Privacy Policy

Last updated: July 3, 2026

Pacedrops ("we", "our", "the app") connects your Strava runs with your Last.fm listening history to show which songs you listened to during each run. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

When you use Pacedrops, we collect:

From Strava: Your name, profile picture, and run data (distance, duration, pace, heart rate, GPS route, elevation). We access this through Strava's official API with your permission.
From Last.fm: Your listening history (song names, artist names, album art, timestamps) for the time window of each run.
Account data: An encrypted authentication token to keep you logged in.

2. How We Use Your Data

Match your music to your runs based on timestamps
Generate shareable story cards showing your run soundtrack

3. Strava Data Retention

In compliance with Strava's API Agreement (Section 6.2), we do not cache Strava data for longer than 7 days. After 7 days, Strava-specific fields (distance, pace, heart rate, elevation, GPS route) are cleared from our database. If you view an older run, we re-fetch the data from Strava in real time.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties. Your data stays between you, Strava, Last.fm, and our servers.

5. Data Storage & Security

Your Strava access tokens are encrypted using AES-256-GCM before storage
All communication uses HTTPS
Our servers are hosted on Railway with managed PostgreSQL

6. Your Rights

Delete your account: You can delete all your data at any time from Settings in the app. This permanently removes your account, all runs, songs, and insights, and revokes our access to your Strava account.
Revoke Strava access: You can disconnect Pacedrops from your Strava account at any time via Strava's settings. When you do, we automatically delete your account.
Disconnect Last.fm: You can unlink your Last.fm account from Settings at any time. Future runs will no longer sync music.

7. Children

Pacedrops is not intended for children under 13. We do not knowingly collect data from children.

8. Changes

We may update this policy from time to time. The latest version will always be available at this URL.

9. Contact

Questions about your data? Reach us at privacy@pacedrops.com or DM us on Instagram.