Privacy Policy
Effective Date: May 26, 2026
Last Updated: May 26, 2026
Welcome to Lace Up ("Lace Up," "we," "our," or "us"). We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Lace Up mobile application, website (laceup.in), and related services (collectively, the "Services").
By using Lace Up, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our Services.
1. Information We Collect
We collect information in three primary ways: information you provide to us, information collected automatically, and information from third parties.
1.1 Information You Provide
- Account Information: Name, email address, password, date of birth, gender, profile photo, and username.
- Profile & Fitness Data: Height, weight, fitness goals, training preferences, gear (shoes, devices), and biographical details you choose to share.
- Activity Data: GPS routes, distance, pace, duration, elevation, heart rate, calories, splits, and any notes or photos you attach to activities.
- Social Content: Posts, comments, chats, guild messages, friend connections, and shared activities.
- AI Coach Conversations: Messages exchanged with our AI Coach, including questions, feedback, and goal-setting context.
- Communications: Information you provide when contacting support, providing feedback, or responding to surveys.
- Payment Information: If you purchase subscriptions or in-app items, payment details are processed by third-party payment processors (we do not store full card numbers).
1.2 Information Collected Automatically
- Location Data: Precise GPS location during tracked activities, and (with permission) approximate location for features such as Explore, Territory, and nearby runners.
- Device Information: Device model, OS version, unique device identifiers, language, time zone, and mobile network information.
- Usage Data: Screens visited, features used, session duration, crash logs, and performance diagnostics.
- Sensors: Accelerometer, gyroscope, pedometer, and (with permission) heart rate data from connected wearables.
- Cookies & Similar Technologies: Used on our website for analytics, preferences, and authentication.
1.3 Information From Third Parties
- Social Logins: If you sign in via Google or other providers, we receive basic profile information as permitted by that provider.
- Wearables & Health Platforms: If you connect devices (e.g., smartwatches) or platforms (e.g., Google Fit, Health Connect), we receive the data you authorize.
- Map & Routing Providers: We use Mapbox to render maps and routes; their data handling is governed by their respective policies.
2. How We Use Your Information
We use your information to:
- Provide, operate, and maintain the Services;
- Track your runs, activities, and performance;
- Generate AI-powered routes, coaching, predictions, and insights tailored to you;
- Enable social features such as guilds, friends, chats, and community feeds;
- Personalize your experience, including recommendations and content;
- Communicate with you about updates, security alerts, and support;
- Send promotional messages (which you can opt out of at any time);
- Detect, prevent, and address fraud, abuse, security, or technical issues;
- Improve our Services through analytics and research;
- Comply with legal obligations and enforce our Terms of Service.
3. How AI Is Used
Lace Up uses artificial intelligence (including third-party providers such as OpenAI) to power the AI Coach, AI Route Planner, predictions, and personalized insights.
- What is processed: Your activity history, profile, goals, and the contents of your AI Coach conversations may be sent to AI service providers to generate responses.
- Data minimization: We send only the data necessary to produce the relevant output.
- No training on your data: We instruct our AI providers not to use your personal data to train their models, in accordance with their enterprise data policies.
- No medical advice: AI outputs are informational and motivational — they are not medical, diagnostic, or therapeutic advice. Always consult a qualified professional for health-related decisions.
4. How We Share Your Information
We do not sell your personal information. We share information only as described below:
4.1 With Other Users
Based on your privacy settings, certain information (profile, activities, posts, guild messages) may be visible to friends, guild members, or the broader Lace Up community.
4.2 With Service Providers
We share data with trusted vendors who help us operate the Services, including:
- Cloud hosting and database providers
- Mapping providers (Mapbox)
- AI providers (e.g., OpenAI)
- Analytics and crash reporting
- Payment processors
- Email and notification delivery
These providers are bound by confidentiality and data protection obligations.
4.3 For Legal Reasons
We may disclose information when required by law, court order, or governmental request, or to protect the rights, safety, or property of Lace Up, our users, or the public.
4.4 Business Transfers
If Lace Up is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your data.
4.5 With Your Consent
We may share information in other ways with your explicit consent.
5. Your Choices & Rights
You have control over your information. Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you;
- Correct inaccurate or incomplete information;
- Delete your account and associated data;
- Restrict or object to certain processing;
- Port your data to another service;
- Withdraw consent at any time where processing is based on consent;
- Opt out of marketing communications.
How to Exercise Your Rights
In-app: Settings → Account → Privacy & Data
Email: fitwith@laceup.in
We will respond within the timeframes required by applicable law (typically 30 days).
Location & Sensor Permissions
You can revoke location, motion, and sensor permissions at any time through your device settings. Some features may not function without these permissions.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide the Services. When you delete your account:
- Your profile and personal information are removed within 30 days;
- Activity data may be retained in anonymized form for analytics and product improvement;
- Some information may be retained longer if required by law, for fraud prevention, or to resolve disputes.
7. Data Security
We use industry-standard technical and organizational measures to protect your information, including:
- Encryption in transit (TLS) and at rest;
- Access controls and authentication;
- Regular security reviews and monitoring;
- Secret management via secure environment variables.
No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. Please use a strong password and keep your credentials confidential.
8. Children's Privacy
Lace Up is not directed to children under 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact fitwith@laceup.in and we will promptly delete it.
9. International Data Transfers
Lace Up operates globally. Your information may be transferred to, stored, and processed in countries other than your own, including jurisdictions that may not provide the same level of data protection as your home country. We rely on appropriate legal mechanisms (such as Standard Contractual Clauses) to safeguard such transfers.
10. Region-Specific Disclosures
10.1 India (DPDP Act, 2023)
As Lace Up is based in India, we comply with the Digital Personal Data Protection Act, 2023. You have the right to access, correct, erase, and grieve regarding your personal data. Grievance Officer details are provided below.
10.2 European Economic Area, UK & Switzerland (GDPR)
Our legal bases for processing include: performance of a contract, legitimate interests, consent, and compliance with legal obligations. You have the right to lodge a complaint with your local data protection authority.
10.3 California (CCPA/CPRA)
California residents have the right to know, delete, correct, and opt out of the "sale" or "sharing" of personal information. Lace Up does not sell personal information.
10.4 Other Jurisdictions
We comply with applicable privacy laws in the regions where we operate, including Brazil's LGPD and others, as relevant.
11. Third-Party Links & Services
The Services may contain links to third-party websites, apps, or services. We are not responsible for their privacy practices. Please review their policies before sharing information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the app, email, or a notice on our website. Continued use of the Services after changes take effect constitutes acceptance of the revised policy.
13. Contact Us
For questions, requests, or concerns regarding this Privacy Policy or our data practices, please reach out:
Grievance Officer (for users in India)
In accordance with the Digital Personal Data Protection Act, 2023, you may contact our Grievance Officer for any data-related complaints at fitwith@laceup.in. We will acknowledge your grievance within the timelines prescribed under applicable law.