PaceBridge Privacy Policy

A running training and performance application developed by iTS Consultancy Services Ltd

Last updated: 26 October 2026

1. Introduction

PaceBridge is a running training, fitness and performance application developed by iTS Consultancy Services Ltd.

The application is designed to help runners plan structured running and strength workouts, manage training schedules, monitor performance, record recovery information and make informed decisions about their training.

PaceBridge is being developed as a private, cloud-connected application with offline functionality and optional integrations with fitness devices and third-party services.

We recognise that training records, activity measurements, body composition and recovery information may contain sensitive personal data.

This Privacy Policy explains what information PaceBridge collects, how it is used, where it is stored, who may process it and the choices available to users.

Current Development Status

PaceBridge v2.0 Cloud Beta has been prepared for deployment using Cloudflare hosting and Google account authentication.

The application includes running and strength training tools, manual activity and smart-scale imports, recovery analysis, workout exports and account-management functionality.

The Cloudflare-hosted service has not yet completed production deployment and acceptance testing.

An offline demonstration version is also available, which stores demonstration information locally without uploading it to the PaceBridge cloud service.

Direct Garmin Connect Business API integration, automatic smart-scale synchronisation, direct Google Calendar account synchronisation and automatic AI processing are not currently operational.

Features described as planned or proposed in this policy will not be treated as active until they have been implemented and enabled.

2. Who Is Responsible for PaceBridge?

PaceBridge is developed and operated by:

iTS Consultancy Services Ltd

Company Registration Number: 07074993

Registered Office:

Unit 7A, Waterside Business Park
Waterside
Chesham
Buckinghamshire
HP5 1PE

Email: enquiries@itsconsultancy.co.uk

Website: www.itsconsultancy.co.uk

iTS Consultancy Services Ltd is the data controller for personal information processed through any PaceBridge service it operates.

Where a standalone demonstration stores information exclusively on a user's device without transmitting it to iTS, we do not receive or centrally hold that information.

Questions relating to privacy or data protection can be sent to the email address above.

3. Information Collected and Processed

Depending on the features used, PaceBridge may process the following categories of information.

3.1 Account and Authentication Information

The cloud-connected application uses Google account authentication.

Information may include:

Email address.
Google account identifier.
Basic account profile information made available through the authorised sign-in process.
Account creation and access information.
Invitations and authorised-user records.
Authentication and session information.

This information is used to identify users, secure accounts and ensure training records are associated with the correct individual.

PaceBridge does not request or store users' Google account passwords.

3.2 Training Plans and Workouts

Information may include:

Running and fitness goals.
Training schedules and planned sessions.
Running distance, duration and pace targets.
Heart-rate zones and workout targets.
Structured intervals and recovery periods.
Strength exercises, sets, repetitions and weights.
Training preferences and individual notes.
Completed sessions and recorded exertion.

This information supports the creation, management and evaluation of personalised training programmes.

3.3 Activity and Performance Information

PaceBridge supports the manual recording and importing of completed activities.

Depending on the information supplied, records may include:

Activity dates and times.
Activity type.
Running distance and duration.
Pace and speed.
Heart-rate information.
Elevation and related performance measurements.
Training effort and recovery notes.

Users may import supported information from Garmin exports and other compatible data files.

Manual imports are initiated by the user and do not require PaceBridge to access their Garmin Connect account.

3.4 Health, Recovery and Wellness Information

Where users choose to record or import this information, PaceBridge may process:

Resting heart rate.
Heart-rate variability.
Sleep duration and related measurements.
Training fatigue and recovery observations.
Wellness and readiness information.
Other health-related measurements relevant to training.

This information may constitute special-category personal data under UK data protection legislation.

Appropriate lawful bases and additional processing conditions must be established before information of this nature is collected by the connected service.

3.5 Weight and Body Composition

PaceBridge allows users to manually record body measurements or import supported files from smart-scale applications.

Information may include:

Body weight.
Body-fat percentage.
Body composition measurements.
Measurement dates.
Measurement sources and related information.

The application supports manual entries and supported CSV imports from services such as EufyLife and Fitdays.

Automatic synchronisation through Android Health Connect is not currently operational and would require additional application functionality and user authorisation.

Body composition measurements are estimates and should not be interpreted as medical assessments.

3.6 Coaching and Training Recommendations

PaceBridge supports the preparation of training information for coaching purposes and the import of proposed training plans.

This may involve:

Training history.
Performance trends.
Recovery information.
Personal training goals.
Proposed changes to running or strength sessions.
Coaching recommendations and plan approvals.

Users can review proposed training plans before incorporating them into their schedules.

3.7 Technical Information

When the cloud-connected service is operational, limited technical information may be processed to support:

Authentication.
Application security.
Synchronisation.
Error investigation.
Service performance.
Prevention of unauthorised access.

This may include IP addresses, technical request information, authentication records and security logs.

We do not use personal training or health information for targeted advertising.

4. How Personal Information Is Used

PaceBridge uses personal information for the purposes of providing and improving its training functionality.

These purposes include:

Managing individual user accounts.
Creating and maintaining training schedules.
Recording completed activities.
Monitoring progress towards training goals.
Displaying performance and recovery trends.
Supporting running and strength training programmes.
Importing user-selected fitness information.
Exporting workouts and training calendars.
Synchronising information between authorised devices.
Maintaining application security.
Responding to user requests and providing support.

Where users choose to enable future integrations, additional processing may take place for the specific functions they authorise.

We do not sell users' personal information, activity records, body measurements or health information.

5. Lawful Basis for Processing

We process personal information only where an appropriate lawful basis exists under UK data protection legislation.

Depending on the activity, this may include:

Performance of a Contract

Where processing is necessary to provide the account, training-planning or other core services requested by a user.

Legitimate Interests

Where processing is necessary for appropriate service administration, security, protection against misuse and maintenance of the application, provided those interests are not overridden by the individual's rights.

Consent

Where the user voluntarily authorises optional processing for a specified purpose.

Legal Obligations

Where processing is necessary to comply with applicable legislation.

Special-Category Health Information

Certain health, wellness and body composition information may qualify as special-category personal data under UK GDPR.

Before collecting this information through the hosted service, iTS will identify an appropriate Article 6 lawful basis and an additional Article 9 processing condition.

Where the applicable condition is explicit consent under Article 9(2)(a), users will be provided with a clear explanation of the information collected and will be asked to give express, informed consent.

Where consent is relied upon, users will be able to withdraw it.

Optional AI processing will require separate authorisation and will not be assumed from a user's decision to create an account or connect another service.

6. Cloud Hosting and Data Storage

6.1 Cloudflare Infrastructure

The PaceBridge v2.0 cloud application has been designed for deployment using Cloudflare services.

The intended infrastructure includes:

Cloudflare Workers: Hosting the application and providing secure backend functionality.

Cloudflare D1: Storing account information and user-specific training, activity and health records.

The cloud service will require users to authenticate before accessing their private information.

The application is designed to maintain separate data records for each user.

Cloudflare may process technical information necessary to deliver, operate and protect the service.

Final hosting configuration, processing locations and appropriate contractual safeguards will be reviewed before live personal health information is collected.

6.2 Google Authentication

Google is used as the intended identity provider for the cloud-connected application.

Users will sign in through Google's official authentication process.

Google may process information associated with that authentication in accordance with its own applicable privacy arrangements.

PaceBridge receives only the account information necessary to establish and manage an authorised user session.

Using Google to sign in does not automatically give PaceBridge access to the user's Gmail, Google Calendar, Google Drive or other Google account information.

6.3 Offline Storage and Synchronisation

PaceBridge is designed to support offline use.

When the cloud-connected application has been successfully accessed on a device, selected account and training information may be cached locally to support continued use without an internet connection.

This may include personal training and health information previously synchronised to that device.

Changes made while offline may be stored locally until an internet connection becomes available and synchronisation is completed.

The application uses browser storage technologies, including IndexedDB, for local caching and synchronisation support.

Users should protect their devices against unauthorised access.

Clearing browser storage or removing the application may delete unsynchronised changes.

Users should not rely on locally cached data as their only backup.

6.4 User Access

The cloud-connected beta is designed as an invitation-only application.

Only authorised users may create accounts.

Individual users should not be able to access another runner's private training information through normal application functionality.

Authorised service administrators may access limited account or operational information where necessary for security, support or lawful service administration.

7. Garmin Connect Integration

7.1 Current Functionality

PaceBridge currently supports the manual import of compatible activity information and the export of structured Garmin-compatible workout files.

Users may choose to import supported Garmin CSV or JSON data files into the application.

These manual functions do not constitute an active Garmin Connect Business API connection.

No automatic Garmin Connect account synchronisation or direct Garmin workout publishing is currently enabled.

7.2 Proposed Garmin API Integration

Subject to Garmin's approval and successful technical implementation, we intend to integrate the following official APIs:

Activity API

To retrieve authorised completed activities and relevant performance information.

Health API

To retrieve authorised health, wellness and recovery measurements where supported.

Training API

To allow users to publish selected structured running workouts and training plans directly to Garmin Connect for synchronisation with compatible Garmin devices.

The integration would be designed to provide a connected training experience without requiring manual file transfers.

7.3 Garmin Account Authorisation

Any future direct Garmin integration will use Garmin's approved authorisation process.

Users will be informed of the information requested and the purposes for which it will be used.

PaceBridge will not request users' Garmin account passwords.

Users will be able to disconnect their Garmin accounts and withdraw applicable permissions.

Garmin-derived information will be used only for authorised PaceBridge functionality and in accordance with Garmin's applicable developer agreements.

7.4 Garmin Data and Third Parties

We do not intend to sell Garmin-derived information or share it with advertisers, employers or insurers for unrelated purposes.

Garmin-derived information will not be automatically sent to third-party AI services without the user's separate, informed authorisation.

Garmin Connect remains a separate service subject to Garmin's own privacy arrangements.

8. Artificial Intelligence Transparency Statement

IMPORTANT INFORMATION ABOUT ARTIFICIAL INTELLIGENCE AND PERSONAL HEALTH DATA

PaceBridge is being developed to support optional AI-assisted running, strength training and recovery analysis.

The intended purpose is to help users understand their training information and consider adjustments to their programmes.

PaceBridge does not currently transmit Garmin-derived information automatically to OpenAI or another AI provider.

8.1 Current Coaching Functionality

The current application supports the export of structured coaching information and the import of proposed training plans.

Users may choose to share exported information with an external coaching or AI service.

Where users independently share information with a third-party service, that disclosure is under their control and is subject to the third party's applicable terms and privacy arrangements.

PaceBridge does not currently have an operational automatic ChatGPT connection.

8.2 Proposed AI Integration

We intend to investigate optional integration with OpenAI services to provide personalised training and recovery analysis.

If implemented, information submitted for analysis may include:

Training schedules and completed activities.
Running and strength training progress.
Training volume and intensity.
Recovery and wellness measurements.
Relevant body composition information.
Personal training goals.

Only information necessary for the requested functionality should be transmitted.

8.3 Explicit Consent

Before activating AI processing of Garmin-derived information, PaceBridge will provide a clear explanation of the proposed processing and seek the user's separate explicit consent.

Consent will be obtained before such information is transmitted to an AI service.

Users will be able to decline optional AI processing or withdraw consent.

Withdrawing consent will prevent further optional AI processing based on that consent.

8.4 AI Providers and Data Use

OpenAI is the intended provider for future AI-assisted analysis, subject to final technical and contractual arrangements.

Before activation, we will confirm the actual provider, information shared, processing locations, relevant retention arrangements and safeguards.

We do not intend to use Garmin-derived personal information to train or fine-tune general-purpose AI models.

Any AI integration will be assessed against the applicable Garmin developer requirements and UK data protection obligations before being enabled.

8.5 Limitations of AI Recommendations

AI-generated training recommendations are intended to provide general fitness and performance information.

They are not medical advice or medical diagnoses.

Users remain responsible for evaluating recommendations and deciding whether proposed training activities are appropriate.

9. Smart Scales and Health Connect

PaceBridge supports manual body measurements and the import of supported smart-scale CSV files.

These functions allow users to monitor changes in weight and body composition alongside their training progress.

Automatic synchronisation through Android Health Connect is being considered for a future version.

If implemented, users will be informed of the relevant data categories and asked to authorise the appropriate permissions.

Health Connect information will not be accessed automatically without the required permission.

10. Google Calendar Integration

PaceBridge allows users to export training sessions in a calendar-compatible format.

These files can be imported into compatible calendar applications, including Google Calendar.

The current version does not automatically access, read or modify a user's Google Calendar account.

Direct Google Calendar account synchronisation is a proposed future feature and would require separate authorisation and privacy disclosures before activation.

11. Security Measures

PaceBridge is designed with measures intended to protect account information and personal training data.

These include:

Google account authentication.
Private user sessions.
Secure HTTPS communication when hosted.
Controls intended to prevent access to another user's records.
Server-side handling of authentication credentials.
Protection against unauthorised data changes.
Local caching controls.
Account and data deletion functionality.

The cloud beta has undergone automated security and functional testing during development.

However, final production security, hosting and device testing must be completed before wider release.

Users should maintain appropriate security on their devices and avoid sharing passwords, downloaded backups or sensitive exports with unauthorised individuals.

No electronic system can be guaranteed to be completely secure.

12. Data Retention and Deletion

12.1 Active Accounts

For the proposed hosted service, account information, training plans, completed activities and other user records will generally be retained for as long as they are required to provide the account and its requested functionality.

Users may delete individual records where supported.

Information will be reviewed and removed when it is no longer necessary for its intended purpose, subject to applicable legal obligations.

12.2 Account Deletion

The cloud beta includes functionality intended to allow users to request deletion of their account and associated information.

When operational, an account deletion request will initiate removal of the user's information from the active application database, subject to necessary legal or security exceptions.

Certain information may remain temporarily within provider-managed backup or recovery systems until the applicable retention period expires.

12.3 Offline Information

The application may retain locally cached information on devices that have previously accessed an account.

Users should clear locally stored information on devices they no longer use or control.

Downloaded backups, exported workout files, calendar files and other files saved outside PaceBridge are not automatically deleted when a PaceBridge account is removed.

12.4 Technical Records

Limited technical records may be retained where necessary for security, service operation, fault investigation or compliance with legal obligations.

The applicable retention arrangements will depend on the service configuration and relevant provider controls.

12.5 Future Retention Controls

Before the connected service is made available for broader use, iTS will finalise and document appropriate retention and deletion procedures for personal health information, imported Garmin data, authentication information, backup records and operational logs.

13. International Data Processing

Some technology providers may process or access information outside the United Kingdom.

This may include providers supporting hosting, authentication and any future AI functionality.

Where personal information is transferred internationally, iTS will assess the relevant processing arrangements and apply appropriate legal safeguards where required.

Cloud database location and any relevant regional restrictions will be confirmed as part of production deployment.

14. Cookies and Local Storage

The cloud-connected PaceBridge application is designed to use essential browser technologies to support authentication, security, application functionality and offline use.

These may include:

Essential authentication and session cookies.
Browser storage required for application functionality.
IndexedDB caching for offline access and synchronisation.
Local storage of limited account or application information.

These technologies are used to support the requested application functionality.

PaceBridge does not use personal training or health information for targeted advertising, remarketing or advertising profiling.

If non-essential tracking technologies are introduced in the future, we will provide the information and consent or objection controls required by applicable legislation.

15. Your Rights and Choices

Where iTS acts as the data controller, users may have the right to:

Access personal information held about them.
Correct inaccurate information.
Request deletion of information.
Restrict certain processing activities.
Obtain eligible information in a portable format.
Object to certain processing.
Withdraw consent where processing relies upon consent.

These rights are subject to the conditions and exemptions of applicable law.

The hosted application is designed to provide account data export and deletion functionality.

Where information is stored only on a user's own device, iTS may not possess a central copy that can be accessed or deleted.

Privacy and data protection requests can be submitted to:

enquiries@itsconsultancy.co.uk

Users may also raise complaints with the Information Commissioner's Office (ICO).

16. Children and Age Eligibility

PaceBridge is primarily intended for adult runners.

The application is not specifically designed for children.

Appropriate age eligibility and safeguards will be established before providing a connected service to children.

17. Automated Decisions

PaceBridge may provide automated calculations, training assessments and optional AI-assisted recommendations.

These are intended to help individuals understand their training information and make their own decisions.

The application is not intended to make solely automated decisions producing legal or similarly significant effects on individuals.

18. Changes to This Privacy Policy

We may update this Privacy Policy as PaceBridge develops and additional functionality becomes available.

Material changes affecting personal information, third-party processing, Garmin integration, AI analysis or data retention will be reflected in an updated notice.

Where legally required, users will receive appropriate information or be asked to provide renewed consent before new processing begins.

The latest version will be published through the PaceBridge application and the iTS Consultancy website.

For privacy enquiries:

enquiries@itsconsultancy.co.uk

Last updated: 26 October 2026