: measuring your miles and drawing your routes.

The website sets one cookie, to keep you signed in to your account. There are no analytics or advertising cookies. Because Pacepin does not track you across sites, it has nothing to do differently when your browser sends a Do Not Track signal.

Your records, routes and photos

With no time limit, until you delete them or your account. Tax records are usually worth keeping for several years, so Pacepin never removes them on a schedule.

Deleted records

A deleted shift's route and GPS points are deleted when you delete it. Any deleted record — a shift, income, an expense, an odometer reading — keeps only a small marker, without its amount, notes, merchant, route or town, so the deletion reaches your other phones.

On your phone

Your records stay on the phone after you sign out, until you erase them in the app, delete your account, or delete Pacepin. They are not included in iCloud or computer backups of the phone; a restored phone gets them back when you sign in. Your sign-in stays on the phone it was made on.

Sign-in sessions

A session lasts up to 30 days from its last use, and no more than 180 days from when you signed in. Expired sessions, with their IP address and user agent, are deleted daily, as are expired email and password-reset links.

Subscription records

While your account exists. When you delete your account, Pacepin deletes them and asks RevenueCat to delete its customer record, and asks again daily if that request fails. Apple keeps its own purchase records under its policies.

Backups and logs

[Database backup retention and server log retention — to be confirmed once production hosting is set up.] Deleted data stays in backups until they expire.

Location

Location is recorded only during shifts you start, and during detected drives if you turned on automatic mileage on that phone. You can turn automatic mileage off in More → Automatic mileage, and change location and notification permissions in your phone's Settings.

See and export

More → Export gives you your mileage log (PDF) and your records (CSV) for any tax year. For a copy of anything else we hold, email us.

Correct

You can edit your records in the app. Corrections to shifts are recorded with the value before and after.

One shift or drive

Deleting a shift or a detected drive deletes its route and every GPS point it recorded, from your phone, from your account, and from your other phones the next time they sync. Its income and expenses are kept.

Location history

More → Location & privacy → Delete location history. Removes every GPS point from your account and from every phone signed in to it. Your mileage totals and money records stay. A shift that is still running keeps its route until it ends.

This phone's copy

More → Location & privacy → Erase this phone's copy. Removes records and receipt photos from this phone only.

Your account

More → Account → Delete account, after confirming it's you. The account and every record in it are erased from Pacepin's server and from the phone you delete it on, location recording stops, and Pacepin asks RevenueCat to delete its record. Deleting your account does not cancel an App Store subscription: cancel it in your Apple Account settings. Export anything you want to keep first.

Most of this you can do yourself in the app, at any time, whatever state you live in.

Depending on where you live, including California and other states with consumer privacy laws, you may have the right to know what personal information we hold about you and get a copy of it, to correct it, to delete it, and to opt out of its sale, sharing for advertising, or use for profiling (which we do not do). You will not be treated differently for using these rights.

To make a request, email hello@pacepin.app from the address on your account. We confirm the request comes from you, by that address or by asking you to sign in, before acting on it. Someone you authorise may make a request for you, with your signed permission. We answer within the time the law allows, usually 45 days. If we decline a request, you may appeal by replying to our answer, and we will review it and tell you the outcome and how to contact your state attorney general if you disagree.

Data travels to Pacepin's server over encrypted connections, each account's records are available only to that account, and photos are kept in private storage. Passwords are stored only as salted hashes, and you can add two-step verification to your account in the app. When you choose a password, the first five characters of a hash of it are checked against Have I Been Pwned's list of passwords exposed in breaches elsewhere; the password itself never leaves Pacepin's server. No system is perfectly secure; if a breach affected your information, we would tell you as the law requires.

Pacepin links to a few other services, such as the App Store, your phone's Settings, and, from the Shop tab, product searches on Amazon. Their own privacy policies apply there, not this one.

Pacepin is for adults who drive for work. You must be 18 or older to use it, and it is not directed at children.

If what the app collects changes, this page changes with it and the effective date above moves. A change to what leaves your phone will also be announced in the app, and you may be asked to agree to updated Terms of Use.

Questions, requests, or a deletion that did not work: hello@pacepin.app.