Privacy Policy

1. What Pace Does

Pace is a personal finance application that allows users to track transactions, categorize spending, set financial goals, apply smart rules, and monitor their overall financial progress over time. The information you choose to input into the app is used exclusively to power these features and improve your experience.

2. Data Controller

The controller of your personal data is FRESH STUDIO, obrt za računalno programiranje, dizajn i usluge, vl. Zoran Borojević, Đure Basaričeka 6, 48000 Koprivnica, Croatia, OIB 86421848407, MBO 98022555 ("Fresh Studio", "we", "us"). For anything about your data, write to hello@pacewealthapp.com; we answer within one month.

3. Information We Collect

We collect the following categories of data:

Account Information

Email address, and your password stored only as a bcrypt hash — we cannot read it, and neither can anyone who obtained a copy of our database. Optionally a display name and a profile picture.

One thing worth knowing about the profile picture: it is stored as a file with a random, unguessable name and served without a login check, so anyone who has the exact link can open it. We never publish those links, and the filename contains nothing about you, but if you would rather not have a picture stored this way you can remove it at any time from your profile.

Financial Data

Transaction records (including merchant names and any notes you add), categories, savings goals, investment entries, assets, and other financial information you voluntarily enter. This data is stored on our own server in the European Union, is transmitted over TLS, is accessible only to your account, and is never sold or shared with third parties. Monetary amounts are never sent to any analytics or error-reporting service.

Usage Analytics (only with your consent)

Analytics are optional, off by default, and split into two separate choices you can change or withdraw at any time under Settings → Privacy & data.

Product analytics — PostHog (EU-hosted, eu.i.posthog.com). Records which screens are used and which actions fail, identified only by your account identifier. Your email address and name are never sent. Monetary amounts are never sent as values — only as broad ranges (for example "100–1k"). All text and input values on screen are masked before anything leaves your device.

The same choice covers product events recorded by our server — for example that an account was created, a transaction added or a budget locked — under the same account identifier and the same rules (no email, no name, amounts only as ranges). If you decline, our server records none of them. Your choice is stored with your account, so it applies on every device you sign in on, and each change is logged with its time and the policy version it was made against, as the law requires us to be able to show.

Session recordings. If you accept product analytics, PostHog also records your sessions so we can see where the app is confusing or broken. These recordings are masked at the source: before anything leaves your device, every input value and every piece of rendered text is replaced, so your balances, amounts, merchant names, notes and email address are not in the recording. What we see is the layout, where you clicked and in what order — a wireframe of your session, not its contents. Console output is not recorded either. Recording happens only while you consent to product analytics, and stops the moment you turn it off under Settings → Privacy & data.

Google Analytics via Google Tag Manager. Page-level statistics: pages visited, device type, browser, general geographic region, IP address. This is processed in the United States, outside the European Economic Area. If you would rather your data stayed in the EU, decline this category — the rest of Pace is unaffected.

Crash & Error Reports

We use Sentry to receive automatic reports when the application crashes or hits an unexpected error. A report contains the error message, a stack trace, and technical context (browser, app version, page path). A sample of roughly one in ten sessions also sends timing measurements, so we can see when a screen becomes slow; these carry the same technical context and no more. It contains no account identifier, and email addresses, authentication tokens and monetary amounts are stripped before the report is sent. Sentry sets no cookies and never records your screen. Because these reports are what keep the app working correctly, they are collected on the basis of legitimate interest rather than consent.

Errors that occur on our server are recorded through both Sentry and PostHog (both EU), and these reports do include your account identifier — without it we cannot tell which request failed or whether one person is hitting a fault repeatedly. They do not include your email address, your name, any monetary amount, or your IP address. This rests on legitimate interest, and you may object to it at any time using the contact address below.

Waitlist

If you join the waitlist on our website, we store your email address, the page you joined from and the time you agreed — nothing else: no IP address, no browser details, no tracking. We use it for two emails only: a confirmation with your place in line, and one when your place opens. Both are sent from privacy@pacewealthapp.com through our own mail server. Every email has a link to leave the list, which deletes your address immediately; otherwise it is kept on our server in the EU until you are invited, or until you ask us to remove it (privacy@pacewealthapp.com).

Device & Technical Data

Browser type, operating system and screen size. Your IP address is recorded in our web server's access log, where it is kept for 10 days and then deleted. Our server never forwards it to analytics or error-reporting providers. If you accept product analytics, your browser's requests reach PostHog directly, which is configured to discard the IP address rather than store it with your events. If — and only if — you accept the Google Analytics category, Google receives it as well.

4. Legal Basis for Processing (GDPR)

We process your data based on:

• Contract performance — to provide the Pace service you signed up for.
• Legitimate interest — to keep the service secure and working: server access logs, crash reports from your browser (Sentry, no account identifier), and server-side error reports (Sentry and PostHog, account identifier but no IP address). You may object to this at any time.
• Consent — for optional product analytics (including masked session recordings and product events recorded by our server) and for Google Analytics, each a separate choice, withdrawable at any time under Settings → Privacy & data; and for the waitlist.

5. How We Use Your Information

• To provide, maintain, and improve the Pace service.
• To personalize your experience (e.g., categories, rules, preferences).
• To send transactional emails (verification, password reset).
• To analyse usage patterns and fix bugs, if you consented to product analytics — including masked session recordings.
• To ensure security and prevent unauthorized access.

6. Cookies & Local Storage

We use cookies and browser local storage for the following purposes:

• Essential: Authentication tokens, session management, theme preference.
• Analytics (only if you consented): PostHog identifier and session-recording state; Google Analytics cookies (_ga, _gid) only if you accepted that category separately.
• Your privacy choices: the record of what you accepted, when, and against which version of this policy, stored in your browser under pace-consent.
• Functional: Offline transaction queue (IndexedDB), UI preferences.

Analytics choices are managed inside the app, under Settings → Privacy & data — you do not need to go through your browser. Essential cookies cannot be switched off, because without them you cannot stay signed in.

7. Data Sharing & Third Parties

We do not sell, rent, or share your personal or financial data with any third party. The only external services that receive data are:

• PostHog (EU servers) — product analytics and masked session recordings with your consent, plus server-side error reports. No email, no name, no amounts.
• Sentry (EU servers, Germany) — crash reports from your browser (no account identifier; amounts, emails and tokens removed before sending) and from our server (with your account identifier, no IP).
• Google Analytics / Tag Manager — page-level analytics, only with your separate consent. Processed in the United States.
• Our email provider — receives your address in order to deliver verification and password-reset messages.

8. Data Retention

Your account data is retained for as long as your account exists. Deleting your account removes your profile, all financial records and your profile picture immediately, and we ask our analytics provider to erase the matching profile as well.

Logs are kept separately from your account and expire on their own:

• Web server access logs — contain your IP address. Rotated daily and deleted after 10 days.
• Application diagnostic logs — contain your account identifier, the page requested and whether it failed. No IP address, no email. Deleted after 30 days.

Session recordings and product analytics are retained by PostHog according to our project settings; error reports are retained by Sentry the same way.

9. Data Security

All data is transmitted over HTTPS (TLS 1.2+). Passwords are stored as bcrypt hashes and are never recoverable. Sign-in tokens are stored as hashes and expire. Every request is checked against your account, so one account cannot read another's data. The server sits behind rate limiting and a strict content security policy. We do not claim to encrypt individual database fields — see "Financial Data" above for what we actually do.

10. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate data.
• Erasure — delete your account and all associated data.
• Portability — download everything on your account as a single JSON file, under Settings → Privacy & data. Transactions can additionally be exported as CSV.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — turn analytics off at any time under Settings → Privacy & data; it is exactly as easy as turning it on. Product analytics and session recording stop immediately. Google Analytics stops once you reload the app: a script already running in the page cannot be taken back out of it, so it stays inert until the next load.
• Complain — you may lodge a complaint with a supervisory authority. In Croatia that is the Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, Croatia (azop.hr), or the authority in the EU country where you live or work.

To exercise any of these rights, email us at privacy@pacewealthapp.com. We will respond within one month.

11. Children's Privacy

Pace is not intended for users under the age of 16, and you are asked to confirm your age when creating an account. We do not knowingly collect data from children. If you believe a child has provided data, contact us and we will promptly delete it.

12. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via email or an in-app notification. Continued use of Pace after changes constitutes acceptance of the updated policy.

13. Contact

If you have questions about this policy, please contact us at privacy@pacewealthapp.com.