Privacy notice

Dead Pace · version 4 · last updated 28 October 2026

Dead Pace is a running app with an audio story. This notice says what we collect, why, where it goes, how long we keep it, and what you can do about it. Short version: we keep what the app needs to save your story and your runs, a few usage numbers you can switch off, nothing for advertising profiles, and you can export or delete all of it.

Who is responsible

The controller is Jonas Dietrich – JoDi Labs, Lilienthalstraße 70, 14612 Falkensee. Contact: support@deadpace.run.

What we collect, and why

Your account

• A device account. When you first open the app it creates an account with a random id, a random install id and your platform (Android or iOS). No name, no phone number.
• Email, if you add it. If you sign in with a magic link we store your email address and send you one-time sign-in links (and, if you ask to delete your account on our website, a confirmation link). These emails go out through our email provider (see below). We store only a hash of each sign-in link.
• Google or Apple sign-in, if you use it. We receive and store the account id Google or Apple gives us for Dead Pace and the email address they share. We never see your password.

Why: so your progress survives a new phone, and so you can sign in again. Legal basis: providing the service you asked for (Art. 6(1)(b) GDPR).

Your story and your runs

• Story progress: episodes finished, choices and story flags, settings, camp supplies and camp layout, extras you've heard.
• Runs: start and end time, distance, moving time, kilometre splits, run type, the result of pace moments, and the route (your GPS track). Runs are always stored on your phone. While Settings → Back up my run history is on (it is on by default), run summaries and routes are also saved to your account so a new phone gets them. Turn it off and new runs stay on your phone only. Home zone leaves the first and last 200 m of each run off the saved route.

Why: this is the app. Legal basis: Art. 6(1)(b) GDPR.

Location

The app uses your phone's location during a run to measure distance and pace. For the weather, it sends a coarse location (rounded to about 1 km) to MET Norway (api.met.no), without any account id. Precise location never leaves your phone except as part of a saved route (above).

Health data (only if you switch it on)

If you switch on Health Connect (Android) or Apple Health (iOS) in Settings, the app writes each run as a workout (time and distance, never the route) and reads the heart rate your watch or strap recorded during that run, to show your average, maximum and time in each heart rate zone.

If you pair a Bluetooth heart rate sensor (a chest strap, or a watch that broadcasts heart rate) in Settings, the app reads your heart rate from it live during a run.

Heart rate stays on your phone: we don't send health data to our server, and it isn't part of the run backup. Legal basis: your consent (Art. 9(2)(a) GDPR), which you can withdraw in Settings at any time (switch off Health Connect, or forget the sensor).

Purchases

Subscriptions and camp cosmetics are sold through Google Play or the App Store and handled by RevenueCat. Your store account is linked to your Dead Pace account id. RevenueCat tells our server what you bought, when, in which store and whether it is active, refunded or expired, so we can unlock what you paid for on every phone. We never see your card or payment details. Legal basis: Art. 6(1)(b) GDPR, and keeping records we're required to keep (Art. 6(1)(c)).

Rewarded ads (only when you choose to watch one)

You can watch a rewarded ad to unlock an episode for the week or earn supplies. Ads are shown by Google AdMob, never during a run. Google may process your device's advertising id, IP address and device information as described in Google's privacy policy. In the EU and UK the app asks for your ad consent first (Google's consent form), and you can change it in Settings → Ad privacy choices. When an ad finishes, Google tells our server a transaction id and your Dead Pace account id so the reward can be credited. Legal basis: your consent for personalised ads (Art. 6(1)(a)), the service for the reward itself (Art. 6(1)(b)).

Invites

If you redeem a friend's invite code, we record that, and keep a keyed, one-way hash of your sign-in identity even after you delete your account, so the free month can't be claimed again and again. The hash contains no account id and can't be turned back into your email. Legal basis: preventing abuse (Art. 6(1)(f) GDPR).

Newsletter (only if you sign up)

You can ask for an email when Dead Pace launches and when new episodes drop: with the box under the email sign-in (it is never ticked for you), the switch in Settings → Account, or the form on our website. We then ask Brevo to send you a confirmation email, and only when you click the link in it are you on the list (double opt-in). Brevo stores your email address, that you're on the list, and when you signed up and confirmed, as proof of your consent. For an account, our server also stores the address and when you switched the newsletter on or off. The newsletter never contains anything about your runs, and we don't use it to build a profile of you.

Every newsletter has an unsubscribe link. You can withdraw your consent at any time, with that link, with the switch in Settings, or by writing to us; that doesn't make anything sent before unlawful. Deleting your account also deletes your contact at Brevo. Legal basis: your consent (Art. 6(1)(a) GDPR, § 7(2) no. 2 UWG).

Usage numbers

While Settings → Your data → Share anonymous usage numbers is on (it is on by default), the app counts a few steps on the way through it, so we can see where people give up and compare the versions of an offer or a screen we're testing. Each count is sent to our own server, never to anyone else, and holds only: the step's name from the list below, the small values listed with it, the time on your phone, and the test group your account is in for each test that's running (for example trial_length: trial7). The app saves them on your phone and sends them in small batches, never during a run.

• Getting started: onboarding_step_viewed (step: which screen), onboarding_mode (mode: story or coach), notif_prompt_result (result: allowed, refused or not now; where: in onboarding or after a run), location_prompt_result (result: allowed, refused, approximate only, or location off), account_step_result (result: Google, Apple, email or not now), onboarding_done (goal and mode, as chosen).
• Runs and the story: first_run_started (kind: episode, side story or plain run), first_run_completed (minutes; story: whether the story played), episode_started (episode; resumed_part: the part it picked up at), episode_completed (episode), episode_stopped_early (episode; part reached of parts), side_mission_started (mission: which side story), run_recovered (a run brought back after the app was closed; no values).
• Account and Dead Pace Plus: account_wall_shown (episode: its number), account_wall_converted (method: Google, Apple or email), paywall_viewed (entry: what opened it; variant: which wording), paywall_closed (entry; result: not now, bought or restored), plan_selected (plan: yearly or monthly; offer: which store offer), trial_started (plan, offer, days), purchase_result (result, plan, offer), ad_unlock_tapped (episode), ad_unlock_result (result).
• The camp: camp_opened, shop_opened (no values).

They never contain a location, a route, distance, pace or splits, heart rate, your name or email, or your advertising id. They're stored with your Dead Pace account id so that one person counts once and the test groups stay apart; we don't use them for ads or to build a profile of you. To compare the test groups, our server also counts, per group, from data it already holds: how many accounts started a trial or paid (from the purchase events above), how many runs each account started in its first 14 days, and the highest episode it finished. Nothing extra is sent for this, and an account with the switch off is left out. Our server keeps them for 395 days, then deletes them. They're part of your data export and are deleted with your account. Switch them off in Settings → Your data → Share anonymous usage numbers: the app stops counting and deletes what it hasn't sent yet, and our server drops anything that still arrives. Legal basis: our legitimate interest in finding and fixing what puts people off, and in testing prices and wording fairly (Art. 6(1)(f) GDPR); you can object at any time with the switch.

Server logs and crash data

The app contains no analytics or crash-reporting SDK; our own server counts the steps above. Our server writes technical error logs (which may contain an IP address) to the system journal for troubleshooting; they are rotated and deleted automatically. We count sign-in, invite and newsletter sign-up attempts per email hash and IP address for an hour to stop abuse.

Who processes data for us

• OVHcloud (EU): hosts our server and database.
• RevenueCat, Inc. (USA): purchase handling.
• Google: Google Play, Google sign-in, AdMob.
• Apple: App Store, Sign in with Apple (iOS).
• MET Norway: weather for a coarse location.
• Brevo (Sendinblue GmbH, Berlin, Germany): delivers sign-in and account emails, and the newsletter.

Some of these are in the USA. Transfers rely on the EU–US Data Privacy Framework or the EU's standard contractual clauses.

How long we keep it

• Your account and its data: until you delete it.
• Device accounts that never added an email, Google or Apple sign-in, haven't been opened for 395 days (about 13 months) and have no paid access left are deleted automatically.
• Usage numbers: 395 days, then they're deleted automatically.
• Newsletter: you're on the list until you unsubscribe or delete your account. After you unsubscribe, Brevo keeps the record of your sign-up and unsubscribe as proof, until you delete your account or ask us to delete it.
• Backups of the database are kept for 14 days, so deleted data is gone from them within 14 days.
• Purchase records from RevenueCat are kept without your account id after deletion, for bookkeeping.

Your rights

You can export everything we hold (Settings → Export my data) and delete your account and its data (Settings → Delete my account, or on this website). You also have the right to access, correct, restrict or object to processing, to data portability, to withdraw consent at any time, and to complain to a data protection authority. Deleting your account doesn't cancel a store subscription: cancel it in Google Play or the App Store.

Children

Dead Pace isn't meant for children under 16.

Changes

When this notice changes in a way that matters, the app shows it to you again.