Privacy

Activity and delivery

Paceman reads activity from agent hooks on your computer and sends status, computer and project names, session identifiers, activity times and Codex usage limits to your paired devices. Those activity updates do not include prompts, replies or tool arguments. This information powers activity displays and notifications.

Computer-to-phone traffic uses private HTTPS through Tailscale. Push notifications, Live Activities and Apple Watch usage updates pass through our hosted relay and Apple’s push service. During delivery, the relay receives push tokens and the relevant display data. Its database stores token and credential hashes, pairing identifiers, verification records and request counts to authorize delivery and prevent abuse.

Optional weather sends your chosen place or, with your permission, your device location to Apple’s weather service to retrieve a forecast.

Diagnostics and telemetry

Hosted service logs record requests, verification events and errors for operation, security and troubleshooting. Hosting providers also process network information, such as IP addresses and request details.

The iPhone app keeps a size-limited diagnostic log locally; it does not automatically upload that log to us. You can choose to share a support report from your phone or Mac. If you contact us, we receive your email address, message and any reports or files you provide, and use them to handle your request.

For beta versions distributed through TestFlight, Apple provides us with testing information such as session and crash counts, installed versions and feedback you submit, including any attached screenshots. We use this information to improve Paceman. When you join through a public link, your name and email address are not normally visible to us, though you may provide them with feedback. See Apple’s TestFlight information.

We may introduce additional telemetry, such as delivery timings, error codes, app and OS versions, and service identifiers, to measure usage and improve performance and reliability. Before introducing it, we will update the disclosures to describe the collection and obtain consent where required.

Services we use

Render hosts the relay and its database; Cloudflare provides hosting and network services; Apple provides push delivery, app verification and weather; and Tailscale provides private connectivity. These services process the information needed for their respective functions. Your use of Tailscale, Apple services or a separately operated Paceman relay is also subject to that provider’s policies.

We may disclose information when legally required or necessary to investigate abuse or protect the security of Paceman and its users.

Website analytics

Cloudflare Web Analytics measures visits and page performance, including pages viewed, referrers, browser/device information and loading timings. It does not use cookies or browser storage for analytics or track individuals across websites. See Cloudflare’s analytics documentation.

The website does not currently change its behavior in response to browser Do Not Track signals.

Storage and removal

Your devices keep pairing information, settings and recent activity until removed, replaced or reset. Local diagnostic logs are limited in size and older entries are replaced. Support correspondence is retained to handle your request and related follow-up.

Relay authorization records remain while a pairing is active. Successful revocation removes its active approval and token bindings. Verification keys and records identifying revoked pairings currently have no automatic expiry; they support future verification and prevent revoked pairings from being reused.

Render service logs are retained for seven days. The database has a three-day recovery window, so deleted records can remain in recovery backups until those backups expire. No external log-stream destination is currently configured.

Remove a computer in the phone app to clear its connection and activity cache and request revocation. If the computer is unreachable, Forget clears phone-side information without confirming remote revocation. Relay cleanup can fail or be delayed; contact us if you need help removing hosted records. Removing a computer does not uninstall its source software or reset accessory ownership.

You can disable weather in Paceman and withdraw location permission in iOS Settings.

For technical storage and removal details, see data and lifecycle.

Processing and location

Where EU or UK data protection law applies, our basis for operating, securing and troubleshooting Paceman is our legitimate interest in providing a reliable service. We rely on consent where required for optional processing, and legal obligations when responding to legally required requests.

Service providers may process information outside your country, including in the United States.

Our hosting providers’ safeguards for applicable international transfers are described in Render’s data processing terms and Cloudflare’s data processing terms, including standard contractual clauses or recognized adequacy frameworks where applicable. Contact us for information about these safeguards.

Your requests

Depending on applicable law, you may have rights to access, correct, delete or receive a copy of personal information, object to or restrict processing, withdraw consent, or complain to a data protection authority. Email [email protected] to make a request. We may need to verify your connection to the relevant device or pairing and may retain information where legally permitted or required.

Changes

We will post changes here and update the date above. For material changes to data collection or use, we will provide an additional notice through the website or app before the change takes effect, and seek consent where required.